当前位置： 首页 > news >正文

wordpress新站5天收录,二维码生成器微信小程序,个人备案能做公司网站吗,桂林腾达网是什么网高可用集群 集群类型 集群类型主要分为负载均衡集群#xff08;LB#xff09;、高可用集群#xff08;HA#xff09;和高性能计算集群#xff08;HPC#xff09;三大类。每种集群类型都有其特定的应用场景和优势。 1. 负载均衡集群#xff08;LB#xff09; 负载均衡集… 高可用集群 集群类型 集群类型主要分为负载均衡集群LB、高可用集群HA和高性能计算集群HPC三大类。每种集群类型都有其特定的应用场景和优势。 1. 负载均衡集群LB 负载均衡集群主要用于提高系统的性能、响应效率和可靠性通过将访问请求分散到多个服务器上以减少单个服务器的负载压力从而提高整体的处理能力和访问速度。在负载均衡集群中LVSLinux Virtual Server和haproxy是两种常用的软件解决方案。 LVSLinux Virtual Server LVS是一个开源的负载均衡器它工作在OSI模型的第四层传输层通过IP负载均衡技术实现高效的请求分发。LVS支持多种工作模式包括NAT网络地址转换、DR直接路由和TUNIP隧道等每种模式都有其特定的应用场景和优缺点。LVS通过IPVSIP Virtual Server模块实现负载均衡IPVS是LVS集群系统的核心软件负责将客户端的请求转发到后端的真实服务器上。haproxy haproxy是一个高性能的TCP/HTTP反向代理服务器和负载均衡器支持大量的并发连接和高可用性。haproxy提供了灵活的负载均衡算法如轮询、最少连接数、源地址哈希等可以根据实际需求进行配置。haproxy还支持SSL卸载、HTTP压缩、会话保持等高级功能可以进一步提升系统的性能和安全性。 2. 高可用集群HA 高可用集群主要用于提高系统的可靠性和可用性确保在部分服务器出现故障时整个系统仍然能够持续提供服务。在高可用集群中keepalived是一款常用的开源软件。 keepalived keepalived通过虚拟路由冗余协议VRRP实现高可用性它可以在主服务器出现故障时自动将虚拟IP地址和服务切换到备份服务器上从而确保服务的连续性。keepalived还提供了多种健康检查机制如ICMP Ping、TCP端口检测和HTTP GET等用于监测后端服务器的运行状态。keepalived的配置相对简单易于管理和维护是构建高可用集群的常用选择之一。 3. 高性能计算集群HPC 高性能计算集群主要用于处理大规模的计算任务如科学计算、数据分析、工程仿真等。HPC集群通过将多个高性能计算机连接在一起利用并行计算和分布式计算技术提高整体的计算能力和处理速度。 HPC集群的特点 高性能HPC集群采用高性能的计算机和存储设备能够提供卓越的计算能力和存储性能。可扩展性HPC集群可以根据实际需求进行扩展增加更多的计算节点和存储设备以满足更大规模的计算任务。灵活性HPC集群支持多种操作系统和应用程序可以灵活配置和部署以适应不同的计算需求。 实现高可用 提升系统高用性的解决方案降低MTTR- Mean Time To Repair(平均故障时间) 解决方案建立冗余机制 主备、主主 active/passive 主/备 active/active 双主 active – HEARTBEAT – passive active – HEARTBEAT – active VRRP虚拟路由冗余协议 解决单点故障 VIP VMAC 工作方式抢占、非抢占、延时抢占 keepalived部署 简介 vrrp协议的软件实现设计目的是为了高可用ipvs服务  负载均衡是一种在真实集群之间分配 IP 流量的方法 服务器提供一个或多个高可用性虚拟服务。在设计负载均衡拓扑时必须考虑负载均衡器本身以及后面的真实服务器的可用性。         Keepalived 为负载均衡和高可用性提供了框架。 负载均衡框架依赖于众所周知且广泛使用的 Linux 虚拟服务器 IPVS 内核模块提供第 4 层负载均衡。 Keepalived 实现了一组健康检查器以动态和自适应的方式 根据服务器池的运行状况维护和管理负载均衡的服务器池。 高可用性是通过虚拟冗余路由协议实现的 VRRP。VRRP是路由器故障切换的基础砖块。keepalived也 实现了一组到 VRRP 有限状态机的钩子 提供低级和高速协议交互。每个Keepalived 框架可以单独使用也可以一起使用以提供弹性基础设施。 简而言之Keepalived 提供了两个主要功能 LVS系统的健康检查实施 VRRPv2 堆栈以处理负载均衡器故障切换 架构 用户空间核心组件 vrrp stackVIP消息通告 checkers监测real server system call实现 vrrp 协议状态转换时调用脚本的功能 SMTP邮件组件 IPVS wrapper生成IPVS规则 Netlink Reflector网络接口 WatchDog监控进程 控制组件提供keepalived.conf 的解析器完成Keepalived配置 IO复用器针对网络目的而优化的自己的线程抽象 内存管理组件为某些通用的内存管理功能例如分配重新分配发布等提供访问权限 特点 部署简单只需要配置一个配置文件即可加入了虚拟路由冗余协议可以保证业务或网络不间断稳定运行 核心功能 健康检查         1、采用tcp三次握手icmp请求http请求udp 、         2、echo请求等方式对负载均衡器后面的实际的服务器(通常是承载真实业务的服务器)进行保活 故障切换         1、主要应用在配置了主备的服务器上使用虚拟路由冗余协议维持主备之间的心跳         2、当主服务器出现问题时由备服务器承载对应的业务从而在最大限度上减少损失并提供服务的稳定性 环境部署 四台主机 vip100 realserver1110 realserver2120 KA1:10 KA2:20 关闭selinux、防火墙 [rootrealserver1 ~]# getenforceDisabled[rootrealserver1 ~]# systemctl status firewalld realserver1/2中安装httpd [rootrealserver1 ~]# yum install httpd -y[rootrealserver1 ~]# echo 192.168.86.110 /var/www/html/index.html[rootrealserver1 ~]# systemctl enable –now httpd[rootrealserver2 ~]# echo 192.168.86.120 /var/www/html/index.html 安装配置服务 KA1/2中 [rootKa1 ~]# yum install keepalived -y 配置文件都是以块block的形式组成每一个块的内容都包含在{ }中 主配置文件 [rootKa1 ~]# vim /etc/keepalived/keepalived.conf 修改全局配置 ! Configuration File for keepalived global_defs { notification_email { 594233887qq.com #keepalived timiniglee-zln163.com } notification_email_from keepalivedKA1.timinglee.org smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id KA1.timinglee.org vrrp_skip_check_adv_addr vrrp_strict vrrp_garp_interval 0 vrrp_gna_interval 0 vrrp_mcast_group4 224.0.0.18 } vrrp_gna_interval 0  后面有0 vrrp_route_id–必须唯一 vrrp_instance VI_1 {state MASTERinterface eth0virtual_router_id 100priority 100advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.86.¹⁰⁰⁄₂₄ dev eth0 label eth0:1} } 修改后重启 [rootKa1 ~]# systemctl enable –now keepalived.service 把配置复制到另一台 [rootKa1 ~]# scp /etc/keepalived/keepalived.conf root192.168.86.20:/etc/keepalived/keepalived.conf 修改优先级、state vrrp_instance VI_1 {state BACKUPinterface eth0virtual_router_id 100 测试效果–抓包命令 [rootKa1 ~]# tcpdump -i eth0 -nn host 224.0.0.18 解决VIP不能通信 global_defs {notification_email {1540509690qq.com}notification_email_from keepalivedtiminglee.orgsmtp_server 127.0.0.1smtp_connect_timeout 30router_id ka1.timinglee.orgvrrp_skip_check_adv_addrvrrp_strictvrrp_garp_interval 0vrrp_gna_interval 0vrrp_mcast_group4 224.0.0.18vrrp_iptables }日志 生成日志 [rootka1 ~]# vim /etc/sysconfig/keepalived 指定0-7 KEEPALIVED_OPTIONS-D -S 6 [rootka1 ~]# systemctl restart keepalived.service[rootka1 ~]# vim /etc/rsyslog.conf# Save boot messages also to boot.log local7.* /var/log/boot.log local6.* /var/log/keepalived.log查看是否生成 [rootka1 ~]# systemctl restart rsyslog.service[rootka1 ~]# systemctl restart keepalived.service测试[rootka1 ~]# ll /var/log/keepalived.log -rw——- 1 root root 8168 Aug 11 21:11 /var/log/keepalived.log 独立配置子文件 创建子配置目录 [rootKa1 ~]# mkdir -p /etc/keepalived/conf.d[rootKa1 ~]# vim /etc/keepalived/conf.d/192.168.86.100.conf 修改主配置文件 [rootKa1 ~]# vim /etc/keepalived/keepalived.conf #vrrp_instance VI_1 {

state MASTER

interface eth0

virtual_router_id 100

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass 1111

}

virtual_ipaddress {

192.168.86.¹⁰⁰⁄₂₄ dev eth0 label eth0:1

}

#} include /etc/keepalived/conf.d/.conf注释掉上面的加入指向子配置文件路径 include /etc/keepalived/conf.d/.conf 在子配置文件写配置 [rootKa1 ~]# cat /etc/keepalived/conf.d/192.168.86.100.confvrrp_instance VI_1 {state MASTERinterface eth0virtual_router_id 100priority 100advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.86.¹⁰⁰⁄₂₄ dev eth0 label eth0:1}}[rootKa1 ~]#   然后重启服务 [rootKa1 ~]# systemctl restart keepalived.service[rootKa1 ~]# systemctl restart rsyslog.service Keepalived企业应用示例 抢占模式和非抢占模式 默认为抢占模式推荐使用非抢占模式 [rootKa1 ~]# vim /etc/keepalived/keepalived.conf vrrp_instance VI_1 {state BACKUPinterface eth0virtual_router_id 100priority 100advert_int 1nopreempt #设置非抢占模式authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.86.¹⁰⁰⁄₂₄ dev eth0 label eth0:1} }#include /etc/keepalived/conf.d/.conf重启keepalived 延时抢占 [rootKa1 ~]# vim /etc/keepalived/keepalived.confpreempt_delay 5s #设置延迟5s抢占VIP单播配置 [rootKa1 ~]# vim /etc/keepalived/keepalived.conf 禁用vrrp_strict 10 unicast_src_ip 192.168.86.10unicast_peer {192.168.86.20} 20 unicast_src_ip 192.168.86.20unicast_peer {192.168.86.10} 效果 [rootKa1 ~]# tcpdump -i eth0 -nn src host 192.168.86.10 and dst 192.168.86.20tcpdump: verbose output suppressed, use -v or -vv for full protocol decodelistening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes14:46:13.904625 IP 192.168.86.10 192.168.86.20: VRRPv2, Advertisement, vrid 100, prio 100, authtype simple, intvl 1s, length 20 邮件通知 [rootka1 ~]# yum install mailx -y[rootka1 ~]# vim /etc/mail.rc[rootka1 ~]# echo hello world | mail -s test 2584896723qq.com set from2584896723qq.comset smtpsmtp.qq.comset smtp-auth-user2584896723qq.comset smtp-auth-passwordrbdnzxqskffidjjjset smtp-authloginset ssl-verifyignore QQ邮箱–账号与安全–安全设置 [rootka1 ~]# vim /etc/keepalived/mail.sh#! /bin/bashmail_dst2584896723qq.comsend_message(){mail_sub\(HOSTNAME to be \)1 vip movemail_msgdate %F\ %T:vrrp move \(HOSTNAME chage \)1echo \(mail_msg | mail -s \)mail_sub \(mail_dst}case \)1 inmaster)send_message master;;backup)send_message backup;;fault)send_message fault;;);;esac [rootka1 ~]# chmod x /etc/keepalived/mail.sh[rootka1 ~]# vim /etc/keepalived/keepalived.conf#按如下添加的配置notify_master /etc/keepalived/mail.sh masternotify_backup /etc/keepalived/mail.sh backupnotify_fault /etc/keepalived/mail.sh fault实现master/master的keepalived双主架构 ka1第二个 ka2第二个 实现IPVS的高可用性LVSkeepalived [rootrealserver2 ~]# vim /etc/sysctl.d/arp.confnet.ipv4.conf.all.arp_ignore1 net.ipv4.conf.all.arp_announce2 net.ipv4.conf.lo.arp_ignore1 net.ipv4.conf.lo.arp_announce2[rootrealserver2 ~]# sysctl -p [rootrealserver2 ~]# sysctl –system
[rootka1 ~]# vim /etc/keepalived/keepalived.confvirtual_server 192.168.86.100 80 {delay_loop 6lb_algo wrrlb_kind DR.#persistence_timeout 50protocol TCPreal_server 192.168.86.110 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}} real_server 192.168.86.110 80 {weight 1SSL_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 2delay_before_retry 2}} ###############################################################real_server 192.168.86.120 80 {weight 1SSL_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 2delay_before_retry 2}} } [rootka2 ~]# vim /etc/keepalived/keepalived.confvirtual_server 192.168.86.100 80{delay_loop 6lb_algo wrrlb_kind DR#persistence_timeout 50protocol TCPreal_server 192.168.86.110 80 {weight 1SSL_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 2delay_before_retry 2}} ##################################################################real_server 192.168.86.120 80 {weight 1SSL_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 2delay_before_retry 2}}}
[rootka2 ~]# curl 172.25.254.110 172.25.254.110[rootka2 ~]# systemctl restart keepalived.service 实现其他应用的高可用性 VRRP Script(keepalivedhaproxy) 利用脚本实现主从角色切换 [rootka1 ~]# vim /etc/keepalived/test.sh #! /bin/bash [ ! -f /mnt/lee ][rootka1 ~]# sh /etc/keepalived/test.sh[rootka1 ~]# echo $? ​0[rootka1 ~]# touch /mnt/lee[rootka1 ~]# chmod x /etc/keepalived/test.sh[rootka1 ~]# sh /etc/keepalived/test.sh [rootka1 ~]# vim /etc/keepalived/keepalived.confvrrp_script check_file {script /etc/keepalived/test.shinterval 1weight -30fall 2rise 2timeout 2 }…track_script {check_file}… [rootka1 ~]# systemctl restart keepalived.service[rootka1 ~]# ls /mnt/lee/mnt/lee keepalivedhaproxy实现高可用 [rootka1 ~]# yum install haproxy -y 两台主机都做 [rootka1 ~]# vim /etc/sysctl.conf# sysctl settings are defined through files in

/usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.

#

Vendors settings live in /usr/lib/sysctl.d/.

To override a whole file, create a new file with the same in

/etc/sysctl.d/ and put new settings there. To override

only specific settings, add a file with a lexically later

name in /etc/sysctl.d/ and put new settings there.#For more information, see sysctl.conf(5) and sysctl.d(5).

net.ipv4.ip_nonlocal_bind1[rootka1 ~]# sysctl -pnet.ipv4.ip_nonlocal_bind 1[rootka1 ~]# systemctl enable –now haproxy.service listen webclusterbind 192.168.86.100:80mode httpbalance roundrobinserver web1 192.168.86.110:80 check inter 3 fall 2 rise 5server web2 192.168.86.120:80 check inter 3 fall 2 rise 5 [rootka1 ~]# vim /etc/sysctl.d/arp.confnet.ipv4.conf.all.arp_ignore0net.ipv4.conf.all.arp_announce0net.ipv4.conf.lo.arp_ignore0net.ipv4.conf.lo.arp_announce0 检测HAproxy状态 [rootka2 ~]# killall -0 haproxy [rootka2 ~]# echo $? 0 [rootka2 ~]# 检测脚本 [rootka1 ~]# vim /etc/keepalived/test.sh[rootka1 ~]# cat /etc/keepalived/test.sh #!/bin/bash killall -0 haproxy[rootka1 ~]#