内容要点:
1,实验环境
2,负载均衡调度器部署
一、实验环境:
https://blog.51cto.com/14475876/2470049
https://blog.51cto.com/14475876/2470063
服务器信息
角色IP地址192.168.109.138192.168.109.230192.168.109.131192.168.109.132192.168.109.133192.168.109.137192.168.109.100 需要两个的脚本:
第一个:keepalived.conf
!配置文件keepalive
global_defs {
#接收邮件地址
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
#邮件发送地址
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id NGINX_MASTER
}
vrrp_script check_nginx {
脚本“/usr/地方/nginx/sbin/check_nginx.sh”
}
vrrp_instance VI_1 {
国家的主人
接口eth0
virtual_router_id 51 # VRRP路由ID实例,每个实例是唯一的
优先级100 #优先级,备服务器设置90
advert_int 1 #指定VRRP心跳包通告间隔时间,默认1秒
身份验证{
auth_type通过
auth_pass 1111
}
virtual_ipaddress {
10.0.0.188/24
}
track_script {
check_nginx
}
}
mkdir/usr/local/nginx/sbin/- p
vim/usr/local/nginx/sbin/check_nginx.sh
数=$ (ps ef | grep nginx | egrep简历“grep | $ $”)
如果(“$”eq 0);/etc/init.d/keepalive停止
fi
chmod + x/usr/local/nginx/sbin/check_nginx.sh
第二个:nginx
猫在/etc/yum.repos.d/nginx。回购& lt; & lt;EOF
(nginx)
name=nginx回购
baseurl=http://nginx.org/packages/centos/7/basearch美元/gpgcheck=0
EOF
流{
log_format主要remote_addr upstream_addr美元- [$ time_local]状态upstream_bytes_sent美元”;
access_log/var/log/nginx/k8s-access。日志主要;
上游k8s-apiserver {
服务器10.0.0.3:6443;
服务器10.0.0.8:6443;
}
服务器{
听6443;
proxy_pass k8s-apiserver;
}
}
//首先关闭防火墙:
(root@localhost ~) # systemctl firewalld.service停止
(root@localhost ~) # setenforce 0//将这个脚本文件放进家目录中:
root@localhost ~ # ls
anaconda-ks。cfg initial-setup-ks。cfg keepalive。conf nginx。上海公共模板视频图片文档下载音乐桌面//建立本地百胜仓库:
# vim/etc/yum.repos.d/nginx.repo root@localhost ~
(nginx)
name=nginx回购
baseurl=http://nginx.org/packages/centos/7/basearch美元/gpgcheck=0
root@localhost ~ #百胜列表
(root@localhost ~) # yum安装nginx - y//下载nginx//接下来是添加四层转发:
# vim/etc/nginx/nginx.conf root@localhost ~
添加以下模块:
流{
log_format主要remote_addr upstream_addr美元- [$ time_local]状态upstream_bytes_sent美元”;
access_log/var/log/nginx/k8s-access。日志主要;
上游k8s-apiserver {
服务器192.168.109.138:6443;//master01的IP地址
服务器192.168.109.230:6443;//master02的IP地址
}
服务器{
听6443;
proxy_pass k8s-apiserver;
}
}
(root@localhost ~) # systemctl开始nginx//开启服务//接下来是部署keepalive服务:
root@localhost ~ # yum安装keepalive - y//修改配置文件(nginx01是大师):
# cp keepalive root@localhost ~。参看/etc/keepalived/keepalived.conf
cp:是否覆盖“/etc/keepalive/keepalive。conf”吗?
# vim/etc/keepalived/keepalived.conf root@localhost ~//做如下删改:
!配置文件keepalive
global_defs {
#接收邮件地址
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
#邮件发送地址
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id NGINX_MASTER
}
vrrp_script check_nginx {
脚本”/etc/nginx/check_nginx。sh”# #检测脚本的路径,稍后会创建
}
vrrp_instance VI_1 {
国家的主人
接口ens33
virtual_router_id 51
优先级100 # #优先级
advert_int 1
身份验证{
auth_type通过
auth_pass 1111
}
virtual_ipaddress {
192.168.109.100/24 # #虚拟IP地址
}
track_script {
check_nginx
}
}//nginx02(是备份),配置如下:
!配置文件keepalive
global_defs {
#接收邮件地址
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
#邮件发送地址
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id NGINX_MASTER
}
vrrp_script check_nginx {
脚本”/etc/nginx/check_nginx。sh”# #检测脚本的路径,稍后会创建
}
vrrp_instance VI_1 {
状态备份
接口ens33
virtual_router_id 51
优先级90 # #优先级低于主人
advert_int 1
身份验证{
auth_type通过
auth_pass 1111
}
virtual_ipaddress {
192.168.109.100/24 # #虚拟IP地址
}
track_script {
check_nginx
}
}//创建检测脚本
# vim/etc/nginx/check_nginx.sh root@localhost ~
数=$ (ps ef | grep nginx | egrep简历“grep | $ $”)
如果(“$”eq 0);
systemctl停止keepalive
fi
# chmod + x/etc/nginx/check_nginx root@localhost ~。sh//授权
(root@localhost ~) # systemctl keepalive开始。服务//开启服务
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
null
