两种方式安装keepalived

yum安装keepalived

1. 准备一台纯新的 CentOS7.6 服务器，关闭 selinux，清空防火墙

[root@lvs1 ~]# hostname

lvs1

[root@lvs1 ~]# getenforce

Permissive

[root@lvs1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens32

TYPE="Ethernet"

BOOTPROTO="static"

NAME="ens32"

DEVICE="ens32"

ONBOOT="yes"

IPADDR="10.20.0.20"

NETMASK="255.0.0.0"

GATEWAY="10.0.0.2"

DNS1="223.5.5.5"

[root@lvs1 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:49:94:f4 brd ff:ff:ff:ff:ff:ff

    inet 10.20.0.20/8 brd 10.255.255.255 scope global noprefixroute ens32

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe49:94f4/64 scope link

       valid_lft forever preferred_lft forever

[root@lvs1 ~]# iptables -vnL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)

 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)

 pkts bytes target     prot opt in     out     source               destination        

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)

 pkts bytes target     prot opt in     out     source               destination        

[root@lvs1 ~]# yum list keepalived

[root@lvs1 ~]# yum install keepalived -y

[root@lvs1 ~]# vi /etc/keepalived/keepalived.conf

[root@lvs1 ~]# cat /etc/keepalived/keepalived.conf      #自行修改

! Configuration File for keepalived

global_defs {

   notification_email {

     acassen@firewall.loc

     failover@firewall.loc

     sysadmin@firewall.loc

   }

   notification_email_from Alexandre.Cassen@firewall.loc

   smtp_server 192.168.200.1

   smtp_connect_timeout 30

   router_id LVS_DEVEL

   vrrp_skip_check_adv_addr

   vrrp_strict

   vrrp_garp_interval 0

   vrrp_gna_interval 0

}

vrrp_instance VI_1 {

    state MASTER

    interface ens32

    virtual_router_id 60

    priority 100

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 123456

    }

    virtual_ipaddress {

        10.20.0.100/8 dev ens32 label ens32:0

    }

}

[root@lvs1 ~]# systemctl stop keepalived

[root@lvs1 ~]# systemctl start keepalived

[root@lvs1 ~]# yum install psmisc -y   #pstree等管理工具包

[root@lvs1 ~]# ps aux | grep keepalived

root      16121  0.0  0.0 122876  1420 ?        Ss   15:27   0:00 /usr/sbin/keepalived -D

root      16122  0.0  0.1 133836  3352 ?        S    15:27   0:00 /usr/sbin/keepalived -D

root      16123  0.0  0.1 137984  2944 ?        S    15:27   0:00 /usr/sbin/keepalived -D

root      16149  0.0  0.0 112708   980 pts/1    S+   15:28   0:00 grep --color=auto keepalived

[root@lvs1 ~]# pstree -p 16121

keepalived(16121)─┬─keepalived(16122)

                  └─keepalived(16123)

[root@lvs1 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:49:94:f4 brd ff:ff:ff:ff:ff:ff

    inet 10.20.0.20/8 brd 10.255.255.255 scope global noprefixroute ens32

       valid_lft forever preferred_lft forever

    inet 10.20.0.100/8 scope global secondary ens32:0

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe49:94f4/64 scope link

       valid_lft forever preferred_lft forever

上图中 keepalived 安装后我们修改了默认配置文件，仅保留了一个 vrrp_instance，指定了他的网卡设备，虚拟路由分组，密码验证，

虚拟地址，启动服务后发现 vip 添加成功。

_________________________________________________________________________________________________________________________________________________

源码编译安装 keepalived

1.我们在上一个实验的基础上，卸载 yum 安装的 keepalived

[root@lvs1 ~]# systemctl stop keepalived

[root@lvs1 ~]# rm -rf /etc/keepalived

[root@lvs1 ~]# yum remove keepalived

2. 下载最新版 keepalived 源码包

[root@lvs1 ~]# wget https://github.com/acassen/keepalived/archive/v2.0.18.tar.gz

3. 安装编译依赖的软件包

[root@lvs1 ~]# yum install curl gcc autoconf automake openssl-devel libnl3-devel iptables-devel ipset-devel net-snmp-devel libnfnetlink-devel file-devel -y

4. 进行编译安装

[root@lvs1 ~]# tar xf v2.0.18.tar.gz

[root@lvs1 ~]# cd keepalived-2.0.18/

[root@lvs1 keepalived-2.0.18]# ./build_setup

configure.ac:322: installing './ar-lib'

configure.ac:98: installing './install-sh'

configure.ac:98: installing './missing'

genhash/Makefile.am: installing './depcomp'

[root@lvs1 keepalived-2.0.18]# ./configure --prefix=/usr/local/keepalived --with-default-config-file=/usr/local/keepalived/etc/keepalived/keepalived.conf

[root@lvs1 keepalived-2.0.18]# make && make install

[root@lvs1 keepalived-2.0.18]# cd

[root@lvs1 ~]# yum install tree -y

[root@lvs1 ~]# tree /usr/local/keepalived

/usr/local/keepalived

├── bin

│   └── genhash

├── etc

│   ├── keepalived

│   │   ├── keepalived.conf

│   │   └── samples

│   │       ├── client.pem

│   │       ├── dh1024.pem

│   │       ├── keepalived.conf.conditional_conf

│   │       ├── keepalived.conf.fwmark

│   │       ├── keepalived.conf.HTTP_GET.port

│   │       ├── keepalived.conf.inhibit

│   │       ├── keepalived.conf.IPv6

│   │       ├── keepalived.conf.misc_check

│   │       ├── keepalived.conf.misc_check_arg

│   │       ├── keepalived.conf.quorum

│   │       ├── keepalived.conf.sample

│   │       ├── keepalived.conf.SMTP_CHECK

│   │       ├── keepalived.conf.SSL_GET

│   │       ├── keepalived.conf.status_code

│   │       ├── keepalived.conf.track_interface

│   │       ├── keepalived.conf.virtualhost

│   │       ├── keepalived.conf.virtual_server_group

│   │       ├── keepalived.conf.vrrp

│   │       ├── keepalived.conf.vrrp.localcheck

│   │       ├── keepalived.conf.vrrp.lvs_syncd

│   │       ├── keepalived.conf.vrrp.routes

│   │       ├── keepalived.conf.vrrp.rules

│   │       ├── keepalived.conf.vrrp.scripts

│   │       ├── keepalived.conf.vrrp.static_ipaddress

│   │       ├── keepalived.conf.vrrp.sync

│   │       ├── root.pem

│   │       ├── sample.misccheck.smbcheck.sh

│   │       └── sample_notify_fifo.sh

│   └── sysconfig

│       └── keepalived

├── sbin

│   └── keepalived

└── share

    ├── doc

    │   └── keepalived

    │       └── README

    ├── man

    │   ├── man1

    │   │   └── genhash.1

    │   ├── man5

    │   │   └── keepalived.conf.5

    │   └── man8

    │       └── keepalived.8

    └── snmp

        └── mibs

[root@lvs1 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:49:94:f4 brd ff:ff:ff:ff:ff:ff

    inet 10.20.0.20/8 brd 10.255.255.255 scope global noprefixroute ens32

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe49:94f4/64 scope link

       valid_lft forever preferred_lft forever

[root@lvs1 ~]# vi /usr/local/keepalived/etc/keepalived/keepalived.conf

[root@lvs1 ~]# cat /usr/local/keepalived/etc/keepalived/keepalived.conf

! Configuration File for keepalived

global_defs {

   notification_email {

     acassen@firewall.loc

     failover@firewall.loc

     sysadmin@firewall.loc

   }

   notification_email_from Alexandre.Cassen@firewall.loc

   smtp_server 192.168.200.1

   smtp_connect_timeout 30

   router_id LVS_DEVEL

   vrrp_skip_check_adv_addr

   vrrp_strict

   vrrp_garp_interval 0

   vrrp_gna_interval 0

}

vrrp_instance VI_1 {

    state MASTER

    interface ens32

    virtual_router_id 66

    priority 100

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 12345678

    }

    virtual_ipaddress {

        10.20.0.200/8 dev ens32 label ens32:0

    }

}

[root@lvs1 ~]# systemctl start keepalived

[root@lvs1 ~]# ps aux | grep keepalived

root      49574  0.0  0.0  78092   868 ?        Ss   16:36   0:00 /usr/local/keepalived/sbin/keepalived

root      49575  0.0  0.1  82368  2056 ?        S    16:36   0:00 /usr/local/keepalived/sbin/keepalived

root      49601  0.0  0.0 112708   992 pts/1    S+   16:39   0:00 grep --color=auto keepalived

[root@lvs1 ~]# pstree -p 49574

keepalived(49574)───keepalived(49575)

[root@lvs1 ~]# ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

       valid_lft forever preferred_lft forever

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

    link/ether 00:0c:29:49:94:f4 brd ff:ff:ff:ff:ff:ff

    inet 10.20.0.20/8 brd 10.255.255.255 scope global noprefixroute ens32

       valid_lft forever preferred_lft forever

    inet 10.20.0.200/8 scope global secondary ens32:0

       valid_lft forever preferred_lft forever

    inet6 fe80::20c:29ff:fe49:94f4/64 scope link

       valid_lft forever preferred_lft forever