易陆发现互联网技术论坛

 找回密码
 开始注册
查看: 163|回复: 3
收起左侧

keepalived现在一个环境中只给某个地址发vrrp请求限制

[复制链接]
发表于 2023-11-6 15:53:25 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有账号?开始注册

x

" E6 C# g; z, |9 h: @( z$ s1 Ikeepalived现在一个环境中只给某个地址发vrrp请求限制
' C. m  x0 C- F3 y1 c主节点中
7 F+ k: Y! y. M& w/ x' V7 Q
& V! d# y$ p% ~1 v" Ovrrp_instance VI_2 {: L* G. H4 A" O- ?( X
/ n! X9 ^4 Z# A3 S6 y! N* D
    .......1 y9 _7 m% M' i% X8 P) q: h% y
     state MASTER
( ^& v7 R' ~5 R7 I* a    interface ens160
+ p! J7 w# J: \, E8 Q: g    virtual_router_id 2010 i3 d1 J4 {& k% m' ~: T4 [
    priority 99
; G# J8 G3 ^1 z+ X! @5 @  f5 I. t    advert_int 1
4 |: W5 O7 p7 p+ w1 z8 ^    nopreempt3 e" I" z! \7 _& M0 |3 `4 o

& q: Y: ]" q, _5 E1 n2 ?    unicast_src_ip 172.20.22.6   ###本机ip  node1为192.168.10.23
4 ]" B5 u4 V8 h# L# s, k6 a    unicast_peer {( S# L4 Y* z$ b, B1 z' O
    172.20.22.7  ####对端ip  node1为192.168.10.22
' f& R# ?! B% t# s    }
% ~1 @% u! P  d! |2 s
0 @9 y. C5 n4 \- y........
; d( Z8 B9 o4 }* V}
: l) {1 V+ q( R0 G+ s9 A4 h9 T& x! A7 S
备节点:1 I& A) _% |$ ^( |( M& n
vrrp_instance VI_2 {) a# y9 J+ N. t. Z. j
    .......
0 z; C! I# m2 a' R" ?. S     state BACKUP
3 r$ m1 f9 G& w    interface ens1600 A7 d% ^& K+ k. K- g/ h
    virtual_router_id 2019 P7 |- E( m: H' A% d. a* Q
    priority 999 @! @- k# {4 \1 O3 V
    advert_int 1
, v% U5 x" @- j    nopreempt
! T( n* m9 {0 n4 W: \% I8 k" W' Y: c* `8 Y
    unicast_src_ip 172.20.22.7   ###本机ip  node1为192.168.10.23
+ z* N3 e+ R1 A% j    unicast_peer {
# m- j3 l1 w  U5 ^. R# J3 |    172.20.22.6  ####对端ip  node1为192.168.10.22$ F5 S+ H  ]2 Q/ D) ^3 |& y
    }
' P1 T9 r+ E. p: g, S# E; Q6 a9 s- {4 e5 T
.......4 g4 J6 C  c! U
}$ ~$ L+ E1 Q8 I, @" J

5 T" p( |; f( ?1 e2 V# p
( r% ~# k% Y2 N* M
 楼主| 发表于 2023-11-6 15:56:23 | 显示全部楼层
systemctl status keepalived.service 1 p7 A8 b  z4 G7 U* K' k2 N
● keepalived.service - LVS and VRRP High Availability Monitor; @! H  d: h: n! W- L
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
5 x; i5 u1 e4 |& |& i   Active: active (running) since Mon 2023-11-06 15:53:45 CST; 2min 9s ago% g& g: C* m- z! D, l6 j" D. ]
  Process: 53301 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
% r+ x) @: Z% p  p. ?' w Main PID: 53302 (keepalived)
" j7 v. @* n! Q    Tasks: 2. t6 P# j8 I! |+ ~3 I
   Memory: 676.0K1 o& {/ D4 b0 r5 h( B5 z$ w; ], a# _
   CGroup: /system.slice/keepalived.service7 ~! W& A* B& ~1 l1 Y  E5 G
           ├─53302 /opt/keepalived/sbin/keepalived -D. O0 u1 K) H: g; j5 I
           └─53303 /opt/keepalived/sbin/keepalived -D
! |% e7 d8 O4 s. \1 L8 C- o: n9 R, c1 V7 x
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) setting VIPs.: W; B1 r  R: }6 `, F
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
( {8 |. L" U- qNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211+ k5 m% Y2 x9 l& x. W) S0 n
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
+ r: ^2 q% `# q. F6 J4 g  u8 c( LNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
$ p9 I5 Z& u% r  w; L9 s8 S8 jNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
8 J8 ]; w& X9 M& U: B0 zNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.2113 F* ]. f- W3 E' A* ]& n7 h$ ^& n9 R
Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Master received advert from 172.20.22.6 with higher priority 99, ours 98
& k4 n4 [2 M& hNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Entering BACKUP STATE/ C9 ?, ]7 ~" n" ?
Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) removing VIPs.( ^+ C: D/ ]) X' o
 楼主| 发表于 2023-11-6 15:59:59 | 显示全部楼层
systemctl status keepalived.service
* |3 k. S+ p: N( {● keepalived.service - LVS and VRRP High Availability Monitor2 J& z- h' g5 o
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)! _) y/ [1 x; {
   Active: active (running) since Mon 2023-11-06 15:55:09 CST; 3min 14s ago, A' e& O* u, o# n) I2 }9 W' L
  Process: 8027 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)1 h+ o( k1 R( H9 l' G5 l' T5 x
Main PID: 8028 (keepalived)
8 J. `5 G/ I; L# P* M, u    Tasks: 2  L, l9 D& g. o" R2 r; Y
   Memory: 680.0K. b& b4 A( C; s% G+ h: L$ `
   CGroup: /system.slice/keepalived.service
4 \/ S( A0 F/ s- _           ├─8028 /opt/keepalived/sbin/keepalived -D
7 p. g! K: D% A. U" D' Y+ Z7 |, a           └─8029 /opt/keepalived/sbin/keepalived -D
! P$ s1 `0 x6 ~! G2 p* Q0 t' t* P9 @) D  f: P; x; K
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211& l" H7 H0 N$ W8 n# U, e
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
( w8 V( C- e0 ~Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
8 E' @/ q3 P- B4 M, a% aNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.2118 z2 n' a0 B4 j
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.2115 l* J. ?# u" ]1 j- t& J( d
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
4 q* I; B7 k" [3 k% l4 h/ kNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211( z4 K+ N' ?5 J! N" G, Q& W
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
# c$ o8 v1 t5 ENov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.2113 z5 U; }( o# z) k8 r, R# B* I8 i# N
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.2119 U# r0 K# i" N3 ^( h/ @
 楼主| 发表于 2023-12-6 14:20:35 | 显示全部楼层
修改比较成功的keepalived服务:9 l  \2 `' [( g% ~3 O
! Configuration File for keepalived5 J3 k: i0 E8 n4 z, Q4 w6 W* }( U
; h- _9 _- s0 r- K
global_defs {
! {8 I, F- i/ F6 K# W    smtp_connect_timeout 30# h; O7 A8 H/ }/ b3 T
    router_id lb01; J3 {# C- Y6 B1 t
}
$ o& C% B% Z$ X3 Y0 e6 `( ?
+ k2 @9 A# F+ Z( s4 F  |+ r8 kvrrp_script nginx_check {
' i, @% f* `6 [& @# T& X    script "/opt/check_scripts/nginx_check.sh"! L. Z, r2 C2 i6 _: F- p' `4 I
    interval 10* \- T+ z/ c- ]. }! E! \; M
    weight -2
8 ]/ e7 L2 l( H0 V8 u2 c    fall  3
  k7 H5 ~2 ?9 c0 O5 I    rise 2
) {2 D2 p/ g7 s; j- D}; h( L2 C' h6 H' j/ m

, I- E3 b8 v" E* H) mvrrp_instance VI_2 {- I$ w) J" T( V8 x4 Q5 I: ~9 h0 D
    state MASTER
! G3 |3 V4 X3 x    interface ens160* ^8 O& O' k' v# ^( \9 ?0 j) r, J
    virtual_router_id 201& Z2 V* ^: ^+ ]& c  Z
    priority 99
4 n3 p- t. O' S+ a" D' B' m' h    advert_int 1
" r- ]) ^# N' p" D) r' x  b    nopreempt
& x/ c2 b, e+ s4 Q# v9 Y. f# L" M3 a. B* q8 ~# _* L
    unicast_src_ip 12.24.21.16   ###本机ip  node1为192.18.10.23
2 ~/ L9 V" q3 X, F" X* A9 m1 h    unicast_peer {2 U2 i! x% p/ Z* z
    12.24.21.17                  ####对端ip  node1为192.18.10.22
6 L5 Y9 [! |' i% n    }  u  ~( o/ \9 j4 y2 t2 f0 j+ ~1 q

% I6 H4 H; s/ z4 ]! V! g) K1 `    authentication {
1 X( _% S; h, s, [: z        auth_type PASS/ s6 R, e4 c3 C8 }* {: D5 C
        auth_pass fit2cloud( c  i# {4 f% l% w
    }
% v  K/ c6 C3 W/ J& m* q& |" k- g8 \3 y0 Z0 d7 S# e) B1 |
    virtual_ipaddress {3 N- }, j1 n" T
        12.24.21.20/24 dev ens1605 N: ?; ^" y) T+ p
    }& Y" t0 g# T( d3 N
    track_script {- ?3 v- {& a  J5 Z& S
        nginx_check4 L% S1 u; K7 K+ D0 I- C
    }
0 f+ ~/ b2 q6 {& z: z, s$ B( n! O/ S7 V}
您需要登录后才可以回帖 登录 | 开始注册

本版积分规则

关闭

站长推荐上一条 /4 下一条

北京云银创陇科技有限公司以云计算运维,代码开发

QQ|返回首页|Archiver|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )点击这里给我发消息

GMT+8, 2026-4-8 21:31 , Processed in 0.056528 second(s), 23 queries .

Powered by Discuz! X3.4 Licensed

© 2012-2025 Discuz! Team.

快速回复 返回顶部 返回列表