keepalived现在一个环境中只给某个地址发vrrp请求限制

admin

keepalived现在一个环境中只给某个地址发vrrp请求限制
主节点中

/ Q( U: s8 u8 s  cvrrp_instance VI_2 {

; w+ R& ]: ^3 @# i3 a    .......
( z1 C8 Y& ]! `/ U  {* x     state MASTER
* f5 U; b/ C, }3 q    interface ens160
* C+ x# C" n7 A; G    virtual_router_id 201
/ R( F6 S0 Z- ]. _. i2 Z    priority 99
    advert_int 1
0 z9 \+ p. m( B& ?, V2 z    nopreempt

    unicast_src_ip 172.20.22.6   ###本机ip  node1为192.168.10.23
; Z2 i# z7 C  R, G% o% Y4 ]    unicast_peer {
    172.20.22.7  ####对端ip  node1为192.168.10.22
  h* G1 r% t; R* t4 k3 Q( a  ~    }
- D7 z9 _. H. N  n9 H4 b; P
........
}

% }1 q3 u! E* I( N& S. p9 p5 F. J备节点：
( ]$ i8 g5 R1 X9 Evrrp_instance VI_2 {
    .......
     state BACKUP
7 T1 v2 [5 H9 j5 A8 ?# q    interface ens160
) }+ s# D. S5 {' j) L$ ^9 y2 v    virtual_router_id 201
    priority 99
    advert_int 1
1 w3 J/ ]/ J! [1 }    nopreempt
* I! h( p. G( A' \
    unicast_src_ip 172.20.22.7   ###本机ip  node1为192.168.10.23
    unicast_peer {
    172.20.22.6  ####对端ip  node1为192.168.10.22
    }

* H- f# P; z& Z0 d4 l1 c1 ?.......
}
1 s) f( Q5 ?' J0 c

9 f& g8 U+ p0 Y" A% ?# V

admin

systemctl status keepalived.service
6 I/ j2 P& p- e5 k● keepalived.service - LVS and VRRP High Availability Monitor
  t* P# |& h+ {   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
$ e  U% |" B$ M' E. U# Q1 L( T   Active: active (running) since Mon 2023-11-06 15:53:45 CST; 2min 9s ago
  Process: 53301 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 53302 (keepalived)
& [2 L" r. Y: O1 K5 R) G5 J& L# H    Tasks: 2
   Memory: 676.0K
   CGroup: /system.slice/keepalived.service
. i9 O$ B' T9 e( x2 i* E: g           ├─53302 /opt/keepalived/sbin/keepalived -D
           └─53303 /opt/keepalived/sbin/keepalived -D
% e  B! I* K" @5 t+ S7 v2 E* ^
7 ]$ _6 ?  s+ nNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) setting VIPs.
0 K1 B, v" i; @" L! mNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
3 p: j! F6 l2 K' GNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
% ?& P, m5 g: D& L7 rNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
- D: T5 M! z) G, X, aNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
/ m. c* j7 H" o' k$ Z! y" L' kNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Master received advert from 172.20.22.6 with higher priority 99, ours 98
3 R. o& k: x6 w  I# M' O" h+ lNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Entering BACKUP STATE
! @( V6 a; H% Z6 |: RNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) removing VIPs.
8 P: l% a2 ^5 V! A

admin

systemctl status keepalived.service
● keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2023-11-06 15:55:09 CST; 3min 14s ago
. {5 g8 j$ e2 f' }0 [7 x# m$ L: m  Process: 8027 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
& ^4 _7 _1 S) M1 A" q4 a- B Main PID: 8028 (keepalived)
) L# F: i0 J- t    Tasks: 2
   Memory: 680.0K
8 U! p% j' }" {# o   CGroup: /system.slice/keepalived.service
           ├─8028 /opt/keepalived/sbin/keepalived -D
' Y& X7 v  b% o9 T% r* E           └─8029 /opt/keepalived/sbin/keepalived -D

Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
. X1 S4 |5 b, z7 QNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
8 p6 V7 y- e7 J5 w8 \( @Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
$ l! F# [- E/ {  t$ P5 QNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211

admin

修改比较成功的keepalived服务：
7 q  U* Y' X! M) Z! Configuration File for keepalived
7 o' L3 s: u4 J
+ r4 C6 `: G- }" Nglobal_defs {
    smtp_connect_timeout 30
    router_id lb01
}
/ Y& w- n- D$ X2 l9 u: k0 V
& ?' b( m% T# J0 b& u) hvrrp_script nginx_check {
! d/ \" b# B1 f4 v& f, Z; J6 f    script "/opt/check_scripts/nginx_check.sh"
    interval 10
3 q2 H8 s' j# C# A    weight -2
0 s2 J3 Y6 r2 }  U    fall  3
    rise 2
}

  ^: `  x0 N0 w8 pvrrp_instance VI_2 {
9 q) Y( A3 l- }1 r& q    state MASTER
    interface ens160
    virtual_router_id 201
    priority 99
    advert_int 1
    nopreempt

: _/ m1 A/ |* `0 g    unicast_src_ip 12.24.21.16   ###本机ip  node1为192.18.10.23
5 |% W) @# a7 i    unicast_peer {
- D+ p- k/ U( z$ N4 G% |    12.24.21.17                  ####对端ip  node1为192.18.10.22
    }

    authentication {
        auth_type PASS
        auth_pass fit2cloud
    }
1 t* N+ k0 V' d3 Q0 |5 G! n
5 C, d; z! ?4 ^; C  ?8 l9 L6 f    virtual_ipaddress {
        12.24.21.20/24 dev ens160
9 E. s+ \. p1 e) Z8 u) l" |7 {    }
    track_script {
8 n& t- i. w* Y& d8 X. S9 H7 j# g        nginx_check
: l6 f- }8 e1 P9 _1 F2 T    }
}