一、节点信息:
节点 | 主机IP | 备注 |
keepalived-1 | 192.168.100.1 |
MASTER节点 priority 200 auth_pass Keepalived123 |
keepalived-2 | 192.168.100.2 |
BACKUP节点 priority 150 auth_pass Keepalived123 |
keepalived-3 | 192.168.100.3 |
BACKUP节点 priority 100 auth_pass Keepalived123 |
二、配置注解:
注意:keepalived使用vrrp协议,虚拟ip、节点ip在通过一个网段讯通;
参考:keepalived基础知识详细完整总结_keepalived基线-CSDN博客
1、global_defs :全局逻辑组表示,三节点统一标识;
2、vrrp实例部分:
i.state:定义主备节点状态,主节点状态MASTER,备节点状态BACKUP;
ii.interface:定义vrrp协议通讯端口;
iii.virtual_router_id:按照业务端口,定义多个vrrp组,同一个id在一个组内,例如:主备节点统一101,为一组;
iv.priority:优先级越高越优先,Master节点优先级大于Backup节点值;
v.advert_int 1:检查备节点时间间隔
vi.mcast_src_ip:表示本端节点ip;
vii.nopreempt:BACKUP节点不主动抢占Master主节点状态,当MASTER节点出现异常,通过优先级选举MASTER;
3、authentication授权类型和密钥字段
i.auth_type认证方式:PASS或ha;
ii.auth_pass认证密钥:三节点密钥字段一样;
4、virtual_ipaddress:IPV4虚拟IP,三节点虚拟IP在同一个网段;
5、virtual_ipaddress_excluded:IPV6虚拟IP,三节点虚拟IP在同一个网段;
三、Master节点配置:
global_defs {
router_id LVS_k8s
}
vrrp_instance VI_1 {
state MASTER
interface bond0
virtual_router_id 101
priority 200
advert_int 1
mcast_src_ip 192.168.100.1
nopreempt
authentication {
auth_type PASS
auth_pass Keepalived123
}
unicast_peer {
192.168.100.2
192.168.100.3
}
virtual_ipaddress {
192.168.100.10
}
virtual_ipaddress_excluded {
2049:1111:1111:1111:1::370/128
}
}
vrrp_instance VI_2 {
state MASTER
interface bond1
virtual_router_id 101
priority 200
advert_int 1
mcast_src_ip 10.10.10.1
nopreempt
authentication {
auth_type PASS
auth_pass Keepalived123
}
unicast_peer {
10.10.10.2
10.10.10.3
}
virtual_ipaddress {
10.10.10.10
}
virtual_ipaddress_excluded {
2049:2222:2222:2222:2::370/128
}
}
四、BACKUP节点配置
global_defs {
router_id LVS_k8s
}
vrrp_instance VI_1 {
state BACKUP
interface bond0
virtual_router_id 101
priority 150
advert_int 1
mcast_src_ip 192.168.100.2
nopreempt
authentication {
auth_type PASS
auth_pass Keepalived123
}
unicast_peer {
192.168.100.1
192.168.100.3
}
virtual_ipaddress {
192.168.100.10
}
virtual_ipaddress_excluded {
2049:1111:1111:1111:1::370/128
}
}
vrrp_instance VI_2 {
state BACKUP
interface bond1
virtual_router_id 101
priority 150
advert_int 1
mcast_src_ip 10.10.10.2
nopreempt
authentication {
auth_type PASS
auth_pass Keepalived123
}
unicast_peer {
10.10.10.1
10.10.10.3
}
virtual_ipaddress {
10.10.10.10
}
virtual_ipaddress_excluded {
2049:2222:2222:2222:2::370/128
}
}