keepalived实验图： 实验环境介绍：
操作系统：Centos7.2 VIP:192.168.233.100 VIP:192.168.233.100 RIP:192.168.233.131 RIP:192.168.233.132软件部署介绍：
lvs+keepalivd（1） （backup master）一、环境检查： 关闭系统防火墙
systemctl stop firewalld.service检查系统是否支持ip_vs
modprobe ip_vs 加载ip_vs模块 lsmod |grep ip_vs 查询模块二、配置keepalived
（1）安装keepalived，并配置lvs
yum install keepalived -y yum install ipvsadm -y（2）主配置文件路径
vim /etc/keepalived/keepalived.conf配置文件如下：
! Configuration File for keepalived global_defs { notification_email { root@localhost } notification_email_from admin@localhost smtp_server 127.0.0.1 smtp_connect_timeout 10 router_id 51 } vrrp_instance VI_1 { state BACKUP interface eno16777736 virtual_router_id 51 priority 90 advert_int 3 authentication { auth_type PASS auth_pass 123.com } virtual_ipaddress { 192.168.233.100 } } virtual_server 192.168.233.100 80 { delay_loop 3 lb_algo rr lb_kind DR nat_mask 255.255.255.0 persistence_timeout 300 protocol TCP real_server 192.168.233.131 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } real_server 192.168.233.132 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } } vrrp_instance VI_2 { state MASTER interface eno16777736 virtual_router_id 52 priority 100 advert_int 3 authentication { auth_type PASS auth_pass qq.com } virtual_ipaddress { 192.168.233.101 } } virtual_server 192.168.233.101 80 { delay_loop 3 lb_algo rr lb_kind DR nat_mask 255.255.255.0 persistence_timeout 300 protocol TCP real_server 192.168.233.131 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } real_server 192.168.233.132 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } }启动keepalived
systemctl start keepalived.service查看keepalived状态
systemctl status keepalived.service第二台lvs+keepalived部署，和第一台操作步骤一样，这里只介绍配置文件
lvs+keepalivd（2） （master backup）（1）配置文件：
vim /etc/keepalived/keepalived.conf ! Configuration File for keepalived global_defs { notification_email { root@localhost } notification_email_from admin@localhost smtp_server 127.0.0.1 smtp_connect_timeout 10 router_id LVS_DEVEL_R2 } vrrp_instance VI_1 { state MASTER interface eno16777736 virtual_router_id 51 priority 100 advert_int 3 authentication { auth_type PASS auth_pass 123.com } virtual_ipaddress { 192.168.233.100 } } virtual_server 192.168.233.100 80 { delay_loop 3 lb_algo rr lb_kind DR nat_mask 255.255.255.0 persistence_timeout 300 protocol TCP real_server 192.168.233.131 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } real_server 192.168.233.132 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } } vrrp_instance VI_2 { state BACKUP interface eno16777736 virtual_router_id 52 priority 90 advert_int 3 authentication { auth_type PASS auth_pass qq.com } virtual_ipaddress { 192.168.233.101 } } virtual_server 192.168.233.101 80 { delay_loop 3 lb_algo rr lb_kind DR nat_mask 255.255.255.0 persistence_timeout 300 protocol TCP real_server 192.168.233.131 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } real_server 192.168.233.132 80 { weight 1 HTTP_GET { url { path /var/www/lighttpd/index.html digest 389975d8d57ca94e672162998e06c017 } connect_timeout 3 nb_get_retry 3 delay_before_retry 3 } } }启动服务
systemctl start keepalived.service systemctl status keepalived.service部署web server1
1.安装依赖关系： yum -y install prce-devel zlib-devel openssl-devel 2.创建用户和组 useradd nginx usergroup nginx 3.解压包 用tar zxvf 将包解压到/usr/src目录下 cd /us/src/nginx目录下进行编译 ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-file-aio --with-http_stub_status_module --with-http_gzip_static_module --with-http_flv_modeule --with-http_ssl_module 配置参数详解： --with-http_stub_status_module 启用状态统计 --with-http_gzip_static_module 支持动态压缩 --with-file-aio 支持文件修改 --with-http_flv_modeule 时间的偏移量 make && makeinstall vim /usr/local/nginx/conf/nginx.conf 打开配置主文件 配置tomcat的代理服务 1.在server模块上边添加(意思就是用nginx代理tomcat的服务，访问nginx的地址的时候，访问的就是tomcat两个的页面) upstream tomcat_server { server 192.168.0.1:8080 weight="1"; server 192.168.0.2:8080 weight="1"; 2.在location{}界中，默认网页下面添加 proxy_pass http://tomcat_server; nginx -t (启动nginx) ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin编辑nginx配置文件
user nginx; worker_processes auto; #nginx进程数，按照cpu数目指定 worker_cpu_affinity 0001; #绑定cpu worker_priority -5; #work进程优先级 #error_log logs/error.log; error_log /var/log/nginx/webserver_error.log notice; #error_log logs/error.log info; daemon on; pid /var/log/nginx/nginx.pid; worker_rlimit_nofile 51200; #指定文件描述符数量 events { use epoll; #使用epoll的I/O模型 worker_connections 51200; accept_mutex on; } http { upstream webserv { #ip_hash; #server 59.46.10.114 weight=1; server 103.242.135.25 weight=1; } include mime.types; default_type application/octet-stream; log_format main '$request_time $remote_addr - $remote_user [$time_local]"$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"' '"$upstream_cache_status" "$sent_http_content_range"'; access_log /var/log/nginx/webserver_access.log main; fastcgi_cache_path /var/cache/nginx/fastcgi levels=1:2:2 keys_zone=fcgicache:1024m inactive=360d max_size=10g; proxy_cache_path /var/cache/nginx/proxy levels=1:2:2 keys_zone=proxycache:1024m inactive=360d max_size=10g; sendfile on; tcp_nopush on; server_tokens off; #keepalive_timeout 0; keepalive_timeout 60; client_header_buffer_size 4k; #客户端请求头部缓冲区大小 open_file_cache_valid 30s; open_file_cache_min_uses 1; open_file_cache max=102400 inactive=365 ; gzip on; gzip_types text/plain text/css text/javascript text/xml application/xml application/xhtml+xml application/xml+rss application/json; gzip_buffers 4 4k; gzip_comp_level 6; gzip_min_length 1024; server { listen 80; server_name 59.46.10.114; charset utf-8; access_log /var/log/nginx/webserver.log yangxu; root /var/www/lighttpd/; #limit_rate 20480; index index.php index.html index.htm; #if ($request_method = POST) { #return 405; #} location = /image { limit_rate 20480; #limit_conn_zone $binary_remote_addr zone=addr:10m; } location /status { stub_status; } location ~^/admin/ { auth_basic "Please input user and password"; auth_basic_user_file /usr/local/nginx/conf/.ngxpasswd; } location ~^/123/ { rewrite (.*)\.html$ $1.txt last; rewrite (.*)\.txt$ $1.doc redirect; } location ~ \.php$ { gzip on ; gzip_types text/plain text/css text/javascript text/xml application/xml application/xhtml+xml application/xml+rss application/json; gzip_buffers 4 4k; gzip_comp_level 4; gzip_min_length 1024; root /var/www/lighttpd/; fastcgi_cache fcgicache; fastcgi_cache_key $request_uri; fastcgi_cache_valid 200 302; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; proxy_set_header User-Agent wordpress; fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; include fastcgi.conf; # if ( $request_method = POST ) { # return 200 "welcome to yangxu web sites"; #} } location ~(.*)\.(jpg|png)$ { #gzip on ; proxy_pass http://127.0.0.1; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $host; proxy_set_header User-Agent wordpress; proxy_headers_hash_bucket_size 512; } #match health{ #status 200; #body ~"ok"; #} #location / { #health_check match=health interval=2 fails=3 uri=/.health.html; #proxy_pass http://webserv; #proxy_cache proxycache; #proxy_cache_key $request_uri; #proxy_cache_valid 302 200 10m; #proxy_cache_use_stale error; #proxy_connect_timeout 60s; #proxy_send_timeout 60s; #proxy_read_timeout 60s; #add_header X-cache $upstream_cache_status; #} #error_page 404 =200 http://59.46.10.114/wordpress; error_page 500 502 503 504 =200 /50x.html; location = /50x.html { root /var/www/lighttpd/50x.html; } } #server { # listen 443 ssl; # server_name localhost; # # ssl_certificate /usr/local/nginx/conf/ssl/nginx.crt; # ssl_certificate_key /usr/local/nginx/conf/ssl/nginx.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root /var/www/lighttpd; # index index.html index.htm; # } # } }修改主页面：
echo "RS1" >>/var/www/lighttpd/index.html启动服务
/etc/init.d/nginx start配置VIP，lo接口，这里我们用脚本实现：
#!/bin/bash SNS_VIP=192.168.233.100 SNS1_VIP=192.168.233.101 /etc/rc.d/init.d/functions case "$1" in start) ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP ifconfig lo:1 $SNS1_VIP netmask 255.255.255.255 broadcast $SNS1_VIP /sbin/route add -host $SNS_VIP dev lo:0 /sbin/route add -host $SNS1_VIP dev lo:1 echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce sysctl -p >/dev/null 2>&1 echo "RealServer Start OK" ;; stop) ifconfig lo:0 down ifconfig lo:1 down route del $SNS_VIP >/dev/null 2>&1 echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce echo "RealServer Stoped" ;; *) echo "Usage: $0 {start|stop}" exit esac exit 0 /etc/init.d/lvs startok，web server部署完成，下面我们进行测试
用curl命令测试2个VIP，进行调度后端服务器，真实环境中我们用DNS进行轮询调度VIP
查看调度结果：
