yum -y install keepalived # 两节点都需部署
# 172.16.25.109
# vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {notification_email {root@localhost}notification_email_from admin@lnmmp.comsmtp_connect_timeout 3smtp_server 127.0.0.1router_id LVS_DEVEL
}
vrrp_script chk_maintaince_down {script "[[ -f /etc/keepalived/down ]] && exit 1 || exit 0"interval 1weight 2
}
vrrp_script chk_haproxy {script "killall -0 haproxy"interval 1weight 2
}
vrrp_instance VI_1 {interface eth0state MASTERpriority 100virtual_router_id 125garp_master_delay 1authentication {auth_type PASSauth_pass 1e3459f77aba4ded}track_interface {eth0}virtual_ipaddress {172.16.25.10/16 dev eth0 label eth0:0}track_script {chk_haproxy}notify_master "/etc/keepalived/notify.sh master 172.16.25.10"notify_backup "/etc/keepalived/notify.sh backup 172.16.25.10"notify_fault "/etc/keepalived/notify.sh fault 172.16.25.10"
}
vrrp_instance VI_2 {interface eth0state BACKUPpriority 99virtual_router_id 126garp_master_delay 1authentication {auth_type PASSauth_pass 7615c4b7f518cede}track_interface {eth0}virtual_ipaddress {172.16.25.11/16 dev eth0 label eth0:1}track_script {chk_haproxy
chk_maintaince_down}notify_master "/etc/keepalived/notify.sh master 172.16.25.11"notify_backup "/etc/keepalived/notify.sh backup 172.16.25.11"notify_fault "/etc/keepalived/notify.sh fault 172.16.25.11"
}
# 172.16.25.110
# vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {notification_email {root@localhost}notification_email_from admin@lnmmp.comsmtp_connect_timeout 3smtp_server 127.0.0.1router_id LVS_DEVEL
}
vrrp_script chk_maintaince_down {script "[[ -f /etc/keepalived/down ]] && exit 1 || exit 0"interval 1weight 2
}
vrrp_script chk_haproxy {script "killall -0 haproxy"interval 1weight 2
}
vrrp_instance VI_1 {interface eth0state BACKUPpriority 99virtual_router_id 125garp_master_delay 1authentication {auth_type PASSauth_pass 1e3459f77aba4ded}track_interface {eth0}virtual_ipaddress {172.16.25.10/16 dev eth0 label eth0:0}track_script {chk_haproxy
chk_maintaince_down}notify_master "/etc/keepalived/notify.sh master 172.16.25.10"notify_backup "/etc/keepalived/notify.sh backup 172.16.25.10"notify_fault "/etc/keepalived/notify.sh fault 172.16.25.10"
}
vrrp_instance VI_2 {interface eth0state MASTERpriority 100virtual_router_id 126garp_master_delay 1authentication {auth_type PASSauth_pass 7615c4b7f518cede}track_interface {eth0}virtual_ipaddress {172.16.25.11/16 dev eth0 label eth0:1}track_script {chk_haproxy}notify_master "/etc/keepalived/notify.sh master 172.16.25.11"notify_backup "/etc/keepalived/notify.sh backup 172.16.25.11"notify_fault "/etc/keepalived/notify.sh fault 172.16.25.11"
}
# vi /etc/keepalived/notify.sh
#!/bin/bash
# Author: Jason.Yu <admin@lnmmp.com>
# description: An example of notify script
#
contact='root@localhost'
notify() {mailsubject="`hostname` to be $1: $2 floating"mailbody="`date '+%F %H:%M:%S'`: vrrp transition, `hostname` changed to be $1"echo $mailbody | mail -s "$mailsubject" $contact
}
case "$1" inmaster)notify master $2/etc/rc.d/init.d/haproxy startexit 0;;backup)notify backup $2/etc/rc.d/init.d/haproxy stopexit 0;;fault)notify fault $2/etc/rc.d/init.d/haproxy stopexit 0;;*)echo 'Usage: `basename $0` {master|backup|fault}'exit 1;;
esac

vrrp_script chk_haproxy {script "/etc/keepalived/chk_haproxy.sh"  # 检查脚本interval 2weight 2# 刚才两个节点 均要有 的监测脚本文件 , 防止 haproxy 停止而 keepalived 不切换的情况
# vim /etc/keepalived/chk_haproxy.sh
#
#
#!/bin/bash
#
if ! `pidof haproxy &> /dev/null`; then/etc/rc.d/init.d/haproxy  start
fi
sleep 2
if ! `pidof haproxy &> /dev/null`; then/etc/rc.d/init.d/keepalived stop
fi

service keepalived start # 在两个节点上都需要启动

yum -y install haproxy # 两节点都需部署
vi /etc/haproxy/haproxy.cfg # 两节点配置一致
globallog         127.0.0.1 local2chroot      /var/lib/haproxypidfile     /var/run/haproxy.pidmaxconn     4000user         haproxygroup       haproxydaemon # 以后台程序运行；
defaultsmode                   http # 选择HTTP模式，即可进行7层过滤；log                     globaloption                  httplog # 可以得到更加丰富的日志输出；option                  dontlognulloption http-server-close # server端可关闭HTTP连接的功能；option forwardfor except 127.0.0.0/8 # 传递client端的IP地址给server端，并写入“X-Forward_for”首部中；option                  redispatchretries                 3timeout http-request    10stimeout queue           1mtimeout connect         10stimeout client          1mtimeout server          1mtimeout http-keep-alive 10stimeout check           10smaxconn                 30000
listen statsmodehttpbind0.0.0.0:1080 # 统计页面绑定1080端口；stats enable # 开启统计页面功能；stats hide-version # 隐藏Haproxy版本号；stats uri     /haproxyadmin?stats # 自定义统计页面的访问uri；stats realm   Haproxy\ Statistics # 统计页面密码验证时的提示信息；stats auth    admin:admin # 为统计页面开启登录验证功能；stats admin if TRUE # 若登录用户验证通过，则赋予管理功能；
frontend http-inbind*:80mode httplog globaloption httpcloseoption logasapoption dontlognullcapture request  header Host len 20capture request  header Referer len 60acl url_static       path_beg       -i /static /images /javascript /stylesheetsacl url_static       path_end       -i .jpg .jpeg .gif .png .css .js .htmluse_backend static_servers if url_static # 符合ACL规则的，请求转入后端静态服务器default_backend dynamic_servers # 默认请求转入后端动态服务器
backend static_serversbalance roundrobinserver imgsrv1 192.168.0.25:80 check maxconn 6000 # 静态服务器，可配置多台，还可设置权重weight；
backend dynamic_serversbalance sourceserver websrv1 192.168.0.35:80 check maxconn 1000 # 动态服务器，可配置多台，还可设置权重weight；