keepalived - 技术栈

一.Keepalived实验环境设定

1.环境设定图

2.环境设定

部署rs1和rh2（单网卡NAT模式）

id=lo

type=loopback

interface-name=lo

ipv4

method=manual

address1=127.0.0.1/8

address2=172.25.254.100/32

root@rs1+2 system-connections\]# nmcli connection reload \[root@rs1+2 system-connections\]# nmcli connection up lo \[root@rs1+2 system-connections\]# ip a 1: lo: \ mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet 172.25.254.100/32 scope global lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: \ mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:0c:29:1a:e2:01 brd ff:ff:ff:ff:ff:ff altname enp3s0 altname ens160 inet 172.25.254.10/24 brd 172.25.254.255 scope global noprefixroute eth0 valid_lft forever preferred_lft forever inet6 fe80::ac3b:5c1c:bb2a:628e/64 scope link noprefixroute valid_lft forever preferred_lft forever \[root@rs1+2 system-connections\]# vim /etc/sysctl.conf net.ipv4.conf.all.arp_ignore=1 net.ipv4.conf.all.arp_announce=2 net.ipv4.conf.lo.arp_announce=2 net.ipv4.conf.lo.arp_ignore=1 \[root@rs1+2 system-connections\]# sysctl -p net.ipv4.conf.all.arp_ignore = 1 net.ipv4.conf.all.arp_announce = 2 net.ipv4.conf.lo.arp_announce = 2 net.ipv4.conf.lo.arp_ignore = 1 安装ipvsadm \[root@KA1+KA2 \~\]# dnf install ipvsadm -y ### 2.实现方式 在keepalived的所有主机中 \[root@KA1 \~\]# vim /etc/keepalived/keepalived.conf virtual_server 172.25.254.100 80 { delay_loop 6 lb_algo rr lb_kind DR protocol TCP real_server 172.25.254.10 80 { weight 1 HTTP_GET { url { path / status_code 200 } connect_timeout 1 retry 3 delay_before_retry 1 } } real_server 172.25.254.20 80 { weight 1 TCP_CHECK { connect_timeout 5 retry 3 delay_before_retry 3 connect_port 80 } } } \[root@KA1 \~\]# systemctl restart keepalived.service ### 3.测试 友情提示：不要再KA1和KA2中访问vip，会检测不出效果 在ka1中开启独立的shell \[root@KA1 \~\]# watch -n 1 ipvsadm -Ln 在RS1中关闭wen服务查看lvs策略是否变化 把ka1中的keepalived关闭查看ka2中是否自动生成lvs策略 ## 九、双主模式代理不同业务实现高可用 ### 1.实验环境 web服务设定再个实验已经设定完成 在rs中设定lo添加vip2 172.25.254.200:32 在rs中搭建数据库 \[root@rs1+2 \~\]# dnf install mariadb-server -y \[root@rs1+2 \~\]# systemctl enable --now mariadb \[root@rs1+2 \~\]# mysql Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 3 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> CREATE USER lee@'%' identified by 'lee'; Query OK, 0 rows affected (0.001 sec) MariaDB \[(none)\]\> GRANT ALL ON \*.\* TO lee@'%'; Query OK, 0 rows affected (0.001 sec) **测试** \[root@rs1 \~\]# mysql -ulee -plee -h172.25.254.10 Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 4 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> quit \[root@rs1 \~\]# mysql -ulee -plee -h172.25.254.20 Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 4 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> quit ### 2.实现不同vip代理不同业务 **KA1和KA2** \[root@KA1+2 \~\]# vim /etc/keepalived/keepalived.conf include /etc/keepalived/conf.d/webserver.conf include /etc/keepalived/conf.d/datebase.conf \[root@KA1+2 \~\]# vim /etc/keepalived/conf.d/webserver.conf virtual_server 172.25.254.100 80 { delay_loop 6 lb_algo rr lb_kind DR protocol TCP real_server 172.25.254.10 80 { weight 1 HTTP_GET { url { path / status_code 200 } connect_timeout 1 retry 3 delay_before_retry 1 } } real_server 172.25.254.20 80 { weight 1 TCP_CHECK { connect_timeout 5 retry 3 delay_before_retry 3 connect_port 80 } } } \[root@KA1 \~\]# vim /etc/keepalived/conf.d/datebase.conf virtual_server 172.25.254.200 3306 { delay_loop 6 lb_algo rr lb_kind DR protocol TCP real_server 172.25.254.10 3306 { weight 1 TCP_CHECK { connect_timeout 5 retry 3 delay_before_retry 3 connect_port 3306 } } real_server 172.25.254.20 3306 { weight 1 TCP_CHECK { connect_timeout 5 retry 3 delay_before_retry 3 connect_port 3306 } } } \[root@KA1+2 \~\]# systemctl restart keepalived.service ### 3.测试 \[root@rs2 \~\]# mysql -ulee -plee -h172.25.254.200 Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 89 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> \[Administrator.DESKTOP-VJ307M3\] ➤ curl 172.25.254.100 RS1 - 172.25.254.10 \[Administrator.DESKTOP-VJ307M3\] ➤ curl 172.25.254.100 RS2 - 172.25.254.20 ## 十、利用VRRP Script 实现全能高可用 ### 1.实验环境 #在KA1和KA2中安装haproxy \[root@KA1+2 \~\]# dnf install haproxy-2.4.22-4.el9.x86_64 -y \[root@KA1 \~\]# vim /etc/sysctl.conf \[root@KA1+2 \~\]# vim /etc/sysctl.conf net.ipv4.ip_nonlocal_bind=1 \[root@KA1+2 \~\]# vim /etc/haproxy/haproxy.cfg listen webserver bind 172.25.254.100:80 mode http server web1 172.25.254.10:80 check server web2 172.25.254.20:80 check \[root@KA1+2 \~\]# systemctl enable --now haproxy.service ### 2.利用案例理解vrrp_scripts #在KA1主机中 \[root@KA1 \~\]# vim /etc/keepalived/scripts/test.sh #!/bin/bash \[ ! -f "/mnt/lee"

root@KA1 \~\]# vim /etc/keepalived/keepalived.conf vrrp_script check_lee { script "/etc/keepalived/scripts/test.sh" interval 1 weight -30 fall 2 rise 2 timeout 2 user root } vrrp_instance DB_VIP { state MASTER interface eth0 virtual_router_id 51 priority 100 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 172.25.254.100/24 dev eth0 label eth0:1 } track_script { check_lee } } \[root@KA1 \~\]# systemctl restart keepalived.service #测试： \[root@KA1 \~\]# ifconfig eth0: flags=4163\ mtu 1500 inet 172.25.254.50 netmask 255.255.255.0 broadcast 172.25.254.255 inet6 fe80::3901:aeea:786a:7227 prefixlen 64 scopeid 0x20\ ether 00:0c:29:26:33:d9 txqueuelen 1000 (Ethernet) RX packets 98198 bytes 9235557 (8.8 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 145101 bytes 12247386 (11.6 MiB) TX errors 0 dropped 9 overruns 0 carrier 0 collisions 0 eth0:0: flags=4163\ mtu 1500 inet 172.25.254.100 netmask 255.255.255.0 broadcast 0.0.0.0 ether 00:0c:29:26:33:d9 txqueuelen 1000 (Ethernet) lo: flags=73\ mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10\ loop txqueuelen 1000 (Local Loopback) RX packets 932 bytes 72195 (70.5 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 932 bytes 72195 (70.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 \[root@KA1 \~\]# touch /mnt/lee \[root@KA1 \~\]# ifconfig eth0: flags=4163\ mtu 1500 inet 172.25.254.50 netmask 255.255.255.0 broadcast 172.25.254.255 inet6 fe80::3901:aeea:786a:7227 prefixlen 64 scopeid 0x20\ ether 00:0c:29:26:33:d9 txqueuelen 1000 (Ethernet) RX packets 97968 bytes 9216259 (8.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 144858 bytes 12219108 (11.6 MiB) TX errors 0 dropped 9 overruns 0 carrier 0 collisions 0 lo: flags=73\ mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10\ loop txqueuelen 1000 (Local Loopback) RX packets 932 bytes 72195 (70.5 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 932 bytes 72195 (70.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 \[root@KA1 \~\]# rm -fr /mnt/lee \[root@KA1 \~\]# ifconfig eth0: flags=4163\ mtu 1500 inet 172.25.254.50 netmask 255.255.255.0 broadcast 172.25.254.255 inet6 fe80::3901:aeea:786a:7227 prefixlen 64 scopeid 0x20\ ether 00:0c:29:26:33:d9 txqueuelen 1000 (Ethernet) RX packets 98198 bytes 9235557 (8.8 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 145101 bytes 12247386 (11.6 MiB) TX errors 0 dropped 9 overruns 0 carrier 0 collisions 0 eth0:0: flags=4163\ mtu 1500 inet 172.25.254.100 netmask 255.255.255.0 broadcast 0.0.0.0 ether 00:0c:29:26:33:d9 txqueuelen 1000 (Ethernet) lo: flags=73\ mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10\ loop txqueuelen 1000 (Local Loopback) RX packets 932 bytes 72195 (70.5 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 932 bytes 72195 (70.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 ### 3.keepalived + haproxy \[root@KA1 \~\]# vim /etc/keepalived/scripts/haproxy_check.sh #!/bin/bash killall -0 haproxy \&\> /dev/null \[root@KA1 \~\]# chmod +x /etc/keepalived/scripts/haproxy_check.sh vrrp_script haporxy_check { script "/etc/keepalived/scripts/haproxy_check.sh" interval 1 weight -30 fall 2 rise 2 timeout 2 user root } vrrp_instance WEB_VIP { state MASTER interface eth0 virtual_router_id 51 priority 100 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 172.25.254.100/24 dev eth0 label eth0:0 } track_script { haporxy_check } } \[root@KA1 \~\]# systemctl restart keepalived.service #测试 通过关闭和开启haproxy来观察vip是否迁移