lvs+keepalive

1.安装LVS和Keepalived
#modprobe ip_vs    //内核加载ip_vs模块
#lsmod |grep ip_vs //看看加载是否成功
ip_vs                  78081  0
 #uname -r
 
 2.6.18-53.el5PAE
 
#ln -s /usr/src/kernels/2.6.18-53.el5PAE-i686/  /usr/src/linux //生成一个链接文件

如果/usr/src/kernels没有2.6.18-194.el5，则需要编译

#yum -y install kernel-devel
#yum -y update kernel
#cp /usr/src/kernels/2.6.18-274.el5/include/net/ip_vs.h        /usr/inclide/net/  //这个很重要，否则在安装ipvsadm的时候会提示缺少*.h文件

lvs安装
tar -xzvf ipvsadm-1.24.tar.gz
cd ipvsadm-1.24


make 
出错
make[1]: *** [libipvs.o] 错误 1
make[1]: Leaving directory `/root/ipvsadm-1.24/libipvs'
make: *** [libs] 错误 2
解决
yum install libnl* popt*
make install
出现一些字样
install -m 0755 -s ipvsadm /sbin
install -m 0755 ipvsadm-save /sbin
install -m 0755 ipvsadm-restore /sbin
[ -d /usr/man/man8 ] || mkdir -p /usr/man/man8
install -m 0644 ipvsadm.8 /usr/man/man8
install -m 0644 ipvsadm-save.8 /usr/man/man8
install -m 0644 ipvsadm-restore.8 /usr/man/man8
if [ -d /etc/rc.d/init.d ]; then \
                  install -m 0755 ipvsadm.sh /etc/rc.d/init.d/ipvsadm; \
                fi
表示成功

keepalived安装
#yum -y install openssl openssl-devel //安装keepalived需要
tar -xzvf keepalived-1.1.20.tar.gz 

出现以下信息表示成
Keepalived configuration 
------------------------ 
Keepalived version : 1.1.20 
Compiler : gcc 
Compiler flags : -g -O2 
Extra Lib : -lpopt -lssl -lcrypto    
Use IPVS Framework : Yes 
IPVS sync daemon support : Yes 
Use VRRP Framework : Yes 
Use Debug flags : No


 #find / -name keepalived  # 查看keepalived位置                

 
#cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/
#cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/
#mkdir /etc/keepalived
#cp /usr/local/etc/keepalived/keepalived.conf /etc/keepalived/
#cp /usr/local/sbin/keepalived /usr/sbin/
#service keepalived start|stop     #做成系统启动服务方便管理.


需要自己编辑

 配置LVS
在LVS机上配置（两台都要配置）
  1． LVS-DR，配置LVS脚本实现负载均衡
      #vi /usr/local/sbin/lvs-dr.sh
 
      #!/bin/bash
 
        # description: start LVS of DirectorServer
 
        #Written by :NetSeek http://www.linuxtone.org
 
        
 
        GW=61.164.122.1
 
        # website director vip.
 
        SNS_VIP=192.168.1.120
 
        SNS_RIP1=192.168.1.110
 
        SNS_RIP2=192.168.1.113
 

     /etc/rc.d/init.d/functions
 

        logger $0 called with $1
 

        case "$1" in
 

        start)
 
        # set squid vip
 
        /sbin/ipvsadm --set 30 5 60
 
        /sbin/ifconfig eth0:0 $SNS_VIP broadcast $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP up
 
        /sbin/route add -host $SNS_VIP dev eth0:0
 
        /sbin/ipvsadm -A -t $SNS_VIP:80 -s wrr -p 3
 
        /sbin/ipvsadm -a -t $SNS_VIP:80 -r $SNS_RIP1:80 -g -w 1
 
        /sbin/ipvsadm -a -t $SNS_VIP:80 -r $SNS_RIP2:80 -g -w 1
 
        touch /var/lock/subsys/ipvsadm >/dev/null 2>&1
 

       ;;
 
stop)
 
        /sbin/ipvsadm -C
 
        /sbin/ipvsadm -Z
 
        ifconfig eth0:0 down
 
        route del $SNS_VIP
 
        rm -rf /var/lock/subsys/ipvsadm >/dev/null 2>&1
 
        echo "ipvsadm stoped"
 
       ;;
 

status)
 

        if [ ! -e /var/lock/subsys/ipvsadm ];then
 
                echo "ipvsadm stoped"
 
                exit 1
 
        else
 
                echo "ipvsadm OK"
 
        fi
 
      ;;
 

*)
 
        echo "Usage: $0 {start|stop|status}"
 
        exit 1
 
esac
 

exit 0
 
      
配置Realserver脚本


       #vi /usr/local/sbin/realserver.sh
 
        #!/bin/bash
 
        # description: Config realserver lo and apply noarp 
        #Written by :NetSeek http://www.linuxtone.org
 
        
 
        SNS_VIP=192.168.1.120
 
         
 
        /etc/rc.d/init.d/functions
 
         
 
        case "$1" in
 
        start)
 
               ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
 
               /sbin/route add -host $SNS_VIP dev lo:0
 
               echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
 
               echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
 
               echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
 
               echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
 
               sysctl -p >/dev/null 2>&1
 
               echo "RealServer Start OK"
 
         
 
               ;;
 
        stop)
 
               ifconfig lo:0 down
 
               route del $SNS_VIP >/dev/null 2>&1
 
               echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
 
               echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
 
               echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
 
               echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
 
               echo "RealServer Stoped"
 
               ;;
 
        *)
 
               echo "Usage: $0 {start|stop}"
 
               exit 1
 
        esac
 
         
 
        exit 0
 
     
     或者采用secondary ip address方式配置
           # vi /etc/sysctl.conf

          net.ipv4.conf.lo.arp_ignore = 1
 
          net.ipv4.conf.lo.arp_announce = 2
 
          net.ipv4.conf.all.arp_ignore = 1
 
          net.ipv4.conf.all.arp_announce = 2
 
       
 
          #sysctl -p
 
          #ip addr add 192.168.1.120/32 dev lo
 
          #ip add list 查看是否绑定
 
  3. 启动lvs-dr脚本和realserver启本，在DR上可以查看LVS当前状态:
 
        #watch ipvsadm -ln


配置keeplive

vi /etc/keepalived/keepalived.conf
  ! Configuration File for keepalived
 

global_defs {
 
   notification_email {
 
         [e-mail]
 
   }
 
   notification_email_from [e-mail]
 
   smtp_server 127.0.0.1
 
  # smtp_connect_timeout 30
 
   router_id LVS_DEVEL
 
}
 

# 20081013 written by :netseek
 
# VIP1
 
vrrp_instance VI_1 {
 
    state MASTER             #备份服务器上将MASTER改为BACKUP   
 
    interface eth0
 
    virtual_router_id 51
 
    priority 100    # 备份服务上将100改为99
 
    advert_int 1
 
    authentication {
 
        auth_type PASS
 
        auth_pass 1111
 
    }
 
    virtual_ipaddress {
 
        61.164.122.8   
 
        #(如果有多个VIP，继续换行填写.)
 
    }
 
}
 

virtual_server 61.164.122.8 80 {
 
    delay_loop 6                  #(每隔10秒查询realserver状态)
 
    lb_algo wrr                  #(lvs 算法)
 
    lb_kind DR                  #(Direct Route)
 
    persistence_timeout 60        #(同一IP的连接60秒内被分配到同一台realserver)
 
    protocol TCP                #(用TCP协议检查realserver状态)
 

    real_server 61.164.122.9 80 {
 
        weight 3               #(权重)
 
        TCP_CHECK {
 
        connect_timeout 10       #(10秒无响应超时)
 
        nb_get_retry 3
 
        delay_before_retry 3
 
        connect_port 80
 
        }
 
    }
 
    real_server 61.164.122.10 80 {
 
        weight 3
 
        TCP_CHECK {
 
        connect_timeout 10
 
        nb_get_retry 3
 
        delay_before_retry 3
 
        connect_port 80
 
        }
 
     }
 
}
 
＃ /usr/local/sbin/lvsdr.sh start （把这条语句写到/etc/rc.local中，开机启动）
＃/etc/init.d/keepalived start  启动keepalived 服务，keepalived就能利用keepalived.conf 配置文件，实现负载均衡和高可用.
 #watch ipvsadm –ln

参考文章

http://bbs.linuxtone.org/thread-1077-1-1.html
http://31543.blog.51cto.com/21543/110472/
http://nhylovezyh.blog.51cto.com/1444948/666446