Keepalived权威指南中文

1

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

KEEPALIVED󰀁󰀁󰀂󰀃

Keepalived:TheDefinitiveGuide

󰀄󰀃󰀁FinalBSD(KevinKuang)󰀃󰀄󰀄󰀓󰀍󰀒󰀃

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

3

c2009󰀉󰀃󰀅󰀖󰀊󰀇󰀇󰀄󰀈󰀈󰀅󰀂󰀁󰀄󰀊󰀇󰀂󰀈󰀂KevinKuang󰀂󰀇󰀈󰀂󰀄

󰀑󰀏󰀊󰀃󰀒󰀇󰀍󰀇󰀆󰀇󰀋󰀅󰀑󰀖󰀎󰀇󰀆󰀒󰀇GNU󰀊󰀃󰀌󰀈󰀏󰀆󰀃󰀇󰀈󰀎󰀅󰀄󰀌󰀆󰀉󰀆󰀈󰀏󰀐󰀋󰀃󰀌󰀂󰀏󰀆󰀃󰀆󰀉󰀒󰀋󰀃󰀈󰀄󰀏󰀐󰀋󰀐󰀁󰀌󰀈󰀅󰀂󰀉󰀌󰀋󰀃󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

󰀂󰀂

1VRRP1.11.2

VRRP󰀃󰀍󰀓󰀈..........................󰀍󰀑󰀑󰀐

.............................

112334444567811151515151921

HAProxy󰀏web󰀓󰀏󰀈󰀂󰀏...............Keepalived󰀂󰀏......................

2KEEPALIVED

2.1

Keepalived󰀇󰀃󰀈󰀏󰀋󰀈.....................2.1.12.1.22.1.32.1.42.22.3

󰀙󰀋󰀇󰀁󰀏........................󰀉󰀐󰀈󰀇.........................WatchDog.........................IPVS󰀐󰀃.........................

KeepAlived󰀇󰀂󰀃........................KeepAlived󰀂󰀏󰀊󰀇.......................2.3.12.3.22.3.3

󰀃󰀕󰀂󰀏.........................VRRPD󰀂󰀏.......................LVS󰀂󰀏..........................

3󰀁󰀂󰀂󰀁

3.1

󰀃Keepalived󰀐HA........................3.1.13.1.23.2

󰀃Keepalived󰀂󰀏LVS......................

󰀂󰀁󰀂󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

󰀃󰀁󰀂VRRP

Keepalived󰀒VRRP󰀇󰀂󰀄󰀋󰀈󰀄󰀏󰀃󰀇󰀈󰀂Keepalived󰀆󰀁󰀄󰀌󰀅󰀇󰀇󰀂󰀆󰀁󰀇VRRP󰀇󰀁󰀆󰀂󰀁󰀇VRRP󰀏󰀌󰀇󰀊󰀃󰀂󰀊󰀉VRRP󰀇RFC󰀊󰀃1󰀂

1.1VRRP󰀁󰀃󰀂󰀂

󰀇󰀈󰀋󰀇󰀃󰀌󰀉󰀐󰀑(󰀆󰀏Internet)󰀄󰀍󰀁󰀌󰀂󰀊󰀆󰀇󰀘󰀑(end-host)󰀉

󰀙󰀙󰀅󰀐󰀅󰀎󰀂󰀇󰀈󰀄󰀇󰀎󰀆󰀌󰀄󰀂󰀘󰀉󰀑󰀁󰀇󰀅󰀐󰀄󰀌󰀅󰀆󰀑󰀇󰀆󰀅󰀋󰀁󰀒󰀉󰀇󰀘󰀑󰀏󰀐󰀒󰀏󰀅󰀈󰀅󰀇󰀘󰀑󰀇󰀅󰀅󰀉󰀆󰀅󰀄󰀑󰀒󰀅󰀉󰀋󰀆󰀂󰀊󰀃󰀇󰀇󰀘󰀉󰀅󰀇󰀍󰀔󰀅

•󰀇󰀘󰀑󰀔󰀍󰀃󰀒󰀂󰀆󰀅󰀃󰀍(󰀆󰀏RIP,OSPF󰀈)•󰀇󰀘󰀑󰀔󰀂󰀏󰀏󰀂󰀆󰀅

󰀒󰀋󰀇󰀄󰀇󰀘󰀑󰀔󰀂󰀏󰀒󰀂󰀆󰀅󰀃󰀍󰀒󰀌󰀃󰀑󰀃󰀋󰀋󰀇󰀄󰀏󰀆󰀆󰀆󰀁󰀇󰀄󰀆󰀅󰀉󰀃󰀒󰀑󰀄󰀈󰀈󰀗󰀙󰀋󰀆󰀂󰀇󰀁󰀂󰀏󰀏󰀂󰀆󰀅󰀔󰀊󰀆󰀈󰀎󰀇󰀅󰀈󰀂󰀋󰀋󰀔󰀄󰀑󰀔󰀊󰀏󰀌󰀅󰀍󰀉󰀅󰀈󰀇󰀃󰀂󰀁󰀒󰀄󰀆󰀅󰀈(󰀏󰀐󰀂󰀃󰀌󰀃󰀄defaultgateway)󰀄󰀎󰀃󰀆󰀆󰀋󰀍󰀂󰀔󰀇󰀂󰀏󰀁󰀙󰀉󰀏󰀂󰀆󰀅󰀄󰀄󰀏󰀆󰀇󰀎󰀕󰀇󰀃󰀌󰀕󰀊󰀄󰀁󰀂󰀊󰀆󰀑󰀋󰀃󰀂

VRRP󰀇󰀅󰀇󰀔󰀒󰀆󰀁󰀇󰀘󰀏󰀂󰀆󰀅󰀋󰀍󰀃󰀏󰀋󰀆󰀁

VRRP󰀊󰀊󰀅󰀔󰀒󰀒(election)󰀃󰀍󰀂󰀂󰀁󰀁󰀘󰀆󰀅󰀋󰀏󰀁󰀊LAN󰀑󰀍󰀋󰀆󰀅󰀈󰀑󰀇󰀄󰀁VRRP󰀆󰀅󰀈󰀂󰀑󰀇󰀃󰀆󰀂󰀒󰀉󰀄󰀏󰀆󰀇󰀍󰀉󰀄󰀕󰀌󰀂:󰀍󰀋󰀆󰀅󰀈󰀏VRRP󰀆󰀅󰀈󰀂VRRP󰀁󰀃󰀃

VRRP󰀆󰀅󰀈󰀔󰀒󰀅󰀁󰀆󰀅󰀈󰀄󰀌󰀑󰀊󰀔󰀈󰀄󰀈󰀁VRRPD󰀑󰀁󰀇󰀇󰀐󰀂󰀋󰀈VRRP󰀃󰀍󰀂󰀈󰀄󰀑󰀒󰀎󰀆󰀇󰀆󰀅󰀈󰀂󰀅󰀁VRRP󰀆󰀅󰀈󰀆󰀉󰀈󰀉󰀙󰀉󰀍󰀋󰀆󰀅󰀈󰀂

1

󰀒RFC3768󰀂󰀑󰀒2338󰀄󰀏󰀉󰀌󰀃󰀈󰀂󰀑󰀄󰀔󰀃2338󰀃

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2

VRRP󰀂󰀄󰀁󰀃󰀃

VRRP

󰀊󰀉󰀍󰀋󰀄󰀔󰀒󰀂󰀎󰀑󰀒󰀋󰀋󰀆󰀇󰀇󰀄󰀒󰀅󰀉󰀋󰀁󰀂󰀑󰀒󰀎󰀆󰀇󰀆󰀅󰀈󰀂󰀍󰀋󰀆󰀅󰀈󰀊󰀃󰀅󰀙󰀁(󰀎󰀆󰀇)VRRP󰀆󰀅󰀈󰀊󰀊󰀄󰀔󰀊󰀏󰀎󰀆󰀄󰀔󰀌󰀆󰀑󰀂󰀎󰀆󰀇󰀆󰀅󰀈󰀓󰀐󰀅󰀅󰀉󰀉(pool)󰀇󰀈󰀁󰀄󰀁󰀉pool󰀘󰀁󰀃󰀆󰀂󰀔󰀎󰀒󰀅󰀁󰀆󰀅󰀈󰀄󰀁󰀅󰀋󰀉󰀔󰀇󰀙󰀁󰀂󰀍󰀋󰀆󰀅󰀈󰀇󰀋󰀌󰀅󰀆VRID󰀂MASTER󰀁BACKUP

󰀇󰀅󰀉VRRP󰀍󰀋󰀆󰀅󰀈󰀑󰀄󰀇󰀙󰀁󰀎󰀆󰀇VRRP󰀆󰀅󰀈󰀄󰀁󰀒󰀑󰀙󰀁󰀎󰀆󰀇󰀑󰀈󰀎󰀑󰀋󰀉󰀍󰀑2󰀄󰀂󰀒󰀅󰀅󰀁󰀅󰀆MASTER󰀇󰀂󰀈󰀆󰀅󰀍󰀑󰀄󰀅󰀋󰀇󰀓󰀒BACKUP󰀄MASTER󰀎󰀌󰀅󰀆󰀑󰀊󰀄VRRP󰀃󰀍󰀈󰀃󰀉VRRP󰀆󰀅󰀈󰀗󰀊󰀒󰀒󰀄󰀏󰀓󰀎󰀆󰀇󰀔󰀒MASTER󰀂MASTER󰀇󰀅󰀂󰀄󰀂3󰀄󰀆󰀏󰀂󰀇󰀍󰀋󰀆󰀅󰀈󰀇IP󰀊󰀊󰀄󰀌󰀅󰀇󰀘󰀑󰀔󰀒󰀃󰀑󰀉IP󰀊󰀊󰀑󰀆󰀏󰀂󰀆󰀅󰀇󰀂󰀂󰀇󰀄󰀂󰀇MASTER󰀂󰀂󰀈󰀂󰀄󰀄󰀅󰀊󰀃󰀄󰀊󰀊󰀇󰀋󰀏󰀌󰀁ARP󰀆󰀇󰀂

1.2󰀁󰀄󰀁󰀄

VRRP󰀊󰀊󰀒󰀒󰀃󰀍󰀂󰀋󰀈󰀍󰀋󰀆󰀅󰀈󰀇󰀎󰀊󰀄󰀊󰀇󰀇󰀃󰀍󰀂󰀊󰀓󰀒

󰀊󰀊IP󰀙󰀏(multicast)󰀋󰀂󰀙󰀏󰀊󰀊224.0.0.18󰀃󰀇󰀏󰀄󰀅󰀇󰀂󰀍󰀋󰀆󰀅󰀈󰀅VRID(󰀉󰀅0–255)󰀏󰀅󰀎IP󰀊󰀊󰀎󰀆󰀄󰀘󰀁󰀌󰀈󰀆󰀅󰀉󰀖󰀅󰀇MAC󰀊󰀊󰀅00-00-5E-00-01-{VRID}4󰀂󰀊󰀉󰀄󰀇󰀅󰀉󰀍󰀋󰀆󰀅󰀈󰀑󰀄󰀑󰀆󰀁󰀒MASTER󰀄󰀘󰀁󰀓󰀒󰀉󰀋󰀇MAC󰀏IP(󰀅󰀆󰀆VIP)󰀂󰀇󰀅󰀕󰀘󰀑󰀎󰀑󰀌󰀂󰀏󰀆MASTER󰀇󰀃󰀊󰀂󰀋󰀃󰀋󰀇󰀇󰀆󰀅󰀂󰀏󰀄󰀘󰀋󰀅󰀂󰀂󰀄󰀑󰀔󰀘󰀅󰀇󰀃󰀋󰀒󰀎󰀋󰀇󰀂

󰀇󰀅󰀉󰀍󰀋󰀆󰀅󰀈󰀑󰀄󰀌󰀇󰀑󰀆MASTER󰀇VRRP󰀆󰀅󰀈󰀍󰀅󰀈󰀄󰀅VRRP󰀇󰀇󰀋(VRRPAdvertisementmessage)󰀄BACKUP󰀑󰀍󰀂󰀍MASTER󰀄󰀍󰀌󰀌󰀇󰀄󰀆󰀅(priority)󰀌󰀅󰀂󰀂MASTER󰀑󰀆󰀃󰀉󰀂BACKUP󰀔󰀑󰀅󰀇󰀇󰀋󰀃󰀄󰀙󰀁BACKUP󰀑󰀄󰀆󰀅󰀏󰀅󰀇󰀑󰀁󰀍󰀄󰀂󰀍󰀆MASTER󰀂5󰀂󰀑󰀔󰀂󰀍󰀒󰀌󰀃󰀍󰀆󰀇(<1s)󰀄󰀉󰀁󰀃󰀓󰀏󰀇󰀌󰀑󰀊󰀂

󰀌󰀉󰀂󰀃󰀊󰀅󰀈󰀄VRRP󰀋󰀍󰀃󰀁󰀍󰀆󰀃󰀍󰀋󰀈󰀍󰀆󰀂

2

󰀌󰀆󰀑󰀃󰀆󰀂󰀒󰀃󰀍󰀄󰀉󰀍󰀒󰀇󰀄󰀂󰀇4

󰀑󰀔󰀒󰀆󰀊󰀁󰀁󰀈󰀇󰀂󰀏virtualrouterid󰀆󰀊󰀁󰀌󰀊󰀒0...2555

󰀑󰀃󰀂󰀋󰀁󰀆󰀊󰀁󰀌󰀂state󰀄󰀇󰀌󰀂priority󰀑󰀁󰀇󰀂󰀏

3

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

󰀃󰀁󰀂KEEPALIVED

Keepalived󰀇󰀃󰀈󰀏󰀋󰀈󰀈󰀇󰀓󰀋󰀄󰀁󰀒󰀂󰀏󰀃󰀇󰀑󰀁󰀄󰀅󰀎󰀘󰀂󰀔󰀂󰀘󰀑󰀂󰀂

2.1Keepalived󰀁󰀁󰀁󰀁󰀂󰀁

Keepalived󰀒󰀅󰀉󰀅󰀔󰀁󰀌󰀆󰀃󰀈󰀇󰀑󰀖󰀄󰀂󰀊󰀍󰀇󰀆󰀁󰀄󰀂󰀃󰀒󰀎󰀊

󰀃󰀌󰀑󰀅󰀍󰀄󰀇󰀈󰀌󰀇check

core

libipfwc

libipvs-2.4

libipvs-2.6vrrp

󰀑󰀁󰀅󰀂󰀅󰀇󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

4KEEPALIVED

corekeepalived󰀇󰀎󰀅󰀇󰀐󰀄󰀆󰀏󰀃󰀕󰀂󰀏󰀇󰀇󰀑󰀄󰀋󰀇󰀇󰀒󰀈󰀈󰀆vrrpKeepalived󰀇vrrpd󰀊󰀋󰀇󰀉󰀃󰀉󰀄󰀇󰀊󰀍󰀂

checkkeepalived󰀇healthchecker󰀊󰀋󰀇󰀇󰀅󰀇󰀄󰀋󰀁󰀁󰀊󰀇󰀇󰀗󰀄󰀒󰀁󰀊

󰀏󰀉󰀃󰀘󰀁󰀇󰀂󰀏󰀇󰀇󰀑󰀄LVS󰀇󰀂󰀏󰀇󰀑󰀃󰀇󰀑󰀉󰀇󰀈libipfwciptables(ipchains)󰀋󰀄󰀘󰀂󰀃󰀂󰀂󰀏LVS󰀑󰀇firewall-mark󰀂libipvs*󰀃󰀒󰀍󰀃LVS󰀌󰀂󰀃󰀅󰀇󰀂

2.1.1󰀆󰀃󰀁󰀁󰀃

keepalived󰀖󰀃󰀁󰀙󰀋󰀇󰀇󰀃󰀈󰀁󰀏󰀄󰀃󰀉󰀋󰀇󰀂󰀈󰀑󰀋󰀇󰀎󰀊󰀄󰀌󰀅󰀇󰀍󰀃LVS󰀇󰀑󰀈󰀔󰀊󰀃󰀆󰀉󰀃󰀅󰀑󰀁󰀇󰀋󰀇󰀅111Keepalived

<󰀁󰀋󰀇:󰀉󰀆󰀆󰀆󰀄󰀐󰀉󰀊󰀋󰀇

112\\_Keepalived113\\_Keepalived󰀇󰀂󰀍󰀃󰀈󰀗󰀙󰀂󰀉󰀐󰀑󰀂󰀇󰀄󰀂󰀋󰀇󰀄󰀆󰀏󰀑󰀄󰀈LVS󰀇󰀑󰀈󰀔󰀄󰀌󰀂󰀇VRRP󰀔󰀆󰀉󰀁(–P),󰀏󰀉󰀌󰀄󰀈healthchecker󰀊󰀋󰀇,󰀍󰀃–C󰀂

2.1.2󰀂󰀄󰀁󰀂

󰀊󰀉󰀇󰀉󰀐󰀈󰀇󰀔󰀒󰀘󰀂󰀏󰀊󰀖󰀇󰀈󰀎󰀏󰀇󰀑󰀄Keepalived󰀇󰀂󰀏󰀊󰀖󰀇󰀑󰀆󰀃󰀂󰀅󰀄󰀎󰀑󰀒󰀅󰀄󰀌󰀌󰀇󰀑󰀊󰀇󰀇󰀂󰀏󰀄󰀌󰀇󰀃󰀅󰀄󰀁󰀌󰀇󰀉󰀓󰀕󰀇󰀑󰀉󰀁󰀇󰀂󰀏󰀄󰀇󰀃󰀉󰀁󰀌󰀇󰀈󰀓󰀆󰀉󰀃󰀅XXXparser.c󰀑󰀁󰀇󰀊󰀖󰀄󰀔󰀒󰀐󰀑󰀉󰀑󰀃󰀇󰀂

2.1.3WatchDog

󰀑󰀔󰀏󰀏󰀅󰀏󰀁󰀘󰀊󰀋󰀇(VRRP󰀏healthchecker)󰀇󰀐󰀉.

2.1.4IPVS󰀂󰀁

Keepalived󰀇󰀈󰀊󰀇󰀘LVS󰀇󰀉󰀄󰀘󰀑󰀎󰀑󰀈󰀄󰀍󰀃ipvsadm󰀑󰀁󰀇󰀃󰀅󰀕󰀇󰀐󰀄󰀂󰀒󰀈󰀄󰀍󰀃IPVS󰀅󰀏󰀇󰀋󰀙󰀋󰀇󰀘󰀑󰀄󰀑󰀂󰀊󰀍󰀓󰀇check/ipwrapper.c󰀑󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2.2KeepAlived󰀁󰀁󰀁5

2.2KeepAlived󰀁󰀁󰀁

󰀂󰀃Keepalived󰀏󰀂󰀃󰀅󰀋󰀂󰀂󰀑󰀖󰀅󰀁󰀄󰀌󰀃󰀇󰀓󰀋󰀄configure󰀄make󰀄make

install󰀔󰀆󰀉󰀆󰀏󰀄󰀁󰀒󰀌󰀅󰀊󰀒󰀌󰀂󰀓󰀋󰀇󰀂󰀋󰀅󰀅󰀑󰀉󰀘󰀑󰀊󰀇󰀅./configure--prefix=/\\--mandir=/usr/local/share/man\\

--with-kernel-dir=/usr/src/kernels/2.6.9-67.EL-smp-i686/make

makeinstall

󰀏󰀂󰀋󰀏󰀅󰀅

1.prefix󰀑󰀉󰀋󰀏󰀆/󰀃󰀄󰀑󰀁󰀂󰀏󰀊󰀖󰀍󰀋󰀅󰀅󰀇󰀅󰀄󰀊󰀉󰀘󰀑󰀂2.mandir󰀑󰀉󰀃󰀋󰀅Linux󰀄󰀌󰀃󰀌󰀇man󰀅󰀇󰀅󰀄󰀊󰀉󰀁󰀃󰀂3.with-kernel-dir󰀑󰀒󰀉󰀕󰀂󰀇󰀗󰀙󰀄󰀑󰀉󰀗󰀙󰀎󰀑󰀌󰀐󰀌󰀅󰀂󰀄Keepalived󰀈󰀋󰀉󰀎󰀄󰀂󰀒󰀋󰀍󰀃󰀉󰀎󰀂󰀍󰀇󰀈󰀇󰀍󰀊󰀖󰀄󰀃󰀔󰀒include󰀅󰀇󰀂

󰀇confiure󰀂󰀅󰀇󰀉󰀈󰀁󰀄󰀆󰀉󰀆󰀅󰀅󰀈󰀇󰀕󰀌󰀅Keepalivedconfiguration------------------------KeepalivedversionCompilerCompilerflagsExtraLib

UseIPVSFrameworkUseVRRPFrameworkUseLinkWatchUseDebugflags󰀁󰀁󰀋

UseIPVSFrameworkIPVS󰀏󰀏—󰀃󰀄LVS󰀇󰀎󰀅󰀊󰀍󰀏󰀏󰀄󰀏󰀉󰀑

󰀍󰀃LVS󰀄󰀆󰀉󰀇configure󰀉󰀋󰀏󰀗󰀙disable-lvs󰀄󰀑󰀁󰀇󰀇󰀄󰀑󰀇󰀃󰀅󰀇󰀔󰀒No󰀂󰀑󰀒Yes󰀂

:1.1.15:gcc:-g-O2

:-lpopt-lssl-lcrypto:Yes:Yes:Yes:No

:󰀏󰀉󰀂󰀃󰀅LVS󰀄󰀕󰀌󰀂󰀑󰀁󰀇󰀋󰀏󰀄󰀑󰀊󰀒󰀑󰀌󰀂󰀇󰀄󰀂󰀄󰀏󰀉󰀂󰀍󰀃netlink󰀄󰀊󰀌󰀂linkwatch.c󰀑󰀉󰀊󰀖

IPVSsyncdaemonsupport:Yes

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

6KEEPALIVED

IPVSsyncdaemonsupportIPVS󰀋󰀓󰀋󰀇󰀄󰀒󰀇󰀇󰀄󰀏󰀉󰀁󰀈󰀇󰀍

󰀒No󰀇󰀇󰀄󰀇󰀁󰀑󰀇󰀈󰀏󰀃󰀒No󰀄󰀂󰀇󰀏󰀉󰀁󰀈󰀑󰀍󰀒Yes–󰀄󰀍󰀃LVS󰀄󰀂󰀑󰀋󰀍󰀃LVS󰀇󰀋󰀓󰀋󰀇(syncdaemon),󰀆󰀉󰀇configure󰀇󰀉󰀓󰀋󰀏disable-lvs-syncd󰀂

UseVRRPFrameworkVRRP󰀏󰀏󰀄󰀑󰀐󰀅󰀔󰀒󰀇󰀎󰀇󰀄Keepalived󰀇

󰀎󰀅󰀋󰀇vrrpd󰀂

UseLinkWatch󰀊󰀉󰀇Linkwatch󰀉󰀄󰀋󰀃󰀒󰀊󰀊󰀄󰀔󰀉󰀎󰀄󰀌󰀇󰀄󰀉󰀃

󰀁󰀇󰀄󰀂󰀆󰀁󰀂󰀁󰀗󰀃󰀁󰀇󰀄󰀂󰀄󰀏󰀆󰀒󰀉󰀎󰀄󰀌󰀇󰀆󰀁󰀄󰀑󰀁󰀇󰀃󰀅󰀕󰀌󰀌󰀂󰀐󰀇󰀑󰀂󰀆󰀁󰀄󰀆󰀄󰀉󰀆󰀈󰀄󰀇󰀃󰀅󰀕󰀊󰀊󰀅󰀋󰀊󰀏󰀂󰀋󰀈󰀃󰀆󰀂󰀍󰀌󰀅󰀉󰀂󰀄Keepalived󰀇󰀃󰀁󰀄󰀊20󰀌󰀇󰀅󰀐󰀅󰀐󰀔󰀍󰀃󰀂1

󰀓󰀂󰀔󰀆󰀄󰀏󰀉󰀑󰀍󰀃LVS󰀎󰀊󰀄󰀇󰀁󰀌󰀂󰀃󰀅UseVRRPFrame-work󰀆Yes󰀔󰀆󰀉󰀄󰀇󰀆󰀄󰀇󰀎󰀇UseIPVSFramework󰀆Yes󰀄󰀅󰀋󰀓󰀒optional󰀇󰀂

󰀂󰀃󰀐󰀅󰀔󰀑󰀁󰀓󰀋󰀄󰀁󰀒󰀌󰀆󰀊󰀊󰀇󰀇󰀋󰀄󰀅󰀉󰀇󰀆󰀇󰀅󰀅Keepalived󰀇󰀈󰀄󰀅Keepalived󰀇󰀅󰀃󰀅󰀃󰀅www.keepalived.org

2.3KeepAlived󰀁󰀃󰀃󰀁

Keepalived󰀇󰀊󰀇󰀂󰀏󰀓󰀇󰀅󰀉󰀂󰀏󰀊󰀖󰀇󰀈󰀃󰀏󰀄󰀄󰀈󰀇󰀂󰀏󰀍󰀃󰀆

󰀃󰀙󰀂󰀁󰀎󰀆󰀒󰀅󰀅

1.󰀃󰀕󰀂󰀏(GlobalConfiguration)2.VRRPD󰀂󰀏3.LVS󰀂󰀏

󰀒󰀋󰀇󰀄󰀃󰀕󰀂󰀏󰀔󰀒󰀘󰀁󰀉keepalived󰀆󰀁󰀇󰀂󰀏󰀄󰀑󰀆󰀒󰀑󰀍󰀃LVS󰀂VRRPD󰀒keepalived󰀇󰀎󰀅󰀄LVS󰀂󰀏󰀌󰀇󰀂󰀍󰀃keepalived󰀂󰀂󰀏󰀏󰀆󰀆LVS󰀉󰀌󰀂󰀍󰀃󰀄󰀏󰀉󰀊󰀍󰀃keepalived󰀂󰀐HA2󰀄LVS󰀇󰀂󰀏󰀂󰀃󰀒󰀑󰀌󰀂󰀇󰀂

󰀂󰀏󰀊󰀖󰀓󰀒󰀉󰀌(block)󰀇󰀏󰀎󰀇󰀇󰀄󰀃󰀉󰀌󰀓󰀇{󰀏}󰀋󰀅󰀇󰀉󰀅󰀉󰀂#󰀏!󰀂󰀍󰀇󰀈󰀓󰀒󰀁󰀓󰀂

󰀌󰀂linkwatch.c󰀑󰀉󰀊󰀖󰀄󰀃󰀊󰀖󰀇Linux󰀉󰀎󰀇󰀂󰀊󰀍󰀑󰀄󰀆󰀑󰀅󰀄/usr/src/kernels/2.6.9-67.EL-smp-i686/net/core/linkwatch.c2

󰀆󰀏󰀂󰀐󰀅󰀘HAProxy󰀇HA󰀏󰀐󰀅󰀋󰀅󰀄󰀇HA

1

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2.3KeepAlived󰀁󰀃󰀃󰀁7

2.3.1󰀂󰀅󰀁󰀃

󰀃󰀕󰀂󰀏󰀋󰀁󰀍󰀉󰀊󰀂󰀏󰀄󰀄󰀊󰀉󰀇󰀅󰀃󰀕󰀏󰀌(globaldefinition)󰀏󰀏󰀂󰀊󰀊󰀆󰀅(staticipaddress/routes)󰀂󰀅󰀄󰀂

󰀃󰀕󰀏󰀌󰀘󰀂󰀃󰀏keepalived󰀇󰀊󰀅󰀑󰀐󰀏󰀋󰀌󰀅global_defs{

notification_email{

admin@example.com}

notification_email_fromadmin@example.comsmtp_server127.0.0.1stmp_connect_timeout30router_idmy_hostname}

•notificationemail󰀋󰀏keepalived󰀇󰀄󰀄󰀑󰀖(󰀆󰀏󰀃󰀋)󰀉󰀄󰀌󰀂󰀄󰀅email󰀅󰀇󰀘󰀎󰀄󰀆󰀉󰀇󰀙󰀉󰀄󰀃󰀈󰀅󰀉󰀂

•smtp*󰀋󰀏󰀄󰀅email󰀇smtp󰀓󰀏󰀈󰀄󰀏󰀉󰀅󰀊󰀂󰀇󰀁sendmail󰀇󰀇󰀄󰀆󰀉󰀍󰀃󰀔󰀈󰀇󰀃󰀌󰀂󰀏󰀂

•routeid󰀄󰀈keepalived󰀇󰀑󰀈󰀇󰀅󰀉󰀋󰀌󰀂󰀄󰀁󰀂󰀁󰀁󰀁󰀃

󰀊󰀉󰀏󰀂(static)󰀔󰀒󰀂󰀑󰀍󰀉vrrpdinstance󰀇󰀂/󰀄󰀂󰀊󰀆󰀇󰀄VIP󰀔󰀑󰀒static󰀇󰀄󰀍󰀉󰀈vrrpd󰀂󰀇󰀍/󰀓󰀍󰀂󰀑󰀉󰀂󰀏󰀆󰀉󰀃󰀂󰀊󰀓󰀏󰀈󰀂󰀏󰀏󰀂󰀇IP󰀊󰀊/󰀆󰀅󰀄󰀂󰀇󰀏󰀉󰀓󰀏󰀈󰀇󰀂󰀏󰀇󰀈󰀈󰀎󰀇󰀑󰀂󰀂󰀏󰀄󰀑󰀇󰀔󰀑󰀌󰀂󰀃󰀏󰀁󰀂

static_ipaddress{

192.168.1.1/24brd+deveth0scopeglobal

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

8

...}

static_routes{

src$SRC_IPto$DST_IPdev$SRC_DEVICE...

KEEPALIVED

src$SRC_IPto$DST_IPvia$GWdev$SRC_DEVICE}

󰀃󰀅󰀈󰀃󰀏󰀅󰀉IP󰀄󰀑󰀂󰀂󰀏󰀓󰀒Linux󰀅ip󰀑󰀉󰀍󰀃󰀇󰀗󰀙󰀄󰀆󰀏󰀔󰀈󰀇192.168.1.1/24brd+deveth0scopeglobal󰀄keepalived󰀏󰀓󰀍󰀈󰀄󰀍󰀃ipaddradd192.168.1.1/24brd+deveth0scopeglobal󰀂󰀇󰀍󰀄󰀊󰀉󰀑󰀇󰀇󰀂󰀏󰀓󰀂󰀒󰀑ip󰀍󰀃󰀇󰀈󰀊󰀂

󰀑󰀔󰀒󰀃󰀕󰀂󰀏󰀖󰀇󰀃󰀔󰀂

2.3.2VRRPD󰀁󰀃

VRRPD󰀇󰀂󰀏󰀃󰀋󰀁2󰀔󰀎:VRRP󰀋󰀓󰀎(synchroizationgroup)󰀏VRRP󰀋󰀉(VRRPInstance)󰀂VRRPSyncGroups(s)

󰀑󰀍󰀃SyncGroup󰀇󰀇,󰀏󰀉󰀑󰀈(󰀏󰀐󰀂router)󰀇󰀍󰀉󰀃󰀖󰀄󰀅󰀉󰀉󰀃󰀅󰀉󰀁󰀃,󰀃󰀉󰀃󰀖󰀂󰀇󰀅󰀉VRRP󰀋󰀉󰀄󰀎󰀃VRRP󰀂󰀏󰀆󰀒󰀁󰀉󰀃󰀄󰀇󰀁󰀂󰀁󰀃󰀌󰀈󰀋󰀆󰀉󰀄VRRPD󰀌󰀆󰀋󰀇󰀍󰀇󰀗󰀄󰀄󰀇󰀁󰀑󰀍󰀄󰀅Master󰀏Backup󰀇󰀃󰀋󰀄󰀅󰀂󰀄󰀎󰀁󰀋󰀆󰀂Syncgroup󰀔󰀒󰀆󰀁󰀇󰀘󰀑󰀉󰀋󰀆󰀄󰀆󰀉󰀄󰀍󰀉󰀋󰀉󰀓󰀋󰀋󰀅󰀉SyncGroup󰀄󰀑󰀁󰀇󰀇󰀄group󰀇󰀈󰀋󰀐󰀅󰀉󰀋󰀉󰀌󰀈󰀋󰀆󰀓󰀍󰀄󰀄󰀃󰀋󰀂

vrrp_sync_groupVG_1{

group{

inside_networkoutside_network󰀃}

notify_master/path/to/to_master.shnotify_backup/path_to/to_backup.shnotify_fault\"/path/fault.shVG_1\"

#󰀑󰀇󰀒󰀋󰀉󰀌(󰀆󰀏VI_1)

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2.3KeepAlived󰀁󰀃󰀃󰀁

notify/path/to/notify.shsmtp_alert}

•notifymaster󰀋󰀏󰀂󰀃󰀋󰀅Master󰀉󰀄󰀉󰀈󰀇󰀂󰀅󰀄󰀑󰀉󰀂󰀅󰀆󰀉󰀁󰀐󰀗󰀙(󰀐󰀍󰀐󰀆)󰀄󰀅󰀋2󰀉󰀅󰀐󰀂

9

•notify󰀋󰀃󰀇3󰀉󰀗󰀙󰀄󰀑󰀂󰀗󰀙󰀅keepalived󰀅󰀏󰀅$1(GROUP—INSTANCE),$2(group󰀏󰀐instance󰀇󰀌󰀌),$3(MASTER—BACKUP—FAULT)

•smtpalter󰀍󰀃globaldefs󰀇󰀈󰀏󰀌󰀇󰀆󰀖󰀊󰀊󰀏smtp󰀓󰀏󰀈󰀇󰀃󰀋󰀁󰀄󰀅󰀆󰀖󰀊󰀅󰀂VRRP󰀂󰀁(instance)󰀁󰀃

VRRP󰀋󰀉󰀔󰀌󰀐󰀇󰀔󰀈󰀂󰀇󰀁VRRP󰀃󰀍󰀄󰀑󰀉󰀋󰀉󰀂󰀋󰀁VRRP󰀇󰀅󰀂󰀄󰀊󰀄󰀆󰀏󰀘󰀅󰀁VRID󰀈󰀈󰀄󰀆󰀉󰀇󰀃󰀉interface󰀔󰀂󰀇󰀅󰀉󰀋󰀉󰀂VRRP󰀋󰀉󰀂󰀏󰀘󰀂󰀏󰀌vrrpsyncgroup󰀇󰀈󰀇󰀃󰀉󰀎󰀇󰀃󰀆IP󰀈󰀂vrrp_instance

inside_network{

stateMASTERinterfaceeth0dont_track_primarytrack_interface{

eth0eth1}

mcast_src_ipgarp_master_delay10virtual_router_id51priority100advert_int1authentication{

auth_typePASSautp_pass1234

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

10

}

virtual_ipaddress{

KEEPALIVED

#/brddevscopelabel

192.168.200.17/24deveth1

192.168.200.18/24deveth2labeleth2:1}

virtual_routes{

src192.168.100.1to192.168.109.0/24via192.168.200.2deveth1192.168.110.0/24via192.168.200.2deveth1192.168.111.0/24deveth2

192.168.112.0/24via192.168.100.2}

nopreempt

preemtp_delay300debug}

#src[to]/via|gwdevscopet

statestate󰀋󰀏instance󰀇󰀋󰀎(Initial)󰀄󰀂󰀄󰀇󰀍󰀁router󰀓󰀇󰀒󰀁󰀄󰀎󰀔

󰀍󰀄󰀄󰀒󰀒󰀄󰀅priority󰀇󰀍󰀒󰀒󰀆Master󰀄󰀊󰀉󰀑󰀇󰀇state󰀎󰀑󰀌󰀐󰀑󰀁󰀔󰀅󰀈󰀒Master󰀂

interfaceinsidenetwork󰀋󰀉󰀊󰀏󰀇󰀃󰀁

donttrackprimary󰀃󰀉VRRP󰀇interface󰀇󰀐(󰀃󰀌󰀑󰀃󰀏)

trackinterface󰀃󰀏󰀁󰀁󰀇󰀐󰀉,󰀇󰀈󰀇󰀋󰀋󰀅󰀉󰀃󰀁󰀌󰀈󰀋󰀆󰀄󰀓󰀍󰀋

󰀐FAULT󰀄󰀂

mcastsrcip󰀄󰀅󰀙󰀏󰀋󰀇󰀊󰀊,󰀏󰀉󰀑󰀃󰀏󰀄󰀃󰀌󰀍󰀃󰀊󰀏󰀇󰀃󰀁

󰀇primaryIP󰀂

garpmasterdelay󰀇󰀃󰀋󰀅MASTER󰀄󰀂󰀁󰀄󰀓󰀊󰀋󰀈gratuitousARP󰀆

󰀇

virtualrouteridVRID󰀋󰀉(0...255)

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2.3KeepAlived󰀁󰀃󰀃󰀁

priority100󰀅󰀄󰀆󰀅󰀒󰀒󰀆MASTER󰀄MASTER󰀂󰀅󰀉BACKUP󰀍󰀁50advertint󰀒󰀁󰀑󰀈,󰀃󰀌1s

virtualipaddress󰀇󰀈󰀋󰀏󰀃󰀆󰀊󰀊(VIP)󰀄󰀃󰀔󰀒󰀃󰀋󰀅MASTER󰀉󰀄

󰀑󰀂IP󰀍󰀄󰀇󰀍󰀄󰀃󰀋󰀅BACKUP󰀉󰀄󰀑󰀂IP󰀄󰀓󰀍(󰀁󰀊ipaddr󰀍󰀃),󰀊󰀉󰀃󰀁󰀓󰀏󰀈󰀔󰀆󰀉󰀑󰀊󰀏󰀋󰀐󰀍󰀋󰀊󰀊󰀄󰀂󰀓󰀄󰀋󰀅󰀋virtualipaddress󰀇󰀈(󰀆󰀉󰀙󰀉)󰀄keepalived󰀍󰀋󰀒󰀍󰀃ipaddr󰀋󰀈󰀊󰀏(󰀑󰀌󰀂󰀉󰀂ifcfg-eth0),ipadd󰀆󰀉󰀃󰀅

virtualroutes󰀏virtualipaddress󰀅󰀁󰀄󰀄󰀄󰀃󰀋󰀉󰀇󰀍/󰀓󰀍󰀆󰀅lvssyncdaemoninterfacelvssyncd󰀊󰀏󰀇󰀃󰀁authentication󰀑󰀅󰀖󰀃󰀏󰀌󰀃authtype󰀌󰀃󰀊󰀏󰀄󰀄󰀈PASS󰀏AHauthpass󰀌󰀃󰀇󰀆󰀍

nopreempt󰀃󰀏󰀆󰀑󰀂󰀍󰀄󰀁󰀋󰀑󰀉󰀂󰀏󰀌󰀊󰀃󰀏󰀇state󰀆BACKUP󰀇

󰀘󰀑󰀔󰀄󰀂󰀄󰀑󰀉󰀘󰀑󰀇priority󰀇󰀎󰀆󰀂󰀁󰀅󰀁󰀅preemptdelay󰀂󰀍󰀓󰀊󰀄󰀃󰀌5󰀎󰀒debugDebug󰀅󰀍

notifymaster󰀏syncgroup󰀇󰀈󰀇󰀂󰀏󰀅󰀁󰀂

11

2.3.3LVS󰀁󰀃

LVS󰀇󰀂󰀏󰀃󰀋󰀁2󰀔󰀎:󰀍󰀋󰀘󰀑󰀎(virtualservergroup)󰀏󰀍󰀋󰀘󰀑(virtualserver)󰀂󰀑󰀂󰀂󰀏󰀓󰀍󰀁󰀌󰀊ipvsadm󰀑󰀆󰀗󰀙󰀂󰀂󰀄󰀅󰀁󰀂

󰀑󰀉󰀂󰀏󰀖󰀒󰀆󰀒󰀇󰀄󰀅󰀇󰀒󰀆󰀁󰀈󰀅󰀁RealServer󰀔󰀇󰀄󰀉service󰀆󰀉󰀗󰀉󰀙󰀉VirtualServer󰀄󰀎󰀄󰀌󰀐󰀅󰀄󰀗󰀄󰀒󰀁󰀂virtual_server_group{

#VIPport

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

12

󰀃

fwmark}

KEEPALIVED

󰀂󰀄󰀅󰀁

virtualserver󰀆󰀉󰀉󰀅󰀈3󰀔󰀊󰀏󰀑󰀇󰀋󰀋󰀅󰀔󰀂󰀏󰀅1.virtualserverIPport2.virtualserverfwmarkint3.virtualservergroupstring󰀏󰀅󰀉󰀅

virtual_server192.168.1.280{

delay_loop3󰀑

lb_algolb_kind

rr|wrr|lc|wlc|lblc|sh|dh#LVS󰀇󰀎󰀔󰀇󰀅NAT|DR|TUN

#LVS󰀂󰀆󰀁󰀏#󰀍󰀇󰀁󰀈󰀉󰀑(󰀊)

#LVS󰀍󰀇󰀁󰀈󰀊󰀔󰀄ipvsadm󰀑#󰀍󰀃󰀇󰀃󰀍󰀒TCP󰀊󰀒UDP

#suspendhealthchecker’sactivity#HTTP_GET󰀐󰀗󰀄󰀒󰀁󰀉󰀄

#󰀃󰀏󰀅󰀉virtualserver:VIP:Vport#servicepolling󰀇delay󰀉

persistence_timeout120

persistence_granularityprotocolha_suspend

virtualhost

󰀒󰀁󰀇Web󰀓󰀏󰀈󰀇󰀍󰀋󰀘󰀑󰀂󰀄Host:󰀍󰀃

sorry_server󰀁󰀁󰀇󰀃

#󰀃󰀁RealServer󰀓󰀌󰀂󰀅󰀉󰀅󰀈󰀇󰀂󰀏󰀍real_server{

weight1

inhibit_on_failure

TCP

󰀇-M󰀗󰀙󰀄󰀃󰀌󰀒0xffffffff󰀄󰀄󰀋󰀖󰀃󰀉󰀇󰀅󰀕󰀐󰀍󰀇󰀁󰀈󰀂

#󰀃󰀃󰀑󰀄󰀊󰀇󰀇realserver󰀇

#󰀃󰀌󰀆1󰀄0󰀆󰀇󰀁#󰀇󰀓󰀏󰀈󰀗󰀄󰀒󰀁󰀇󰀅

󰀉󰀄󰀘󰀅weight󰀃󰀏󰀆0󰀄󰀂󰀑󰀒󰀈󰀄󰀅IPVS󰀇󰀈󰀓󰀍󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

2.3KeepAlived󰀁󰀃󰀃󰀁13

notify_up

󰀉󰀈󰀇󰀂󰀅

|#󰀇󰀒󰀙󰀅serviceup󰀁#󰀇󰀒󰀙󰀅servicedown󰀁

notify_down|

󰀉󰀈󰀇󰀂󰀅

#󰀅󰀈󰀂󰀏󰀋󰀋󰀅󰀔󰀗󰀄󰀒󰀁󰀊󰀏:HTTP_GET|SSL_GET|TCP_CHECK|SMTP_CHECK|MISC_CHECK

HTTP_GET|SSL_GET{

url{

#HTTP/SSL󰀒󰀁󰀇URL󰀄󰀑󰀇󰀆󰀉󰀋󰀏󰀙󰀉URL

path/

digest#SSL󰀒󰀁󰀁󰀇󰀌󰀂󰀆󰀁(genhash󰀍

󰀗󰀇󰀌)

status_code200}

connect_port80bindto

#󰀌󰀄󰀄󰀉󰀉󰀑

3

2

#󰀕󰀌󰀄󰀙

#󰀕󰀌󰀑󰀈󰀉󰀑󰀂󰀊󰀃#󰀗󰀄󰀒󰀁󰀕󰀊

#󰀉󰀃󰀊󰀊󰀄󰀅󰀆󰀇󰀘󰀓󰀏󰀈󰀋󰀈󰀗󰀄󰀒󰀁connect_timeoutnb_get_retrydelay_before_retry

#HTTP󰀒󰀁󰀇󰀈󰀌󰀄󰀂󰀍

}#ENDOFHTTP_GET|SSL_GET#TCP󰀊󰀏󰀇󰀗󰀄󰀒󰀁TCP_CHECK{

connect_port80bindto192.168.1.1connect_timeout4}#TCP_CHECK#SMTP󰀊󰀏󰀗󰀄󰀒󰀁SMTP_CHECK

#

󰀑󰀇󰀇󰀂󰀏󰀋󰀌󰀏HTTP󰀇󰀈󰀇󰀅󰀄connect_ipconnect_port

#󰀃󰀌󰀒󰀁25󰀕󰀊

host{

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

14

bindto}

connect_timeoutretry

delay_before_retry

KEEPALIVED

#\"smtpHELO\"󰀆󰀇󰀍󰀃󰀇󰀗󰀙󰀄󰀆󰀒󰀇󰀂helo_name|

}#SMTP_CHECK

#MISC󰀗󰀄󰀒󰀁󰀊󰀏,󰀉󰀈󰀅󰀉󰀇󰀐MISC_CHECK{

#󰀁󰀔󰀇󰀐󰀏󰀂󰀅󰀆󰀑

misc_path|#󰀂󰀅󰀉󰀈󰀇󰀄󰀉󰀉󰀑misc_timeout

#󰀏󰀉󰀃󰀏󰀁misc_dynamic󰀇󰀇󰀄healthchecker󰀇󰀐

󰀇󰀑󰀌󰀄󰀂󰀍󰀍󰀃󰀂󰀒󰀂󰀎󰀁󰀓󰀏󰀈󰀇󰀂󰀕(weight).

#󰀈󰀌0:󰀗󰀄󰀒󰀁OK󰀄󰀂󰀕󰀑󰀄󰀋󰀃#󰀈󰀌1:󰀗󰀄󰀒󰀁󰀇󰀅󰀄󰀂󰀕󰀃󰀆0

#󰀈󰀌2-255:󰀗󰀄󰀒󰀁OK,󰀂󰀕󰀃󰀏󰀆󰀅󰀑󰀌󰀄󰀂󰀍-2󰀄

󰀆󰀏󰀈󰀌255󰀄󰀇󰀁weight=255-2=253

misc_dynamic

}

}#Realserver}

#VirtualServer

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

󰀃󰀃󰀂󰀁󰀂󰀂󰀁

󰀅󰀎󰀘󰀂󰀈󰀂󰀍󰀔Keepalived󰀇󰀍󰀃󰀄󰀅󰀔󰀊󰀍󰀃Keepalived󰀐HA󰀄󰀅󰀔󰀊󰀐HA󰀈󰀃󰀂󰀂󰀏LVS󰀂

3.1󰀂Keepalived󰀃HA

󰀃Keepalived󰀐HA󰀒󰀏󰀃󰀇󰀓󰀋󰀄󰀌󰀅󰀊󰀇󰀇󰀍󰀋󰀓󰀇󰀂󰀏Keepalived󰀇VRRP󰀊

󰀋󰀇󰀔󰀄󰀂󰀂󰀃󰀆󰀉󰀑󰀆LVS󰀇󰀂󰀏󰀂󰀑󰀅󰀌󰀅󰀎󰀃󰀊󰀍󰀁󰀄󰀈HAProxy󰀇󰀑󰀈󰀐HA󰀄󰀅󰀏VIP󰀂󰀏󰀁󰀏󰀅󰀅sharedIP=192.168.1.1192.168.1.3

|+--+--+|LB1|+-----+haproxykeepalived

192.168.1.4

|+--+--+|LB2|+-----+haproxykeepalived

192.168.1.11-192.168.1.14

|

|

|

|

192.168.1.2_|_db(___)(___)(___)

-------+------------+-----------+-----+-----+-----+--------+----+-+-++-+-++-+-++-+-+|A||B||C||D|+---++---++---++---+4cheapwebservers

3.1.1HAProxy󰀁web󰀃󰀃󰀃󰀁󰀃

󰀑󰀔󰀎󰀑󰀗󰀉󰀅󰀊󰀃󰀊󰀉󰀅󰀉󰀄󰀌󰀅󰀌󰀄󰀁󰀇haproxy󰀇󰀑󰀈󰀔󰀇Keepalived󰀉󰀄󰀂󰀏󰀂

3.1.2Keepalived󰀁󰀃

󰀎󰀃haporxy󰀏󰀁󰀕󰀇web󰀓󰀏󰀈󰀓󰀆󰀃󰀌󰀁󰀄󰀈󰀇󰀔󰀆󰀉󰀂󰀎󰀂󰀏Keepalived󰀁󰀂󰀑󰀔󰀅󰀐󰀅󰀄󰀏󰀆󰀌󰀅󰀌󰀃󰀅Keepalived󰀇HA󰀄󰀄󰀐virtual

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

16󰀁󰀂󰀂󰀁

router󰀇󰀎󰀊󰀄󰀊󰀉󰀌󰀌󰀂󰀂󰀆󰀋󰀃󰀎󰀇󰀈󰀉󰀘󰀇󰀃󰀕󰀏VRRP󰀂󰀏󰀄󰀆󰀂󰀂󰀏󰀁󰀌󰀂󰀆󰀃󰀇󰀆󰀁󰀆󰀅1.VRID—󰀌󰀅󰀍󰀃󰀃󰀌󰀇511

2.VIP—󰀔󰀏󰀇192.168.1.1,VIP󰀃󰀄Keepalived󰀇󰀈󰀇vritualaddress󰀇ip󰀊󰀊

3.LB󰀇IP—󰀑󰀇󰀔󰀒󰀍󰀁haproxy󰀇󰀊󰀊󰀂192.168.1.3󰀏1.4󰀄󰀎󰀎󰀃󰀁󰀐󰀆MASTER󰀃

4.󰀄󰀆󰀅–priority󰀄󰀇󰀙󰀉BACKUP󰀒󰀒MASTER󰀇󰀉󰀓󰀄󰀄󰀆󰀅󰀅󰀍󰀎󰀒󰀂󰀑󰀇󰀎󰀃192.168.1.3󰀇󰀄󰀆󰀅󰀆150󰀄󰀂󰀁󰀅󰀁󰀆100󰀊󰀉󰀄󰀋󰀋󰀂󰀂󰀏󰀆󰀅󰀍󰀋IP=192.168.1.1192.168.1.3

192.168.1.4

192.168.1.11-192.168.1.14

|

|

|

|

192.168.1.2

_|_db(___)(___)(___)

-------+-----------------+------------+-----+-----+-----+--------+----|prio:150+---+----+|MASTER|+--------+haproxykeepalived

󰀁󰀁󰀁

󰀂MASTER󰀌󰀈󰀋󰀆󰀁󰀄BACKUP󰀍󰀒󰀒󰀆󰀄󰀇MASTER󰀄󰀇󰀁󰀂󰀆󰀁󰀇MASTER󰀕󰀄ONLINE󰀁󰀄󰀒󰀌󰀑󰀆󰀆MASTER󰀊󰀒󰀊󰀆BACKUP󰀈󰀇󰀃󰀌󰀅󰀐󰀅󰀄󰀏󰀉󰀂󰀃󰀏󰀑󰀂󰀍󰀄󰀇󰀁󰀆󰀁󰀇MASTER󰀆󰀂󰀁󰀍󰀌󰀑󰀂󰀍󰀆󰀆MASTER󰀄󰀃󰀔󰀒󰀂󰀄󰀁󰀉󰀊󰀇󰀌󰀂󰀄󰀄2󰀄󰀃󰀋󰀅1.MASTER->BACKUP2.BACKUP->MASTER

󰀑󰀁󰀘󰀄󰀏󰀄󰀆󰀇󰀃󰀋󰀒󰀑󰀊󰀎󰀊󰀇󰀄󰀏󰀃󰀌󰀅󰀂󰀄MASTER󰀆󰀂󰀁󰀄󰀆󰀆BACKUP󰀁󰀊󰀉󰀂󰀃󰀏󰀑󰀂󰀍󰀂Keepalived󰀇󰀈󰀅󰀏󰀁nopreempt󰀑󰀉󰀂󰀏󰀄󰀁󰀒󰀑󰀉󰀂󰀏󰀌󰀊󰀃󰀇state󰀆BACKUP󰀇󰀑󰀈󰀔󰀄󰀁󰀒󰀌󰀅

1

|prio:100+----+---+|BACKUP|+--------+haproxykeepalived

+-+-++-+-++-+-++-+-+|A||B||C||D|+---++---++---++---+

4cheapwebservers

󰀒󰀒󰀉󰀄󰀍󰀈󰀅󰀁󰀁

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

3.1󰀂Keepalived󰀃HA

󰀋󰀋󰀂󰀄󰀇󰀒MASTER󰀑󰀋󰀈󰀂󰀍󰀄󰀂󰀉󰀅󰀄MASTER󰀇state󰀃󰀆󰀃󰀏󰀆BACKUP󰀂󰀃󰀔󰀒󰀂192.168.1.3󰀏192.168.1.4󰀓󰀂󰀘state󰀃󰀏󰀆BACKUP󰀁

󰀇󰀁󰀅󰀉󰀁󰀒MASTER󰀇󰀂󰀍󰀃󰀄󰀊󰀊priority󰀄󰀊󰀉󰀌󰀅󰀇󰀍󰀁BACKUP󰀔󰀈󰀊󰀊󰀃󰀏󰀑󰀋󰀇priority󰀂󰀈󰀋󰀅󰀅󰀆󰀂󰀔󰀂󰀍󰀄󰀅priority󰀇192.168.1.3󰀆󰀆󰀏󰀋󰀇MASTER󰀂󰀁󰀁

MASTER󰀏BACKUP󰀔󰀇󰀂󰀃󰀊󰀇󰀂󰀃󰀅󰀁󰀄󰀍󰀃󰀅󰀈󰀇󰀍󰀃(󰀑󰀇󰀎󰀃󰀇RedHatEnterpriseAS4Update4󰀔󰀂󰀃)󰀅

$wgethttp://www.keepalived.org/software/keepalived-1.1.17.tar.gz$tarxzvfkeepalived-1.1.17.tar.gz$cdkeepalived-1.1.17$./configure--prefix=/\\--mandir=/usr/local/share/man\\

--with-kernel-dir=/usr/src/kernels/2.6.9-67.EL-smp-i686/$make

#makeinstall

#cpkeepalived/etc/init.d/keepalived.rh.init/etc/init.d/keepalived#chmod+x/etc/init.d/keepalived

17

#cpkeepalived/etc/init.d/keepalived.sysconfig/etc/sysconfig/keepalived#chkconfig--addkeepalived

#chkconfig--level345keepalivedon

MASTER󰀁󰀁󰀃

MASTER󰀇󰀂󰀏—192.168.1.3󰀇󰀂󰀏global_defs{

notification_email{

finalbsd@gmail.com}

notification_email_fromfinalbsd@gmail.comsmtp_server127.0.0.1smtp_connect_timeout30router_idhaproxy-ha

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

18

}

vrrp_sync_groupVG1{

group{

VI_1

}

}

vrrp_instanceVI_1{

stateBACKUP

smtp_alert

󰀁󰀂󰀂󰀁

notify_fault\"/root/script/notify_mail.shfault\"notify_master\"/root/script/notify_mail.shmaster\"nopreemptinterfaceeth1track_interface{

eth0eth1}

virtual_router_id51priority150advert_int1authentication{

auth_typePASSauth_passfsaf..7&f}

virtual_ipaddress{

192.168.1.1/24deveth1scopeglobal}}

BACKUP󰀁󰀁󰀃

BACKUP󰀇󰀂󰀏—192.168.1.4󰀇󰀂󰀏

BACKUP󰀇󰀂󰀏󰀏MASTER󰀐󰀅󰀅󰀁󰀄󰀁󰀇2󰀉󰀑󰀋󰀍󰀅1.priority󰀃󰀏󰀆100

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

3.2󰀂Keepalived󰀁󰀃LVS2.󰀑󰀃󰀏nopreempt

19

󰀂󰀅󰀃󰀃

󰀎󰀍󰀇󰀍󰀁󰀔󰀉󰀈servicekeepalivedstart󰀇󰀒󰀓󰀏󰀂

3.2󰀂Keepalived󰀁󰀃LVS

󰀌󰀅󰀎󰀃󰀅󰀈󰀇󰀅󰀇󰀅

4󰀁web󰀓󰀏󰀈󰀊󰀊󰀅󰀘LVS󰀋󰀈󰀎󰀔󰀄LVS󰀂󰀄󰀁󰀏󰀆NAT󰀂󰀅󰀘LVS󰀊

󰀊Keepalived󰀐HA󰀄󰀍󰀋IP=192.168.1.1192.168.1.3

192.168.1.4

192.168.1.11-192.168.1.14

|

|

|

|

192.168.1.2

_|_db(___)(___)(___)

-------+-----------------+------------+-----+-----+-----+--------+----|prio:150+---+----+|MASTER|+--------+LVS

|prio:100+----+---+|BACKUP|+--------+

LVS

+-+-++-+-++-+-++-+-+|A||B||C||D|+---++---++---++---+4cheapwebservers

󰀇LVS󰀑󰀄󰀙󰀁󰀆󰀉󰀄󰀎󰀅

virtualserver󰀔󰀒VIP+VPORT󰀄VIP󰀌󰀂󰀊󰀊VRRPD󰀂󰀏󰀖󰀋󰀈󰀂

󰀏󰀂

realserver󰀑󰀇LVS󰀎󰀔󰀇web󰀓󰀏󰀈󰀇IP󰀊󰀊󰀄󰀄󰀏󰀑󰀇192.168.11–14lbalgo󰀎󰀔󰀇󰀅󰀄󰀑󰀇󰀍󰀃wlclbkind󰀋󰀂󰀄󰀁󰀏󰀄󰀑󰀇󰀍󰀃NATweight󰀂󰀕󰀄󰀃󰀌󰀑󰀇󰀓󰀃󰀏󰀆3󰀁󰀁

󰀂󰀃󰀏󰀔󰀅󰀅3.1.2󰀙󰀇󰀂󰀃󰀂󰀃󰀅󰀁󰀄󰀑󰀇󰀑󰀆󰀅󰀘󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

20

MASTER󰀁BACKUP󰀁󰀃

󰀁󰀂󰀂󰀁

Keepalived󰀇󰀃󰀕󰀏vrrp󰀂󰀏󰀖󰀏󰀁󰀅󰀅3.1.2󰀂󰀃󰀅󰀁󰀄󰀑󰀇󰀌󰀅󰀌󰀌󰀂󰀇󰀍virtualserver󰀂󰀏󰀖󰀅virtual_server192.168.1.180{

delay_loop3lb_algowlclb_kindDR

persistence_timeout1200protocolTCPha_suspend

real_server192.168.1.1180{

weight3TCP_CHECK{

connect_timeout3

}

}

real_server192.168.1.1280{

weight3TCP_CHECK{

connect_timeout3

}

}

}

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

󰀂󰀁󰀂󰀂

[1]RFC3768—VirtualRouterRedundancyProtocol(VRRP)[2]man5keepalived.conf[3]man8keepalived[4]www.keepalived.org[5]keepalived󰀂󰀊󰀍

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。

www.linuxidc.com

22󰀂󰀁󰀂󰀂

Linux公社(LinuxIDC.com) 是包括Ubuntu,Fedora,SUSE技术，最新IT资讯等Linux专业类网站。