一、安裝
https://github.com/jumpserver/jumpserver/wiki/%E5%9F%BA%E4%BA%8E-RedHat-%E7%9A%84%E7%B3%BB%E7%BB%9F
二、配置
https://github.com/jumpserver/jumpserver/wiki/%E5%BA%94%E7%94%A8%E5%9B%BE%E8%A7%A3
注意：
使用不同賬戶，執行執行腳本時候sudo經常會碰到 sudo: sorry, you must have a tty to run sudo這個情況，其實修改一下sudo的配置就好了 vi /etc/sudoers (最好用visudo命令) 註釋掉 Default requiretty 一行 #Default requiretty 意思就是sudo默認需要tty終端。註釋掉就可以在後臺執行了。 執行： # sed -i 's/Default.*requiretty/#Default requiretty/g' /etc/sudoers
三、集羣
node1: 10.0.70.242:8000
node2: 10.0.70.243:8000
vip: 10.0.70.245:8000
----------------
node1
----------------
# yum install -y ipvsadm keepalived
# vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
[email protected]
}
notification_email_from mail.zipeiyi.com
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
vrrp_instance VI_1 { #對於只有一個vip加一個vrrp_instance即可。如果兩個vip可加VI_2
state BACKUP
interface eth0
virtual_router_id 55
priority 100 #權重
advert_int 1
nopreempt #設置不搶佔資源
authentication {
auth_type PASS
auth_pass 1111 #認證
}
virtual_ipaddress {
10.0.70.245
}
}
virtual_server 10.0.70.245 8000 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 120
protocol TCP
real_server 10.0.70.242 8000 {
weight 3
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 8000
}
}
real_server 10.0.70.243 8000 {
weight 3
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 8000
}
}
}
# /etc/init.d/keepalived start
---------------
node2
---------------
# yum install -y ipvsadm keepalived
# vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state BACKUP
interface eth0
virtual_router_id 55
priority 90
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.0.70.245
}
}
virtual_server 10.0.70.245 8000 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 10.0.70.242 8000 {
weight 3
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 8000
}
}
real_server 10.0.70.243 8000 {
weight 3
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 8000
}
}
}
# /etc/init.d/keepalived start檢測
--------------- node1 --------------- # arping 10.0.70.245 ARPING 10.0.70.245 from 10.0.70.245 eth0 證明vip是在node1上的 --------------- node2 --------------- #arping 10.0.70.245 Unicast reply from 10.0.70.245 [00:50:56:9D:3B:42] 0.795ms --------------- node1 --------------- # /etc/init.d/keepalived stop # arping 10.0.70.245 Unicast reply from 10.0.70.245 [00:50:56:9D:3A:AD] 0.815ms 證明vip是在node2上的 # /etc/init.d/keepalived start 此時即使啓動node1的keepalived也不會拉回vip資源，vip還是在node2上，知道node2 standby，vip會切回node1上。 ---------------- node2 ---------------- # /etc/init.d/keepalived stop # arping 10.0.70.245 Unicast reply from 10.0.70.245 [00:50:56:9D:3B:42] 0.795ms vip自動切回到node1 # /etc/init.d/keepalived start
部署應用監控腳本
----------------- node1 ----------------- # vim /etc/keepalived/check_server.sh #!/bin/bash DIR=/opt/jumpserver/ while true do check_num=`lsof -i :8000 | grep '*:irdmi' | wc -l` if [ $check_num -eq 0 ];then cd $DIR sh service.sh restart sleep 5 check_num=`lsof -i :8000 | grep '*:irdmi' | wc -l` if [ $check_num -eq 0 ];then /etc/init.d/keepalived stop exit fi fi sleep 5 done # vim /etc/rc.local /etc/init.d/keepalived restart /opt/jumpserver/service.sh restart sh /etc/keepalived/check_service.sh & ------------------- node2 ------------------- # vim /etc/keepalived/check_server.sh #!/bin/bash DIR=/opt/jumpserver/ while true do check_num=`lsof -i :8000 | grep '*:irdmi' | wc -l` if [ $check_num -eq 0 ];then cd $DIR sh service.sh restart sleep 5 check_num=`lsof -i :8000 | grep '*:irdmi' | wc -l` if [ $check_num -eq 0 ];then /etc/init.d/keepalived stop exit fi fi sleep 5 done # vim /etc/rc.local /etc/init.d/keepalived restart /opt/jumpserver/service.sh restart sh /etc/keepalived/check_service.sh &