基于 CentOS 7 构建 LVS-DR 群集。

1.准备实验环境

本次实验我准备了4台虚拟机

DS:DIP--192.168.163.138

        VIP--192.168.163.200

RIP1(web1)--192.168.163.140

RIP2(web2)--192.168.163.141

Client：user--192.168.163.142

2.配置服务器环境

1)搭建简易的web服务

RIP1

[root@localhost ~]# yum install httpd
[root@localhost ~]# echo "web1 test, ip is `hostname -I` ." > /var/www/html/index.html
[root@localhost ~]# systemctl start httpd

RIP2

[root@localhost ~]# yum install httpd
[root@localhost ~]# echo "web2 test, ip is `hostname -I` ." > /var/www/html/index.html
[root@localhost ~]# systemctl start httpd

使用Client验证

[root@localhost ~]# curl 192.168.163.140
web2 test ip is 192.168.163.140 .
[root@localhost ~]# curl 192.168.163.141
web1 test, ip is 192.168.163.141  .

2）配置VIP虚拟ip地址

[root@localhost ~]# nmcli connection show
NAME   UUID                                  TYPE      DEVICE 
ens33  5e4131fb-0601-422a-916f-9a0e8b16deb7  ethernet  ens33 
[root@localhost ~]# ifconfig ens33:200 192.168.163.200/24 
[root@localhost ~]# ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 192.168.163.138  netmask 255.255.255.0  broadcast 192.168.163.255inet6 fe80::83c2:22a3:b848:9285  prefixlen 64  scopeid 0x20<link>inet6 fe80::3d2:78bf:c3a6:7bd7  prefixlen 64  scopeid 0x20<link>inet6 fe80::5f89:8967:3a3a:a5f4  prefixlen 64  scopeid 0x20<link>ether 00:0c:29:3b:1d:03  txqueuelen 1000  (Ethernet)RX packets 24394  bytes 25080376 (23.9 MiB)RX errors 0  dropped 0  overruns 0  frame 0TX packets 8102  bytes 717188 (700.3 KiB)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0ens33:200: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 192.168.163.200  netmask 255.255.255.0  broadcast 192.168.163.255ether 00:0c:29:3b:1d:03  txqueuelen 1000  (Ethernet)lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536inet 127.0.0.1  netmask 255.0.0.0inet6 ::1  prefixlen 128  scopeid 0x10<host>loop  txqueuelen 1000  (Local Loopback)RX packets 77  bytes 9856 (9.6 KiB)RX errors 0  dropped 0  overruns 0  frame 0TX packets 77  bytes 9856 (9.6 KiB)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
[root@localhost ~]# nmcli connection up ens33
连接已成功激活（D-Bus 活动路径：/org/freedesktop/NetworkManager/ActiveConnection/8）

3）手动绑定VIP和手写访问VIP的路由

RIP1：

[root@localhost ~]# ifconfig lo:200 192.168.163.200 netmask 255.255.255.255 up
[root@localhost ~]# ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 192.168.163.141  netmask 255.255.255.0  broadcast 192.168.163.255inet6 fe80::83c2:22a3:b848:9285  prefixlen 64  scopeid 0x20<link>inet6 fe80::3d2:78bf:c3a6:7bd7  prefixlen 64  scopeid 0x20<link>inet6 fe80::5f89:8967:3a3a:a5f4  prefixlen 64  scopeid 0x20<link>ether 00:0c:29:d4:2c:1e  txqueuelen 1000  (Ethernet)RX packets 4113  bytes 317195 (309.7 KiB)RX errors 0  dropped 0  overruns 0  frame 0TX packets 1935  bytes 218535 (213.4 KiB)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536inet 127.0.0.1  netmask 255.0.0.0inet6 ::1  prefixlen 128  scopeid 0x10<host>loop  txqueuelen 1000  (Local Loopback)RX packets 6  bytes 468 (468.0 B)RX errors 0  dropped 0  overruns 0  frame 0TX packets 6  bytes 468 (468.0 B)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0lo:200: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536inet 192.168.163.200  netmask 255.255.255.
[root@localhost ~]# route add -host 192.168.163.200 dev lo
[root@localhost ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.163.2   0.0.0.0         UG    100    0        0 ens33
192.168.163.0   0.0.0.0         255.255.255.0   U     100    0        0 ens33
192.168.163.200 0.0.0.0         255.255.255.255 UH    0      0        0 lo

RIP2同上

4）在DS上配置LVS

下载ipvsadm

[root@localhost ~]# yum install ipvsadm -y

添加ipvsadm服务

[root@localhost ~]# ipvsadm -A -t 192.168.163.200:80 -s rr
[root@localhost ~]# ipvsadm -a -t 192.168.163.200:80 -r 192.168.163.141 -g -w 1
[root@localhost ~]# ipvsadm -a -t 192.168.163.200:80 -r 192.168.163.140 -g -w 1
[root@localhost ~]# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.163.200:80 rr-> 192.168.163.140:80           Route   1      0          0         -> 192.168.163.141:80           Route   1      0          0         

5）在RS上配置ARP抑制

[root@localhost ~]# echo "1" > /proc/sys/net/ipv4/conf/lo/arp_ignore
[root@localhost ~]# echo "2" > /proc/sys/net/ipv4/conf/lo/arp_announce
[root@localhost ~]# echo "1" > /proc/sys/net/ipv4/conf/all/arp_ignore
[root@localhost ~]# echo "2" > /proc/sys/net/ipv4/conf/all/arp_announce

RIP1和RIP2皆如此

6）结果测试

在Client上进行测试

[root@localhost ~]# for ((i=1;i<=10;i++)); do curl 192.168.163.200;done
web1 test, ip is 192.168.163.141  .
web2 test ip is 192.168.163.140 .
web1 test, ip is 192.168.163.141  .
web2 test ip is 192.168.163.140 .
web1 test, ip is 192.168.163.141  .
web2 test ip is 192.168.163.140 .
web1 test, ip is 192.168.163.141  .
web2 test ip is 192.168.163.140 .
web1 test, ip is 192.168.163.141  .
web2 test ip is 192.168.163.140 .

成功访问到服务