keepalived安装配置

• 安装工具和依赖包
  
  1. yum install -y curl gcc openssl-devel libnl3-devel net-snmp-devel

  复制代码
• yum安装keepalived
  
  1. yum install -y keepalived

  复制代码
• 源码包安装keepalived
  
  1. [root@master src]# pwd
  2. /usr/local/src
  3. [root@master src]# wget https://www.keepalived.org/software/keepalived-2.2.7.tar.gz
  4. [root@master src]# tar xvf keepalived-2.2.7.tar.gz
  5. [root@master src]# cd keepalived-2.2.7
  6. [root@master keepalived-2.2.7]# ./configure --prefix=/usr/local/keepalived
  7. [root@master keepalived-2.2.7]# make && make install

  复制代码
• 安装后配置
  
  
  
  • 环境变量文件:  /usr/local/etc/sysconfig/keepalived --修改KEEPALIVED_OPTIONS="-f /etc/keepalived/keepalived.conf -D"
    
  • 执行文件:         /usr/local/sbin/keepalived
    
  • 配置文件:         /usr/local/etc/keepalived/  --mv /usr/local/etc/keepalived/keepalived.conf.sample /usr/local/etc/keepalived/keepalived.conf
    
  1. keepalived --help
  2. Usage: keepalived [OPTION...]
  3.   -f, --use-file=FILE          Use the specified configuration file
  4.                                 default '/usr/local/etc/keepalived/keepalived.conf'
  5.                                      or '/etc/keepalived/keepalived.conf'
  6.   -P, --vrrp                   Only run with VRRP subsystem
  7.   -C, --check                  Only run with Health-checker subsystem
  8.       --all                    Force all child processes to run, even if have no configuration
  9.   -l, --log-console            Log messages to local console
  10.   -D, --log-detail             Detailed log messages
  11.   -S, --log-facility=([0-7]|local[0-7]|user|daemon)
  12.                                Set syslog facility to LOG_LOCAL[0-7], user or daemon (default)
  13.   -G, --no-syslog              Don't log via syslog
  14.   -u, --umask=MASK             umask for file creation (in numeric form)
  15.   -X, --release-vips           Drop VIP on transition from signal.
  16.   -V, --dont-release-vrrp      Don't remove VRRP VIPs and VROUTEs on daemon stop
  17.   -I, --dont-release-ipvs      Don't remove IPVS topology on daemon stop
  18.   -R, --dont-respawn           Don't respawn child processes
  19.   -n, --dont-fork              Don't fork the daemon process
  20.   -d, --dump-conf              Dump the configuration data
  21.   -p, --pid=FILE               Use specified pidfile for parent process
  22.   -r, --vrrp_pid=FILE          Use specified pidfile for VRRP child process
  23.   -T, --genhash                Enter into genhash utility mode (this should be the first option used).
  24.   -c, --checkers_pid=FILE      Use specified pidfile for checkers child process
  25.   -a, --address-monitoring     Report all address additions/deletions notified via netlink
  26.   -s, --namespace=NAME         Run in network namespace NAME (overrides config)
  27.   -m, --core-dump              Produce core dump if terminate abnormally
  28.   -M, --core-dump-pattern=PATN Also set /proc/sys/kernel/core_pattern to PATN (default 'core')
  29.   -e, --all-config             Error if any configuration file missing (same as includet)
  30.   -i, --config-id id           Skip any configuration lines beginning '@' that don't match id
  31.                                 or any lines beginning @^ that do match.
  32.                                 The config-id defaults to the node name if option not used
  33.       --signum=SIGFUNC         Return signal number for STOP, RELOAD, DATA, STATS, STATS_CLEAR
  34.   -t, --config-test[=LOG_FILE] Check the configuration for obvious errors, output to
  35.                                 stderr by default
  36.   -v, --version                Display the version number
  37.   -h, --help                   Display this help message

  复制代码
  可以发现默认有两个配置文件路径 '/usr/local/etc/keepalived/keepalived.conf' or '/etc/keepalived/keepalived.conf'
  但是安装后并没有 /etc/keepalived目录
  稳妥起见,将两个目录进行连接 ln -s /usr/local/etc/keepalived /etc/keepalived
  
  
• 配置keepalived
  
  1. #1号服务器配置
  2. vrrp_script chk_nginx {
  3.         script "/usr/bin/chk_nginx.sh"
  4.         interval 2
  5. }
  7. vrrp_instance VI_1 {
  8.     state MASTER
  9.     nopreempt
  10.     interface ens33
  11.     virtual_router_id 51
  12.     priority 100
  13.     advert_int 1
  14.     authentication {
  15.         auth_type AH
  16.         auth_pass 123456
  17.     }
  18.     unicast_src_ip 192.168.175.141
  19.     unicast_peer {
  20.         192.168.175.143
  21.     }
  23.     virtual_ipaddress {
  24.         192.168.175.200
  25.     }
  26.      track_script {
  27.        chk_nginx
  28.     }
  29. }
  31. #2号服务器配置
  32. vrrp_script chk_nginx {
  33.         script "/usr/bin/chk_nginx.sh"
  34.         interval 2
  35. }
  37. vrrp_instance VI_2 {
  38.     state MASTER
  39.     nopreempt
  40.     interface ens33
  41.     virtual_router_id 51
  42.     priority 100
  43.     advert_int 1
  44.     authentication {
  45.         auth_type AH
  46.         auth_pass 123456
  47.     }
  48.     unicast_src_ip 192.168.175.143
  49.     unicast_peer {
  50.         192.168.175.141
  51.     }
  53.     virtual_ipaddress {
  54.         192.168.175.200
  55.     }
  56.      track_script {
  57.        chk_nginx
  58.     }
  59. }

  复制代码
  chk_nginx
  1. #!/bin/bash
  3. # 设置最大重试次数为 5
  4. MAX_RETRIES=5
  5. RETRY_COUNT=0
  7. # 检查 Nginx 是否在运行中
  8. if [ $(ps -C nginx --no-header |wc -l) -gt 0 ]; then
  9.     echo "Nginx 已经在运行中"
  10. else
  11.     echo "Nginx 未启动，正在启动 Nginx ..."
  13.     # 启动 Nginx
  14.     systemctl start nginx
  16.     # 等待 Nginx 启动完成
  17.     while ! systemctl status nginx.service | grep -q "running"; do
  18.         echo "等待 Nginx 启动完成 ..."
  19.         sleep 1s
  21.         # 检查重试次数是否超过最大重试次数
  22.         RETRY_COUNT=$((RETRY_COUNT + 1))
  23.         if [ $RETRY_COUNT -eq $MAX_RETRIES ]; then
  24.             systemctl stop keepalived.service
  25.             exit 1
  26.         fi
  27.     done
  28.    
  29.     if [ $(ps -C nginx --no-header |wc -l) -gt 0 ]; then
  30.         echo "Nginx 启动完成"
  31.     else
  32.         systemctl stop keepalived.service
  33.         echo "Nginx 启动失败"
  34.     fi
  35. fi

  复制代码
• 配置启动服务
  
  安装后已经配置好了系统服务keepalived.service, 服务位置在/usr/lib/systemd/system目录
  1. vi /usr/local/etc/sysconfig/keepalived
  3. # Options for keepalived. See `keepalived --help' output and keepalived(8) and
  4. # keepalived.conf(5) man pages for a list of all options. Here are the most
  5. # common ones :
  6. #
  7. # --vrrp               -P    Only run with VRRP subsystem.
  8. # --check              -C    Only run with Health-checker subsystem.
  9. # --dont-release-vrrp  -V    Dont remove VRRP VIPs & VROUTEs on daemon stop.
  10. # --dont-release-ipvs  -I    Dont remove IPVS topology on daemon stop.
  11. # --dump-conf          -d    Dump the configuration data.
  12. # --log-detail         -D    Detailed log messages.
  13. # --log-facility       -S    0-7 Set local syslog facility (default=LOG_DAEMON)
  14. #
  16. KEEPALIVED_OPTIONS="-f /etc/keepalived/keepalived.conf -D"

  复制代码
  1. vi /usr/lib/systemd/system/keepalived.service
  3. [Unit]
  4. Description=LVS and VRRP High Availability Monitor
  5. After=network-online.target syslog.target
  6. Wants=network-online.target
  7. Documentation=man:keepalived(8)
  8. Documentation=man:keepalived.conf(5)
  9. Documentation=man:genhash(1)
  10. Documentation=https://keepalived.org
  12. [Service]
  13. Type=forking
  14. PIDFile=/run/keepalived.pid
  15. KillMode=process
  16. # - 表示如果文件不存在则忽略不会报错
  17. EnvironmentFile=-/usr/local/etc/sysconfig/keepalived
  18. # KEEPALIVED_OPTIONS参数在 /usr/local/etc/sysconfig/keepalived文件中配置
  19. ExecStart=/usr/local/sbin/keepalived  $KEEPALIVED_OPTIONS
  20. ExecReload=/bin/kill -HUP $MAINPID
  22. [Install]
  23. WantedBy=multi-user.target
  25. #启动服务
  26. systemctl start keepalived.service
  27. #设置服务开机启动
  28. systemctl enable keepalived.service

  复制代码
• 日志处理
  
  为keepalived单独写日志文件
  1. vi /usr/local/etc/sysconfig/keepalived
  2. KEEPALIVED_OPTIONS="-f /etc/keepalived/keepalived.conf -D -S 0"
  4. vi /etc/rsyslog.conf
  6. # rsyslog configuration file
  8. # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
  9. # or latest version online at http://www.rsyslog.com/doc/rsyslog_conf.html
  10. # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html
  12. #### GLOBAL DIRECTIVES ####
  14. # Where to place auxiliary files
  15. global(workDirectory="/var/lib/rsyslog")
  17. # Use default timestamp format
  18. module(load="builtin:omfile" Template="RSYSLOG_TraditionalFileFormat")
  20. #### MODULES ####
  22. module(load="imuxsock"           # provides support for local system logging (e.g. via logger command)
  23.        SysSock.Use="off") # Turn off message reception via local log socket;
  24.                           # local messages are retrieved through imjournal now.
  25. module(load="imjournal"             # provides access to the systemd journal
  26.        StateFile="/run/log/imjournal.state") # File to store the position in the journal
  27. #module(load="imklog") # reads kernel messages (the same are read from journald)
  28. #module(load="immark") # provides --MARK-- message capability
  30. $imjournalRatelimitInterval 0
  32. # Include all config files in /etc/rsyslog.d/
  33. include(file="/etc/rsyslog.d/*.conf" mode="optional")
  34. #### RULES ####
  36. # Log all kernel messages to the console.
  37. # Logging much else clutters up the screen.
  38. #kern.*                                                 /dev/console
  40. # Log anything (except mail) of level info or higher.
  41. # Don't log private authentication messages!
  42. *.info;mail.none;authpriv.none;cron.none                /var/log/messages
  44. # The authpriv file has restricted access.
  45. authpriv.*                                              /var/log/secure
  47. # Log all the mail messages in one place.
  48. mail.*                                                  -/var/log/maillog
  50. # Log cron stuff
  51. cron.*                                                  /var/log/cron
  53. # Everybody gets emergency messages
  54. *.emerg                                                 :omusrmsg:*
  56. # Save news errors of level crit and higher in a special file.
  57. uucp,news.crit                                          /var/log/spooler
  59. # Save boot messages also to boot.log
  60. local7.*                                                /var/log/boot.log
  62. # Save keepalived log to keepalived.log
  63. local0.*                                                /var/log/keepalived.log
  65. #重启日志服务:
  66. systemctl restart rsyslog
  68. #重启keepalived服务
  69. systemctl restart keepalived.service
  71. #查看日志文件
  72. tail -f /var/log/keepalived.log

  复制代码

免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！