AI导航网
微信公众号搜"智元新知"关注
微信扫一扫可直接关注哦！

CentOS 7.6安装配置Keepalived详解三：高可用Nginx双主模型

分类：Nginx作者：编程之家

1、演示环境：

外网IP

内网IP

操作系统

主机名

部署服务

服务器角色

192.168.1.145

172.16.0.10

CentOS   7.6

node1

keepalived、Nginx

负载均衡调度器

192.168.1.146

172.16.0.11

CentOS   7.6

node2

keepalived、Nginx

负载均衡调度器

无

172.16.0.20

CentOS   7.6

web1

httpd

后端real server

无

172.16.0.21

CentOS   7.6

web2

httpd

后端real server

2、配置网络：

（1）node1新增一块网卡，并配置内网IP：

# vim /etc/sysconfig/network-scripts/ifcfg-ens192

image.png

# systemctl restart network.service

# ifconfig

image.png

（2）node2新增一块网卡，并配置内网IP：

# vim /etc/sysconfig/network-scripts/ifcfg-ens192

image.png

# systemctl restart network.service

# ifconfig

image.png

（3）web1配置内网IP：

# vim /etc/sysconfig/network-scripts/ifcfg-ens160

image.png

# systemctl restart network.service

# ifconfig

image.png

（4）web2配置内网IP：

# vim /etc/sysconfig/network-scripts/ifcfg-ens160

image.png

# systemctl restart network.service

# ifconfig

image.png

3、node1和node2通过chrony服务同步时间

4、各节点关闭firewalld和SELinux

5、node1和node2实现通过主机名互相通信：

# vim /etc/hosts

192.168.1.145 node1

192.168.1.146 node2

node1：

# ping -c 3 node2

image.png

# ping -c 3 172.16.0.11

image.png

node2：

# ping -c 3 node1

image.png

# ping -c 3 172.16.0.10

image.png

6、确保配置keepalived服务的node1和node2用于集群服务的接口支持MULTICAST（多播或组播）通信：

node1：# ip a l | grep MULTICAST

image.png

node2：# ip a l | grep MULTICAST

image.png

备注：如果网卡没有开启多播功能，可通过命令# ip link set multicast on dev ens160开启

7、web1安装部署httpd：

# yum -y install httpd

# vim /var/www/html/index.html --> <h1>web1</h1>

# systemctl start httpd.service

# ss -tunlp | grep -w :80

# systemctl enable httpd.service

8、web2安装部署httpd：

# yum -y install httpd

# vim /var/www/html/index.html --> <h1>web2</h1>

# systemctl start httpd.service

# ss -tunlp | grep -w :80

# systemctl enable httpd.service

9、node1访问web1和web2：

# curl http://172.16.0.20

image.png

# curl http://172.16.0.21

image.png

10、node1安装配置keepalived：

# yum -y install keepalived

# cd /etc/keepalived

# mv keepalived.conf{,.bak}

# openssl rand -base64 7 --> IDDf1j+yfw==

# vim keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node1@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_mcast_group4 224.1.100.88

}


vrrp_instance VI_1 {

state MASTER

interface ens160

virtual_router_id 50

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

11、node2安装配置keepalived：

# yum -y install keepalived

# cd /etc/keepalived

# mv keepalived.conf{,.bak}

# vim keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node2@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node2

vrrp_mcast_group4 224.1.100.88

}


vrrp_instance VI_1 {

state BACKUP

interface ens160

virtual_router_id 50

priority 98

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

12、node1定义邮件通知脚本：

# vim /etc/keepalived/notify.sh

#!/bin/bash

contact='root@localhost'

notify() {

local mailsubject="$(hostname) to be $1, vip floating"

local mailbody="$(date +'%F %T'): vrrp transition, $(hostname) changed to be $1"

echo "$mailbody" | mail -s "$mailsubject" $contact

}

case $1 in

master)

notify master

;;

backup)

notify backup

;;

fault)

notify fault

;;

*)

echo "Usage: $(basename $0) {master|backup|fault}"

exit 1

;;

esac

# chmod +x /etc/keepalived/notify.sh

# bash -n /etc/keepalived/notify.sh

# scp -p /etc/keepalived/notify.sh [email protected]:/etc/keepalived

13、node1定义在不停止keepalived服务的情况下进行主备切换测试的脚本：

# vim /etc/keepalived/chk_maint.sh

#!/bin/bash

if [ -f /etc/keepalived/maint ]; then

exit 1

else

exit 0

fi

# chmod +x /etc/keepalived/chk_maint.sh

# bash -n /etc/keepalived/chk_maint.sh

# scp -p /etc/keepalived/chk_maint.sh [email protected]:/etc/keepalived

14、node1修改配置文件：

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node1@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_instance VI_1 {

state MASTER

interface ens160

virtual_router_id 50

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

备注：如果/etc/keepalived/maint文件存在，则权重-5

15、node2修改配置文件：

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node2@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node2

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_instance VI_1 {

state BACKUP

interface ens160

virtual_router_id 50

priority 98

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

16、启动优先级较低的node2上的keepalived服务，并查看VIP信息：

# systemctl start keepalived.service

# systemctl enable keepalived.service

# ip a l

image.png

17、启动优先级较高的node1上的keepalived服务，并查看VIP信息：

# systemctl start keepalived.service

# systemctl enable keepalived.service

# ip a l

image.png

18、node1创建maint文件，并查看VIP信息：

# touch /etc/keepalived/maint

# ip a l

image.png

备注：VIP地址已经转移至node2

19、node1删除maint文件，并查看VIP信息：

# rm -rf /etc/keepalived/maint

# ip a l

image.png

备注：VIP地址又转移回node1

20、node1安装配置Nginx：

# yum -y install Nginx

# cd /etc/Nginx

# cp Nginx.conf{,.bak}

# vim Nginx.conf

（1）在http配置段内、server配置段外新增如下代码：

upstream websrvs {

server 172.16.0.20;

server 172.16.0.21;

}

（2）在server配置段内新增如下代码：

location / {

proxy_pass http://websrvs;

}

# Nginx -t

# systemctl start Nginx.service

# ss -tunlp | grep -w :80

# systemctl enable Nginx.service

备注：node2同样需要执行上述操作

21、使用其它主机访问node1、node2和VIP：

# for i in {1..4}; do curl http://192.168.1.145; done

image.png

# for i in {1..4}; do curl http://192.168.1.146; done

image.png

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

22、node1定义Nginx进程监控脚本：

# vim /etc/keepalived/chk_Nginx.sh

#!/bin/bash

A=$(ps -C Nginx --no-headers | wc -l)

if [ $A -eq 0 ]; then

systemctl start Nginx.service

sleep3

B=`ps -C Nginx --no-headers | wc -l`

if [ $B -eq 0 ]; then

systemctl stop keepalived.service

fi

fi

# chmod +x /etc/keepalived/chk_Nginx.sh

# bash -n /etc/keepalived/chk_Nginx.sh

# scp -p /etc/keepalived/chk_Nginx.sh [email protected]:/etc/keepalived

备注：检查Nginx是否运行，如果没有运行就启动Nginx；如果Nginx启动失败，则停止keepalived

23、node1停止keepalived服务，并修改配置文件：

# systemctl stop keepalived.service

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node1@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_script chk_Nginx {

script "/etc/keepalived/chk_Nginx.sh"

interval 5

}


vrrp_instance VI_1 {

state MASTER

interface ens160

virtual_router_id 50

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

24、node2停止keepalived服务，并修改配置文件：

# systemctl stop keepalived.service

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node2@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node2

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_script chk_Nginx {

script "/etc/keepalived/chk_Nginx.sh"

interval 5

}


vrrp_instance VI_1 {

state BACKUP

interface ens160

virtual_router_id 50

priority 98

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

25、分别启动node1和node2上的keepalived服务：# systemctl start keepalived.service

备注：此时node1和node2上都运行着keepalived和Nginx，且node1为主节点，绑定VIP

26、高可用测试：

（1）node1停止keepalived：VIP漂移至node2

（2）node1创建/etc/keepalived/maint文件：VIP漂移至node2

（3）node1停止Nginx：VIP仍然绑定在node1上，且Nginx会自动启动

（4）node1安装httpd，并且在停止Nginx的同时启动httpd：# killall Nginx && systemctl start httpd.service，由于80端口被httpd占用，所以node1上的Nginx无法正常启动，根据chk_Nginx.sh脚本，继而停止node1上的keepalived，导致VIP漂移至node2，但仍不影响VIP的访问：

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

（5）后端real server服务器健康状态检测，停止web2上的httpd，访问VIP：

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

备注：每次测试后都恢复至步骤25的状态

27、node1停止keepalived服务，并修改配置文件，配置高可用Nginx双主模型：

# systemctl stop keepalived.service

# openssl rand -base64 7 --> 9xEKWUjHZw==

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node1@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_script chk_Nginx {

script "/etc/keepalived/chk_Nginx.sh"

interval 5

}


vrrp_instance VI_1 {

state MASTER

interface ens160

virtual_router_id 50

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}


vrrp_instance VI_2 {

state BACKUP

interface ens160

virtual_router_id 51

priority 98

advert_int 1

authentication {

auth_type PASS

auth_pass 9xEKWUjHZw==

}

virtual_ipaddress {

192.168.1.118

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

28、node2停止keepalived服务，并修改配置文件，配置高可用Nginx双主模型：

# systemctl stop keepalived.service

# vim /etc/keepalived/keepalived.conf

global_defs {

notification_email {

root@localhost

}

notification_email_from node2@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node2

vrrp_mcast_group4 224.1.100.88

}


vrrp_script chk_maint {

script "/etc/keepalived/chk_maint.sh"

interval 1

weight -5

}


vrrp_script chk_Nginx {

script "/etc/keepalived/chk_Nginx.sh"

interval 5

}


vrrp_instance VI_1 {

state BACKUP

interface ens160

virtual_router_id 50

priority 98

advert_int 1

authentication {

auth_type PASS

auth_pass IDDf1j+yfw==

}

virtual_ipaddress {

192.168.1.119

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}


vrrp_instance VI_2 {

state MASTER

interface ens160

virtual_router_id 51

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass 9xEKWUjHZw==

}

virtual_ipaddress {

192.168.1.118

}

track_interface {

ens160

ens192

}

track_script {

chk_maint

chk_Nginx

}

notify_master "/etc/keepalived/notify.sh master"

notify_backup "/etc/keepalived/notify.sh backup"

notify_fault "/etc/keepalived/notify.sh fault"

}

29、分别启动node1和node2上的keepalived服务：# systemctl start keepalived.service

30、node1查看VIP信息：# ip a l

image.png

31、node2查看VIP信息：# ip a l

image.png

32、使用其它主机访问2个VIP：

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

# for i in {1..4}; do curl http://192.168.1.118; done

image.png

备注：

Ø  此处2个VIP均为外网VIP，内网无需配置VIP

Ø  DNS服务主从，将域名的2条A记录分别解析为上述2个VIP，通过主/备和备/主实现负载均衡

33、双主模型高可用测试：

（1）node2停止keepalived：2个VIP都绑定至node1

（2）node2创建/etc/keepalived/maint文件：2个VIP都绑定至node1

（3）node2停止Nginx：VIP 192.168.1.118仍然绑定在node2上，且Nginx会自动启动

（4）node2安装httpd，并且在停止Nginx的同时启动httpd：# killall Nginx && systemctl start httpd.service，由于80端口被httpd占用，所以node2上的Nginx无法正常启动，根据chk_Nginx.sh脚本，继而停止node2上的keepalived，导致VIP 192.168.1.118漂移至node1，但仍不影响2个VIP的访问：

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

# for i in {1..4}; do curl http://192.168.1.118; done

image.png

（5）后端real server服务器健康状态检测，停止web1上的httpd，访问2个VIP：

# for i in {1..4}; do curl http://192.168.1.119; done

image.png

# for i in {1..4}; do curl http://192.168.1.118; done

image.png

备注：每次测试后都恢复至步骤25的状态

版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 [email protected] 举报，一经查实，本站将立刻删除。

相关推荐

如何基于nginx+uWSGI+django+virtualenv+supervisor部署发布web项目
Nginx (engine x) 是一个高性能的HTTP和反向代理服务，也是一个IMAP/POP3/SMTP服务。 wsgi是PythonWeb服务器网关接口(Web Server Gateway Interface)，WSGI是作为Web服务器与Web应用程序或应用框架之间的一种低级别的...
Vue+Django项目部署
本地项目配置 1 复制 luffy/settings/dev.py为prop.py 修改luffy/settings/prop.py中以下几项 (1) allow_hosts (2) 跨域白名单 (3) 支付宝电脑网站支付配置信息 2 修改luffy/wsgi.py文件 第14行 3 修改manag
nginx 隐藏版本号与WEB服务器信息
nginx不仅可以隐藏版本信息，还支持自定义web服务器信息 先看看最终的隐藏结果吧 具体怎么实现呢，其实也很简单，请往下看 1 官网下载最新稳定版 2 解压 3 修改C文件&#x9;（1）vim src/http/ngx_http_header_fil...
nginx漏洞分析与升级修复
一 、此次漏洞分析 1 nginx HTTP/2漏洞 [nginx-announce] nginx安全公告（CVE-2018-16843，CVE-2018-16844）在nginx HTTP / 2实现中发现了两个安全问题，漏洞对服务器的影响：&#x9;可能会导致过多的内存消耗（CV...
Nginx配置文件详解
###进入nginx 目录cd /usr/local/nginx###递归显示 2 级目录tree -L 2 ./一、conf 目录conf 目录：存放nginx 配置文件的目录fastcgi.conf：存放fastcgi 相关的配置 fastcgi.conf.default：fastcgi.conf 的原始备份文...
windows关闭nginx
在cmd命令窗口输入下面命令进行查看 tasklist /fi "imagename eq nginx.exe"
Nginx显示500错误原因和解决方法
Nginx显示500错误原因和解决方法
linux系统下启停nginx的命令
linux系统下启停nginx的命令
【问题】4.Nginx之default_server问题
nginx 的 default_server 指令可以定义默认的 server出处理一些没有成功匹配 server_name 的请求1.显示定义2.指定Server_name3.隐式定义这三种方式都可禁止 ip 直接访问且 1,3同时可以禁止未绑定域名的访问（比如泛解...
nginx笔记
Nginx是一款轻量级的 Web 服务器、反向代理服务器，由于它的内存占用少，启动极快，高并发能力强，在互联网项目中广泛应用。
    pythonJavaScriptjavaHTMLreactjsC#AndroidCSSNode.jssqlrpython-3.xMysqLjQueryc++pandasFlutterangularIOSdjangolinuxswifttypescript路由器JSON路由器设置无线路由器h3c华三华三路由器设置华三路由器电脑软件教程arraysdocker软件图文教程Cvue.jslaravelspring-bootreact-native