keepalived现在一个环境中只给某个地址发vrrp请求限制

admin

- v! f+ B" g* O5 I- I/ Akeepalived现在一个环境中只给某个地址发vrrp请求限制
主节点中

5 @- F, T! M, E( F* \2 wvrrp_instance VI_2 {

; l3 B7 ?% G2 ^& _$ V/ P    .......
     state MASTER
    interface ens160
    virtual_router_id 201
    priority 99
    advert_int 1
* k! N) T" T; r# Q. I/ _- J; y; A  r    nopreempt
1 s6 i9 F7 ?8 c3 {
    unicast_src_ip 172.20.22.6   ###本机ip  node1为192.168.10.23
    unicast_peer {
. _6 l2 |: m' v    172.20.22.7  ####对端ip  node1为192.168.10.22
    }

) e: M( d5 _; I# B* A1 }........
6 _, D( i/ ?" q) U5 E/ o}
" |" Y; ]* ^7 H9 i
备节点：
vrrp_instance VI_2 {
; s# Q; F) a+ f9 D8 ~3 x( T    .......
3 D1 I; o  }0 _0 Y" J8 d7 n     state BACKUP
" P) X2 c8 T2 k# d8 b! K# i, T    interface ens160
3 f6 n9 B, w3 f8 |4 W& U    virtual_router_id 201
- v& m$ E( J! p/ k# ?2 k    priority 99
    advert_int 1
8 S% n7 L* N1 |    nopreempt
+ E: o! ^) K' T& ?& W; Q7 u1 b7 S
# `$ [* i1 t& k& H3 o' E    unicast_src_ip 172.20.22.7   ###本机ip  node1为192.168.10.23
    unicast_peer {
+ S! P3 d( e+ \  s) F: e# q    172.20.22.6  ####对端ip  node1为192.168.10.22
- o. y4 a4 u# G, T# E( \6 \3 ?    }

.......
}

0 B6 S' `, ~9 N$ j, U' L

admin

systemctl status keepalived.service
5 [1 K: f) Q5 D: b● keepalived.service - LVS and VRRP High Availability Monitor
, r/ C1 M$ {, Z& Y- v5 N2 X   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
9 S% V+ w. S! X% H$ ^3 M1 |( E   Active: active (running) since Mon 2023-11-06 15:53:45 CST; 2min 9s ago
  Process: 53301 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
* d8 l0 k9 t2 ^/ b2 F$ T; ^% D$ Z- o Main PID: 53302 (keepalived)
    Tasks: 2
, r* m' ?& h* \, O2 ?- _   Memory: 676.0K
7 ^' X& J' S! q9 w   CGroup: /system.slice/keepalived.service
% V/ b" p3 h9 l, v: g2 C: C           ├─53302 /opt/keepalived/sbin/keepalived -D
) B* u# D% d) j; _           └─53303 /opt/keepalived/sbin/keepalived -D

Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) setting VIPs.
/ X3 n- G& v# C9 @- A/ NNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
3 z: ~% g" Y% y3 Q3 l7 cNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
, A8 K8 H9 _. ^) Z2 d/ _% k0 ~% @( vNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Master received advert from 172.20.22.6 with higher priority 99, ours 98
& G- F& o' X1 t7 |# o* GNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Entering BACKUP STATE
% |7 R" s' a5 u7 z; M8 FNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) removing VIPs.

admin

systemctl status keepalived.service
; A5 D9 }( y9 `3 Q& H2 l) v% t% b● keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2023-11-06 15:55:09 CST; 3min 14s ago
$ i( n& ~1 ~7 C" y  Process: 8027 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 8028 (keepalived)
! ?8 k& X4 N+ X7 c    Tasks: 2
' b* m4 f: y( u& o1 q# `5 D   Memory: 680.0K
2 B& d4 o/ c# u  c   CGroup: /system.slice/keepalived.service
: E7 B5 Z* t9 r9 A5 B" ?% {           ├─8028 /opt/keepalived/sbin/keepalived -D
& c0 y2 `7 M5 C; z/ X8 Q8 p- q           └─8029 /opt/keepalived/sbin/keepalived -D
0 A0 ]+ h, Q) n. c' }1 d1 G
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
# g. w4 ^4 I& {- P7 ^3 RNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
& g4 d9 ?; k! n" }* ~: l0 [! t5 zNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
& ^' b8 l" G  B  W& @Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
' v. M1 Z% s2 FNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
! f5 ]( M+ T0 h: VNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211

admin

修改比较成功的keepalived服务：
! Configuration File for keepalived
: Q$ s- S( G( q: `) q' ^
global_defs {
    smtp_connect_timeout 30
    router_id lb01
}

vrrp_script nginx_check {
    script "/opt/check_scripts/nginx_check.sh"
    interval 10
    weight -2
0 W  p; O$ I9 H4 [' w    fall  3
    rise 2
}
& y" t2 A% u9 f" j8 |# m" i
vrrp_instance VI_2 {
9 H! a; p7 ~$ ?* i1 l- k' O( v    state MASTER
    interface ens160
* d3 J. |% G! W/ c    virtual_router_id 201
    priority 99
1 V6 ]$ ^2 V( Z/ T9 y8 `5 h# D" R    advert_int 1
    nopreempt

    unicast_src_ip 12.24.21.16   ###本机ip  node1为192.18.10.23
    unicast_peer {
( b6 M1 B$ y1 v: y/ t2 b; b: r    12.24.21.17                  ####对端ip  node1为192.18.10.22
" r$ y+ I8 g& o; M) M1 |    }

    authentication {
8 w0 y' o( T5 g$ m; `# F4 J        auth_type PASS
        auth_pass fit2cloud
    }
9 e* k/ H  q2 _/ e$ ?
    virtual_ipaddress {
        12.24.21.20/24 dev ens160
2 D, q7 c  {9 F( U, V" }) z    }
0 f! f7 f- I5 {7 p) J- O6 ]    track_script {
6 i9 Y9 _/ ]3 s, d- U3 B9 e4 R        nginx_check
: c' v  u: Q- _: `1 ]# k: x6 u    }
}