该文档在CentOS7.6系统下进行编译安装keepalived 2.1.3
| 主机名称 | ip地址 | 操作系统 | 角色 | 软件版本 | 备注 |
|---|---|---|---|---|---|
| opsproxy-shqs-1 | 10.99.73.38 (real ip) | CentOS 7.6 | keepalived | 2.1.3 | 当前最新版本 |
| opsproxy-shqs-1 | 10.99.73.39 (real ip) | CentOS 7.6 | keepalived | 2.1.3 | 当前最新版本 |
| 10.99.73.40 (vip) | VIP |
一、编译安装keepalived
1.1 下载keepalived源码包
wget https://www.keepalived.org/software/keepalived-2.1.3.tar.gz
tar zxvf keepalived-2.1.3.tar.gz
1.2 编译安装keepalived
我的编译软件统一安装在/opt/app/install/目录下面，然后软连接到/opt/app/下面。所以这里设置keepalived的安装目录为/opt/app/install/keepalived
# 准备编译环境
yum install -y ipvsadm popt popt-devel libnl libnl-devel libnl3-devel libnfnetlink libnfnetlink-devel net-snmp-devel openssl openssl-devel
# 切换到keepalived源码根目录
cd keepalived-2.1.3
# 编译
./configure --with-init=systemd --with-systemdsystemunitdir=/usr/lib/systemd/system --prefix=/opt/app/install/keepalived --with-run-dir=/opt/app/install/keepalived/run
make
# 安装
make install
# 可执行文件拷贝一份到系统执行文件目录，该目录在path变量里面，可以直接使用haproxy命令
cp /opt/app/install/keepalived/sbin/keepalived /usr/sbin/keepalived
# 或者
# ln -s /opt/app/install/keepalived/sbin/keepalived /usr/sbin/keepalived
# 软连接（这一步谨是我自己对软件目录管理的需求）
ln -s /opt/app/install/keepalived /opt/app/keepalived
# keepalived附加参数文件，为了跟yum安装一致，其实是不用配置的。启动文件指定实际路径就可以了。
ln -s /opt/app/install/keepalived/etc/sysconfig/keepalived /etc/sysconfig/keepalived
# pid文件放置目录,目录可以自己定义在启动脚本里面使用
mkdir /opt/app/install/keepalived/run
1.3 配置system自启动文件
根据上面的编译安装，实际已经生成了启动文件，我们这里进行一些修改。
- 编写配置文件
vi /usr/lib/systemd/system/keepalived.service [Unit] Description=LVS and VRRP High Availability Monitor After=network-online.target syslog.target Wants=network-online.target [Service] Type=forking PIDFile=/run/keepalived.pid KillMode=process EnvironmentFile=-/etc/sysconfig/keepalived ExecStart=/usr/sbin/keepalived -f /opt/app/keepalived/etc/keepalived/keepalived.conf $KEEPALIVED_OPTIONS ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target - 加载文件
systemctl daemon-reload
以上，keepalived主备节点操作相同。
1.4 keepalived配置文件
这里仅仅是一个简单的配置文件,在haproxy服务中使用，部署验证这些就够了，更多参数配置需要了在补充吧。
配置文件目录/opt/app/keepalived/etc/keepalived/keepalived.conf
主备节点需要一致的参数:router_id ，virtual_router_id
主备节点优先级可以设置为主高备低：priority
-
Master节点
vi /opt/app/keepalived/etc/keepalived/keepalived.conf global_defs { router_id haproxy } vrrp_script chk_haproxy { script "/opt/app/keepalived/etc/keepalived/chk_haproxy.sh" interval 2 weight 2 } vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 55 priority 101 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 10.99.73.40 } track_script { chk_haproxy } } -
backup节点
vi /opt/app/keepalived/etc/keepalived/keepalived.conf global_defs { router_id haproxy } vrrp_script chk_haproxy { script "/opt/app/keepalived/etc/keepalived/chk_haproxy.sh" interval 2 weight 2 } vrrp_instance VI_1 { state BACKUP interface eth0 virtual_router_id 55 priority 100 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 10.99.73.40 } track_script { chk_haproxy } }- 定义haproxy状态监控，如果haproxy没有运行，会监控到并主动拉起haproxy服务。
vi /opt/app/keepalived/etc/keepalived/chk_haproxy.sh #!/bin/bash if [ $(ps -C haproxy --no-header | wc -l) -eq 0 ]; then systemctl start haproxy fi chmod +x /opt/app/keepalived/etc/keepalived/chk_haproxy.sh -
配置自启动
systemctl enable keepalived.service -
启动服务
systemctl start keepalived.service systemctl status keepalived.service -
验证VIP的漂移
#----------------------------------- # 1. 初次启动看下VIP #----------------------------------- # 主节点(master) # ip add 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:5f:60:52 brd ff:ff:ff:ff:ff:ff inet 10.99.73.38/24 brd 10.99.73.255 scope global eth0 valid_lft forever preferred_lft forever inet 10.99.73.40/32 scope global eth0 #这里 valid_lft forever preferred_lft forever # 备节点(backup) # ip add 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:84:54:be brd ff:ff:ff:ff:ff:ff inet 10.99.73.39/24 brd 10.99.73.255 scope global eth0 valid_lft forever preferred_lft forever #----------------------------------- # 2. 关闭主节点keepalived服务 #----------------------------------- # 主节点(master) 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:5f:60:52 brd ff:ff:ff:ff:ff:ff inet 10.99.73.38/24 brd 10.99.73.255 scope global eth0 #可以看到VIP已经漂走了 valid_lft forever preferred_lft forever # 备节点(backup) 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:84:54:be brd ff:ff:ff:ff:ff:ff inet 10.99.73.39/24 brd 10.99.73.255 scope global eth0 valid_lft forever preferred_lft forever inet 10.99.73.40/32 scope global eth0 #可以看到VIP已经漂过来了，很快很快 valid_lft forever preferred_lft forever #----------------------------------- # 3. 重新开启主节点keepalived服务，因为我们配置的主节点优先级比较高，虽然备节点正常，但VIP还是会漂过来的。 #----------------------------------- # 主节点(master) 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:5f:60:52 brd ff:ff:ff:ff:ff:ff inet 10.99.73.38/24 brd 10.99.73.255 scope global eth0 valid_lft forever preferred_lft forever inet 10.99.73.40/32 scope global eth0 # 备节点(backup) 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether fa:16:3e:84:54:be brd ff:ff:ff:ff:ff:ff inet 10.99.73.39/24 brd 10.99.73.255 scope global eth0 valid_lft forever preferred_lft forever -
验证监控脚本会自动拉起haproxy
# 查看当前haproxy状态，确认启动时间以及PID systemctl status haproxy|grep -A 1 Active Active: active (running) since Fri 2020-07-03 16:11:25 CST; 4min 27s ago Main PID: 3942 (haproxy) # 执行关闭haproxy，查看是否被自动拉起服务 systemctl stop haproxy systemctl status haproxy|grep -A 1 Active Active: active (running) since Fri 2020-07-03 16:16:47 CST; 601ms ago Main PID: 8382 (haproxy)可以看到haproxy被keepalived自动拉起来了，验证完成。