keepalived 高可用主备VIP快速部署

360影视 动漫周边 2025-04-30 17:47 2

摘要:! Configuration File for keepalivedglobal_defs { router_id keepalived1 #只是名字而已,辅节点改为keepalived2(两个名字一定不能一样)}vrrp_instance VI_1 { s

192.168.4.20 VIP虚拟地址192.168.4.21 keepalived1192.168.4.22 keepalived2

网卡为 ens192

系统为Anolis8 龙蜥8

关闭防火墙

systemctl stop firewalld && systemctl disable firewalld

主机1
192.168.4.21 keepalived1
安装

yum install -y keepalived

配置文件备份

cp /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.bak

编辑
vi /etc/keepalived/keepalived.conf

! Configuration File for keepalivedglobal_defs { router_id keepalived1 #只是名字而已,辅节点改为keepalived2(两个名字一定不能一样)}vrrp_instance VI_1 { state MASTER #定义主还是备,备用的话写backup interface ens192 #VIP绑定接口 virtual_router_id 66 #整个集群的调度器一致(在同一个集群) priority 100 #(优先权)back改为50(50一间隔) advert_int 1 #发包 authentication { auth_type PASS #主备节点认证 auth_pass 1111 } virtual_ipaddress { 192.168.4.20/24 #VIP(自己网段的) }}

主机2
192.168.4.22 keepalived2
安装软件

配置文件备份

! Configuration File for keepalivedglobal_defs { router_id keepalived2}vrrp_instance VI_1 { state BACKUP #设置为backup interface ens192 nopreempt #设置到back上面,不抢占资源 virtual_router_id 66 priority 50 #辅助改为50 advert_int 1 #检测间隔1s authentication { auth_type PASS auth_pass 1111 #认证类型和密码主备一样,要不然无法互相认证 } virtual_ipaddress { 192.168.4.20/24 #抢占的VIP也一样 }}

启动服务

在两台主机上安装nginx

yum install nginx -ysystemctl enable --now nginx

两台主机显示不同网页
主机1

echo "keepalived1 nginx" > /usr/share/nginx/html/index.html

主机2

echo "keepalived2 nginx" > /usr/share/nginx/html/index.html

两台主机均编写脚本
vi /etc/keepalived/check_nginx.sh
通过端口监听判断业务是否正常,几乎适用于所有业务,如MQ、nginx、OBProxy等等

#!/bin/bash# 检查80端口是否有监听if ss -tuln | grep -q ':80\b'; then exit 0 # 检测成功,返回0else exit 1 # 检测失败,返回1fi

配置keepalived1
192.168.4.21 keepalived1
执行权限

chmod +x /etc/keepalived/check_nginx.sh

编辑配置文件
vi /etc/keepalived/keepalived.conf

! Configuration File for keepalivedglobal_defs { router_id keepalived1 #只是名字而已,辅节点改为keepalived2(两个名字一定不能一样)}vrrp_script check_nginx { script "/etc/keepalived/check_nginx.sh" interval 2 #每2秒执行一次}vrrp_instance VI_1 { state MASTER #定义主还是备,备用的话写backup interface ens192 #VIP绑定接口 virtual_router_id 66 #整个集群的调度器一致(在同一个集群) priority 100 #(优先权)back改为50(50一间隔) advert_int 1 #发包 authentication { auth_type PASS #主备节点认证 auth_pass 1111 } virtual_ipaddress { 192.168.4.20/24 #VIP(自己网段的) } track_script { check_nginx }}

配置keepalived2
192.168.4.22 keepalived2
执行权限

! Configuration File for keepalivedglobal_defs { router_id keepalived2}vrrp_script check_nginx { script "/etc/keepalived/check_nginx.sh" interval 2 #每2秒执行一次}vrrp_instance VI_1 { state BACKUP #设置为backup interface ens192 nopreempt #设置到back上面,不抢占资源 virtual_router_id 66 priority 50 #辅助改为50 advert_int 1 #检测间隔1s authentication { auth_type PASS auth_pass 1111 #认证类型和密码主备一样,要不然无法互相认证 } virtual_ipaddress { 192.168.4.20/24 #抢占的VIP也一样 } track_script { check_nginx }}

改完配置文件两台主机都需要重启keepalived服务

关闭主机1的nginx服务,VIP自动漂移到主机2,启动主机1的nginx服务,VIP漂回来

配置keepalived1
192.168.4.21 keepalived1
编辑配置文件
vi /etc/keepalived/keepalived.conf

! Configuration File for keepalivedglobal_defs { router_id keepalived1 #只是名字而已,辅节点改为keepalived2(两个名字一定不能一样)}vrrp_script check_nginx { script "/etc/keepalived/check_nginx.sh" interval 2 #每2秒执行一次}vrrp_instance VI_1 { state MASTER #定义主还是备,备用的话写backup interface ens192 #VIP绑定接口 virtual_router_id 66 #整个集群的调度器一致(在同一个集群) priority 100 #(优先权)back改为50(50一间隔) advert_int 1 #发包 authentication { auth_type PASS #主备节点认证 auth_pass 1111 } unicast_src_ip 192.168.4.21 #本机ip unicast_peer { 192.168.4.22 #其他机器ip,可多个 } virtual_ipaddress { 192.168.4.20/24 #VIP(自己网段的) } track_script { check_nginx }}

配置keepalived2
192.168.4.22 keepalived2
编辑配置文件
vi /etc/keepalived/keepalived.conf

! Configuration File for keepalivedglobal_defs { router_id keepalived2}vrrp_script check_nginx { script "/etc/keepalived/check_nginx.sh" interval 2 #每2秒执行一次}vrrp_instance VI_1 { state BACKUP #设置为backup interface ens192 nopreempt #设置到back上面,不抢占资源 virtual_router_id 66 priority 50 #辅助改为50 advert_int 1 #检测间隔1s authentication { auth_type PASS auth_pass 1111 #认证类型和密码主备一样,要不然无法互相认证 } unicast_src_ip 192.168.4.22 #本机ip unicast_peer { 192.168.4.21 #其他机器ip,可多个 } virtual_ipaddress { 192.168.4.20/24 #抢占的VIP也一样 } track_script { check_nginx }}

来源:王忘杰

相关推荐