1.2 配置好個主機的IP地址和主機名（略）

1.3 關(guān)閉Linux防火墻和selinux

1.3.1時間同步

ntpdate ntp.aliyun.com

1.3.2關(guān)閉selinux

sed -i 's/^SELINUX=.*$/SELINUX=disable/' /etc/selinux/config

setenforce 0

1.3.3關(guān)閉防火墻

CentOS 7.x

? systemctl disable firewalld

? systemctl stop firewalld

CentOS 6.x

? /etc/init.d/iptables stop

? chkconfig iptables off

1.4 負(fù)載均衡服務(wù)器（LVS Director）安裝配置

1.4.1 安裝lvs的管理工具ipvsadm

[root@localhost ~]# yum install -y ipvsadm

1.4.2 開啟路由轉(zhuǎn)發(fā)功能

[root@localhost ~]# echo 1 > /proc/sys/net/ipv4/ip_forward

1.4.3 LVS Director 配置路由轉(zhuǎn)發(fā)

[root@localhost ~]#?iptables -t nat -F

[root@localhost ~]#?iptables -t nat -X

[root@localhost ~]#? iptables -t nat -A POSTROUTING -s 192.168.2.0/24? -j MASQUERADE

1.4.4 配置LVS規(guī)則

[root@localhost ~]# ipvsadm -A -t 10.10.10.11:http -s rr

[root@localhost ~]# ipvsadm -a -t 10.10.10.11:http -r 192.168.2.11:80 -m

[root@localhost ~]# ipvsadm -a -t 10.10.10.11:http -r 192.168.2.12:80 -m

1.4.5 常用的ipvsadm命令

查看ipvs規(guī)則

ipvsadm –Ln

清空ipvs規(guī)則

Shell > ipvsadm -C

保存ipvs規(guī)則

ipvsadm -S > /etc/sysconfig/ipvsadm 或者ipvsadm-save -n > /etc/sysconfig/ipvsadm

恢復(fù)ipvs規(guī)則

ipvsadm -R < /etc/sysconfig/ipvsadm 或者ipvsadm-restore < /etc/sysconfig/ipvsadm

1.5 后端RS服務(wù)器配置

1.5.1 配置RS的RIP網(wǎng)關(guān)必須指向DIP（略）

1.5.2 RS上安裝Nginx（兩個RS都安裝）

[root@localhost ~]# yum install epel-release

[root@localhost ~]# yum install -y nginx

1.5.3 RS1和RS2上分別修改nginx的靜態(tài)主頁

[root@localhost ~]# echo "<h1>Testpage on node1.ruhua.com<h1>" > /usr/share/nginx/html/index.html

[root@localhost ~]# echo "<h1>Testpage on node2.ruhua.com<h1>" > /usr/share/nginx/html/index.html

1.5.3啟動nginx服務(wù)

[root@localhost ~]#?service nginx start? #啟動nginx

[root@localhost ~]#?nginx -s reload #重載配置

[root@localhost ~]#?chkconfig nginx on #設(shè)為開機啟動

1.6.測試lvs負(fù)載效果

1.6.1windows上測試

在Windows平臺使用瀏覽器測試，刷新頁面寺惫，輪詢的轉(zhuǎn)發(fā)到后端的web1和web2節(jié)點上迅栅。

1.6.2在Linux上測試

[root@localhost ~]# curl 10.10.10.11

[root@localhost ~]# for i in {1..6} ; do curl http://10.10.10.11; done

[root@localhost ~]# for i in {1..6} ; do sleep 3; curl http://192.168.2.99; done

二宣蠕、???LVS_NAT模式實現(xiàn)web負(fù)載均衡

2.1 實驗環(huán)境說明

2.2 實驗拓?fù)?/h2>

2.3 配置好個主機的IP地址和主機名（略）

2.4 關(guān)閉Linux防火墻和selinux

2.4.1時間同步

ntpdate ntp.aliyun.com

2.4.2關(guān)閉selinux

sed -i 's/^SELINUX=.*$/SELINUX=disable/' /etc/selinux/config

setenforce 0

2.4.3關(guān)閉防火墻

CentOS 7.x

? systemctl disable firewalld

? systemctl stop firewalld

2.5 RS安裝配置nginx（Apache也可以）

2.5.1 安裝nginx

[root@localhost ~]# yum install epel-release

[root@localhost ~]# yum install -y nginx

2.5.2 修改nginx默認(rèn)主頁

RS1

cp?/usr/share/nginx/html/{index.html,index.html_bak}

echo "RS1,192.168.99.101"> /usr/share/nginx/html/index.html

RS2

cp?/usr/share/nginx/html/{index.html,index.html_bak}

echo "RS2,192.168.99.102"> /usr/share/nginx/html/index.html

2.5.3 啟動nginx服務(wù)

systemctl start nginx.service

systemctl enable nginx.service

2.5.3 RS配置vip雄驹，RS1和RS2分別運行以下腳本

vim /usr/local/sbin/lvs_dr_rs.sh

bash /usr/local/sbin/lvs_dr_rs.sh start|stop

#!/bin/bash

#

vip=192.168.99.99

mask='255.255.255.255'

case $1 in

start)

echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore

echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore

echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce

echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce

ifconfig lo:0 $vip netmask $mask broadcast $vip up

route add -host $vip dev lo:0

;;

stop)

ifconfig lo:0 down

echo 0 > /proc/sys/net/ipv4/conf/all/arp_ignore

echo 0 > /proc/sys/net/ipv4/conf/lo/arp_ignore

echo 0 > /proc/sys/net/ipv4/conf/all/arp_announce

echo 0 > /proc/sys/net/ipv4/conf/lo/arp_announce

;;

*)

echo "Usage $(basename $0) start|stop"

exit 1

;;

esac

2.6??Director上安裝配置LVS

2.6.1 安裝lvs的管理工具ipvsadm

[root@localhost ~]# yum install -y ipvsadm

[root@localhost ~]# rpm -qa ipvsadm

2.6.2 Director上運行以下腳本愈诚，配置vip和lvs規(guī)則

vim /usr/local/sbin/lvs_dr.sh

bash /usr/local/sbin/lvs_dr.sh start|stop

#!/bin/bash

#

vip='192.168.99.99'

iface='ens33:0'

mask='255.255.255.255'

port='80'

rs1='192.168.99.101'

rs2='192.168.99.102'

scheduler='wrr'

type='-g'

case $1 in

start)

ifconfig $iface $vip netmask $mask broadcast $vip up

ipvsadm -A -t ${vip}:${port} -s $scheduler

ipvsadm -a -t ${vip}:${port} -r ${rs1} $type -w 1

ipvsadm -a -t ${vip}:${port} -r ${rs2} $type -w 1

;;

stop)

ipvsadm -C

ifconfig $iface down

;;

*)

echo "Usage $(basename $0) start|stop"

exit 1

;;

esac

2.7 測試lvs負(fù)載效果

在linux測試客戶機上用curl命令測試

[root@localhost ~]# curl 192.168.99.99

[root@localhost ~]# for i in {1..10} ; do curl http://192.168.99.99; done