欧美日韩在线高清一区,免费无码又爽又刺激激情视频

關(guān)于Linux中Keepalived高可用熱備自動化部署的一些筆記

寫在前面
今天和小伙伴們分享一些 Keepalived 相關(guān)筆記
博文內(nèi)容涉及：
vrrp 協(xié)議由來
Ansible 方式 Keepalived安裝部署
Keepalived 腳本方式配置服務(wù)檢查
Keepalived 自動化部署 Ansible 角色編寫
食用方式：
需要 Linux、Ansible 基礎(chǔ)知識
理解不足小伙伴幫忙指正
「勿忘國恥，銘記歷史」

官網(wǎng)幫助文檔：https://www.keepalived.org/manpage.html

「關(guān)于keepalived是什么，在官網(wǎng)中這樣描述」：

Keepalived 是一個用 C 語言編寫的路由軟件。該項目的主要目標是為 Linux 系統(tǒng)和基于 Linux 的基礎(chǔ)架構(gòu)提供簡單而強大的負載平衡和高可用性設(shè)施。

負載平衡框架依賴于眾所周知且廣泛使用的Linux 虛擬服務(wù)器 (IPVS) 內(nèi)核模塊，提供第 4 層負載平衡。Keepalived 實現(xiàn)了一組檢查器，以根據(jù)其健康狀況動態(tài)和自適應(yīng)地維護和管理負載平衡的服務(wù)器池。(本文不涉及)

高可用性是通過 VRRP實現(xiàn)的協(xié)議。VRRP 是路由器故障轉(zhuǎn)移的基礎(chǔ)。此外，Keepalived 實現(xiàn)了一組與 VRRP 有限狀態(tài)機的掛鉤，提供低級和高速協(xié)議交互。為了提供最快的網(wǎng)絡(luò)故障檢測，Keepalived 實現(xiàn)了BFD協(xié)議。VRRP 狀態(tài)轉(zhuǎn)換可以考慮 BFD 提示來驅(qū)動快速狀態(tài)轉(zhuǎn)換。Keepalived 框架可以單獨使用，也可以一起使用，以提供彈性基礎(chǔ)架構(gòu)

「Keepalived 是免費軟件；您可以根據(jù)自由軟件基金會發(fā)布的 GNU 通用公共許可條款重新分發(fā)和/或修改它；許可證的第 2 版，或（由您選擇）任何更高版本。」

今天和小伙伴分享的主要是高可用熱備部署，關(guān)于負載均衡方面的之后和小伙伴們分享，在部署keepalived之前，需要了解下VRRP協(xié)議

vrrp協(xié)議由來
當網(wǎng)關(guān)路由器出現(xiàn)故障時，本網(wǎng)段內(nèi)以該設(shè)備為網(wǎng)關(guān)的主機都不能與 Internet 進行通信。所以需要進行容災(zāi)處理，但是通過部署多網(wǎng)關(guān)的方式實現(xiàn)網(wǎng)關(guān)的備份,存在一些問題:網(wǎng)關(guān)間IP地址沖突；主機會頻繁切換網(wǎng)絡(luò)出口。所以為解決網(wǎng)關(guān)路由的單點故障，有了VRRP協(xié)議。

VRRP即虛擬路由冗余協(xié)議,VRRP能夠在不改變組網(wǎng)的情況下，從多臺網(wǎng)關(guān)設(shè)備里產(chǎn)生一個虛擬路由器，通過配置虛擬路由器的IP地址為默認網(wǎng)關(guān)，實現(xiàn)網(wǎng)關(guān)的備份。

對外提供網(wǎng)關(guān)服務(wù)的是這個虛擬路由器。這樣不管是真實路由器哪個出現(xiàn)問題，都不會影響整個網(wǎng)絡(luò)的運行，提高了網(wǎng)絡(luò)結(jié)構(gòu)的穩(wěn)定性。

路由器VRRP配置方式
配置VRRP的成員；
配置VRRP的優(yōu)先級 (默認100)；
查看VRRP信息
VRRP協(xié)議通過一種競選機制來將路由任務(wù)交給某個vrrp路由器的。

在VRRP物理結(jié)構(gòu)中，有多個物理的VRRP路由器，其中有一臺稱為“master”（主節(jié)點路由器），其他的都是“backup”（備節(jié)點路由器）

在VRRP虛擬結(jié)構(gòu)中，虛擬路由都是通過MAC+VRID的形式來標識的，如54-89-98-6F-3D-B5-{vrid}只有master節(jié)點才會發(fā)送VRRP包（vrrp advertisement message）當master節(jié)點宕掉的時候，backup中優(yōu)先級最高的VRRP設(shè)備會搶占并升級為master

下面為配置的簡單Demo

三層交換機SW1上配置, 主路由器(Master)

#三層交換機SW1上配置, 主路由器(Master)
<Huawei>system-view #進入系統(tǒng)視圖
[Huawei]sysname SW1 #修改設(shè)備名字
[SW1]
[SW1]undo info-center enable #取消信息提示
#給vlan1配置網(wǎng)關(guān)
[SW1]interface Vlanif 1
[SW1-Vlanif1]ip address 192.168.1.252 255.255.255.0
#將三層交換機SW1配置為VRRP的成員，設(shè)置虛擬IP地址
[SW1-Vlanif1]vrrp vrid 1 virtual-ip 192.168.1.254
#配置VRRP的優(yōu)先級，不寫默認為100
[SW1-Vlanif1]vrrp vrid 1 priority 105
[SW1-Vlanif1]
#查看VRRP配置信息
[SW1-Vlanif1]display vrrp brief
三層交換機SW2上配置,,備用路由器(backup)

#三層交換機SW2上配置,,備用路由器(backup)
<Huawei>system-view #進入系統(tǒng)視圖
[Huawei]sysname SW2 #修改設(shè)備名字
[SW2]
[SW2]undo info-center enable #取消信息提示
#給vlan1配置網(wǎng)關(guān)
[SW2]interface Vlanif 1
[SW2-Vlanif1]ip address 192.168.1.253 255.255.255.0
#將三層交換機SW1配置為VRRP的成員，設(shè)置虛擬IP地址
[SW2-Vlanif1]vrrp vrid 1 virtual-ip 192.168.1.254
#不用設(shè)置優(yōu)先級，默認為100
#查看VRRP配置信息
[SW2-Vlanif1]display vrrp brief

keepalived 安裝部署
回到keepalived中，keepalived 通過VRRP（Virtual Router Redundancy Protocol）虛擬路由冗余協(xié)議來實現(xiàn)故障轉(zhuǎn)移。keepalived正常工作時，主節(jié)點（master）會不斷的發(fā)送心跳信息給備節(jié)點（backup）

┌──[root@vms153.liruilongs.github.io]-[~]
└─$tcpdump -i ens32 -nn host 224.0.0.18 #組播地址
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens32, link-type EN10MB (Ethernet), capture size 262144 bytes
23:27:36.149062 IP 192.168.26.153 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 100, authtype simple, intvl 1s, length 20
23:27:37.150969 IP 192.168.26.153 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 100, authtype simple, intvl 1s, length 20
23:27:38.152021 IP 192.168.26.153 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 100, authtype simple, intvl 1s, length 20
^C
3 packets captured
3 packets received by filter
0 packets dropped by kernel
┌──[root@vms153.liruilongs.github.io]-[~]
└─$
當備節(jié)點在一定時間內(nèi)沒有收到主節(jié)點的心跳信息時，備節(jié)點會認為主節(jié)點宕了，就會接管主節(jié)點上的資源，并繼續(xù)向外提供服務(wù)保證其可用性,當主節(jié)點恢復(fù)時，備節(jié)點會自動讓出資源并再次自動成為備節(jié)點

這里我們通過 ansible 安裝配置，下面的兩臺機器為我們要配置的機器，也就是node組，在master節(jié)點操作

192.168.26.153
192.168.26.154
┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat inventory
[master]
192.168.26.152
[node]
192.168.26.153
192.168.26.154
安裝web服務(wù)測試用

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible node -m shell -a "yum -y install httpd"
編寫一個小劇本用于環(huán)境初始化，這個劇本實現(xiàn)對httpd服務(wù)的歡迎頁進行內(nèi)容填充，重啟服務(wù)，設(shè)置防火墻域為trusted，即沒有規(guī)則

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat httpd.yaml
---
- name: httpd init
hosts: node
tasks:
    - name: httpd content
      shell: "echo `hostname` > /var/www/html/index.html"
    - name: Restart service httpd, in all cases
      service:
        name: httpd
        state: restarted
    - name: firewall
      shell: firewall-cmd --set-default-zone=trusted
┌──[root@vms152.liruilongs.github.io]-[~]
└─$
執(zhí)行劇本并測試填充結(jié)果測試

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible-playbook httpd.yaml
........
┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible node -m shell -a 'hostname;cat /var/www/html/index.html'
192.168.26.154 | CHANGED | rc=0 >>
vms154.liruilongs.github.io
vms154.liruilongs.github.io
192.168.26.153 | CHANGED | rc=0 >>
vms153.liruilongs.github.io
vms153.liruilongs.github.io
安裝 keepalived，我們使用的版本為：keepalived-1.3.5-19.el7.x86_64

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible node -m yum -a 'name=keepalived state=installed'
192.168.26.154 | SUCCESS => {
。。。。。。
編輯配置文件模板，把主備節(jié)點配置文件中不一樣的，或者希望單獨設(shè)置的內(nèi)容做成變量

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepalived.conf.j2
! Configuration File for keepalived

global_defs {
   router_id LVS_DEVEL #設(shè)置路由ID,可以和主機名相同，也可以隨便定義
   vrrp_iptables       #手動添加(禁止設(shè)置防火墻規(guī)則，keepalved每次啟動都會自動添加防火墻拒絕所有的規(guī)則)
}

vrrp_instance VI_1 {
    state {{ role }}
    interface ens32 #定義網(wǎng)絡(luò)接口，根據(jù)自己虛擬機上的網(wǎng)卡修改
    virtual_router_id 51 #主備服務(wù)器VRID號必須保持一致
    priority {{ priority }} #服務(wù)器優(yōu)先級，優(yōu)先級高則優(yōu)先獲得浮動IP
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.26.200
    }
}
編寫劇本，復(fù)制模板文件，然后重啟keepalived服務(wù)，這里我們通過兩個小劇本的方式傳遞不同的變量

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepalived.yaml
---
- name: vms153.liruilongs.github.io config
hosts: 192.168.26.153
tags:
    - master
vars:
    role: MASTER
    priority: 100
tasks:
    - name: copy keeplived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf

    - name: restart keeplived
      service:
        name: keepalived
        state: restarted

- name: vms154.liruilongs.github.io config
hosts: 192.168.26.154
tags:
    - backup
vars:
    role: BACKUP
    priority: 50
tasks:
    - name: copy keepalived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf

    - name: restart keepalived
      service:
        name: keepalived
        state: restarted

運行劇本并測試

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible-playbook keepalived.yaml
。。。。。。。。。。。
假設(shè)153機器應(yīng)為某些原因，需要進行停機處理，我們可以直接把 keepalived 干掉,vip自動切到154

┌──[root@vms152.liruilongs.github.io]-[~]
└─$curl 192.168.26.200:80
vms153.liruilongs.github.io
┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible 192.168.26.153 -m shell -a "systemctl stop keepalived"
192.168.26.153 | CHANGED | rc=0 >>

┌──[root@vms152.liruilongs.github.io]-[~]
└─$curl 192.168.26.200:80
vms154.liruilongs.github.io
┌──[root@vms152.liruilongs.github.io]-[~]
└─$
如果這個時候153機器恢復(fù)，那么我們可以重新拉起keepalived服務(wù)，vip回到153

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible 192.168.26.153 -m shell -a "systemctl start keepalived"
192.168.26.153 | CHANGED | rc=0 >>

┌──[root@vms152.liruilongs.github.io]-[~]
└─$curl 192.168.26.200:80
vms153.liruilongs.github.io
上面的操作，我們可以整合到一個劇本里

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepalived.yaml
---
- name: keepalived init
hosts: node
tasks:
    - name: install
      yum:
        name:
          - httpd
          - keepalived
        state: installed

    - name: httpd content
      shell: "echo `hostname` > /var/www/html/index.html"
    - name: Restarted httpd
      service:
        name: httpd
        state: restarted

    - name: firewall clons
      shell: firewall-cmd --set-default-zone=trusted
# 主機配置
- name: vms153.liruilongs.github.io config
hosts: 192.168.26.153
tags:
    - master
vars:
    role: MASTER
    priority: 100
    vip: 192.168.26.200
    interface: ens32
tasks:
    - name: copy keeplived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf
    - name: restart keepalived
      service:
        name: keepalived
        state: restarted
# 備機配置
- name: vms154.liruilongs.github.io config
hosts: 192.168.26.154
tags:
    - backup
vars:
    role: BACKUP
    priority: 90
    vip: 192.168.26.200
    interface: ens32
tasks:
    - name: copy keepalived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf
    - name: restart keepalived
      service:
        name: keepalived
        state: restarted
對于配置文件也可以更靈活一點

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepalived.conf.j2
! Configuration File for keepalived

global_defs {
   router_id LVS_DEVEL #設(shè)置路由ID,可以和主機名相同，也可以隨便定義
   vrrp_iptables       #手動添加(禁止設(shè)置防火墻規(guī)則，keepalved每次啟動都會自動添加防火墻拒絕所有的規(guī)則)
}

vrrp_instance VI_1 {
    state {{ role }}
    interface {{ interface }} #定義網(wǎng)絡(luò)接口，根據(jù)自己虛擬機上的網(wǎng)卡修改
    virtual_router_id 51 #主備服務(wù)器VRID號必須保持一致
    priority {{ priority }} #服務(wù)器優(yōu)先級，優(yōu)先級高則優(yōu)先獲得浮動IP
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        {{ vip }}
    }
}
有小伙伴會講，這也太水了，每次故障都需要自己去進行主備切換，其實上面的配置為keepalived的最簡單配置，沒有使用keepalived 的檢查配置，，告警等其他的功能。

如果是IPVS使用keepalived，可以對后端RealServer進行健康狀況檢查，支持網(wǎng)絡(luò)層、傳輸層、應(yīng)用層進行健康檢查。

配置文件解析
熟悉下配置文件，keepalived的配置文件主要由3部分構(gòu)造，ipvs配置，全局配置，VRRP配置。

# 全局配置（全局配置有Global definitions和Static routes/address，全局定義和靜態(tài)路由）
     global_defs
         {
            ...
         }

# 配置vrrp實例（VRRP實例和VRRP同步組）
# vrrp instance                  # 虛擬路由器，VRRP實例
     vrrp_instance NAME {
          ...
     }
# vrrp synchronization group     # VRRP同步組
     vrrp_sync_group NAME {
          ...
     }
# ipvs的相關(guān)配置
# LVS CONFIGURATION：
     # 集群服務(wù)，服務(wù)內(nèi)的RS
     Virtual server groups
     Virtual server               #ipvs集群的vs和rs
下面為具體的參數(shù)解釋

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived
# 全局配置（全局配置有Global definitions和Static routes/address，全局定義和靜態(tài)路由）
global_defs {
# 全局部分定義郵件報警系統(tǒng)，定義郵件發(fā)送目標，收件人郵箱地址
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   # 定義發(fā)件人郵箱地址
   notification_email_from Alexandre.Cassen@firewall.loc
   # 定義郵件發(fā)送服務(wù)器IP，本地發(fā)送寫localhost
   smtp_server 192.168.200.1
   # 定義郵件服務(wù)器建立連接的超時時長
   smtp_connect_timeout 30
   # 標識keepalived服務(wù)器的字符串，物理節(jié)點的標識符；
   router_id LVS_DEVEL
   # 如果通告與接收的上一個通告來自相同的master路由器，則不執(zhí)行檢查
   vrrp_skip_check_adv_addr
   # 嚴格遵守VRRP協(xié)議，這一項最好關(guān)閉（加感嘆號），若不關(guān)閉，可用vip無法被ping通
   ! vrrp_strict
   # 在一個接口發(fā)送的兩個免費ARP之間的延遲，可以精確到毫秒級（默認是0）
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   # IPV4多播地址，默認224.0.0.18
   vrrp_mcast_group4 225.0.0.18
}

# 檢查調(diào)用
vrrp_script <SCRIPT_NAME> {          # 腳本名，后面要基于腳本名來進行調(diào)用
        script "/etc/keepalived/chk_script.sh"   # 執(zhí)行的命令或腳本
        interval INT          # 每隔多少時間，這個監(jiān)控腳本要執(zhí)行一次
        weight   -INT          # 失敗了，當前節(jié)點的權(quán)重要減去多少,對于“weight”值的設(shè)置，有一個簡單的標準，即“weight”值的絕對值要大于Master和Backup節(jié)點“priority”值之差
}

# 虛擬路由器，VRRP實例
vrrp_instance VI_1 {
    # 定義實例的角色狀態(tài)是master還是backup，在當前VRRP實例中此節(jié)點的初始狀態(tài)
    state MASTER
    # 定義vrrp綁定的接口，即接收或發(fā)送心跳通告的接口，即HA監(jiān)測接口
    interface eth0
    # 虛擬路由標識(VRID)，同一實例該數(shù)值必須相同，即master和backup中該值要相同
    virtual_router_id 51
    # 該vrrp實例中本機的keepalived的優(yōu)先級，優(yōu)先級最高的為master（可用范圍0-255）
    # 該選項的優(yōu)先級高于state選項，
    # 即若state指定的是backup，但這里設(shè)置的值最高，則仍為master
    priority 100
    # 心跳信息發(fā)送和接收時間間隔，單位為秒
    advert_int 1
     # 認證方式，同一實例中這個配置必須完全一樣才可通過認證，只建議使用PASS認證
    authentication {
        # 使用簡單字符認證的方式
        auth_type PASS
        # 最多支持8字符，超過8字符將只取前8字符
        auth_pass 1111
    }
    # 設(shè)置的VIP，當master出現(xiàn)故障后，VIP會故障轉(zhuǎn)移到backup
    virtual_ipaddress {
       # 一般情況下我們只設(shè)置一個VIP地址，也可以設(shè)置多個
       # 這些vip默認配置在interface指定的接口別名上，可使用dev選項來指定網(wǎng)卡: 192.168.200.19/24 dev eth1
       # 使用ip add的方式添加，若要被ifconfig查看，在IP地址后加上label即可
        192.168.200.16
        192.168.200.17
        192.168.200.18
    }

    # 調(diào)用檢查
    track_script {
        chk_service
    }

    # 使用非搶占模式
    nopreempt
    #非搶占式：如果backup路由器工作在此模式下，則若Master路由器沒有出現(xiàn)故障，backup即使隨后被配置了更高的優(yōu)先級也不會成為Master

    # 使用延遲搶占模式
    preempt_delay TIME
    #搶占式：如果backup路由器工作在搶占方式下，當它收到VRRP報文后，會將主機的優(yōu)先級與通告報文中的優(yōu)先級進行比較，如果主機的優(yōu)先級比當前的Master路由器的優(yōu)先級高，就會主動搶占成為Master路由器，否則，將保持Backup狀態(tài)

    notify_master <STRING>|<QUOTED-STRING> # 當切換到master模式時，執(zhí)行此腳本
    notify_backup <STRING>|<QUOTED-STRING> # 當切換到backup模式時，執(zhí)行此腳本
    notify_fault <STRING>|<QUOTED-STRING>   # 當切換到fault模式時，執(zhí)行此腳本
    notify <STRING>|<QUOTED-STRING>

}
服務(wù)檢查
在上面的Demo的基礎(chǔ)上，我們添加一個檢查腳本,使用下面的檢查策略。來檢查httpd服務(wù)是否可用

┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl status httpd > /dev/null
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$echo $?
0
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl stop httpd.service
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl status httpd > /dev/null
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$echo $?
3
也可以這樣

┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl is-active httpd -q
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$echo $?
3
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl start httpd
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl is-active httpd -q
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$echo $?
0
或者這樣

┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl show httpd -p ActiveState
ActiveState=active
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl show httpd -p ActiveState | sed 's/ActiveState=//g'
active
是否運行和是否活躍是兩個概念，對于某些一次性服務(wù)可以使用下面的方式驗證

┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl show httpd -p ActiveState | cut -d'=' -f2
active
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$systemctl show httpd -p SubState | cut -d'=' -f2
running
┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$
keepalived部署服務(wù)健康檢查劇本

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepaliveds.yaml
---
- name: keepalived init
hosts: node
tasks:
    - name: install
      yum:
        name:
          - httpd
          - keepalived
        state: installed

    - name: httpd content
      shell: "echo `hostname` > /var/www/html/index.html"

    - name: Restarted httpd
      service:
        name: httpd
        state: restarted

    - name: firewall clons
      shell: firewall-cmd --set-default-zone=trusted
# 主機配置
- name: vms153.liruilongs.github.io config
hosts: 192.168.26.153
tags:
    - master
vars:
    role: MASTER
    priority: 100
tasks:
    - name: copy keeplived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf
    - name: copy che_service
      copy:
        content: "#!/bin/sh\nsystemctl is-active httpd -q"
        dest: /etc/keepalived/che_service.sh
        backup: yes
        mode: '0755'
    - name: restart keepalived
      service:
        name: keepalived
        state: restarted

# 備機配置
- name: vms154.liruilongs.github.io config
hosts: 192.168.26.154
tags:
    - backup
vars:
    role: BACKUP
    priority: 90
tasks:
    - name: copy keepalived config
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf
    - name: copy che_service
      copy:
        content: "#!/bin/sh\nsystemctl is-active httpd -q"
        dest: /etc/keepalived/che_service.sh
        mode: '0755'
        backup: yes
    - name: restart keepalived
      service:
        name: keepalived
        state: restarted
運行測試

┌──[root@vms152.liruilongs.github.io]-[~]
└─$curl 192.168.26.200
vms153.liruilongs.github.io
┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible 192.168.26.153 -m service -a 'name=httpd state=stopped'
192.168.26.153 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    },
    "changed": true,
    "name": "httpd",
    "state": "stopped",
.............
┌──[root@vms152.liruilongs.github.io]-[~]
└─$curl 192.168.26.200
vms154.liruilongs.github.io
┌──[root@vms152.liruilongs.github.io]-[~]
└─$
配置文件模板

┌──[root@vms152.liruilongs.github.io]-[~]
└─$cat keepalived.conf.j2
! Configuration File for keepalived

global_defs {
   router_id LVS_DEVEL #設(shè)置路由ID,可以和主機名相同，也可以隨便定義
   vrrp_iptables       #手動添加(禁止設(shè)置防火墻規(guī)則，keepalved每次啟動都會自動添加防火墻拒絕所有的規(guī)則)
}

vrrp_script chk_service {
    script /etc/keepalived/che_service.sh
    interval 2
}

vrrp_instance VI_1 {
    state {{ role }}
    interface ens32 #定義網(wǎng)絡(luò)接口，根據(jù)自己虛擬機上的網(wǎng)卡修改
    virtual_router_id 51 #主備服務(wù)器VRID號必須保持一致
    priority {{ priority }} #服務(wù)器優(yōu)先級，優(yōu)先級高則優(yōu)先獲得浮動IP
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.26.200
    }

    track_script {
        chk_service
    }
}
這個劇本調(diào)了好些時間，需要注意的是，配置文件不能有其他的非空格的字符，檢查腳本要記得授權(quán)，如果沒有執(zhí)行檢查腳本，可以看下 /var/log/messages 日志文件

┌──[root@vms153.liruilongs.github.io]-[/etc/keepalived]
└─$cat /var/log/messages | grep -C 10 track
keepalived 角色編寫
我們也可以把上面的劇本編寫為角色，需要把handlers和和其他的東西抽出來

┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible-galaxy init keepalived --init-path=./roles
- Role keepalived was created successfully
┌──[root@vms152.liruilongs.github.io]-[~]
└─$ansible-galaxy list
# /root/roles
- keepalived, (unknown version)
┌──[root@vms152.liruilongs.github.io]-[~]
└─$
編寫task

┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$cat tasks/main.yml
---
# tasks file for keepalived

# 安裝 keepalived
- name: Install keepalived
yum:
    name: keepalived
    state: latest
tags: keepalived
notify: restart keepalived

# copy 配置文件
- name: Keepalived configuration
template:
    src: keepalived.conf.j2
    dest: /etc/keepalived/keepalived.conf
notify: restart keepalived
# copy 檢查腳本
- when: check_service_name | default(False)
name: Install check script
copy:
    content: "#!/bin/sh\nsystemctl is-active {{ check_service_name }} -q"
    dest: /etc/keepalived/che_service.sh
    backup: yes
    mode: 0755
    owner: root
    group: root
notify: restart keepalived

# 啟動服務(wù)
- name: Start keepalived
service:
    name: keepalived
    state: started
    enabled: yes
編寫handlers

┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$cat handlers/main.yml
---
# handlers file for keepalived

- name: restart keepalived
service:
    name: keepalived
    state: restarted
┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$
編寫template

┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$cat templates/keepalived.conf.j2
! Configuration File for keepalived

global_defs {
   router_id LVS_DEVEL #設(shè)置路由ID,可以和主機名相同，也可以隨便定義
   vrrp_iptables       #手動添加(禁止設(shè)置防火墻規(guī)則，keepalved每次啟動都會自動添加防火墻拒絕所有的規(guī)則)
}

vrrp_script chk_service {
    script /etc/keepalived/che_service.sh
    interval 2
}

vrrp_instance VI_1 {
    state {{ keep_role }}
    interface {{ keep_interface }} #定義網(wǎng)絡(luò)接口，根據(jù)自己虛擬機上的網(wǎng)卡修改
    virtual_router_id 51 #主備服務(wù)器VRID號必須保持一致
    {% if keep_role.lower() == 'master' %}
    priority {{ keep_priority }}
    {% else %}
    priority {{ keep_backup_priority }}
    {% endif %}
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        {{ virtual_ipaddress }} dev {{ keep_interface }}
    }

    track_script {
        chk_service
    }
}
┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$
編寫defaults變量

┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$cat defaults/main.yaml
---

keep_role: "master"
keep_priority: 100
keep_backup_priority: 50
keep_interface: "ens32"
virtual_ipaddress: "192.168.26.200"
check_service_name: httpd

編寫調(diào)用劇本

┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$cat tests/test.yml
---
- hosts: 192.168.26.153
vars:
    keep_role: MASTER
roles:
    - keepalived

- hosts: 192.168.26.154
vars:
    keep_role: BACKUP
roles:
    - keepalived
┌──[root@vms152.liruilongs.github.io]-[~/roles/keepalived]
└─$
博文參考
https://www.keepalived.org/manpage.html

https://www.cnblogs.com/hgzero/p/13718516.html

https://unix.stackexchange.com/questions/396630/the-proper-way-to-test-if-a-service-is-running-in-a-script

https://github.com/tcomerma/ansible-keepalived/

https://github.com/demis-svenska/aws-echis/tree/master/src/commcare_cloud/ansible/roles/keepalived

作者：山河已無恙

歡迎關(guān)注微信公眾號：山河已無恙

在线午夜精品自拍小视频_无码av无码专区线_亚洲无码精品人妻_人人澡欧美一区

運維