Keepalive+Haproxy高可用集群安装与配置

环境准备

安装环境:

  • Haproxy版本:Haproxy-1.8.20

  • keepalived版本:keepalived v1.3.5

  • Haproxy:172.24.77.241(master)

  • Haproxy:172.24.77.242(backup)
  • VIP地址:172.24.77.245

Haproxy安装:master和backup服务器安装Haproxy

  1. 安装依赖包

    yum install gcc gcc-c++ glibc glibc-devel pcre pcre-devel openssl openssl-devel systemd-devel net-tools vim iotop bc zip unzip zlib-devel lrzsz tree screen lsof tcpdump wget ntpdate -y

  2. 下载并解压安装包

    cd /usr/local/src/

    wget https://src.fedoraproject.org/repo/pkgs/haproxy/haproxy-1.8.20.tar.gz/sha512/c288ccf223da71a29ae0f08f3c9753002735816229ea83ca497d46c860fb8a4bd422077a94652aa475e48aefb78787979cdce7f1bd0b5919dc671ba25212c133/haproxy-1.8.20.tar.gz

    tar xvf haproxy-1.8.20.tar.gz

    cd haproxy-1.8.20

  3. 编译安装Haproxy

    make ARCH=x86_64 TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 USE_SYSTEMD=1 USE_CPU_AFFINITY=1 PREFIX=/usr/local/haproxy

    make install PREFIX=/usr/local/haproxy

  4. 复制启动程序

    cp haproxy /usr/sbin/

  5. 创建启动脚本

    vim /usr/lib/systemd/system/haproxy.service

    [Unit]
    Description=HAProxy Load Balancer
    After=syslog.target network.target
    [Service]
    ExecStartPre=/usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg -c -q
    ExecStart=/usr/sbin/haproxy -Ws -f /etc/haproxy/haproxy.cfg -p /run/haproxy.pid
    ExecReload=/bin/kill -USR2 $MAINPID
    [Install]
    WantedBy=multi-user.target

    :wq

  6. 创建目录和用户

    mkdir /etc/haproxy

    cd /etc/haproxy

  7. 修改默认haproxy配置文件

    vim /etc/haproxy/haproxy.cfg

    global
    chroot /usr/local/haproxy

    stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin

    user haproxy
    group haproxy
    daemon

    pidfile /usr/local/haproxy/run/haproxy.pid
    log 127.0.0.1 local3 info
    defaults
    option http-keep-alive
    option forwardfor
    maxconn 100000
    mode http
    timeout connect 300000ms
    timeout client 300000ms
    timeout server 300000ms
    listen stats
    mode http
    bind 0.0.0.0:9999
    stats enable
    log global
    stats uri /haproxy-status
    stats auth haadmin:
    listen web_port
    bind 0.0.0.0:80
    mode http
    log global
    server web1 172.24.77.241:8080 weight 5 check inter 2000 rise 2 fall 3
    server web1 172.24.77.242:8080 weight 5 check inter 2000 rise 2 fall 3

  8. 创建启动用户

    useradd haproxy -s /sbin/nologin

  9. 授权目录

    mkdir /var/lib/haproxy

    chown haproxy.haproxy /var/lib/haproxy/ -R

  10. 启动Haproxy

    systemctl start haproxy

  11. 检查启动结果

    ps -ef |grep haproxy |grep -v "grep"

    lsof -i:80

  12. 设置开机启动

    systemctl enable haproxy

    Keepalive安装:master和backup服务器安装Keepalive

  13. 安装keepalive

    yum install keepalived -y

  14. 查看安装版本信息

    rpm -qi keepalived

  15. 配置Keepalived,master配置如下

    vim /etc/keepalived/keepalived.conf

    !删除多余配置

    :35,156d

    !修改为以下内容

    ! Configuration File for keepalived

    global_defs {
    notification_email {br/>[email protected]
    }
    notification_email_from [email protected]
    smtp_server 127.0.0.1
    smtp_connect_timeout 30
    router_id ha1.jay.com
    vrrp_skip_check_adv_addr
    vrrp_strict
    vrrp_garp_interval 0
    vrrp_gna_interval 0
    vrrp_mcast_group4 224.0.0.18
    }

    vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 80
    priority 100
    advert_int 1
    authentication {
    auth_type PASS
    auth_pass silence2t
    }

    virtual_ipaddress {
    172.24.77.245 dev ens33 lable ens33:0
    }

    track_script {

    chk_ haproxy

    }

    vrrp_script chk_haproxy{

    script "/data/sh/check_haproxy.sh"

    interval 1

    weight 80

    fall 3

    rise 5

    timeout 2

    ​ }

    ​ }

    }

  16. 配置Keepalived,backup配置如下

    vim /etc/keepalived/keepalived.conf

    !删除所有配置

    :%d

    !粘贴以下内容

    ! Configuration File for keepalived

    global_defs {
    notification_email {
    br/>[email protected]
    }
    notification_email_from [email protected]
    smtp_server 127.0.0.1
    smtp_connect_timeout 30
    router_id ha1.jay.com
    vrrp_skip_check_adv_addr
    vrrp_strict
    vrrp_garp_interval 0
    vrrp_gna_interval 0
    vrrp_mcast_group4 224.0.0.18
    }

    vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id 80
    priority 90
    advert_int 1
    authentication {
    auth_type PASS
    auth_pass silence2t
    }
    virtual_ipaddress {
    172.24.77.245 dev ens33 lable ens33:0
    }

    track_script {

    chk_ haproxy

    }

    vrrp_script chk_haproxy{

    script "/data/sh/check_haproxy.sh"

    interval 1

    weight 80

    fall 3

    rise 5

    timeout 2

    ​ }

    }

  17. 查看VIP地址

    ip addr

  18. 查看Iptalbes策略并删除

    iptables -vnL --line-number

    iptables -D INPUT 1

  19. 测试访问VIP

    ping 172.24.77.245

  20. 测试keepalive高可用

    !将占有VIP地址的主机关机,查看

    systemctl stop keepalived

    killall keepalived

创建check_ haproxy脚本

  1. haproxy.sh脚本内容如下:创建目录

    mkdir -p /data/sh/

  2. 安装killall

    yum install psmisc -y

  3. 创建脚本文件

    vim /data/sh/check_haproxy.sh

    #!/bin/bash

    #auto check haproxy process

    #by author jay

    /usr/bin/killall -0 haproxy

    if

    [[ $? -ne 0 ]]; then

    /usr/bin/systemctl stop keepalived

    fi

  4. 设置执行权限

    chmod +x check_haproxy.sh

  5. 测试关闭Haproxy服务,查看keepavlive是否生效

    killall -0 haproxy

猜你喜欢

转载自blog.51cto.com/13688209/2507459