CentOS5.5環(huán)境下布署LVS doc文檔
CentOS5.5環(huán)境下布署LVS#!/bin/bash# BY kerryhu# MAIL:king_819@163.com# BLOG:http://kerry.blog.51cto.com# P
CentOS5.5環(huán)境下布署LVS
#!/bin/bash
# BY kerryhu
# MAIL:king_819@163.com
# BLOG:http://kerry.blog.51cto.com
# Please manual operation yum of before Operation..... 系統(tǒng)環(huán)境`：CentOS 5.5（定制安裝）
組件：
Base
Development Libraries
Development Tools
Editors
Text-based Internet
lvs-master ：192.168.9.201
lvs-backup ：192.168.9.202
vip ：192.168.9.200
web1：192.168.9.203
web2：192.168.9.204
netmask ：255.255.255.0
gateway ：192.168.9.1
網(wǎng)絡(luò)拓?fù)洌?/p> ,
echo "============================ 更新系統(tǒng)時間 ======================" yum install -y ntp
ntpdate time.nist.gov
echo "00 01 * * * /usr/sbin/ntpdate time.nist.gov" /etc/crontab
echo “============================ 關(guān)閉不用服務(wù) =======================” /root/del_servcie.sh # 附件中自定義腳本
echo “========================= 安裝ipvsadm 、keepalived ==================”
[root@master ~]# cd /usr/local/src
[root@master ~]#
wget http://www.linuxvirtualserver.org/software/kernel-2.6/ipvsadm-1.24.tar.gz
[root@master ~]#
wget http://www.keepalived.org/software/keepalived-1.1.17.tar.gz
[root@master ~]# ln -sv /usr/src/kernels/2.6.18-194.el5-i686/ /usr/src/linux
,[root@master ~]# tar -zxvf ipvsadm-1.24.tar.gz
[root@master ~]# cd ipvsadm-1.24
[root@master ~]# make;make install
[root@master ~]# cd ..
[root@master ~]# tar -zxvf keepalived-1.1.17.tar.gz
[root@master ~]# cd keepalived-1.1.17
[root@master ~]# ./configure
configure: error:
!!! OpenSSL is not properly installed on your system. !!!
!!! Can not include OpenSSL headers files.
解決辦法：
[root@master ~]# yum -y install openssl-devel
[root@master ~]# ./configure
[root@master ~]# make;make install
編譯的時候出現(xiàn)這個提示，說明keepalived 和內(nèi)核結(jié)合了，如果不是這樣的，需要加上這個參數(shù)./configure --with-kernel-
dir=/kernel/path
Keepalived configuration
------------------------
Keepalived version : 1.1.17
Compiler : gcc
Compiler flags : -g -O2
,Extra Lib : -lpopt -lssl -lcrypto
Use IPVS Framework : Yes
IPVS sync daemon support : Yes
Use VRRP Framework : Yes
Use LinkWatch : No
Use Debug flags : No
echo “======================= 配置keepalived ===========================”
[root@master ~]# cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/
[root@master ~]# cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/
[root@master ~]# mkdir /etc/keepalived
[root@master ~]# cp /usr/local/sbin/keepalived /usr/sbin/
[root@master ~]# vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
king_819@163.com
}
notification_email_from king_819@163.com
smtp_server smtp.163.com
# smtp_connect_timeout 30
router_id LVS_DEVEL
,}
# VIP1
vrrp_instance VI_1 {
state MASTER #備份服務(wù)器上將MASTER 改為BACKUP interface eth0
lvs_sync_daemon_inteface eth0
virtual_router_id 51
priority 100 # 備份服務(wù)上將100改為90
advert_int 5
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.9.200
#(如果有多個VIP ，繼續(xù)換行填寫.)
}
}
virtual_server 192.168.9.200 80 {
delay_loop 6 #(每隔10秒查詢realserver 狀態(tài))
,lb_algo wlc #(lvs 算法)
lb_kind DR #(Direct Route)
persistence_timeout 60 #(同一IP 的連接60秒內(nèi)被分配到同一臺realserver) protocol TCP #(用TCP 協(xié)議檢查realserver 狀態(tài))
real_server 192.168.9.203 80 {
weight 100 #(權(quán)重)
TCP_CHECK {
connect_timeout 10 #(10秒無響應(yīng)超時)
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 192.168.9.204 80 {
weight 100
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
,}
}
[root@master ~]# service keepalived start|stop
[root@master ~]# chkconfig –level 2345 keepalived on
echo “====================== 配置realserver =========================”
[root@web_1 ~]# vi /root/lvs_real.sh
#!/bin/bash
# description: Config realserver
#Written by : http://kerry.blog.51cto.com
SNS_VIP=192.168.9.200
/etc/rc.d/init.d/functions
case "$1" in
start)
/sbin/ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP /sbin/route add -host $SNS_VIP dev lo:0
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -p >/dev/null 2>&1
,echo "RealServer Start OK"
;;
stop)
/sbin/ifconfig lo:0 down
/sbin/route del $SNS_VIP >/dev/null 2>&1
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce echo "RealServer Stoped"
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac
exit 0
[root@web_1 ~]# chmod x /roo/lvs_real.sh
[root@web_1 ~]# /root/lvs_real.sh start
,[root@web_1 ~]# ifconfig
[root@web_1 ~]# echo “/root/lvs_real.sh start” >> /etc/rc.local
echo “===================== 測試LVS keepalived ========================” #LVS_master、LVS_backup上開啟keepalived ，LVS_master先綁定VIP
LVS_master：
LVS_backup：
#解析域名，測試訪問，LVS 轉(zhuǎn)發(fā)
,
#測試關(guān)閉LVS_master，短暫的掉包后，LVS_backup馬上接替工作
LVS_backup接替LVS_master綁定
VIP
LVS_backup負(fù)責(zé)轉(zhuǎn)發(fā)