和同事一起搞LVS负载均衡系统,一开始总有问题,后来终于搞出来了。不过后续的操作还有很多,这次是个HA架构的系统,所以要求冗余和严格VLAN。硬件防火墙+两层交换机+LVS+WEB+交易系统+DB。
硬防那个没配好,所以暂时只能把LVS顶前面。由于公司内部要和DB直接通讯,硬防的VPN没配好,只能让LVS开个通道。
于是我这么做了。在DB上跑:
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
/sbin/ifconfig eth0:0 192.168.0.159 broadcast 192.168.0.159 netmask 255.255.255.255 up
这堆命令。然后在LVS上的lvs.cf文件下加上:
virtual db {
active = 1
address = 192.168.0.159 eth0:3
vip_nmask = 255.255.255.0
port = 1521
use_regex = 0
load_monitor = none
scheduler = wrr
protocol = tcp
timeout = 6
reentry = 15
quiesce_server = 0
server db1 {
address = 192.168.0.100
active = 1
weight = 1
}
}
然后重起pulse服务,稍等一会,ipvsadm看看。应该弹过去了。
硬防那个没配好,所以暂时只能把LVS顶前面。由于公司内部要和DB直接通讯,硬防的VPN没配好,只能让LVS开个通道。
于是我这么做了。在DB上跑:
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
/sbin/ifconfig eth0:0 192.168.0.159 broadcast 192.168.0.159 netmask 255.255.255.255 up
这堆命令。然后在LVS上的lvs.cf文件下加上:
virtual db {
active = 1
address = 192.168.0.159 eth0:3
vip_nmask = 255.255.255.0
port = 1521
use_regex = 0
load_monitor = none
scheduler = wrr
protocol = tcp
timeout = 6
reentry = 15
quiesce_server = 0
server db1 {
address = 192.168.0.100
active = 1
weight = 1
}
}
然后重起pulse服务,稍等一会,ipvsadm看看。应该弹过去了。