网站安全维护包括什么上海推广有限公司
目录
一，作用
二，调度器配置
1，安装keepalived
2， 安装ipvsadm
3， 配置keepalived
4. 查看lvs节点状态
5， web节点配置
1.1 调整ARP参数
1.2 配置虚拟IP地址
1.3添加回环路由
1.4安装nginx并写入文件
1.5 网站查看
6，断掉主测试备
一，作用
使用keepalived解决lvs的单点故障
高可用集群
二，调度器配置
1，安装keepalived
yum install -y keepalived
2， 安装ipvsadm
yum install -y ipvsadm
modprobe ip_vs
lsmod |grep ip_vs
3， 配置keepalived
主
! Configuration File for keepalived
global_defs {
router_id LVS_DEVEL1
}
vrrp_instance VI_1 {
state MASTER
interface ens33
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.115.200
}
}
virtual_server 192.168.115.200 80 {
delay_loop 6
lb_algo rr
lb_kind DR
#persistence_timeout 50
protocol TCP
real_server 192.168.115.4 80 {
weight 1
HTTP_GET {
url {
path /
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.115.5 80 {
weight 1
HTTP_GET {
url {
path /
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
从
! Configuration File for keepalived
global_defs {
router_id LVS_DEVEL2
}
vrrp_instance VI_1 {
state BACKUP
interface ens33
virtual_router_id 51
priority 90
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.115.200
}
}
virtual_server 192.168.115.200 80 {
delay_loop 6
lb_algo rr
lb_kind DR
# persistence_timeout 50
protocol TCP
real_server 192.168.115.4 80 {
weight 1
HTTP_GET {
url {
path /
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.115.5 80 {
weight 1
HTTP_GET {
url {
path /
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
重启服务
4. 查看lvs节点状态
ipvsadm -ln
5， web节点配置
1.1 调整ARP参数
vim /etc/sysctl.conf
net.ipv4.conf.all.arp_ignore=1
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.default.arp_ignore=1
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.lo.arp_ignore = 1
net.ipv4.conf.lo.arp_announce=2
sysctl -p
1.2 配置虚拟IP地址
cd /etc/sysconfig/network-scripts/
cp ifcfg-lo ifcfg-lo:0
vim ifcfg-lo:0
1.3添加回环路由
route add -host 192.168.115.200/32 dev lo:0
1.4安装nginx并写入文件
1.5 网站查看
6，断掉主测试备
在备调度器上查看虚拟ip是否更改过来
