CentOS release 6.8 x64 (Final)2.6.32-642.4.2.el6.x86_64?安裝keepalived-1.3.5+lvs?
============?
一、環(huán)境安裝：?
============?
?1.依賴安裝?
yuminstall-yopenssl-devellibnl3-develipset-develiptables-devellibnfnetlink-develpopt*增加軟連接ln-s/usr/src/kernels/`uname-r`/usr/src/linux 2.5臺(tái)機(jī)器IP設(shè)置?
??LVS1: 172.16.0.100?
??LVS2: 172.16.0.101?
???VIP: 172.16.0.150?
???WEB: 172.16.0.102?
???WEB2:172.16.0.103?
???web3:172.16.0.104(windows客戶端IIS)?
?3.關(guān)閉selinux?
?修改/etc/selinux/config文件中設(shè)置SELINUX=disabled?，然后重啟服務(wù)器。?
?4.關(guān)閉iptables,如果不關(guān)的話，需更具情況增加開(kāi)放端口。?
#iptables-IINPUT-ptcp--dport80-jACCEPT#iptables-IINPUT-picmp-jACCEPT#serviceiptablessave二、安裝步驟(在LVS1.LVS2上安裝）：?

============?
?1）安裝lvs管理工具?
1.tarzxvfipvsadm-1.26.tar.gz2.cdipvsadm-1.263.'make'4.'makeinstall'5.#ipvsadm6.lsmod|grepip_vs?
?2）安裝keepalived軟件?
1.tarzxvfkeepalived-1.3.5.tar.gz2.cdikeepalived-1.3.53../configure--prefix=/usr/local/keepalived--with-init=SYSV#注：(upstart|systemd|SYSV|SUSE|openrc)#根據(jù)系統(tǒng)選擇對(duì)應(yīng)的啟動(dòng)方式4.'make'5.'makeinstall'. 6.配置keepalived文件的路徑?
cp/usr/local/keepalived/etc/rc.d/init.d/keepalived/etc/init.d/cp/usr/local/keepalived/etc/sysconfig/keepalived/etc/sysconfig/mkdir/etc/keepalivedcp/usr/local/keepalived/etc/keepalived/keepalived.conf/etc/keepalived/cp/usr/local/keepalived/sbin/keepalived/usr/sbin/ 7.配置文件（vim /etc/keepalived/keepalived.conf）?
??#這里是全局定義部分?
global_defs{notification_email{root@local#設(shè)置報(bào)警郵件單個(gè)或多個(gè)地址}notification_email_fromserver@local#郵件的發(fā)送地址smtp_server127.0.0.1#smtp地址smtp_connect_timeout30#連接smtp服務(wù)器超時(shí)的實(shí)際router_idLVS_ONE#路由ID兩臺(tái)機(jī)器不能相同。LVS2更改為不同vrrp_skip_check_adv_addr#vrrp_strict#嚴(yán)格執(zhí)行VRRP協(xié)議規(guī)范，此模式不支持節(jié)點(diǎn)單播.#且重啟keepalived服務(wù)，會(huì)自動(dòng)啟動(dòng)iptables,原計(jì)劃打算關(guān)閉iptables，#但測(cè)試發(fā)現(xiàn)，多次（通過(guò)命令serviceiptablesstop且chkconfigiptablesoff,）#將iptables關(guān)閉后，但啟動(dòng)或重啟keepalived服務(wù)后，自動(dòng)又啟動(dòng)起來(lái)iptables,#且自加了一條把VIP地址DROP掉的規(guī)則。導(dǎo)致VIP查不到，ping不通.默認(rèn)安裝時(shí)自帶配置#含有此選項(xiàng)。所以建議禁用此選項(xiàng)。vrrp_garp_interval0vrrp_gna_interval0}#vrrp實(shí)例定義部分vrrp_instanceVI_1{stateMASTER#keepalived的角色MASTER表示主服務(wù)器。LVS2更改為：BACKUPinterfaceeth0#指定監(jiān)測(cè)網(wǎng)卡virtual_router_id51#虛擬路由標(biāo)示，相同實(shí)例，需相同標(biāo)示。priority150#優(yōu)先級(jí)數(shù)字越大優(yōu)先級(jí)越高M(jìn)ASTER的優(yōu)先級(jí)高于BACKUP優(yōu)先級(jí)（如master150,backup100）advert_int1#設(shè)定主備之間檢查時(shí)間單位sauthentication{#設(shè)定驗(yàn)證類型和密碼auth_typePASSauth_pass1111}virtual_ipaddress{#設(shè)定虛擬IP地址可以設(shè)置多個(gè)每行一個(gè)172.16.0.150/24brd172.16.0.255deveth0labeleth0:0}}#虛擬服務(wù)器部分virtual_server172.16.0.15080{delay_loop6#設(shè)定運(yùn)行情況檢查時(shí)間單位slb_algorr#負(fù)載調(diào)度算法rr即輪叫算法lb_kindDR#設(shè)置LVS負(fù)載機(jī)制NATTUNDR三種模式可選persistence_timeout0#會(huì)話時(shí)間#會(huì)話保持在某個(gè)服務(wù)節(jié)點(diǎn)#用戶在動(dòng)態(tài)頁(yè)面50s內(nèi)沒(méi)有任何動(dòng)作，那么后面就會(huì)被分發(fā)到其他節(jié)點(diǎn)#用戶一直動(dòng)作，不受50s限制protocolTCP#使用協(xié)議#以下為real_server部分real_server172.16.0.10280{weight1#服務(wù)節(jié)點(diǎn)權(quán)值，數(shù)字越大，權(quán)值越高#權(quán)值的大小可以為不同性能的服務(wù)器分配不同的負(fù)載#這樣才能有效合理的利用服務(wù)器資源TCP_CHECK{#狀態(tài)檢查部分connect_timeout3#3s無(wú)響應(yīng)超時(shí)nb_get_retry3#重試次數(shù)delay_before_retry3#重試間隔connect_port80#連接端口}}real_server172.16.0.10380{weight1TCP_CHECK{connect_timeout3nb_get_retry3delay_before_retry3connect_port80}}real_server172.16.0.10480{weight1TCP_CHECK{connect_timeout3nb_get_retry3delay_before_retry3connect_port80}}}三、客戶端設(shè)置（web1,web2配置）?
?1.增加啟動(dòng)關(guān)閉腳本,并chmod執(zhí)行權(quán)限?

#!/bin/bash##ScripttostartLVSDRrealserver.#description:LVSDRrealserver#./etc/rc.d/init.d/functionsVIP=172.16.0.150#修改相應(yīng)的VIPhost=`/bin/hostname`case"$1"instart)#啟動(dòng)LVS-DR模式，realserveronthismachine.關(guān)閉ARP沖突檢測(cè)。/sbin/ifconfiglodown/sbin/ifconfigloupecho1>/proc/sys/net/ipv4/conf/lo/arp_ignoreecho2>/proc/sys/net/ipv4/conf/lo/arp_announceecho1>/proc/sys/net/ipv4/conf/all/arp_ignoreecho2>/proc/sys/net/ipv4/conf/all/arp_announce/sbin/ifconfiglo:0$VIPbroadcast$VIPnetmask255.255.255.255up/sbin/routeadd-host$VIPdevlo:0;;stop)#停止LVS-DRrealserverloopbackdevice(s)./sbin/ifconfiglo:0downecho0>/proc/sys/net/ipv4/conf/lo/arp_ignoreecho0>/proc/sys/net/ipv4/conf/lo/arp_announceecho0>/proc/sys/net/ipv4/conf/all/arp_ignoreecho0>/proc/sys/net/ipv4/conf/all/arp_announce;;status)#StatusofLVS-DRrealserver.islothere=`/sbin/ifconfiglo:0|grep$VIP`isrothere=`netstat-rn|grep"lo:0"|grep$VIP`if[!"$islothere"-o!"isrothere"];then#Eithertherouteorthelo:0device#notfound.echo"LVS-DRrealserverStopped!"elseecho"LVS-DRrealserverRunning..."fi;;*)#Invalidentry.echo"$0:Usage:$0{start|status|stop}"exit1;;esac 2.增加web http服務(wù)，使用80端口可以打開(kāi)網(wǎng)站。?
?3.測(cè)試服務(wù)器相互之間是否可以PING通。?
?4.windows客戶端增加VIP事項(xiàng)（web3機(jī)器）：?
?win2003地址設(shè)置方法：控制面板->添加硬件->添加新的硬件->手動(dòng)安裝硬件-》網(wǎng)絡(luò)適配器?

?重命名為VIP,增加IP地址172.16.0.104，掩碼255.255.255.0?
?打開(kāi)regedit,編輯：subnetMask為255.255.255.255?
???HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces?
?

Win2008地址設(shè)置方法:控制面板-硬件和打印機(jī)->新增硬件?
找到新增的環(huán)回連接，重命名為VIP,?右鍵VIP連接屬性，開(kāi)始設(shè)置TCP/IP?
????172.16.0.104 255.255.255.255.255?保存?
????運(yùn)行CMD執(zhí)行：?
netshinterfaceipv4setinterface"VIP"weakhostreceive=enablednetshinterfaceipv4setinterface"VIP"weakhostsend=enablednetshinterfaceipv4setinterface"LAN"weakhostreceive=enablednetshinterfaceipv4setinterface"LAN"weakhostsend=enabled?

四、測(cè)試檢查keepalived+lvs問(wèn)題?
??
?1、 查看系統(tǒng)日志?/var/log/messages?
?2、 檢查負(fù)載均衡器的網(wǎng)絡(luò)連通狀況（ping命令或arping）。?
?3、 檢查?keepalived?的運(yùn)行情況。ps -aux | grep keepalived查看是否進(jìn)程啟動(dòng)。lsmod | grep ip_vs,檢查ipvs?模塊是否被加載到系統(tǒng)的內(nèi)核，vip?是否被綁定到網(wǎng)絡(luò)接口，ipvsadm?是否有輸出。?
?4、 檢查?keepalived?的配置文件書(shū)寫(xiě)是否正確。?
?5、 檢查負(fù)載均衡器是否啟用防火墻規(guī)則。?
?6、?realserver的web是否正常

了解更多網(wǎng)絡(luò)知識(shí)關(guān)注：http://www.vecloud.com/