lvs负载均衡配置

三台server的ip

    direct_server:192.168.248.128

    real_server1:192.168.248.130

    real_server2:192.168.248.131

yum install ipvsadm    #安装ipvsadm
ipvsadm -C             #清除所有虚拟服务

1.编辑vim /sbin/lvsdr.sh

#!/bin/sh

VIP=192.168.248.128
RIP1=192.168.248.130
RIP2=192.168.248.131

/etc/rc.d/init.d/functions

case "$1" in
start)
echo "start LVS of DirectorServer"
#set the Virtual IP Address
ifconfig ens33:0 $VIP/24     -->注意网卡ens33名称要与本机设备名称相符合
#/sbin/route add -host $VIP dev ens33:0
#Clear IPVS table
/sbin/ipvsadm -C
#set LVS
/sbin/ipvsadm -A -t $VIP:80 -s rr
/sbin/ipvsadm -a -t $VIP:80 -r $RIP1:80 -g
/sbin/ipvsadm -a -t $VIP:80 -r $RIP2:80 -g
#Run LVS
/sbin/ipvsadm
#end
;;
stop)
echo "close LVS Directorserver"
/sbin/ipvsadm -C
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac

chown -R root:root /sbin/lvsdr.sh 
chmod -R 777 /sbin/lvsdr.sh 
启动服务:
/sbin/lvsdr.sh start

ifconfig ens33:0 192.168.88.250 broadcast 192.168.88.250 netmask 255.255.255.255 up   #添加一个ip
route add -host 192.168.88.250 dev ens33:0   #添加一条路由，使访问192.168.88.250的时候走ens33:0这个网卡

2.real_server端配置，server1和2的配置相同（可以称为员工）

1）在真实服务器上添加虚拟IP

    ifconfig lo:0 192.168.248.128 broadcast 192.168.248.128 netmask 255.255.255.255 up     #loopback（本地回环）

    route add -host 192.168.248.128 dev lo:0

 

2）设置真实服务器的lo接口不做ARP应答

设置这个选项可以使得各个接口只对本接口上的地址进行响应

echo "1">/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2">/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1">/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2">/proc/sys/net/ipv4/conf/all/arp_announce
service httpd restart

    arp_ignore:定义接收到ARP请求时的响应级别      

        0：默认，只用本地配置的有响应地址都给予响应       

        1：仅仅在目标IP是本地地址，并且是配置在请求进来的接口上的时候才给予响应

            (仅在请求的目标地址配置请求到达的接口上的时候，才给予响应)

 

   arp_announce：定义将自己的地址向外通告时的级别       

        0：默认，表示使用配置在任何接口的任何地址向外通告       

        1：尽量仅向目标网络通告与其网络匹配的地址       

        2：仅向与本地接口上地址匹配的网络进行通告       

 

real_server端配置（为了让查看信息时候好辨认）

vim /var/www/html/index.html

3、测试

​打开另一台虚拟机用curl 192.168.248.128测试是否成功 

ipvsadm -Ln --stats  查看状态

查看-L

-n：数字格式显示IP地址和端口号

--stats：统计信息

（轮叫调度：负载均衡两台RS访问次数会相等） 

如果不通：

提示未找到路由或者拒绝连接

1、检查防火墙是否关闭

2、检查DS端ipvsadm服务是否开启

3、检查http服务是否开启，配置文件里listen端口号是否为80 

aaarticlea/png;base64,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" alt="">

 

tun隧道模式

    lvs-server
    ifconfig tunl0 192.168.248.128 broadcast 192.168.248.128 netmask 255.255.255.0 up
    route add -host 192.168.248.128 dev tunl0
    ipvsadm -A -t 192.168.248.128:80 -s rr
    ipvsadm -a -t 192.168.248.128:80 -r 192.168.88.18 -i
    ipvsadm -a -t 192.168.248.128:80 -r 192.168.88.19 -i

    real server
    ifconfig tunl0 192.168.248.128 netmask 255.255.255.255 broadcast 192.168.248.128 up
    route add -host 192.168.248.128 dev tunl0
    echo "1" >/proc/sys/net/ipv4/conf/tunl0/arp_ignore
    echo "2" >/proc/sys/net/ipv4/conf/tunl0/arp_announce
    echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
    echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
    echo "0" >/proc/sys/net/ipv4/conf/tunl0/rp_filter
    echo "0" > /proc/sys/net/ipv4/conf/all/rp_filter

    0：不开启源地址校验。

    1：开启严格的反向路径校验。对每个进来的数据包，校验其反向路径是否是最佳路径。

        如果反向路径不是最佳路径，则直接丢弃该数据包。

    2：开启松散的反向路径校验。对每个进来的数据包，校验其源地址是否可达，即反向路径是否能通（通过任意网口），

        如果反向路径不同，则直接丢弃该数据包。