首页 > 系统相关 >keepalived实现nginx高可用

keepalived实现nginx高可用

时间：2022-10-29 17:48:41浏览次数：50  
标签：10.0 00 可用 keepalived nginx test keepalive1 root

1、环境准备

 
IP 主机名 服务
10.0.0.101 keepalive1 keepalived+nginx
10.0.0.102 keepalive2 keepalived+nginx
10.0.0.18 web01 nginx作为后端web服务
10.0.0.28 web02 nginx作为后端web服务
10.0.0.100 rocky8 客户端用来测试连接
 

 

2、后端服务器准备

#使用脚本安装nginx（略），并写一个测试页面
[root@web2 ~]#echo "Welcome to `hostname -I` test page" > /apps/nginx/html/index.html

#验证测试

[root@keepalive1 ~]#curl 10.0.0.18
Welcome to 10.0.0.18 test page
[root@keepalive1 ~]#curl 10.0.0.28
Welcome to 10.0.0.28 test page

3、实现keepalived高可用

两台keepalived服务器都需要安装nginx和keepalived服务，keepalived集群实现高可用的时候是有两种模式的，可以采用主从架构和主主架构这两种默认。在这里我们就分别演示一下。

 3.1、主从架构

3.1.1、安装nginx服务并配置

[root@keepalive1 ~]#vim /apps/nginx/conf/conf.d/ka_web.conf
#写入下面配置信息
upstream ka_web {
        server 10.0.0.18:80 weight=2 max_fails=3 fail_timeout=30s;
        server 10.0.0.28:80 weight=1 max_fails=3 fail_timeout=30s;
    }
    server {
        listen       80;
        server_name  www.katext.com;
        root /apps/nginx/html;
        location / {
            proxy_pass http://ka_web;
        }
　　}

[root@keepalive1 ~]#nginx -t
nginx: [warn] conflicting server name "localhost" on 0.0.0.0:80, ignored
nginx: the configuration file /apps/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /apps/nginx/conf/nginx.conf test is successful
[root@keepalive1 ~]#nginx -s reload

#keepalive2节点同样操作
#访问测试

[root@keepalive1 nginx]#curl 10.0.0.101
Welcome to 10.0.0.18 test page
[root@keepalive1 nginx]#curl 10.0.0.101
Welcome to 10.0.0.28 test page
[root@keepalive1 nginx]#curl 10.0.0.101
Welcome to 10.0.0.18 test page
[root@keepalive1 nginx]#curl 10.0.0.101
Welcome to 10.0.0.18 test page
[root@keepalive1 nginx]#curl 10.0.0.101
Welcome to 10.0.0.28 test page
[root@keepalive1 nginx]#curl 10.0.0.102
Welcome to 10.0.0.28 test page
[root@keepalive1 nginx]#curl 10.0.0.102
Welcome to 10.0.0.18 test page
[root@keepalive1 nginx]#curl 10.0.0.102
Welcome to 10.0.0.18 test page
[root@keepalive1 nginx]#curl 10.0.0.102
Welcome to 10.0.0.28 test page
[root@keepalive1 nginx]#curl 10.0.0.102
Welcome to 10.0.0.18 test page

3.1.2、安装keepalived并配置服务

安装过程上篇文章已经说过了，这里不再复述，接下来是keepalived的配置信息

#对keepalived1配置
[root@keepalive1 ~]#vim /etc/keepalived/keepalived.conf
global_defs {
   router_id LVS_DEVEL
}

[root@keepalive1 ~]#systemctl restart keepalived.service
vrrp_instance VI_1 {
    state MASTER #主机器
    interface eth0
    virtual_router_id 51
    priority 100    #权重要比从机器高
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123456
  }
    virtual_ipaddress {
    10.0.0.200 dev eth0 label eth0:1
    }
}
#对keepalived2配置
[root@keepalive2 ~]#vim /etc/keepalived/keepalived.conf
global_defs {
   router_id LVS_DEVEL
}

vrrp_instance VI_1 {
    state BACKUP#从机器
    interface eth0
    virtual_router_id 51   #虚拟路由号要和主机相同
    priority 80   #权重要比主机器低
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123456   #验证密码要和主机一致
  }
    virtual_ipaddress {
    10.0.0.200 dev eth0 label eth0:1
    }
}
#重启服务
[root@keepalive2 ~]#systemctl restart keepalived.service
#在客户端配置一下hosts解析
[root@ubuntu2004 ~]#echo "10.0.0.200 www.katest,com"  >> /etc/hosts
#测试访问

  [root@keepalive1 ~]#curl www.katest.com
  Welcome to 10.0.0.18 test page
  [root@keepalive1 ~]#curl www.katest.com
  Welcome to 10.0.0.28 test page
  [root@keepalive1 ~]#curl www.katest.com
  Welcome to 10.0.0.18 test page
  [root@keepalive1 ~]#curl www.katest.com
  Welcome to 10.0.0.18 test page
  [root@keepalive1 ~]#curl www.katest.com
  Welcome to 10.0.0.28 test page

3.2.2、模拟某一个主节点出现故障

#这里我停掉了主节点的keepalived服务以及nginx服务来模拟主节点损坏
[root@keepalive1 ~]#systemctl stop  keepalived
[root@keepalive1 ~]#systemctl stop  nginx
#切换到可以发现10.0.0.200的vip已经飘到了从节点
[root@keepalive2 ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:6a:6e:55 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.102/24 brd 10.0.0.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet 10.0.0.200/32 scope global eth0:1
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe6a:6e55/64 scope link
       valid_lft forever preferred_lft forever
#访问测试
[root@ubuntu2004 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@ubuntu2004 ~]#curl www.katest.com
Welcome to 10.0.0.28  test page
[root@ubuntu2004 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@ubuntu2004 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@ubuntu2004 ~]#curl www.katest.com
Welcome to 10.0.0.28  test page
#访问成功

3.1.4、恢复MASTER节点重回集群

当ka1主机恢复后重回集群时，由于当时设置的ka1的优先级是100，而ka2主机设置的优先级是80，当现在在查看ip是，VIP就立即飘回ka1节点上，这里使用的是抢占式模式，也是默认的模式，这里也可以设置延迟一会在把VIP抢过去。

#启动ka1节点
[root@keepalive1 ~]#systemctl start  nginx.service
[root@keepalive1 ~]#systemctl start  keepalived
[root@keepalive1 ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:c5:32:4d brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.101/24 brd 10.0.0.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet 10.0.0.200/32 scope global eth0:1
       valid_lft forever preferred_lft forever
#查看ka节点IP地址
[root@keepalive2 ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:6a:6e:55 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.102/24 brd 10.0.0.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe6a:6e55/64 scope link
       valid_lft forever preferred_lft forever
#访问测试
[root@keepalive1 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@keepalive1 ~]#curl www.katest.com
Welcome to 10.0.0.28  test page
[root@keepalive1 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@keepalive1 ~]#curl www.katest.com
Welcome to 10.0.0.18  test page
[root@keepalive1 ~]#curl www.katest.com
Welcome to 10.0.0.28  test page

 

 

标签：10.0,00,可用,keepalived,nginx,test,keepalive1,root
From： https://www.cnblogs.com/gy001/p/16834139.html

相关文章

  • Microsoft Office for Mac最新版本安装教程，亲测可用！！！
    办公必备的Office工具，它为需要使用Office工具的用户和企业设计，让他们可以利用功能强大的Outlook来处理电子邮件、日历和通讯录事宜。你所熟知和信赖的Office经过更新......
  • CentOS 7.6 Nginx安装
    目录一键执行安装分步骤安装1.安装依赖项，和必要组件2.下载Nginx3.解压4.编译配置5.创建全局命令一键执行安装一键执行安装nginxyuminstall-ymakecmakegccgcc......
  • nginx负载均衡的原理以及过程（4）
    负载均衡的策略：  这是nginx默认最基础的策略。使用keepalive提高上游服务质量 ......
  • nginx端口复用
    文档说明：只记录关键地方;nginx端口例子使用$ssl_preread_protocol$ssl_preread_server_name$ssl_preread_alpn_protocols三个变量的组合，来区分不同的服务stream......
  • nginx解决跨域关键点
    文档说明：只记录关键地方;目标：使用CORS和jsonp解决跨域问题一：nginx使用CORS解决跨域涉及到nginx配置也就这些add_headerAccess-Control-Allow-Origin$cors_ori......
  • nginx http 通用配置
    文档说明：只记录关键地方;nginx配置文件nginx.confusernginx;worker_processesauto;worker_cpu_affinityauto;error_log/var/log/nginx/error.logwarn;pid......
  • 解决IDEA 【alt + insert快捷键】不能使用的原因，亲测，可用！！！！
    解决IDEA【alt+insert快捷键】不能使用的原因，亲测，可用！！！！原因一：缺少插件：File——Settings——Plugins——Installed——》搜索groovy——》勾选紫色的框中两个插件，我检查了......
  • nginx root 和 alias 的区别
    区别：alias含有rewrite的意思，可以重写掉不存在的路径。（......
  • linux nginx记录
     安装nginx前首先安装四个依赖包--以下命令一键安装四个依赖 yum-yinstallgcczlibzlib-develpcre-developensslopenssl-devel 创建指定目录下载安装ngi......
  • 未安装c的visualstudio语言支持。代码编辑IntelliSense将不可用
    错误如下：未安装c的visualstudio语言支持。代码编辑IntelliSense将不可用。服务器空间的标记IntelliSense可能不起作用 运行VisualStudio2008的时候弹出一个如题的......

赞助商

阅读排行

网站主页关于我们联系我们网站地图

本网站内容转载自其他媒体，侵权联系[admin##ips99.com]。

Copyright © 2020-2023 IPS99 版权所有 IPS99