{"id":211,"date":"2016-10-26T16:18:04","date_gmt":"2016-10-26T07:18:04","guid":{"rendered":"http:\/\/jook.pe.kr\/?p=211"},"modified":"2016-10-26T16:18:04","modified_gmt":"2016-10-26T07:18:04","slug":"lvs-%ec%84%9c%eb%b2%84-keepalived-%ec%84%a4%ec%b9%98-%eb%b0%8f-%ea%b5%ac%ec%84%b1","status":"publish","type":"post","link":"http:\/\/jook.pe.kr\/?p=211","title":{"rendered":"LVS \uc11c\ubc84 keepalived \uc124\uce58 \ubc0f \uad6c\uc131"},"content":{"rendered":"

LVS \uc11c\ubc84 keepalived \uc124\uce58 \ubc0f \uad6c\uc131<\/strong><\/p>\n

 <\/p>\n

\uc11c\ubc84 \uc815\ubcf4
\nLVS : 192.168.0.101
\nvip : 192.168.0.100
\nwww1 : 192.168.0.102
\nwww2 : 192.168.0.103
\nDB : 192.168.0.104
\n1. \/etc\/sysctl.conf \uc5d0\uc11c net.ipv4.ip_forward = 1\ub85c \uc218\uc815 \ud6c4 \uc801\uc6a9
\nsysctl -p
\n2. ipvsadm \uc124\uce58
\nyum install -y ipvsadm
\n3. keepalived \uc555\ucd95\ud574\uc81c \ubc0f \uc124\uce58<\/p>\n

[root@localhost ~ ]# tar xvzfp keepalived-1.2.1.tar.gz
\n[root@localhost ~ ]# cd keepalived-1.2.1<\/p>\n

[root@localhost ~ ]#.\/configure –with-kernel-dir=\/usr\/src\/kernels\/2.6.18-164.11.1.el5-x86_64<\/p>\n

~<\/p>\n

Keepalived configuration
\n————————
\nKeepalived version\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : 1.2.1
\nCompiler\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : gcc
\nCompiler flags\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : -g -O2 -DETHERTYPE_IPV6=0x86dd
\nExtra Lib\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : -lpopt -lssl -lcrypto
\nUse IPVS Framework\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : Yes
\nIPVS sync daemon support : Yes
\nUse VRRP Framework\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : Yes
\nUse Debug flags\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : No<\/p>\n

[root@localhost ~ ]# make<\/p>\n

~<\/p>\n

Building ..\/bin\/genhash
\nstrip ..\/bin\/genhash<\/p>\n

Make complete
\nmake[1]: Leaving directory `\/root\/src\/keepalived-1.2.1\/genhash’<\/p>\n

Make complete<\/p>\n

[root@localhost ~ ]# make install<\/p>\n

~
\nmake[1]: Leaving directory `\/root\/src\/keepalived-1.2.1\/keepalived’
\nmake -C genhash install
\nmake[1]: Entering directory `\/root\/src\/keepalived-1.2.1\/genhash’
\ninstall -d \/usr\/local\/bin
\ninstall -m 755 ..\/bin\/genhash \/usr\/local\/bin\/
\ninstall -d \/usr\/local\/share\/man\/man1
\ninstall -m 644 ..\/doc\/man\/man1\/genhash.1 \/usr\/local\/share\/man\/man1
\nmake[1]: Leaving directory `\/root\/src\/keepalived-1.2.1\/genhash’
\n4. keepalived \uc124\uc815\ud30c\uc77c \ubc0f \uc2e4\ud589\ud30c\uc77c symbolic link \uc124\uc815<\/p>\n

[root@localhost ~ ]# ln -s \/usr\/local\/etc\/keepalived \/etc\/keepalived
\n[root@localhost ~ ]# ln -s \/usr\/local\/etc\/rc.d\/init.d\/keepalived \/etc\/rc.d\/init.d\/keepalived
\n[root@localhost ~ ]# ln -s \/usr\/local\/etc\/sysconfig\/keepalived \/etc\/sysconfig\/keepalived
\n5. keepalived.conf \uc124\uc815<\/p>\n

[root@localhost ~ ]# vi \/etc\/keepalived\/keepalived.conf<\/p>\n

———————————————————————–
\n! Configuration File for keepalived<\/p>\n

global_defs {
\nnotification_email {
\nacassen@firewall.loc<\/a>
\nfailover@firewall.loc<\/a>
\nsysadmin@firewall.loc<\/a>
\n}
\nnotification_email_from Alexandre.Cassen@firewall.loc<\/a>
\nsmtp_server 192.168.0.101
\nsmtp_connect_timeout 30
\nrouter_id LVS_DEVEL
\n}<\/p>\n

vrrp_instance VI_1 {
\nstate MASTER
\ninterface eth0
\ngarp_master_delay 5
\nvirtual_router_id 51
\npriority 101
\nadvert_int 1
\nauthentication {
\nauth_type PASS
\nauth_pass 1111
\n}
\nvirtual_ipaddress {
\n192.168.0.100
\n}
\n}<\/p>\n

virtual_server 192.168.0.100 80 {
\ndelay_loop 6
\nlb_algo lc
\nlb_kind DR
\n!\u00a0\u00a0\u00a0 persistence_timeout 50
\nprotocol TCP<\/p>\n

!\u00a0\u00a0\u00a0 sorry_server 192.168.0.101 1358<\/p>\n

real_server 192.168.0.102 80 {
\nweight 1
\nHTTP_GET {
\nurl {
\npath \/
\ndigest 8b97db165eaf8d8d3a549418aee46738
\n}
\nconnect_timeout 3
\nnb_get_retry 3
\ndelay_before_retry 3
\n}
\n}<\/p>\n

real_server 192.168.0.103 80 {
\nweight 1
\nHTTP_GET {
\nurl {
\npath \/
\ndigest 78d20f502a13c1b23c2fbc91614cbba3
\n}
\nconnect_timeout 3
\nnb_get_retry 3
\ndelay_before_retry 3
\n}
\n}
\n}
\n———————————————————————–<\/p>\n

real \uc11c\ubc84\uc5d0 \ub300\ud55c digest \uac12\uc740 \uc544\ub798\uc640 \uac19\uc774 \ud655\uc778\ud55c\ub2e4.<\/p>\n

[root@localhost ~ ]# genhash -s 192.168.0.102 -p 80 –url \/
\nMD5SUM = 8b97db165eaf8d8d3a549418aee46738<\/p>\n

[root@localhost ~ ]# genhash -s 192.168.0.103 -p 80 –url \/
\nMD5SUM = 78d20f502a13c1b23c2fbc91614cbba3<\/p>\n

 <\/p>\n

 <\/p>\n

6. keepalived \ub370\ubaac \uc2e4\ud589<\/p>\n

[root@localhost ~ ]# \/etc\/init.d\/keepalived start
\nStarting keepalived:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [\u00a0 OK\u00a0 ]<\/p>\n

\ub370\ubaac \uc2e4\ud589\uc2dc \uc544\ub798\uc640 \uac19\uc774 \uc5d0\ub7ec\uac00 \ubc1c\uc0dd\ud560 \uacbd\uc6b0<\/p>\n

[root@localhost ~ ]# \/etc\/init.d\/keepalived start
\nStarting keepalived: \/bin\/bash: keepalived: command not found
\n[FAILED]<\/p>\n

\/etc\/rc.d\/init.d\/keepalived \ud30c\uc77c\uc758 \uc0c1\ub2e8\uc5d0 PATH\ub97c \uc9c0\uc815\ud574 \uc8fc\uac70\ub098, daemon keepalived \ubd80\ubd84\uc5d0 \uc808\ub300\uacbd\ub85c\ub97c \uc0bd\uc785\ud55c\ub2e4.<\/p>\n

PATH=\/sbin:\/bin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/sbin
\nor
\ndaemon keepalived\u00a0 –>\u00a0\u00a0 daemon \/usr\/local\/sbin\/keepalived
\n7. vip \ud655\uc778 \ubc0f ipvsadm -l \ub85c load balancing \uc0c1\ud0dc \ud655\uc778<\/p>\n

[root@localhost ~ ]# ip addr
\n1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
\nlink\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
\ninet 127.0.0.1\/8 scope host lo
\ninet6 ::1\/128 scope host
\nvalid_lft forever preferred_lft forever
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
\nlink\/ether 00:30:48:fb:d1:4e brd ff:ff:ff:ff:ff:ff
\ninet 192.168.0.101\/24 brd 192.168.0.255 scope global eth0
\ninet 192.168.0.100\/32 scope global eth0
\ninet6 fe80::230:48ff:fefb:d14e\/64 scope link
\nvalid_lft forever preferred_lft forever
\n3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
\nlink\/ether 00:30:48:fb:d1:4f brd ff:ff:ff:ff:ff:ff
\n4: sit0: <NOARP> mtu 1480 qdisc noop
\nlink\/sit 0.0.0.0 brd 0.0.0.0<\/p>\n

[root@localhost ~ ]# ipvsadm -l
\nIP Virtual Server version 1.2.1 (size=4096)
\nProt LocalAddress:Port Scheduler Flags
\n-> RemoteAddress:Port\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Forward Weight ActiveConn InActConn
\nTCP\u00a0 192.168.0.100:http lc
\n-> 192.168.0.102:http\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Route\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0
\n-> 192.168.0.103:http\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Route\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0
\n8. real server \ucee4\ub110 \ud30c\ub77c\ubbf8\ud130 \ubcc0\uacbd<\/p>\n

[root@localhost ~ ]# vi \/etc\/sysctl.conf<\/p>\n

net.ipv4.conf.eth0.arp_ignore = 1
\nnet.ipv4.conf.eth0.arp_announce = 2<\/p>\n

[root@localhost ~ ]# sysctl -p
\n9. real \uc11c\ubc84\uc5d0 loop back IP \ub4f1\ub85d<\/p>\n

[root@localhost ~ ]# ifconfig lo:0 192.168.0.100 netmask 255.255.255.255 broadcast 192.168.0.100 up<\/p>\n

\/etc\/rc.local\u00a0\uc5d0 \ucd94\uac00\ud558\uac70\ub098. \/etc\/sysconfig\/network-scripts\/ifcfg-lo:0 \ud30c\uc77c \uc0dd\uc131<\/p>\n","protected":false},"excerpt":{"rendered":"

LVS \uc11c\ubc84 keepalived \uc124\uce58 \ubc0f \uad6c\uc131   \uc11c\ubc84 \uc815\ubcf4 LVS : 192.168.0.101 vip : 192.168.0.100 www1 : 192.168.0.102 www2 :<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,7],"tags":[],"_links":{"self":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/211"}],"collection":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=211"}],"version-history":[{"count":0,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/211\/revisions"}],"wp:attachment":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=211"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}