keepalived-单主机模式

keepalived-单主机模式:

  说明:仅演示VIP地址流动

  工作模式:主备模式-单虚拟路由

拓扑:

 

 

 环境说明:

1、ka1和ka2分别是2台keepalived服务器

2、配置一个单主虚拟路由器,实现一个vrrp实例

 

示例:单主机模式实现VIP地址流动

1、ka1 keepalived配置:

[root@lvs-ka1 keepalived]# yum install -y keepalived             #centos6.4 + base源
[root@lvs-ka1 keepalived]# cat /etc/keepalived/keepalived.conf 
[root@lvs-ka1 keepalived]# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   notification_email {
   root@lvs.localdomain                                          #可以配置收件人邮箱,需要额外邮箱配置
   }
   notification_email_from keepaliced@lvs.localdomain            #发件人
   smtp_server 127.0.0.1                                         #依赖本机的postfix提供的邮箱服务
   smtp_connect_timeout 30                                       #服务器连接超时时间
   router_id ka1                                                 #本地主机名标识
   vrrp_mcast_group4 224.100.100.100                             #ipv4组播地址,宣告优先级

vrrp_instance VI_1 {                                             #虚拟路由器实例
    state MASTER                                                 #主
    interface ens33                                              #绑定为当前虚拟路由使用的物理接口
    virtual_router_id 66                                         #当前虚拟路由器唯一标识:0-255
    priority 100                                                 #作为master的优先级
    advert_int 1                                                 #vrrp通告的时间间隔,1s
    authentication {                                             #同一个虚拟路由器成员间的认证
        auth_type PASS
        auth_pass 123456
    }
    virtual_ipaddress {                                          #VIP设置
        172.16.0.100/24 dev ens33 label ens33:1                  #VIP绑定接口
    }
}
[root@lvs-ka1 ~]# cat /etc/hosts
10.0.0.125 ka1
10.0.0.126 ka2
[root@lvs-ka1 ~]# ssh-keygen
[root@lvs-ka1 ~]# ssh-copy-id 10.0.0.126

 

2、ka2 keepalived配置:

[root@lvs-ka1 keepalived]# yum install -y keepalived             #centos6.4 + base源
[root@lvs-ka1 keepalived]# cat /etc/keepalived/keepalived.conf 
[root@lvs-ka1 keepalived]# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   notification_email {
   root@lvs.localdomain                                          #可以配置收件人邮箱,需要额外邮箱配置
   }
   notification_email_from keepaliced@lvs.localdomain            #发件人
   smtp_server 127.0.0.1                                         #依赖本机的postfix提供的邮箱服务
   smtp_connect_timeout 30                                       #服务器连接超时时间
   router_id ka1                                                 #本地主机名标识
   vrrp_mcast_group4 224.100.100.100                             #ipv4组播地址,宣告优先级

vrrp_instance VI_1 {                                             #虚拟路由器实例
    state BACKUP                                                 #从
interface ens33 #绑定为当前虚拟路由使用的物理接口 virtual_router_id
66 #当前虚拟路由器唯一标识:0-255 priority 80 #作为backup优先级 advert_int 1 #vrrp通告的时间间隔,1s authentication { #同一个虚拟路由器成员间的认证 auth_type PASS auth_pass 123456 } virtual_ipaddress { #VIP设置 172.16.0.100/24 dev ens33 label ens33:1 #VIP绑定接口 } } [root@lvs-ka1 ~]# cat /etc/hosts 10.0.0.125 ka1 10.0.0.126 ka2 [root@lvs-ka1 ~]# ssh-keygen [root@lvs-ka1 ~]# ssh-copy-id 10.0.0.125

 

3、验证:观察VIP的漂移

先启动ka2 keepalived服务:

     ka2是BACKUP角色,此时VIP绑定在ka2的ens33端口

[root@lvs-ka2 keepalived]# systemctl start keepalived
[root@lvs-ka2 keepalived]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:50:56:34:07:10 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.126/24 brd 10.0.0.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet 172.16.0.100/24 scope global ens33:1
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fe34:710/64 scope link 
       valid_lft forever preferred_lft forever

[root@lvs-ka2 keepalived]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.0.0.122      0.0.0.0         UG    100    0        0 ens33
10.0.0.0        0.0.0.0         255.255.255.0   U     100    0        0 ens33
172.16.0.0      0.0.0.0         255.255.255.0   U     0      0        0 ens33

[root@rs2 ~]# tcpdump -i ens33 -nn host 224.100.100.100                            #vrrp宣告
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens33, link-type EN10MB (Ethernet), capture size 262144 bytes
21:24:04.205830 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:24:05.210191 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:24:06.211423 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:24:07.215022 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20

再启动ka1 keepalived服务:

  ka1是MASTER角色,默认抢占式,优先级比BACKUP角色高,VIP飘逸到ka1的ens33端口

[root@lvs-ka1 keepalived]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:50:56:31:8a:01 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.125/24 brd 10.0.0.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet 172.16.0.100/24 scope global ens33:1
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fe31:8a01/64 scope link 
       valid_lft forever preferred_lft forever

[root@lvs-ka1 keepalived]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.0.0.122      0.0.0.0         UG    100    0        0 ens33
10.0.0.0        0.0.0.0         255.255.255.0   U     100    0        0 ens33
172.16.0.0      0.0.0.0         255.255.255.0   U     0      0        0 ens33
[root@rs2 ~]# tcpdump -i ens33 -nn host 224.100.100.100                            #vrrp宣告
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens33, link-type EN10MB (Ethernet), capture size 262144 bytes
21:27:51.604517 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:27:52.607219 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:27:53.608804 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:27:54.609974 IP 10.0.0.126 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 90, authtype simple, intvl 1s, length 20
21:27:54.610469 IP 10.0.0.125 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 100, authtype simple, intvl 1s, length 20
21:27:55.620706 IP 10.0.0.125 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 100, authtype simple, intvl 1s, length 20
21:27:56.632074 IP 10.0.0.125 > 224.100.100.100: VRRPv2, Advertisement, vrid 66, prio 100, authtype simple, intvl 1s, length 20
[root@lvs-ka2 keepalived]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:50:56:34:07:10 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.126/24 brd 10.0.0.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fe34:710/64 scope link 
       valid_lft forever preferred_lft forever

 

posted @ 2024-08-29 08:46  起点·漫步前行  阅读(44)  评论(0)    收藏  举报