Haproxy+Keepalived

她的名字叫李承利

已于 2022-10-26 11:54:56 修改

阅读量701

点赞数

分类专栏： web服务器集群文章标签：服务器 linux 运维 keepalived haproxy

于 2022-10-25 19:25:11 首次发布

本文链接：https://blog.youkuaiyun.com/NancyLCL/article/details/127519206

版权

web服务器集群专栏收录该内容

28 篇文章

订阅专栏

1. 环境规划：

主机名	主机地址	角色
node1	192.168.188.11 192.168.188.100(VIP)	MASTER
node2	192.168.188.12	BACKUP
node3	192.168.188.13	RS1
node4	192.168.188.14	RS2
node5	192.168.188.15	RS3

2. 配置MASTER，BACKUP的Haproxy：

[root@node1 ~]# yum install haproxy -y

[root@node1 ~]# vim /etc/haproxy/haproxy.cfg

global
  log         127.0.0.1 local2
  chroot      /var/lib/haproxy
  pidfile     /var/run/haproxy.pid
  maxconn     4000
  user        haproxy
  group       haproxy
  daemon

  stats socket /var/lib/haproxy/stats
  ssl-default-bind-ciphers PROFILE=SYSTEM
  ssl-default-server-ciphers PROFILE=SYSTEM

defaults
    mode                    http
    log                     global
    option                  httplog
    option                  dontlognull
    option http-server-close
    option forwardfor       except 127.0.0.0/8
    option                  redispatch
    retries                 3
    timeout http-request    10s
    timeout queue           1m
    timeout connect         10s
    timeout client          1m
    timeout server          1m
    timeout http-keep-alive 10s
    timeout check           10s
    maxconn                 3000

frontend main  ##前端配置
    bind *:80
    mode http
 
##配置ACL规则
    acl acl_www    hdr_dom(host) -i www.yunjisuan.cn
    acl acl_static hdr_dom(host) -i static.yunjisuan.cn
    acl acl_update hdr_dom(host) -i update.yunjisuan.cn
 
##引用ACL规则
    use_backend server_www             if acl_www
    use_backend server_static          if acl_static
    use_backend server_update          if acl_update
    default_backend  server_static

##配置后端主机
backend server_www
    balance     roundrobin
    server      web1 192.168.188.13:8080 check
 
backend server_static
    balance     roundrobin
    server      web2 192.168.188.14:80 check
 
backend server_update
    balance     roundrobin
    server      web3 192.168.188.15:80 check

listen stats  ##配置Haproxy状态页
    mode http
    bind 0.0.0.0:9999
    stats hide-version
    stats enable
    stats uri /haproxy-status
    stats auth admin:123456
    stats refresh 30s

3. 开启MASTER，BACKUP的Haproxy日志：

[root@node1 ~]# vim /etc/rsyslog.conf 

$ModLoad imudp
$UDPServerRun 514

$ModLoad imtcp
$InputTCPServerRun 514

local2.*                                                /var/log/haproxy.log

[root@node1 ~]# systemctl restart rsyslog.service

4. 配置访问后端服务器的页面：

node3节点配置：
[root@node3 ~]# yum install tomcat tomcat-webapps -y

[root@node3 ~]# rm -rf /var/lib/tomcat/webapps/ROOT/*

[root@node3 ~]# vim /var/lib/tomcat/webapps/ROOT/index.jsp

<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<!doctype html>
<html>
 <head>
 <title>第一个 JSP 程序</title>
 </head>
 <body>
 <%
 out.println("Hello World！");
 %>
 <% java.text.SimpleDateFormat formater = new java.text.SimpleDateFormat
("yyyy年MM月dd日");
    String strCurrentTime=formater.format(new java.util.Date());
 %>
 <%= strCurrentTime %>
</body>
</html>

[root@node3 ~]# systemctl start tomcat

node4节点配置：
[root@node4 ~]# echo "static page my ip is `hostname -I`" > /var/www/html/index.html 

[root@node4 ~]# systemctl start httpd.service 

node5节点配置：
[root@node5 ~]# echo "static page my ip is `hostname -I`" > /var/www/html/index.html 

[root@node5 ~]# systemctl start httpd.service

4. 配置主备Keepalived：

1>. 配置MASTER节点的keepalived：

[root@node1 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
 
global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL_MASTER
}
 
vrrp_script check_haproxy {
  ##检测方式一：
    script "killall -0 haproxy"
  ##检测方式二：
    #script "</dev/tcp/127.0.0.1/80"  ##使用端口检测的方式，haproxy运行时的端口就是80
    interval 2
}

vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
 
    track_script {
      check_haproxy
    }
 
    virtual_ipaddress {
        192.168.188.100
    }
}

2>. 配置BACKUP节点的keepalived：

[root@node2 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
 
global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL_MASTER
}
 
vrrp_script check_haproxy {
  ##检测方式一：
    script "killall -0 haproxy"
  ##检测方式二：
    #script "</dev/tcp/127.0.0.1/80"  ##使用端口检测的方式，haproxy运行时的端口就是80
    interval 2
}

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id 51
    priority 80
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
 
    track_script {
      check_haproxy
    }
 
    virtual_ipaddress {
        192.168.188.100
    }
}

5. 配置Windows的域名解析：修改" C:\Windows\System32\drivers\etc\hosts "文件。

在文件末尾添加：
192.168.188.100 www.yunjisuan.cn static.yunjisuan.cn update.yunjisuan.cn

6. 重启MASTER，BACKUP的Haproxy，Keepalived：

[root@node1 ~]# systemctl restart haproxy.service

[root@node1 ~]# systemctl restart keepalived.service

7. 测试Haproxy+Keepalived集群是否搭建成功：

1>. 查看VIP是否在MASTER上，并且BACKUP上没有：

2>. 停止MASTER上的keepalived，模拟高可用故障，观察VIP是否飘移：

3>. 恢复MASTER的keepalived，并且通过浏览器访问域名，观察负载均衡是否正常：

4>. 关闭MASTER上的Haproxy服务，观察VIP是否飘移，负载均衡是否正常：