DNS部署（四）之lvs+keepalived+bind架构高可用负载均衡DNS系统-低调大师

DNS部署（四）之lvs+keepalived+bind架构高可用负载均衡DNS系统

2017-11-12 722

1、网络拓扑

2、环境描述

系统描述	IP地址	作用
LB-master	192.168.1.105	主备负载均衡器（同时做web和DNS调度）
LB-backup	192.168.1.106	主备负载均衡器（同时做web和DNS调度）
DNS-master	192.168.1.107	VIP:192.168.1.30（LVS DNS节点互为主辅同步）
DNS-backup	192.168.1.108	VIP:192.168.1.30（LVS DNS节点互为主辅同步）
Web节点组	192.168.1.201-203	VIP:192.168.1.40（LVS web节点）

3、配置LVS调度器keepalived的配置文件

keepalived配置双vrrp instance，分别为：WEB实例和DNS实例。

3.1 主LVS上keepalived的配置文件内容：

[root@lvs-M ~]#cat /etc/keepalived/keepalived.conf

! ConfigurationFile for keepalived

global_defs {

notification_email {

acassen@firewall.loc

failover@firewall.loc

sysadmin@firewall.loc

}

notification_email_fromAlexandre.Cassen@firewall.loc

smtp_server 192.168.200.1

smtp_connect_timeout 30

router_id lvs_105

}

vrrp_instance VI_WEB {

state MASTER

interface eth0

virtual_router_id 51

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass 1111

}

virtual_ipaddress {

192.168.1.40/24

}

#############LVSWEB################

virtual_server 192.168.1.40 80 {

delay_loop 6

lb_algo rr

lb_kind DR

nat_mask 255.255.255.0

# persistence_timeout 50

protocol TCP

real_server 192.168.1.201 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

real_server 192.168.1.202 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

real_server 192.168.1.203 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

#############DNSInstance start###############

vrrp_instance VI_DNS {

state BACKUP

interface eth0

virtual_router_id 52

priority 90

advert_int 1

authentication {

auth_type PASS

auth_pass 1111

}

virtual_ipaddress {

192.168.1.30/24

}

###########LVSDNS#######################

virtual_server 192.168.1.30 53 {

delay_loop 6

lb_algo rr

lb_kind DR

nat_mask 255.255.255.0

# persistence_timeout 50

protocol UDP

real_server 192.168.1.107 53 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 53

}

real_server 192.168.1.108 53 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 53

}

3.2 备LVS上keepalived的配置文件内容：

[root@lvs-S ~]#cat /etc/keepalived/keepalived.conf

! ConfigurationFile for keepalived

global_defs {

notification_email {

acassen@firewall.loc

failover@firewall.loc

sysadmin@firewall.loc

}

notification_email_fromAlexandre.Cassen@firewall.loc

smtp_server 192.168.200.1

smtp_connect_timeout 30

router_id lvs_106

}

vrrp_instance VI_WEB {

state BACKUP

interface eth0

virtual_router_id 51

priority 90

advert_int 1

authentication {

auth_type PASS

auth_pass 1111

}

virtual_ipaddress {

192.168.1.40/24

}

#############LVSWEB################

virtual_server 192.168.1.40 80 {

delay_loop 6

lb_algo rr

lb_kind DR

nat_mask 255.255.255.0

# persistence_timeout 50

protocol TCP

real_server 192.168.1.201 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

real_server 192.168.1.202 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

real_server 192.168.1.203 80 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 80

}

#############DNS Instancestart###############

vrrp_instance VI_DNS {

state MASTER

interface eth0

virtual_router_id 52

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass 1111

}

virtual_ipaddress {

192.168.1.30/24

}

###########LVSDNS#######################

virtual_server 192.168.1.30 53 {

delay_loop 6

lb_algo rr

lb_kind DR

nat_mask 255.255.255.0

# persistence_timeout 50

protocol UDP

real_server 192.168.1.107 53 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 53

}

real_server 192.168.1.108 53 {

weight 100

TCP_CHECK {

connect_timeout 8

nb_get_retry 3

delay_before_retry 3

connect_port 53

}

4、配置LVS节点服务器脚本（WEB节点与DNS节点都要配置）

4.1 DNS节点的配置内容（主备DNS都有配置）：

[root@dns-M ~]# cat /etc/init.d/dns_rs.ctl

#!/bin/bash

. /etc/init.d/functions

VIP=192.168.1.30

case "$1" in

start)

echo "start LVS of Realserver DR mode"

/sbin/ifconfig lo:0 ${VIP} netmask 255.255.255.255 up

route add -host ${VIP} dev lo

echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

;;

stop)

/sbin/ifconfig lo:0 ${VIP} netmask 255.255.255.255 down

route del -host ${VIP} dev lo

echo "stop LVS of Realserver DR mode"

echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce

echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce

;;

*)

echo "Usage: $0 {start|stop}"

exit 1

esac

4.1.1 对上面的脚本赋予权限

[root@dns-S init.d]# chmod +x dns_rs.ctl

4.2 WEB节点的配置内容(web的所有节点都有配置)

[root@web1 ~]# cat /etc/init.d/web_rs.ctl

#!/bin/bash

. /etc/init.d/functions

VIP=192.168.1.40

case "$1" in

start)

echo "start LVS of Realserver DR mode"

/sbin/ifconfig lo:0 ${VIP} netmask 255.255.255.255 up

route add -host ${VIP} dev lo

echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

;;

stop)

/sbin/ifconfig lo:0 ${VIP} netmask 255.255.255.255 down

route del -host ${VIP} dev lo

echo "stop LVS of Realserver DR mode"

echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce

echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce

;;

*)

echo "Usage: $0 {start|stop}"

exit 1

esac

4.2.1 对上面的脚本赋予权限

[root@web1 init.d]# chmod +x web_rs.ctl

5、主DNS服务器的区域配置文件修改如下：

[root@dns-M ~]# cat /var/named/chroot/var/named/pp.org.zone

$TTL 86400

@ IN SOA dns.pp.org. root.pp.org. (

203 ; serial (d. adams)

3H ; refresh

15M ; retry

1W ; expiry

1D) ; minimum

IN NS dns.pp.org.

IN MX 10 mail.pp.org.

dns.pp.org. IN A 192.168.1.107

www IN A 192.168.1.40

5.1 修改之后重启DNS服务

[root@dns-M ~]# rndc reload

server reload successful

6、综合测试

测试之前要启动相关服务（keepalived、lvs节点脚本、节点Apache、节点DNS服务器等）

A:首先启动一台负载均衡调度器的keepalived服务

[root@lvs-M ~]# /etc/init.d/keepalived start

Starting keepalived: [ OK ]

[root@lvs-M ~]# ip addr

1: lo: <LOOPBACK,UP,LOWER_UP> mtu16436 qdisc noqueue

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000

link/ether 00:0c:29:81:a8:b3 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.105/24 brd 192.168.1.255 scope global eth0

inet 192.168.1.40/24 scopeglobal secondary eth0

inet 192.168.1.30/24 scopeglobal secondary eth0

inet6 fe80::20c:29ff:fe81:a8b3/64 scope link

valid_lft forever preferred_lft forever

3: sit0: <NOARP> mtu 1480 qdisc noop

link/sit 0.0.0.0 brd 0.0.0.0

查看调度规则：

[root@lvs-M ~]# ipvsadm -L -n

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

-> RemoteAddress:Port Forward Weight ActiveConn InActConn

UDP 192.168.1.30:53 rr

-> 192.168.1.108:53 Route 100 0 0

-> 192.168.1.107:53 Route 100 0 0

TCP 192.168.1.40:80 rr

-> 192.168.1.203:80 Route 100 0 0

-> 192.168.1.202:80 Route 100 0 0

-> 192.168.1.201:80 Route 100 0 0

B.停掉和启用一台DNS服务，观察调度器

[root@dns-S slaves]# /etc/init.d/named stop

Stoppingnamed: [ OK ]

查看的日志内容：

Oct 26 23:38:10 localhostKeepalived_healthcheckers: TCP connection to [192.168.1.108:53] failed !!!

Oct 26 23:38:10 localhost Keepalived_healthcheckers:Removing service [192.168.1.108:53] from VS [192.168.1.30:53]

观察lvs调度规则中少了192.168.1.108机器

[root@lvs-M ~]# ipvsadm -L -n

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

-> RemoteAddress:Port Forward Weight ActiveConn InActConn

UDP 192.168.1.30:53 rr

-> 192.168.1.107:53 Route 100 0 0

TCP 192.168.1.40:80 rr

-> 192.168.1.203:80 Route 100 0 0

-> 192.168.1.202:80 Route 100 0 0

-> 192.168.1.201:80 Route 100 0 0

再次启动回来，查看日志会发现又把对应的IP地址加入了进来！

C.启动第二台负载均衡调度器的keepalived服务

[root@lvs-S ~]# /etc/init.d/keepalived start

Starting keepalived: [ OK ]

此时DNS的VIP会分配到第二台负载均衡调度器上

[root@lvs-S ~]# ip addr

1: lo: <LOOPBACK,UP,LOWER_UP> mtu16436 qdisc noqueue

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000

link/ether 00:0c:29:b5:be:19 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.106/24 brd 192.168.1.255 scope global eth0

inet 192.168.1.30/24 scope global secondary eth0

inet6 fe80::20c:29ff:feb5:be19/64 scope link

valid_lft forever preferred_lft forever

3: sit0: <NOARP> mtu 1480 qdisc noop

link/sit 0.0.0.0brd 0.0.0.0

WEB的VIP仍然在第一台负载均衡调度器上！！

[root@lvs-M ~]#ip addr

1: lo:<LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue

link/loopback 00:00:00:00:00:00 brd00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000

link/ether 00:0c:29:81:a8:b3 brdff:ff:ff:ff:ff:ff

inet 192.168.1.105/24 brd 192.168.1.255scope global eth0

inet 192.168.1.40/24 scope global secondaryeth0

inet6 fe80::20c:29ff:fe81:a8b3/64 scopelink

valid_lft forever preferred_lft forever

3: sit0:<NOARP> mtu 1480 qdisc noop

link/sit 0.0.0.0 brd 0.0.0.0

观察调度规则：

[root@lvs-S ~]#ipvsadm -L -n

IP VirtualServer version 1.2.1 (size=4096)

ProtLocalAddress:Port Scheduler Flags

-> RemoteAddress:Port Forward Weight ActiveConn InActConn

UDP 192.168.1.30:53 rr

-> 192.168.1.108:53 Route 100 0 35

-> 192.168.1.107:53 Route 100 0 36

TCP 192.168.1.40:80 rr

-> 192.168.1.203:80 Route 100 0 0

-> 192.168.1.202:80 Route 100 0 0

-> 192.168.1.201:80 Route 100 0 0

[root@lvs-M ~]#ipvsadm -L -n

IP VirtualServer version 1.2.1 (size=4096)

ProtLocalAddress:Port Scheduler Flags

-> RemoteAddress:Port Forward Weight ActiveConn InActConn

UDP 192.168.1.30:53 rr

-> 192.168.1.108:53 Route 100 0 0

-> 192.168.1.107:53 Route 100 0 0

TCP 192.168.1.40:80 rr

-> 192.168.1.203:80 Route 100 0 35

-> 192.168.1.202:80 Route 100 0 36

-> 192.168.1.201:80 Route 100 0 35

综上：主备调度器的keepalived服务都在工作！

注：bind9功能强大，这里只是讨论了最简单的配置！

本文转自鹏爱 51CTO博客，原文链接:http://blog.51cto.com/pengai/1706632

微信关注我们

原文链接：https://yq.aliyun.com/articles/522037

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

MAX5内存盒给至强松绑 IBM X5架构继往开来

谈到服务器虚拟化，x86平台以其开放的架构和优异的性价比无疑最受企业信息部门所关注。一项由51CTO发起，数千位企业IT主管参与的调查亦表明，不仅四路以上的高端机架和刀片服务器持续被看好，而且有四分之一强的用户认为处理器的更新换代使得双路服务器的性能也有了显著提升，同样适用于搭建虚拟化平台。被缚的Nehalem-EX 有鉴于此，新一代多路至强7500（代号“Nehalem-EX”）早在面市之前就受到业界广泛关注。作为至强7400的继任者，Nehalem-EX在硬件虚拟化支持能力上再上层楼，不仅核心增加到8个，而且每个核心支持两个线程；使得一台四路服务器可以具备多达32个核心，64个线程，可以分配的计算资源大大增加。全新的QuickPath互联架构亦给至强7500打通了多路连接的“奇经八脉”，在以往的四路平台中，CPU之间的通讯需要经过前端总线和北桥；而在QuickPath架构中，通过四条高速的QPI总线，每颗至强7500处理器可以和其他三颗实现点对点的互联，使得内存和I/O带宽获得前所未有的提升。毫无疑问，“根正苗红”的至强7500处理器在发布时受到了各大服务器厂商众星捧月一般的支...

2017-11-13

549

1、架构拓扑图 2、环境描述服务器名称 IP地址主DNS服务器 192.168.1.107 辅助DNS服务器 192.168.1.108 注意：这里Linux版本是centos5.8。 3、主辅DNS服务器bind安装 [root@dns-S ~]# yum -y install bind bind-chroot ypbind bind-utilscaching-nameserver 注意：这里主DNS服务器我们前面已经部署了！ 4、配置辅助DNS服务器 A.将主DNS服务器的named.conf同步到辅助DNS服务器。 [root@dns-M ~]# scp /var/named/chroot/etc/* 192.168.1.108:/var/named/chroot/etc/ root@192.168.1.108's password: localtime 100% 405 0.4KB/s 00:00 named.caching-nameserver.conf 100% 1230 1.2KB/s 00:00...

2017-11-13

618

资源下载

更多资源

优质分享App

近一个月的开发和优化，本站点的第一个app全新上线。该app采用极致压缩，本体才4.36MB。系统里面做了大量数据访问、缓存优化。方便用户在手机上查看文章。后续会推出HarmonyOS的适配版本。

腾讯云软件源

为解决软件依赖安装时官方源访问速度慢的问题，腾讯云为一些软件搭建了缓存服务。您可以通过使用腾讯云软件源站来提升依赖包的安装速度。为了方便用户自由搭建服务架构，目前腾讯云软件源站支持公网访问和内网访问。

Spring

Spring框架（Spring Framework）是由Rod Johnson于2002年提出的开源Java企业级应用框架，旨在通过使用JavaBean替代传统EJB实现方式降低企业级编程开发的复杂性。该框架基于简单性、可测试性和松耦合性设计理念，提供核心容器、应用上下文、数据访问集成等模块，支持整合Hibernate、Struts等第三方框架，其适用范围不仅限于服务器端开发，绝大多数Java应用均可从中受益。

Rocky Linux

Rocky Linux（中文名：洛基）是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版，作为CentOS稳定版停止维护后与RHEL（Red Hat Enterprise Linux）完全兼容的开源替代方案，由社区拥有并管理，支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性，采用模块化包装和SELinux安全架构，默认包含GNOME桌面环境及XFS文件系统，支持十年生命周期更新。