分布式web框架-負(fù)載均衡

1、分 布 式 WEB 框架負(fù)載均衡PART ONEPART TWOPART THREEPART FOUR目錄CONTENTS01020304PART ONE四層負(fù)載安裝PART TWO四層負(fù)載配置PART THREE七層負(fù)載安裝PART FOUR七層負(fù)載配置1PART ONE四層負(fù)載安裝普通版LVS安裝普通版LVS相對于Ali-LVS，不具備四層負(fù)載集群功能，在生產(chǎn)環(huán)境下，通常配合keepalived一起進(jìn)行主主或主備的方式提供服務(wù)，普通版本LVS由 發(fā)布、原生的LVS。一般情況下，普通版LVS在linux內(nèi)核2.6版本以上，不需要升級內(nèi)核版本，它已經(jīng)是系統(tǒng)的一部分。Ali-LVS安裝Ali-L

2、VS是普通版LVS的升級版，相對于普通版LVS主要增加LVS集群功能以及在原有三種工作模式（DR、NAT、TUN）新增了FULLNAT模式。以下所有的配置來源于lvs官網(wǎng)： 普通版LVS安裝安裝ipvsadmmodprobe -l |grep ipvs檢查kernel是否已經(jīng)支持LVS的ipvs模塊：kernel/net/netfilter/ipvs/ip_vs.kokernel/net/netfilter/ipvs/ip_vs_rr.kokernel/net/netfilter/ipvs/ip_vs_wrr.kokernel/net/netfilter/ipvs/ip_vs_lc.koker

3、nel/net/netfilter/ipvs/ip_vs_wlc.kokernel/net/netfilter/ipvs/ip_vs_lblc.kokernel/net/netfilter/ipvs/ip_vs_lblcr.kokernel/net/netfilter/ipvs/ip_vs_dh.kokernel/net/netfilter/ipvs/ip_vs_sh.kokernel/net/netfilter/ipvs/ip_vs_sed.kokernel/net/netfilter/ipvs/ip_vs_nq.kokernel/net/netfilter/ipvs/ip_vs_ftp.k

4、o如果有類似下面的輸出，表明系統(tǒng)內(nèi)核已經(jīng)默認(rèn)支持了IPVS模塊。接著就可以安裝IPVS管理軟件了。tar zxvf ipvsadm-1.26.tar.gzcd ipvsadm-1.26make &make install在Director Serve上安裝IPVS管理軟件(先保證keepalived已正常安裝)【方法1】ln -s /usr/src/kernels/2.6.9-42.EL-i686/ /usr/src/linux注意：在make時(shí)可能會(huì)出現(xiàn)錯(cuò)誤編譯信息，這是由于編譯程序找不到對應(yīng)內(nèi)核的原因，按照如下操作就可以正常編譯：yum install -y ipvsadm【方法2】ipv

5、sadm -help驗(yàn)證安裝成功tar xvf Lvs-fullnat-synproxy.tar.gzcd lvs-fullnat-synproxy/tar xvf lvs-tools.tar.gzcd tools/ipvsadm/make & make install如果看到幫助提示，表明IPVS已經(jīng)成功安裝。【方法3】普通版LVS安裝安裝keepalived服務(wù)器系統(tǒng)：Red Hat 6.1 64bitLinux local00 2.6.32-131.0.15.el6.x86_64 #1 SMP Tue May 10 15:42:40 EDT 2011 x86_64 x86_64 x86_

6、64 GNU/Linuxgcc工具：rpm -qa|grep -i gcc環(huán)境配置：gcc make openssl openssl-devel kernel-devel popt-dev【依賴環(huán)境】tar -zxvf keepalived-1.2.13.tar.gzcd keepalived-1.2.13./configure -prefix=/home/mysql/keepalivedmake & make install【安裝步驟】準(zhǔn)備安裝包keepalived-1.2.13.tar.gz方式一:Keepalived 下載 （wget ）./configure -prefix=/home

7、/mysql/keepalivedmake & make install方式二:在lvs-fullnat-synproxy/tools/keepalivedAli-LVS安裝升級內(nèi)核查看本地是否安裝ncurses，rpm -qa ncurses，若沒有安裝則執(zhí)行命令：yum install -y ncurses-develtar -zxvf Linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gzcd linux-2.6.32-220.23.1.el6.x86_64.lvs/make mrpropermake menuconfig選擇：“save an A

8、lternate Configuration file”“ok”“Exit”make -j16(請根據(jù)實(shí)際情況配置數(shù)值)make modules_installmake install修改文件/boot/grub/menu.lst，將default=0改為default=1記錄當(dāng)前內(nèi)核版本，uname -a重啟 reboot查看修改后的內(nèi)核版本，看是否變化成功DirectServer內(nèi)核版本升級tar -zxvf Linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz其他步驟參加上一章節(jié)。RealServer內(nèi)核版本升級tar -zxvf Lvs-full

9、nat-synproxy.tar.gzmkdir lvstoolscp lvs-fullnat-synproxy/lvs-tools.tar.gz lvstools/cd lvstools/tar -zxvf lvs-tools.tar.gzcd tools/LVS Tools (keepalived/ipvsadm/quaage)LVS配套工具有3類：keepalived：保證lvs主備、對lvs、vip進(jìn)行設(shè)置ipvsadm：directserver的命令行工具，一般情況下keepalived內(nèi)部自動(dòng)調(diào)用lvs命令，keepalived和ipvs命令行選擇其一即可，推薦使用keepaliv

10、ed。quaage：cd keepalived/yum install openssl-develyum install popt-devel./configure -with-kernel-dir=/lib/modules/uname -r/build -prefix=/usr/localmake & make installkeepalived install接上一章節(jié)：2PART TWO四層負(fù)載配置A服務(wù)等一系列高級配置SERVICE配置C負(fù)載均衡轉(zhuǎn)發(fā)模式及調(diào)度算法。轉(zhuǎn)發(fā)模式B普通版LVS和Ali-LVS都可以分手工配置和基于keepalived的配置，兩者選擇其一即可。下面大概說明手工

11、配置的主要步驟和keepalived配置文件主要配置項(xiàng)的說明。負(fù)載配置D主要對常用的部署模式做簡單的介紹，因LVS的模式和算法比較多，本章主要選取DR模式和RR算法作為舉例。部署模式SERVICE配置cd ./keepalivedcp /usr/local/sbin/keepalived /usr/bin/cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/cp /usr/local/etc/rc.d/init.d/keepalived /etc/init.d/ipvsadm installcd ./keepalived/keepaliv

12、ed/libipvs-2.6/makecd ./././ipvsadm/make & make install負(fù)載配置網(wǎng)絡(luò)及系統(tǒng)參數(shù)設(shè)置DS配置 首先在Director Server上綁定一個(gè)虛擬IP（也叫VIP），此IP用于對外提供服務(wù)。直接設(shè)置參考如下步驟，根據(jù)機(jī)器的實(shí)際，需要對參數(shù)做相應(yīng)的調(diào)整在出口網(wǎng)卡綁定了一個(gè)虛擬設(shè)備ethx:0；設(shè)置VIP： ifconfig ethx:0 VIP broadcast VIP netmask 55 up; 然后給虛擬設(shè)備ethx:0指定一條路由，執(zhí)行如下指令：route add -host VIP dev ethx:0Keepalived配置以主備的

13、方式說明keepalived的配置(/home/mysql/keepalived/etc/keepalived/keepalived.conf)：主節(jié)點(diǎn)配置如下：global_defs router_id LVSvrrp_instance VI_1 state MASTER #注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface bond0 #當(dāng)前服務(wù)器網(wǎng)卡virtual_router_id 51 #確保和server2相同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 pr

14、iority 100 #此處server2上設(shè)置為50advert_int 1 nopreempt #不搶占，只在priority高的server1上設(shè)置，server2上此項(xiàng)注釋掉authentication auth_type PASSauth_pass 1111virtual_ipaddress 00virtual_server 00 3306 delay_loop 2 #每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法lb_kind DR #LVS轉(zhuǎn)發(fā)模式persistence_timeout 60#會(huì)話保持時(shí)間protocol TCP real_serv

15、er 00 3306 weight 3 TCP_CHECK connect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)delay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口備節(jié)點(diǎn)配置如下：global_defs router_id LVSvrrp_instance VI_1 state BACKUP #注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface eth1virtual_router_

16、id 51 #確保和server2相同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 priority 50 #此處server2上設(shè)置為50advert_int 1 !nopreempt #不搶占，只在priority高的server1上設(shè)置，server2上此項(xiàng)注釋掉authentication auth_type PASSauth_pass 1111virtual_ipaddress 00virtual_server 00 3306 delay_loop 2 lb_algo wrrlb_kind DR persistence_timeout 60protocol TCP real_serve

17、r 01 3306 #server2上此處改為01(即server2本機(jī)ip)weight 3 notify_down /etc/keepalived/mysql.shTCP_CHECK connect_timeout 10nb_get_retry 3 delay_before_retry 3connect_port 3306檢查service keepalived start|reloadip addr|grep 00delay_loop 2#每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法,共八種lb_kind DR #LVS轉(zhuǎn)發(fā)模式，共四種：DR/NAT/T

18、UNNEL/FNATpersistence_timeout 60#會(huì)話保持時(shí)間protocol TCP 【關(guān)鍵參數(shù)詳解】virtual_server模塊weight 3 #權(quán)重TCP_CHECK #該模塊為健康檢查設(shè)置connect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)delay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口 real_server模塊RS配置回環(huán)設(shè)備上綁定了一個(gè)虛擬IP地址，ifconfig lo:0 00 netmask 55 up增加路由Director Server上的虛擬IP保持互通，

19、route add -host 00 dev lo:0禁止了本機(jī)的ARP請求。echo 1 /proc/sys/net/ipv4/conf/lo/arp_ignoreecho 2 /proc/sys/net/ipv4/conf/lo/arp_announceecho 1 /proc/sys/net/ipv4/conf/all/arp_ignoreecho 2 /proc/sys/net/ipv4/conf/all/arp_announcesysctl p以DR模式為例：【方法1】#!/bin/bash VIP=50 case $1 in start) ifconfig lo:0 $VIP ne

20、tmask 55 broadcast $VIP route add -host $VIP dev lo:0 echo 1 /proc/sys/net/ipv4/conf/lo/arp_ignore echo 2 /proc/sys/net/ipv4/conf/lo/arp_announce echo 1 /proc/sys/net/ipv4/conf/all/arp_ignore echo 2 /proc/sys/net/ipv4/conf/all/arp_announce sysctl -p /dev/null 2&1 echo RealServer Start OK ; stop) ifc

21、onfig lo:0 down route del $VIP /dev/null 2&1 echo 0 /proc/sys/net/ipv4/conf/lo/arp_ignore echo 0 /proc/sys/net/ipv4/conf/lo/arp_announce echo 0 /proc/sys/net/ipv4/conf/all/arp_ignore echo 0 /proc/sys/net/ipv4/conf/all/arp_announce echo RealServer Stoped ; *) echo Usage: $0 start|stop exit 1 esac exi

22、t 0【方法2】使用rs.sh腳本網(wǎng)絡(luò)參數(shù)調(diào)優(yōu)net.ipv4.ip_forward = 0net.ipv4.conf.default.rp_filter = 1net.ipv4.conf.default.accept_source_route = 0kernel.sysrq = 0kernel.core_uses_pid = 1net.ipv4.tcp_syncookies = 1net.bridge.bridge-nf-call-ip6tables = 0net.bridge.bridge-nf-call-iptables = 0net.bridge.bridge-nf-call-arpt

23、ables = 0kernel.msgmnb = 65536kernel.msgmax = 65536kernel.shmmax = 68719476736kernel.shmall = net.ipv4.tcp_syncookies = 1net.ipv4.tcp_tw_reuse = 1anet.ipv4.tcp_tw_recycle = 1net.ipv4.tcp_fin_timeout = 30net.ipv4.tcp_keepalive_time = 1200net.ipv4.tcp_max_syn_backlog = 50000net.ipv4.tcp_max_tw_buckets

24、 = 50000net.ipv4.ip_local_port_range = 10240 61000根據(jù)機(jī)器配置不同參數(shù)略有差別，參數(shù)示例：vi /etc/sysctl.conf轉(zhuǎn)發(fā)模式DR模式DS配置直接設(shè)置【DirectServer配置】 配置VIPifconfig eth0:0 VIP broadcast VIP netmask 55 up注：eth0:0可根據(jù)實(shí)際出口網(wǎng)卡的名稱設(shè)置 配置DirectorServer網(wǎng)卡參數(shù)echo 1 /proc/sys/net/ipv4/ip_forward注：當(dāng)系統(tǒng)有多網(wǎng)卡，并有網(wǎng)卡1轉(zhuǎn)網(wǎng)卡2，實(shí)現(xiàn)網(wǎng)卡數(shù)據(jù)轉(zhuǎn)發(fā)時(shí)，開啟此參數(shù)，否則，無需開啟。配置轉(zhuǎn)

25、發(fā)規(guī)則ipvsadm -a -t $VIP:$RPORT -r $RIP1:$RPORT -g-a：新增一條轉(zhuǎn)發(fā)規(guī)則-t：基于TCP協(xié)議-r：RR算法-g：DR模式（直接路由模式）參數(shù)說明：Keepalived配置global_defs router_id LVSvrrp_instance VI_1 state MASTER #注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface etho #當(dāng)前服務(wù)器網(wǎng)卡virtual_router_id 51 #確保和server2相

26、同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 priority 100 #此處server2上設(shè)置為50advert_int 1 nopreempt #不搶占，只在priority高的server1上設(shè)置，server2上此項(xiàng)注釋掉authentication auth_type PASSauth_pass 1111virtual_ipaddress 00 #VIPvirtual_server 00 3306 #轉(zhuǎn)發(fā)規(guī)則delay_loop 2 #每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法lb_kind DR #LVS轉(zhuǎn)發(fā)模式persistence_time

27、out 60#會(huì)話保持時(shí)間protocol TCP #轉(zhuǎn)發(fā)協(xié)議類型，有tcp和udp兩種real_server 00 3306 weight 3 TCP_CHECK #TCP_CHECK和UDP_CHECKconnect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)delay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口【Keepalived對應(yīng)配置】RS配置echo 1 /proc/sys/net/ipv4/conf/lo/arp_ignoreecho 2 /proc/sys/net/ipv4/conf/lo/arp

28、_announceecho 1 /proc/sys/net/ipv4/conf/all/arp_ignoreecho 2 /proc/sys/net/ipv4/conf/all/arp_announceifconfiglo:0VIP netmask55uprouteadd-host1VIPdevlo:0【RealServer配置】 配置DirectorServer網(wǎng)卡參數(shù) 配置回環(huán)地址轉(zhuǎn)發(fā)模式FULLNAT模式DS配置【安裝系統(tǒng)和工具】# 參見lvs-fullnat-synproxy.tar中的README，包括 LVS kernel和keepalived等的編譯方法；【內(nèi)核啟動(dòng)參數(shù)】在ker

29、nel一行中，添加“nohz=off ”注：如果不關(guān)閉nohz，大壓力下CPU0可能會(huì)消耗過高，壓力不均勻；【Sysctl配置】路徑：/etc/sysctl.conf# configure for lvs dev_max_backlog = 500000路徑：/etc/rc.local關(guān)閉網(wǎng)卡LRO和GRO# ethtool -K eth0 gro off# ethtool -K eth0 lro off【配置網(wǎng)卡參數(shù)】路徑：/etc/rc.local關(guān)閉irqbalance# service irqbalance stop# chkconfig -level 2345 irqbalance

30、off【關(guān)閉系統(tǒng)參數(shù)】路徑：/etc/rc.localLocal address綁定到內(nèi)網(wǎng)(下聯(lián))網(wǎng)卡上ip addr add /32 dev eth1ip addr add /32 dev eth1ip addr add /32 dev eth1ip addr add /32 dev eth1ip addr add /32 dev eth1此步驟不配置，默認(rèn)使用本機(jī)IP?！綥ocalAddress配置】啟動(dòng)：service keepalived start更新：service keepalived reload停止：service keepalived stop【Keepalived.con

31、f】Keepalived的配置包含2個(gè)文件：說明：一個(gè)集群內(nèi)的所有LVS配置文件基本相同，區(qū)別的地方見紅色區(qū)域主配置文件keepalived.conf路徑：/etc/keepalived/keepalived.conf! Configuration File for keepalivedglobal_defs # notification_email # # # notification_email_from # smtp_server # smtp_connect_timeout 40local_address_group laddr_g1 ! include virtual server

32、configure fileinclude server.conf業(yè)務(wù)配置文件 “業(yè)務(wù)名.conf”路徑：/etc/keepalived/ server.confvirtual_server_group server 80 /vip1 80 /vip2vrrp_instance VI_1 state MASTER/BACKUP interface eth0 virtual_router_id 200 priority 150/90 advert_int 1 authentication auth_type PASS auth_pass 123456 virtual_ipaddress /* h

33、ealthcheck for L7 */ real_server 80 weight 100 inhibit_on_failure HTTP_GET url path /index.html status_code 200 connect_timeout 3 nb_get_retry 2 delay_before_retry 5 virtual_server group server delay_loop 7lb_algo rrlb_kind FNATprotocol TCPsyn_proxyladdr_group_name laddr_g1?/* healthcheck for L4 */r

34、eal_server 80 weight 100inhibit_on_failure TCP_CHECK connect_timeout 5 【綁定網(wǎng)卡中斷】# set_irq_affinity eth0 #腳本參見附錄,該腳本是ixgbe/igb driver網(wǎng)卡RS配置命令：# modprobe toa# vim /etc/rc.local添加 modproble toa【安裝系統(tǒng)】# 參見lvs-fullnat-synproxy.tar中的README,其中有TOA(RS內(nèi)核)的patch；【加載TOA模塊】轉(zhuǎn)發(fā)模式NAT模式直接設(shè)置ifconfig eth0:0 VIP broadca

35、st VIP netmask 55 up注：eth0:0可根據(jù)實(shí)際出口網(wǎng)卡的名稱設(shè)置echo 1 /proc/sys/net/ipv4/ip_forward注：當(dāng)系統(tǒng)有多網(wǎng)卡，并有網(wǎng)卡1轉(zhuǎn)網(wǎng)卡2，實(shí)現(xiàn)網(wǎng)卡數(shù)據(jù)轉(zhuǎn)發(fā)時(shí)，開啟此參數(shù)，否則，無需開啟。ipvsadm -a -t $VIP:$RPORT -r $RIP1:$RPORT -m參數(shù)說明：-a：新增一條轉(zhuǎn)發(fā)規(guī)則-t：基于TCP協(xié)議-r：RR算法-m：NAT模式（直接路由模式）【DirectServer配置】 配置VIP 配置轉(zhuǎn)發(fā)規(guī)則 配置DirectorServer網(wǎng)卡參數(shù)global_defs router_id LVSvrrp_insta

36、nce VI_1 state MASTER #注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface etho #當(dāng)前服務(wù)器網(wǎng)卡virtual_router_id 51 #確保和server2相同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 priority 100 #此處server2上設(shè)置為50advert_int 1 nopreempt #不搶占，只在priority高的server1上設(shè)置，server2上此項(xiàng)注釋掉authentication auth_type P

37、ASSauth_pass 1111virtual_ipaddress 00virtual_server 00 3306 delay_loop 2 #每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法lb_kind NAT #LVS轉(zhuǎn)發(fā)模式persistence_timeout 60#會(huì)話保持時(shí)間protocol TCP #轉(zhuǎn)發(fā)協(xié)議類型，有tcp和udp兩種real_server 00 3306 weight 3 TCP_CHECK #TCP_CHECK和UDP_CHECKconnect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)del

38、ay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口Keepalived配置【Keepalived對應(yīng)配置】部署模式主備模式主備模式的情況下，只需要一個(gè)對外的VIP即可，使用Keepalived作為高可用工具，LVS的安裝可以參考上面的章節(jié)，下面對配置的過程和算法梳理一下。1、安裝LVS2、在主備機(jī)安裝Keepalived3、配置Keepalived4、啟動(dòng)global_defs router_id LVSvrrp_instance VI_1 state MASTER #注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為

39、從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface etho #當(dāng)前服務(wù)器網(wǎng)卡virtual_router_id 51 #確保和server2相同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 priority 100 #此處備節(jié)點(diǎn)上設(shè)置為50advert_int 1 nopreempt #不搶占，只在priority高的server1上設(shè)置，server2上此項(xiàng)注釋掉authentication auth_type PASSauth_pass 1111virtual_ipaddress 23 #VIP地址virtual_server 23 3306

40、#對于lvs的轉(zhuǎn)發(fā)規(guī)則delay_loop 2 #每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法lb_kind DR #LVS轉(zhuǎn)發(fā)模式persistence_timeout 60#會(huì)話保持時(shí)間protocol TCP #轉(zhuǎn)發(fā)協(xié)議類型，有tcp和udp兩種real_server 8 3306 weight 3 TCP_CHECK #TCP_CHECK和UDP_CHECKconnect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)delay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口，對于

41、轉(zhuǎn)發(fā)規(guī)則端口【Keepalived配置參考】主節(jié)點(diǎn)：global_defs router_id LVSvrrp_instance VI_1 state BACKUP#注: BACKUP將根據(jù)優(yōu)先級決定主或從;MASTER指定為主;SLAVE指定為從.若一方為MASTER,另一方為SLAVE,則表示雙機(jī)熱備(即一主一從）. interface etho #當(dāng)前服務(wù)器網(wǎng)卡virtual_router_id 51 #確保和主節(jié)點(diǎn)相同，同網(wǎng)內(nèi)不同集群此項(xiàng)必須不同,否則發(fā)生沖突 priority 50 #此處備節(jié)點(diǎn)上設(shè)置為50advert_int 1 #nopreempt #不搶占，只在priority

42、高的節(jié)點(diǎn)上設(shè)置，備節(jié)點(diǎn)上此項(xiàng)注釋掉authentication auth_type PASSauth_pass 1111virtual_ipaddress 23#VIP地址virtual_server 23 3306 #對于lvs的轉(zhuǎn)發(fā)規(guī)則delay_loop 2 #每個(gè)2秒檢查一次real_server狀態(tài) lb_algo wrr#LVS算法lb_kind DR #LVS轉(zhuǎn)發(fā)模式persistence_timeout 60#會(huì)話保持時(shí)間protocol TCP #轉(zhuǎn)發(fā)協(xié)議類型，有tcp和udp兩種real_server 8 3306 weight 3 TCP_CHECK #TCP_CHECK

43、和UDP_CHECKconnect_timeout 10#連接超時(shí)時(shí)間nb_get_retry 3 #重連次數(shù)delay_before_retry 3#重連間隔時(shí)間connect_port 3306#健康檢查端口，對于轉(zhuǎn)發(fā)規(guī)則端口備節(jié)點(diǎn)：部署模式主主模式主主模式的情況下，需要兩個(gè)對外的VIP即可，每臺DS都有1個(gè)主VIP和一個(gè)備VIP，使用Keepalived作為高可用工具，LVS的安裝可以參考上面的章節(jié)，下面對配置的過程和算法梳理一下。1、安裝LVS2、在主備機(jī)安裝Keepalived3、配置Keepalived4、啟動(dòng)#123 is mastervrrp_instance VI_1 sta

44、te MASTER #更改這個(gè)配置backup or master interface bond0 virtual_router_id 51 #注意這個(gè)ID與上一組的ID不同 priority 100 #更改這個(gè)配置100 or 50 advert_int 1 nopreempt authentication auth_type PASS auth_pass 1111 virtual_ipaddress 23 virtual_server 23 9090 delay_loop 6 lb_algo wrr lb_kind DR persistence_timeout 60 protocol TC

45、P real_server 8 9090 notify_down /etc/keepalived/down.sh weight 1 TCP_CHECK connect_timeout 10 nb_get_retry delay_before_retry connect_port 9090 real_server 9 9090 notify_down /etc/keepalived/down.sh weight 1 TCP_CHECK connect_timeout 10nb_get_retry 3delay_before_retry 3connect_port 9090 global_defs

46、 router_id CTG-HAvrrp_sync_group VGM1 group VI_1 vrrp_sync_group VGM2 group VI_2 #124 is slavevrrp_instance VI_2 state BACKUP #更改這個(gè)配置backup or master interface bond0 virtual_router_id 52 #注意這個(gè)ID與上一組的ID不同 priority 50 #更改這個(gè)配置100 or 50 advert_int 1 nopreempt authentication auth_type PASS auth_pass 1111

47、 virtual_ipaddress 24 virtual_server 24 9090 delay_loop 6 lb_algo wrr lb_kind DR persistence_timeout 60 protocol TCP real_server 8 9090 notify_down /etc/keepalived/down.sh weight 1 TCP_CHECK connect_timeout 10 nb_get_retry 3 delay_before_retry 3 connect_port 9090 real_server 9 9090 notify_down /etc/

48、keepalived/down.sh weight 1 TCP_CHECK connect_timeout 10nb_get_retry 3 delay_before_retry 3connect_port 9090 global_defs router_id CTG-HAvrrp_sync_group VGM1 group VI_1 vrrp_sync_group VGM2 group VI_2 #123 is slavevrrp_instance VI_1 state BACKUP #更改這個(gè)配置backup or master interface bond0 virtual_router

49、_id 51 #注意這個(gè)ID與上一組的ID不同 priority 50 #更改這個(gè)配置100 or 50 advert_int 1 nopreempt authentication auth_type PASS auth_pass 1111 virtual_ipaddress 23 virtual_server 23 9090 delay_loop 6 lb_algo wrr lb_kind DR persistence_timeout 60 protocol TCP real_server 8 9090 notify_down /etc/keepalived/down.sh weight 1

50、 TCP_CHECK connect_timeout 10 nb_get_retry delay_before_retry connect_port 9090 real_server 9 9090 notify_down /etc/keepalived/down.sh weight 1 TCP_CHECK connect_timeout 10nb_get_retry 3delay_before_retry 3connect_port 9090 主節(jié)點(diǎn)2：#124 is mastervrrp_instance VI_2 state MASTER #更改這個(gè)配置backup or master interface bond0 virtual_router_id 52 #注意這個(gè)ID與上一組的ID不同 priority 100 #更改這個(gè)配置100 or 50 advert_i