客户端 cli.noise.org : 10.0.0.7 - cli.noise.org
keepalived1 + nginx - 10.0.0.34 - ka1.noise.org
keepalived2 + ngixn - 10.0.0.22 - ka2.noise.org
后台web服务器1: 10.0.0.35 - rs1.noise.org
后台web服务器2: 10.0.0.36 - rs2.noise.org
==========================================================
ka1.noise.org - keepalived.conf global_defs { notification_email { root@localhost } notification_email_from Alexandre.Cassen@firewall.loc smtp_server 127.0.0.1 smtp_connect_timeout 30 router_id ka1.noise.org -》 唯一ID vrrp_mcast_group 224.0.100.100 -》 多播地址 } vrrp_script check_nginx { script "/data/check_nginx.sh" -》 检查脚本,nginx服务挂掉,自动重启 interval 1 weight -30 fall 3 rise 5 timeout 2 } vrrp_instance VI_1 { -》 集群VI_1, ka1为主节点 state MASTER -》 节点状态 interface eth0 virtual_router_id 66 -》 唯一集群ID #nopreempt priority 100 -》 节点优先级 advert_int 1 authentication { auth_type PASS auth_pass 123456 } virtual_ipaddress { 10.0.0.20/24 dev eth0 label eth0:1 -》 集群漂移VIP } track_interface { eth0 } track_script { check_nginx } } vrrp_instance VI_2 { -》 集群VI_2 state BACKUP -> 当前节点作为子节点 interface eth0 virtual_router_id 88 -》 唯一集群ID #nopreempt priority 80 -》 节点优先级 advert_int 1 authentication { auth_type PASS auth_pass 123456 } virtual_ipaddress { 10.0.0.30/24 dev eth0 label eth0:1 -》 集群VIP } track_interface { eth0 } track_script { check_nginx } }
===============================================
此为ka2.noise.org的配置,部分配置与ka1.noise.org相反
! Configuration File for keepalived global_defs { notification_email { root@localhost } notification_email_from Alexandre.Cassen@firewall.loc smtp_server 127.0.0.1 smtp_connect_timeout 30 router_id ka2.noise.org vrrp_mcast_group 224.0.100.100 } vrrp_script check_nginx { script "/data/check_nginx.sh" interval 1 weight -30 fall 3 rise 5 timeout 2 } vrrp_instance VI_1 { state BACKUP interface eth0 virtual_router_id 66 #nopreempt priority 80 advert_int 1 authentication { auth_type PASS auth_pass 123456 } virtual_ipaddress { 10.0.0.20/24 dev eth0 label eth0:1 } track_interface { eth0 } track_script { check_nginx } } vrrp_instance VI_2 { state MASTER interface eth0 virtual_router_id 88 #nopreempt priority 100 advert_int 1 authentication { auth_type PASS auth_pass 123456 } virtual_ipaddress { 10.0.0.30/24 dev eth0 label eth0:1 } track_interface { eth0 } track_script { check_nginx } }
===================================
两个ka节点nginx配置一样,负责反向代理
http { upstream websrvs { server 10.0.0.35:80 weight=1; server 10.0.0.36:80 weight=1; } server { listen 80; location / { proxy_pass http://websrvs/; } } }
==================================
[19:07:33 root@ka1 ~]#cat /data/check_nginx.sh #!/bin/bash # #************************************************************************************** #Author: Noise Lys #QQ: 578110218 #Date: 2021-08-29 #Filename: /data/check_nginx.sh #URL: https://www.cnblogs.com/noise/ #Description: The test script #Copyright (C): 2021 All rights reserved #************************************************************************************** /usr/bin/killall -0 nginx || systemctl restart nginx
=================================
开始检查结果,访问10.0.0.20即集群VI_1的VIP时,主节点ka1.noise.org工作,ka2.noise.org不工作
但是访问10.0.0.30即集群VI_2的VIP时,主节点ka2.noise.org工作,ka1.noise.org不工作
[19:00:48 root@cli ~]#curl 10.0.0.20 rs1.noise.org [19:00:49 root@cli ~]#curl 10.0.0.20 rs2.noise.org [19:00:49 root@cli ~]#curl 10.0.0.20 rs1.noise.org [19:00:49 root@cli ~]#curl 10.0.0.20 rs2.noise.org [19:00:50 root@cli ~]#curl 10.0.0.20 rs1.noise.org [19:00:50 root@cli ~]#curl 10.0.0.30 rs1.noise.org [19:00:52 root@cli ~]#curl 10.0.0.30 rs2.noise.org [19:00:53 root@cli ~]#curl 10.0.0.30 rs1.noise.org [19:00:53 root@cli ~]#curl 10.0.0.30 rs2.noise.org