@Great-Chinese
2016-08-30T05:59:42.000000Z
字数 3815
阅读 1111
linux
高可用,当A机器内存爆满B机器无法ping通A机器,这时候B机器就会将B机器的对应的服开启。
yum install -y heartbeatyum install -y libnet
拷贝三个文件,HA机器的机器保持配置一致
cd /usr/share/doc/heartbeat-3.0.4cp authkeys ha.cf haresources /etc/ha.d/cd /etc/ha.d/
authkeys 文件内容
auth 33 md5 Hello!
ha.cf文件
debugfile /var/log/ha-debuglogfile /var/log/ha.loglogfacility local0# 监听机器个数keepalive 2#死亡时间deadtime 30# 警告时间warntime 10initdead 60# 监听端口udpport 694# 通过那个网卡和其他ha机器保持通信bcast eth0auto_failback on#当前ha的多个节点,master需要在 /etc/hosts 中配置node masternode slave# 路由器ipping 192.168.1.1# 销毁ip的命令respawn hacluster /usr/lib64/heartbeat/ipfail
haresource 文件
master 192.168.1.109/24/eth0:1 nginx# master ha主机的 hostname# 192.168.1.109 移动的ip地址# 24 ip地址通道# eth0 网卡名# :1 同一张网卡的另一个ip# nginx 监控的服务名,多个空空格隔开
第一次启动会很慢,稍等几分钟后,在放访问 192.168.1.109 自动会跳转成功,HA集群的机器都需要启动这个服务。
/etc/init.d/heartbeat start
优点:可以简单快速配置负载均衡
缺点:单机器有瓶颈
附属机器的网关(GATEWAY)必须是主机内网ip
yum install -y ipvsadm
脚本:/usr/local/sbin/lvs_nat.sh
#!/bin/bash# director 服务器上开启路由转发功能echo 1 > /proc/sys/net/ipv4/ip_forward## 关闭icmp的重定向echo 0 > /proc/sys/net/ipv4/conf/all/send_redirectsecho 0 > /proc/sys/net/ipv4/conf/default/send_redirectsecho 0 > /proc/sys/net/ipv4/conf/eth0/send_redirects# director 设置nat防火墙功能iptables -t nat -Fiptables -t nat -Xiptables -t nat -A POSTROUTING -s 192.168.200.0/24 -j MASQUERADE# director 设置 ipsadmIPVSADM='/sbin/ipvsadm'$IPVSADM -C #清空ipvsadm的规则# 192.168.145.128 外网$IPVSADM -A -t 192.168.145.128:80 -s rr$IPVSADM -a -t 192.168.145.128:80 -r 192.168.1.27:80 -m$IPVSADM -a -t 192.168.145.128:80 -r 192.168.1.28:80 -m
优点:对服务器没有任何瓶颈,需要通过虚拟ip访问,主机的eth0:0 IP和期附属机器的lo:0的ip需要保持一直
主机执行脚本
#!/bin/bash# director 服务器上开启路由转发功能echo 1 > /proc/sys/net/ipv4/ip_forwardipv=/sbin/ipvsadmvip=192.168.1.100rs1=192.168.1.27rs2=192.168.1.28ifconfig eth0:0 $vip broadcast $vip netmask 255.255.255.255 downifconfig eth0:0 $vip broadcast $vip netmask 255.255.255.255 uproute add -host $vip dev eth0:0$ipv -C$ipv -A -t $vip:80 -s rr$ipv -a -t $vip:80 -r $rs1:80 -g -w 1$ipv -a -t $vip:80 -r $rs2:80 -g -w 1
附属机器执行脚本
#!/usr/bin/env bashvip=192.168.1.100ifconfig lo:0 $vip broadcast $vip netmask 255.255.255.255 downifconfig lo:0 $vip broadcast $vip netmask 255.255.255.255 uproute add -host $vip lo:0echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignoreecho 2 > /proc/sys/net/ipv4/conf/lo/arp_announceecho 1 > /proc/sys/net/ipv4/conf/all/arp_ignoreecho 2 > /proc/sys/net/ipv4/conf/all/arp_announce
配置完成后,可以访问 192.168.1.100 切换两个不同机器的80端口。
yum install -y keepalived
主机器配置,虚拟ip为:192.168.1.100
vrrp_instance VI_1 {state MASTER # 备用服务器上为BACKUPinterface eth0virtual_router_id 51priority 100 #备用服务器上为90advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.1.100}}virtual_server 192.168.1.100 80 {delay_loop 6 # 每个6秒查询Realserver状态lb_algo rr # lvs算法lb_kind DR # Direct Routepersistence_timeout 0 # 同一IP链接60秒内被分配到同一台realserverprotocol TCP #用tcp协议检查realserver状态real_server 192.168.1.27 80{weight 100TCP_CHECK {connect_timeout 10 #10秒钟无响应超时nb_get_retry 3delay_before_retry 3connect_port 80}}real_server 192.168.1.28 80{weight 100TCP_CHECK {connect_timeout 10 #10秒钟无响应超时nb_get_retry 3delay_before_retry 3connect_port 80}}}
keepalived从机器上
vrrp_instance VI_1 {state BACKUP # 备用服务器上为BACKUPinterface eth0virtual_router_id 51priority 90 #备用服务器上为90advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.1.100}}virtual_server 192.168.1.100 80 {delay_loop 6 # 每个6秒查询Realserver状态lb_algo rr # lvs算法lb_kind DR # Direct Routepersistence_timeout 0 # 同一IP链接60秒内被分配到同一台realserverprotocol TCP #用tcp协议检查realserver状态real_server 192.168.1.27 80{weight 100TCP_CHECK {connect_timeout 10 #10秒钟无响应超时nb_get_retry 3delay_before_retry 3connect_port 80}}real_server 192.168.1.28 80{weight 100TCP_CHECK {connect_timeout 10 #10秒钟无响应超时nb_get_retry 3delay_before_retry 3connect_port 80}}}
启动主和备用机器的keepalived服务
/etc/init.d/keepalived start
查看端口转发规则
ipvsadm -ln