docker2-主控节点proxy L4反代

两台安装nginx
yum install nginx -y
配置nginx配置
vim /etc/nginx/nginx.conf
stream {
upstream kube-apiserver {
server 192.168.17.53:6443 max_fails=3 fail_timeout=30s;
server 192.168.17.54:6443 max_fails=3 fail_timeout=30s;
}
server {
listen 7443;
proxy_connect_timeout 2s;
proxy_timeout 900s;
proxy_pass kube-apiserver;
}
}
启动nginx
nginx -t
systemctl start nginx
systemctl enable nginx
安装keepalive
yum install keepalived -y
vim /etc/keepalived/check_port.sh 两台都要创建监听脚本
#!/bin/bash
CHK_PORT=$1
if [ -n "$CHK_PORT" ];then
PORT_PROCESS=`ss -lnt|grep $CHK_PORT|wc -l`
if [ $PORT_PROCESS -eq 0 ];then
echo "Port $CHK_PORT Is Not Used,End."
exit 1
fi
else
echo "Check Port Cant Be Empty!"
fi
chmod +x /etc/keepalived/check_port.sh
配置keepalive主
vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
router_id 192.168.17.51

}

vrrp_script chk_nginx {
script "/etc/keepalived/check_port.sh 7443"
interval 2
weight -20
}

vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 251
priority 100
advert_int 1
mcast_src_ip 192.168.17.51
nopreempt

authentication {
auth_type PASS
auth_pass 11111111
}
track_script {
chk_nginx
}
virtual_ipaddress {
192.168.17.50
}
}
配置keepalive从
vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
router_id 192.168.17.52

}

vrrp_script chk_nginx {
script "/etc/keepalived/check_port.sh 7443"
interval 2
weight -20
}

vrrp_instance VI_1 {
state BACKUP
interface eth0
virtual_router_id 251
priority 90
advert_int 1
mcast_src_ip 192.168.17.52

authentication {
auth_type PASS
auth_pass 11111111
}
track_script {
chk_nginx
}
virtual_ipaddress {
192.168.17.50
}
}
启动keepalive
systemctl start keepalived
systemctl enable keepalived