配置
| 机器 | IP | 机器名称 | 网卡名称 |
| centos7.8 | 192.168.137.15 | lvs-2 | enp0s3 |
| centos7.8 | 192.168.137.16 | lvs-1 | enp0s3 |
步骤1:
分别在二台机器上安装如下软件
# yum -y install kernel-devel openssl-devel popt-devel ipvsadm keepalived
安装成功
步骤二:
在二台机器上确认能够加载 ip-vs模块
# modprobe ip_vs
没提示表示成功,如果系统没安装就比较麻烦了,理论上目前这个是默认模块放在linux内核里面了。
步骤三:
修改系统内核参数
[root@localhost ~]vi /etc/sysctl.conf
#把以下三行写入尾部
#net.ipv4.conf.all.send_redirects = 0
#net.ipv4.conf.default.send_redirects = 0
#net.ipv4.conf.enp0s3.send_redirects = 0
[root@localhost ~]# sysctl -p
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.enp0s3.send_redirects = 0
[root@localhost ~]#
步骤四:
设置keepalived 开启启动。
[root@localhost ~]# systemctl enable keepalived
Created symlink from /etc/systemd/system/multi-user.target.wants/keepalived.service to /usr/lib/systemd/system/keepalived.service.
步骤四:
配置主调度器
复制如下内容 到vs-1上/etc/keepalived/keepalived.conf。
另外将如下内容,将 priority 120 改成 priority 100 到vs-2上/etc/keepalived/keepalived.conf。
global_defs {notification_email {acassen@firewall.locfailover@firewall.locsysadmin@firewall.loc}notification_email_from Alexandre.Cassen@firewall.locsmtp_server 192.168.200.1smtp_connect_timeout 30router_id LVS_DEVELvrrp_skip_check_adv_addrvrrp_strictvrrp_garp_interval 0vrrp_gna_interval 0
}vrrp_instance VI_1 {state BACKUPinterface enp0s3virtual_router_id 51
mcast_src_ip 192.168.137.16priority 120advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.139.111}
}
二台重启服务
systemctl restart keepalived
通过观察lvs-1,看到虚拟网址 111已经绑定好了。
[root@localhost ~]# ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope host valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000link/ether 08:00:27:af:29:70 brd ff:ff:ff:ff:ff:ffinet 192.168.137.16/24 brd 192.168.137.255 scope global noprefixroute enp0s3valid_lft forever preferred_lft foreverinet 192.168.137.111/32 scope global enp0s3valid_lft forever preferred_lft foreverinet6 fe80::be0a:e8f2:197e:be87/64 scope link noprefixroute valid_lft forever preferred_lft forever