作业八

一、DR模式下vip不在同一网段上实现过程（跨网段）

#CIP配置

[root@CIP ~]# hostname -I

172.16.17.77

[root@CIP ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         192.168.16.7    0.0.0.0         UG    100    0        0 eth0

172.16.17.0     0.0.0.0         255.255.255.0   U     100    0        0 eth0

 

#ROUTER配置

[root@ROUTER ~]# ip a a 10.0.0.200/24 dev eth0 label eth0:1

[root@ROUTER ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:4d:3f:4a brd ff:ff:ff:ff:ff:ff

    inet 192.168.16.7/24 brd 192.168.16.255 scope global noprefixroute eth0

       valid_lft forever preferred_lft forever

    inet 10.0.0.200/24 scope global eth0:1

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe4d:3f4a/64 scope link

       valid_lft forever preferred_lft forever

3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:4d:3f:54 brd ff:ff:ff:ff:ff:ff

    inet 172.16.17.17/16 brd 172.16.255.255 scope global noprefixroute eth1

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe4d:3f54/64 scope link

       valid_lft forever preferred_lft forever

[root@ROUTER ~]# hostname -I

192.168.16.7 10.0.0.200 172.16.17.17

[root@ROUTER ~]# echo 'net.ipv4.ip_forward=1' >>  /etc/sysctl.conf   #设置路由转发

[root@ROUTER ~]# sysctl -p

net.ipv4.ip_forward = 1

 

 

 

#RS1配置

[root@RS1 ~]# hostname -I

192.168.16.17

[root@RS1 ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         192.168.16.7    0.0.0.0         UG    100    0        0 eth0

192.168.16.0    0.0.0.0         255.255.255.0   U     100    0        0 eth0

[root@RS1 ~]# yum -y install httpd && systemctl start httpd

[root@RS1 ~]# hostname -I > /var/www/html/index.html

[root@RS1 ~]# curl 192.168.16.17

192.168.16.17

#修改内核参数，来限制arp响应和通告的级别

[root@RS1 ~]# echo 1 >   /proc/sys/net/ipv4/conf/all/arp_ignore

[root@RS1 ~]# echo 2 >   /proc/sys/net/ipv4/conf/all/arp_announce

[root@RS1 ~]# echo 1 >   /proc/sys/net/ipv4/conf/lo/arp_ignore

[root@RS1 ~]# echo 2 >   /proc/sys/net/ipv4/conf/lo/arp_announce

#配置VIP

[root@RS1 ~]# ifconfig lo:1 10.0.0.100/32

[root@RS1 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet 10.0.0.100/0 scope global lo:1

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:e1:84:86 brd ff:ff:ff:ff:ff:ff

    inet 192.168.16.17/24 brd 192.168.16.255 scope global noprefixroute eth0

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fee1:8486/64 scope link

       valid_lft forever preferred_lft forever

 

 

 

#RS2配置

[root@RS2 ~]# hostname -I

192.168.16.27

[root@RS2 ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         192.168.16.7    0.0.0.0         UG    100    0        0 eth0

192.168.16.0    0.0.0.0         255.255.255.0   U     100    0        0 eth0

[root@RS2 ~]# yum -y install httpd && systemctl start httpd

[root@RS2 ~]# hostname -I > /var/www/html/index.html

[root@RS2 ~]# curl 192.168.16.27

192.168.16.27

#修改内核参数，来限制arp响应和通告的级别

[root@RS2 ~]# echo 1 >   /proc/sys/net/ipv4/conf/all/arp_ignore

[root@RS2 ~]# echo 2 >   /proc/sys/net/ipv4/conf/all/arp_announce

[root@RS2 ~]# echo 1 >   /proc/sys/net/ipv4/conf/lo/arp_ignore

[root@RS2 ~]# echo 2 >   /proc/sys/net/ipv4/conf/lo/arp_announce

#配置VIP

[root@RS2 ~]# ifconfig lo:1 10.0.0.100/32

[root@RS2 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet 10.0.0.100/0 scope global lo:1

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:61:3a:ea brd ff:ff:ff:ff:ff:ff

    inet 192.168.16.27/24 brd 192.168.16.255 scope global noprefixroute eth0

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe61:3aea/64 scope link

       valid_lft forever preferred_lft forever

 

 

#LVS配置

[root@LVS ~]# hostname -I

192.168.16.8

#配置VIP

[root@LVS ~]# ifconfig lo:1 10.0.0.100/32

[root@LVS ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet 10.0.0.100/0 scope global lo:1

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:45:07:b6 brd ff:ff:ff:ff:ff:ff

    inet 192.168.16.8/24 brd 192.168.16.255 scope global noprefixroute eth0

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe45:7b6/64 scope link

       valid_lft forever preferred_lft forever

 

[root@LVS ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         192.168.16.7    0.0.0.0         UG    100    0        0 eth0

192.168.16.0    0.0.0.0         255.255.255.0   U     100    0        0 eth0

#配置LVS规则

[root@LVS ~]# yum -y install ipvsadm

[root@LVS ~]# ipvsadm -A -t 10.0.0.100:80 -s rr

[root@LVS ~]# ipvsadm -a -t 10.0.0.100:80 -r 192.168.16.17:80 -g

[root@LVS ~]# ipvsadm -a -t 10.0.0.100:80 -r 192.168.16.27:80 -g

[root@LVS ~]# ipvsadm -Ln

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  10.0.0.100:80 rr

  -> 192.168.16.17:80             Route   1      0          0        

  -> 192.168.16.27:80             Route   1      0          0 

 

 

#测试访问

[root@CIP ~]# curl 10.0.0.100

192.168.16.17

[root@CIP ~]# curl 10.0.0.100

192.168.16.27

 

二、CentOS7.6 中 nfs 客户端使用 /etc/fstab 实现开机自动挂载

#CentOS8作为NFS服务器

[root@CentOS8 ~]# yum -y install nfs-utils rpcbind

[root@CentOS8 ~]# mkdir /myshare

[root@CentOS8 ~]# setfacl -m u:nobody:rwx /myshare

[root@CentOS8 ~]# vim /etc/exports

/myshare 10.0.0.0/24(rw,all_squash,async)

[root@CentOS8 ~]# exportfs -r

[root@CentOS8 ~]# exportfs -v

/myshare               10.0.0.0/24(async,wdelay,hide,no_subtree_check,sec=sys,rw,root_squash,all_squash

[root@CentOS8 ~]# systemctl start nfs-server

#CentOS7作为NFS客户端

[root@CentOS7 ~]# yum -y install nfs-utils rpcbind

[root@CentOS7 ~]# showmount -e 10.0.0.8

Export list for 10.0.0.8:

/myshare 10.0.0.0/24

[root@CentOS7 ~]# mkdir /test

[root@CentOS7 ~]# vim /etc/fstab

10.0.0.8:/myshare /test  nfs defaults,nosuid,_netdev,noexec 0 0

[root@CentOS7 ~]# mount -a

[root@CentOS7 ~]# df

Filesystem        1K-blocks    Used Available Use% Mounted on

/dev/sda2         104806400 1536920 103269480   2% /

/dev/sr0            4554702 4554702         0 100% /mnt/cdrom

/dev/sda3          52403200   32992  52370208   1% /data

/dev/sda1           1038336  133232    905104  13% /boot

10.0.0.8:/myshare 104806400 2478592 102327808   3% /test

 

三、CentOS7.6 中 nfs 客户端使用 autofs 实现使用 nfs 时实时挂载

#使用上例中CentOS8的配置，新开一个CentOS7实例

[root@CentOS7 ~]# yum -y install nfs-utils rpcbind autofs

[root@CentOS7 ~]# showmount -e 10.0.0.8

Export list for 10.0.0.8:

/myshare 10.0.0.0/24

#使用据对路径法

[root@CentOS7 ~]# vim /etc/auto.master

/-   /etc/test.nfs

[root@CentOS7 ~]# vim /etc/test.nfs

/test  -fstype=nfs 10.0.0.8:/myshare

[root@CentOS7 ~]# systemctl start autofs

[root@CentOS7 ~]# ll /test

total 0

[root@CentOS7 ~]# df

Filesystem        1K-blocks    Used Available Use% Mounted on

/dev/sda2         104806400 1542724 103263676   2% /

/dev/sr0            4554702 4554702         0 100% /mnt/cdrom

/dev/sda3          52403200   32992  52370208   1% /data

/dev/sda1           1038336  133232    905104  13% /boot

tmpfs                 99576       0     99576   0% /run/user/0

10.0.0.8:/myshare 104806400 2478592 102327808   3% /test