haproxy+keepalived配置

#==============================================haproxy.cfg============================================

#此配置为haproxy透传前端IP地址到后端的配置

#==================================================================================================

global #全局属性
log 127.0.0.1 local0 info
#以daemon方式在后台运行
daemon
#HAProxy启动时作为守护运行可创建的进程数，
#配合daemon参数使用，默认只启动一个进程，该值应小于cpu核数。
nbproc 1
#最大同时*连接
maxconn 102400
#指定保存HAProxy进程号的文件
pidfile /var/lib/haproxy/haproxy.pid
#定义统计信息保存位置
stats socket /var/lib/haproxy/stats

defaults #默认参数
#tcp/http模式
mode tcp
retries 3
#连接server端超时5s
timeout connect 5s
#客户端响应超时50s
timeout client 300s
#server端响应超时50s
timeout server 300s
#设置对后端服务器检测超时时间,即心跳50s
timeout check 300s
#source 0.0.0.0 usesrc clientip

#前端服务tcp-in
frontend my-tcp-in
mode tcp
#监听端口
bind 0.0.0.0:8443
log global
#请求转发至名为"my-servers"的后端服务
default_backend my-servers

#后端服务servers
backend my-servers
#使用RR负载均衡算法
balance roundrobin
server server1 10.92.4.148:8443 maxconn 10000 check inter 3000 rise 2 fall 3

#统计web页面配置, frontend和backend的组合体, 监控组的名称可按需自定义
listen admin_status
#配置监控运行模式
mode http
#配置统计页面访问端口
bind 0.0.0.0:1080
#统计页面默认最大连接数
maxconn 10
log 127.0.0.1 local0 err
#开启统计
stats enable
#监控页面自动刷新时间
stats refresh 30s
#统计页面访问url
stats uri /stats
#统计页面密码框提示文本
stats realm welcome login\ Haproxy
#监控页面的用户和密码:admin, 可设置多个用户名
stats auth admin:admin
#手工启动/禁用后端服务器, 可通过web管理节点
stats admin if TRUE

#===========================================keepalived_master.conf=====================================

! Configuration File for keepalived

global_defs {
notification_email {
[email protected]
}
notification_email_from [email protected]
smtp_server 192.168.133.4
smtp_connect_timeout 30
router_id LVS_DEVEL
}

#HAProxy健康检查配置
vrrp_script chk_haproxy {
#使用killall -0检查haproxy实例是否存在，性能高于ps命令
script "killall -0 haproxy"
interval 2 #脚本运行周期
weight 2 #每次检查的加权权重值
}

扫描二维码关注公众号，回复： 3523455 查看本文章

vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 160
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.92.52.200
}
track_interface {
eth0
}
track_script {
chk_haproxy
}
}

#==============================================keepalived_slave.conf================================

! Configuration File for keepalived

global_defs {
notification_email {
[email protected]
}
notification_email_from [email protected]
smtp_server 192.168.133.4
smtp_connect_timeout 30
router_id LVS_DEVEL
}

vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.92.52.200
}
track_interface {
eth0
}
track_script {
chk_haproxy
}
}

#================================================iptable设置=======================================

#!/bin/bash
/sbin/iptables -F
/sbin/iptables -t mangle -N DIVERT
/sbin/iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
/sbin/iptables -t mangle -A DIVERT -j MARK --set-mark 1
/sbin/iptables -t mangle -A DIVERT -j ACCEPT
/sbin/ip rule add fwmark 1 lookup 100
/sbin/ip route add local 0.0.0.0/0 dev lo table 100

#============================================check_haproxy.sh=========================================

#!/bin/bash
ret=`ps -C haproxy --no-header | wc -l`
#if [ $ret -eq 0 ];then
#   /etc/init.d/haproxy start
#   sleep 3
   if [ `ps -C haproxy --no-header | wc -l ` -eq 0 ];then
       /etc/init.d/keepalived stop
   fi
#fi

haproxy+keepalived配置

猜你喜欢