建站
咨詢
售后
建站咨詢
新聞中心
[root@nagios ~]# ln -s /usr/src/kernels/2.6.18-308.13.1.el5-x86_64/ /usr/src/linux
成都創(chuàng)新互聯(lián)公司服務項目包括陸豐網(wǎng)站建設、陸豐網(wǎng)站制作、陸豐網(wǎng)頁制作以及陸豐網(wǎng)絡營銷策劃等。多年來，我們專注于互聯(lián)網(wǎng)行業(yè)，利用自身積累的技術優(yōu)勢、行業(yè)經(jīng)驗、深度合作伙伴關系等，向廣大中小型企業(yè)、政府機構等提供互聯(lián)網(wǎng)行業(yè)的解決方案，陸豐網(wǎng)站推廣取得了明顯的社會效益與經(jīng)濟效益。目前，我們服務的客戶以成都為中心已經(jīng)輻射到陸豐省份的部分城市，未來相信會繼續(xù)擴大服務區(qū)域并繼續(xù)獲得客戶的支持與信任！
[root@nagios ~]# yum install ipvsadm
[root@nagios ~]# tar -zxvf keepalived-1.2.7.tar.gz -C /usr/local
[root@nagios ~]# cd keepalived-1.2.7/
[root@nagios ~]# ./configure
[root@nagios ~]# make && make install
[root@nagios ~]# cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/
[root@nagios ~]# cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/
[root@nagios ~]# mkdir /etc/keepalived
[root@nagios ~]# cp /usr/local/etc/keepalived/keepalived.conf /etc/keepalived/
[root@nagios ~]# cp /usr/local/sbin/keepalived /usr/sbin/
[root@nagios ~]# service keepalived start
[root@nagios ~]# vim /etc/keepalived/keepalived.conf
修改配置文件內容如下
! Configuration File for keepalived
global_defs {
notification_email {
yhl5555@126.com
}
notification_email_from yhl5555@126.com
smtp_server 127.0.0.1
# smtp_connect_timeout 30
router_id LVS_DEVEL
}
# VIP1
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 50
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.16.1.160
}
}
virtual_server fwmark 1 {
delay_loop 6
lb_algo wrr
lb_kind DR
# persistence_timeout 60
protocol TCP
real_server 172.16.1.171 80 {
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
}
virtual_server fwmark 2 {
delay_loop 6
lb_algo wrr
lb_kind DR
# persistence_timeout 60
protocol TCP
real_server 172.16.1.172 80 {
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
}
在lvs調度器上面操作
注意：mangle表的匹配順序是從下到上
[root@nagios ~]# iptables -t mangle -I PREROUTING -s 172.16.0.68 -p tcp -d 172.16.1.160 --dport 80 -j MARK --set-mark 1
[root@nagios ~]# iptables -t mangle -I PREROUTING -s 172.16.1.173 -p tcp -d 172.16.1.160 --dport 80 -j MARK --set-mark 2
分別在兩臺web服務器上執(zhí)行realserver.sh綁定虛擬ip，腳本內容如下
#!/bin/bash
SNS_VIP=172.16.1.160
. /etc/rc.d/init.d/functions
case "$1" in
start)
ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
/sbin/route add -host $SNS_VIP dev lo:0
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -p >/dev/null 2>&1
echo "RealServer Start OK"
;;
stop)
ifconfig lo:0 down
route del $SNS_VIP >/dev/null 2>&1
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
echo "RealServer Stoped"
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac
exit 0
測試效果
1、當來源ip為172.16.0.68的主機訪問目標地址172.16.1.160的80端口時，轉向了keepalived定義的fwmark 1規(guī)則
2、當來源ip為172.16.1.173的主機訪問目標地址172.16.1.160的80端口時，轉向了keepalived定義的fwmark 1規(guī)則
網(wǎng)站題目：lvs+frmark
當前URL：http://www.dlmjj.cn/article/jhsdig.html
