keepalived现在一个环境中只给某个地址发vrrp请求限制

admin

keepalived现在一个环境中只给某个地址发vrrp请求限制
主节点中

% f7 B1 R3 W$ s3 B9 p& Z$ S8 Lvrrp_instance VI_2 {

6 ]. |" `8 E1 r    .......
     state MASTER
) J$ P5 u  S0 ~& Q; C3 _( n  f    interface ens160
* i" y7 m5 D9 L6 D  y. Y; U, I% f    virtual_router_id 201
    priority 99
4 g4 Q/ x8 j+ t* c+ {; e$ ^    advert_int 1
6 J) i, R9 X5 W3 a. |- d# |    nopreempt

& O2 X. u, `2 h/ I    unicast_src_ip 172.20.22.6   ###本机ip  node1为192.168.10.23
    unicast_peer {
    172.20.22.7  ####对端ip  node1为192.168.10.22
& I- c* j7 o1 v. e    }
8 o, r. s5 S. k$ X  G4 C
........
+ E( U$ C  Q3 E/ p}
" M4 f+ E% b: R5 k+ J9 \; W; K
备节点：
vrrp_instance VI_2 {
    .......
     state BACKUP
    interface ens160
% ]3 E" m. r1 _9 h    virtual_router_id 201
! [: M( g3 F  u3 j. q    priority 99
    advert_int 1
    nopreempt
  n. a  ~9 C2 l# a$ @/ I% a
    unicast_src_ip 172.20.22.7   ###本机ip  node1为192.168.10.23
; s3 _. k* T: Z) Q" {1 _    unicast_peer {
2 I# s( F/ d: E( z# T$ W    172.20.22.6  ####对端ip  node1为192.168.10.22
    }
9 R! f2 }% W4 h! V
.......
}


, @0 s- e8 R7 e0 O4 g/ i0 B1 D

admin

systemctl status keepalived.service
● keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2023-11-06 15:53:45 CST; 2min 9s ago
  Process: 53301 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
2 [# U( r! I* v/ ]$ ~: g& N' H Main PID: 53302 (keepalived)
' N- R9 m0 T/ h: b! g    Tasks: 2
   Memory: 676.0K
7 \% _& _& N, R3 V   CGroup: /system.slice/keepalived.service
           ├─53302 /opt/keepalived/sbin/keepalived -D
3 [/ @" T; w" ~; E' x, p# L           └─53303 /opt/keepalived/sbin/keepalived -D
; a6 E" x1 G$ R$ _! |* Y1 W3 X
' x7 v  Y4 Y& E2 Y' FNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) setting VIPs.
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
' g% A1 S8 o2 t% hNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
+ z7 H. ?" [+ }. nNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
# g0 M0 C3 c% G0 t- A$ uNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
! ?9 Y, T4 {4 a; F4 B. {0 pNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
3 c$ x9 V- t6 s) y1 kNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Master received advert from 172.20.22.6 with higher priority 99, ours 98
Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Entering BACKUP STATE
Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) removing VIPs.
1 Q9 T0 ~9 ?6 Y& @/ J# m

admin

systemctl status keepalived.service
7 X& G, P' B3 K5 j5 Y8 Y● keepalived.service - LVS and VRRP High Availability Monitor
" L: R$ s, g. @% [" i   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
' H& X7 E% {5 R) b' i7 I2 _   Active: active (running) since Mon 2023-11-06 15:55:09 CST; 3min 14s ago
  Process: 8027 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 8028 (keepalived)
    Tasks: 2
1 q( J' C# |. `* f   Memory: 680.0K
   CGroup: /system.slice/keepalived.service
# K) I4 c3 [5 T; s* n$ Z  R* z           ├─8028 /opt/keepalived/sbin/keepalived -D
% x6 o  R4 n9 S: S, k           └─8029 /opt/keepalived/sbin/keepalived -D
% }. F$ K5 i  I( n+ A. R
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
* T" q4 J% }) X- H4 }% x- zNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
0 f3 `7 Y: N$ O9 _1 t# H& HNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
% ^2 k1 m  Y' PNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
/ v0 ~! h* r, t; Y$ s+ j# bNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
& ]8 `0 }* \3 ?6 ^

admin

修改比较成功的keepalived服务：
8 \6 g( j- _6 @' g% ~! Configuration File for keepalived

global_defs {
; G; k7 }, s( E0 r9 D* ~    smtp_connect_timeout 30
    router_id lb01
}
# l( @2 c* `& d. ~5 Z
vrrp_script nginx_check {
3 ]+ R( I- d: c* p' ]% D/ T    script "/opt/check_scripts/nginx_check.sh"
0 ^$ K9 [1 {0 P. X& o7 u9 h  o    interval 10
3 @; e: w6 X7 G0 u    weight -2
    fall  3
9 Z7 X, U3 ~% S- b$ B9 w    rise 2
}
% W) n; Z( d: ]. y1 b# w
2 F& k+ V! M7 Z) Z: cvrrp_instance VI_2 {
    state MASTER
    interface ens160
    virtual_router_id 201
    priority 99
  \2 v" \" n! c    advert_int 1
; ]/ z" u* v% y    nopreempt

    unicast_src_ip 12.24.21.16   ###本机ip  node1为192.18.10.23
    unicast_peer {
9 B6 O* V' N; A) d* T1 ]    12.24.21.17                  ####对端ip  node1为192.18.10.22
    }
5 J- x/ {7 _8 G" V4 j
5 J( I$ V/ h6 }' }! r4 W0 I9 Z    authentication {
$ @2 @( r3 {8 K) m# F% {1 Z6 Q        auth_type PASS
        auth_pass fit2cloud
+ o4 V% I( L$ P) M0 i3 F    }

    virtual_ipaddress {
; n) p2 x, H' B/ I! S        12.24.21.20/24 dev ens160
5 x0 F  |1 ^* [6 h3 ^6 i/ \    }
    track_script {
1 \1 ^  B, _1 u* k' C8 y& n        nginx_check
    }
}