keepalived现在一个环境中只给某个地址发vrrp请求限制

admin

keepalived现在一个环境中只给某个地址发vrrp请求限制
$ c9 x8 D+ Z0 H主节点中

vrrp_instance VI_2 {

% t/ \  k, r# E    .......
     state MASTER
    interface ens160
+ R5 E5 B3 W- P& y    virtual_router_id 201
/ l2 w6 H* f) a5 l- }    priority 99
    advert_int 1
! j1 v, \! F. P    nopreempt

    unicast_src_ip 172.20.22.6   ###本机ip  node1为192.168.10.23
    unicast_peer {
    172.20.22.7  ####对端ip  node1为192.168.10.22
    }
2 q  r$ p( x3 z
........
* l$ Q' E# a& H2 u" s  e( O}
: l. y9 `+ }) u" s$ \0 w
7 O! p; U  k9 `备节点：
/ x* m; x/ F) p: }* ?vrrp_instance VI_2 {
4 [$ L  q9 d5 {+ q: \' h- B    .......
     state BACKUP
    interface ens160
) E' R3 {& T) j0 d2 {7 b: v    virtual_router_id 201
6 p0 A& g2 y4 G6 n* j    priority 99
) z2 R' {; s4 v    advert_int 1
/ O, L1 c$ |0 e. M  {$ F. q    nopreempt
6 T0 k6 w+ C, |5 e
9 |: O- J. x* h* W' L0 h! t8 ^" a    unicast_src_ip 172.20.22.7   ###本机ip  node1为192.168.10.23
3 ]# _( T8 ?4 Q( v    unicast_peer {
    172.20.22.6  ####对端ip  node1为192.168.10.22
/ N1 U, [' ]" o+ O    }

.......
2 U9 l! k" x. X  H" @& \6 N}

5 c- V: K8 |' j
$ C. f0 M# n% O

admin

systemctl status keepalived.service
● keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
3 }6 V4 g  |' s7 i2 ?   Active: active (running) since Mon 2023-11-06 15:53:45 CST; 2min 9s ago
  Process: 53301 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 53302 (keepalived)
+ t, {: f  L% b. S5 Z    Tasks: 2
   Memory: 676.0K
   CGroup: /system.slice/keepalived.service
  X2 B: r7 M  K: L- J           ├─53302 /opt/keepalived/sbin/keepalived -D
           └─53303 /opt/keepalived/sbin/keepalived -D
- s0 f( p' d  {: o
2 _( t' b6 P; q" Y5 M' kNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) setting VIPs.
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
! ~( p0 H* L# i( u5 k3 J. `Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
' E, {  U1 L7 e$ O& VNov 06 15:55:26  r_02 Keepalived_vrrp[53303]: Sending gratuitous ARP on ens160 for 172.20.22.211
9 S) h( e9 t" g' a+ ]Nov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Master received advert from 172.20.22.6 with higher priority 99, ours 98
1 s+ T: q( M/ O- v" ]. ONov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) Entering BACKUP STATE
8 M9 w# o5 _& g9 b" NNov 06 15:55:30  r_02 Keepalived_vrrp[53303]: (VI_2) removing VIPs.
1 N  P0 d+ I* p- ]0 a$ b+ q( A  T

admin

systemctl status keepalived.service
8 J4 c7 c; x/ N: Y' I5 O● keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled; vendor preset: disabled)
0 ]; B0 T4 K/ f# ^   Active: active (running) since Mon 2023-11-06 15:55:09 CST; 3min 14s ago
( f0 a: `7 H/ O/ Y/ v- T  Process: 8027 ExecStart=/opt/keepalived/sbin/keepalived $KEEPALIVED_OPTIONS (code=exited, status=0/SUCCESS)
0 S  q. h: Q: W6 G$ t! \0 r& q: E# K Main PID: 8028 (keepalived)
0 S+ P/ U% M" S1 c2 n, _; ]    Tasks: 2
( b$ X+ I2 z$ I: C" y* ~/ @   Memory: 680.0K
; o* K% Q' M: j8 M& q   CGroup: /system.slice/keepalived.service
$ U) d6 a! _1 u4 v2 C7 q' ?           ├─8028 /opt/keepalived/sbin/keepalived -D
           └─8029 /opt/keepalived/sbin/keepalived -D
1 ?3 P1 E( k9 f/ w
Nov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
- L( t5 O& J( I) c8 y8 B' f- UNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
" o# Z; i6 ?- V& z5 F! r* C# uNov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
3 i9 ^& t' F9 ~( `8 `: i( INov 06 15:55:12 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
  a  \. b7 d2 M) R2 k3 \* cNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: (VI_2) Sending/queueing gratuitous ARPs on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
Nov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211
; ?2 G4 \9 q& [( S3 u$ C* sNov 06 15:55:17 r_01 Keepalived_vrrp[8029]: Sending gratuitous ARP on ens160 for 172.20.22.211

admin

修改比较成功的keepalived服务：
! Configuration File for keepalived
9 D3 H# t8 g2 B# Y
global_defs {
# d9 K: n* j4 n2 |' ~0 s    smtp_connect_timeout 30
    router_id lb01
" e" T1 y, r& G/ I% g/ @5 W7 z: ]}
* [) Q2 f+ F1 }3 P3 O; ?# o
  x  E: I6 v! i; \% C4 b" Lvrrp_script nginx_check {
9 [  y! }. ^$ M( _7 _; P    script "/opt/check_scripts/nginx_check.sh"
    interval 10
0 ~$ {8 U! @/ D1 t    weight -2
    fall  3
    rise 2
}

vrrp_instance VI_2 {
6 h  A. i% K$ F) C    state MASTER
    interface ens160
1 C5 S% r2 z7 H& O* ]3 _: Z0 B    virtual_router_id 201
    priority 99
    advert_int 1
    nopreempt

    unicast_src_ip 12.24.21.16   ###本机ip  node1为192.18.10.23
    unicast_peer {
# e" {  {6 N+ C4 O# L+ l) V2 f    12.24.21.17                  ####对端ip  node1为192.18.10.22
    }

5 Y; T7 R/ S8 ~    authentication {
        auth_type PASS
        auth_pass fit2cloud
    }
( _5 ?$ m( z* w  N
( o0 L3 L, J2 O    virtual_ipaddress {
        12.24.21.20/24 dev ens160
    }
# L) f- a' k- M' D, ?' v$ |0 {4 g    track_script {
' o3 j' V3 b, b) o        nginx_check
( u/ y" I' d  l) u- x* z) }. ~    }
: `) j. S) l  B: A  U& |}