XEN虚拟机内核上装虚拟机lvs keepalived

1、xen虚拟机内核上装虚拟机lvs keepalivedxen虚拟机内核上装虚拟机lvs rootkslvs1 kerne -sv /usr/src/kernels/2.6.18-238.el5-xen-x86_64/ /usr/src/linux rootkslvs1 kernels ipvsadm -bash: ipvsadm: command not found rootkslvs1 kernels yum -y install ipvsadm install: ipvsadm.x86_64 0:1.24-13.el5 complete! 刚装完，执行service ipvsadm sta

2、rt启动没看到ok是由于目前没有规章启用,在/etc/sysconfig/还没生成ipvsadm这个文件，这个原理和以前装yum 安装 iptable一样，第一次启动也是没看到ok，在/etc/sysconfig/下没有iptables这个文件，都是存规章的文件，可以手动建iptables规章; ipvsadm和keepalived结合用法，是调用/etc/keepalived/keepalived.conf,这个文件，把规章写入/etc/sysconfig/ipvsadm这个文件,因些正常要先启动service keepalived start 再启动service ipvsadm star

3、t就能看到ok rootlvs1 ipvsadm-1.24 -l | ipvs /lib/moles/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_dh.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_lblc.ko /lib/

4、modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_lblcr.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_lc.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_nq.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_rr.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net

5、/ipv4/ipvs/ip_vs_.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_sh.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_wlc.ko /lib/modules/2.6.18-238.9.1.el5/kernel/net/ipv4/ipvs/ip_vs_wrr.ko rootlvs2 |grep ip_vs rootlvs2 rootlvs1 ipvsadm-1.24 ipvsadm(执行) ip virtual server

6、version 1.2.1 (size=4096) prot localaress:port scheduler flags - remoteaddress:port forward weight activeconn inactconn rootlvs1 ipvsadm-1.24 lsmod|grep ip_vs ip_vs 122113 0 注： 安装后路径： /sbin/ipvsadm /sbin/ipvsadm- /sbin/ipvsadm-save :启动脚本(服务)： 第一次启动会报如下提醒： applying ipvs configuration: /etc/init.d/ipv

7、sadm: line 62: /etc/sysconfig/ipvsadm: no ch or directory 缘由：ipvsadm系统安装没有建立此文件: /etc/sysconfig/ipvsadm /etc/init.d/ipvsadm start (先不要启动，等安装完keepalived,启动keepalived后再开ipvsadm就不会出这个提醒) 启动，停用及状态等： service ipvsadm start|stop|restart|us|panic|save|reload|reload-force - 安装keepalived 先安装openssl-devel root

8、master yum -y install openssl-devel rootmaster wget /software/keepalived-1.1.17.tar.gz rootkslvs1 src keepalived-1.1.17 rootkslvs1 keepalived-1.1.17 ./configure -prefix=/usr/local/keepalive keepalived configuration - keepalived version : 1.1.17 compiler : gcc compiler flags :

9、 -g -o2 exa lib : -lpopt -lssl -lcrypto use ipvs framework : yes ipvs sy daemon support : yes use vrrp framework : yes use linkwatch : no use debug flags : no 编译的时候浮现这个一样的提醒才是正确，解释keepalived和内核结合了，假如不是这样的，需要加上这个参数./configure -with-kernel- rootkslvs1 keepalived-1.1.17 make rootkslvs1 keepalived-1.1.1

10、7 make install 找不到内核源码提醒如下：(错误) use ipvs framework : no ipvs daemon support : no use vrrp framework : no keepalived安装完成后，会在安装名目/usr/local/keepalived生成/bin etc man sbin 4个名目 rootkslvs1 keepalived-1.1.17 cd /usr/local/keepalive/ you have mail in /var/spool/mail/root rootkslvs1 keepalive ls bin etc sbi

11、n share rootkslvs1 keepalive cd etc/ rootkslvs1 etc ls keepalived rc.d sysconfig rootlvs1 etc /usr/local/keepalive/sbin/keepalived -d rootlvs1 etc ps aux |grep keepalived |grep -v grep root 22073 0.0 0.0 35844 636 ? ss 16:32 0:00 /usr/local/keepalive/sbin/keepalived -d root 22074 0.2 0.1 40004 1624

12、? s 16:32 0:00 /usr/local/keepalive/sbin/keepalived -d root 22075 0.3 0.1 40004 1104 ? s 16:32 0:00 /usr/local/keepalive/sbin/keepalived -d rootlvs1 etc ps |grep keepalived |-keepalived-2*keepalived rootlvs1 src /usr/local/keepalive/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/ rootlvs1 init.d cp /us

13、r/local/keepalive/etc/sysconfig/keepalived /etc/sysconfig/ rootlvs1 etc /etc/keepalived rootlvs1 src cp /usr/local/keepalive/etc/keepalived/keepalived.conf /etc/keepalived/ rootlvs1 keepalive cp /usr/local/keepalive/sbin/keepalived /usr/sbin/ 把keepalivd.conf文件上传到/etc/keepalived/下再启动 rootkslvs1 keepa

14、lived service keepalived start starting keepalived: ok 最后启动 rootkslvs1 keepalived service ipvsadm start ipvsadm: saving ipvs table to /etc/sysconfig/ipvsadm: ok ipvsadm: clearing the current ipvs table: ok ipvsadm: applying ipvs configuration: ok rootkslvs1 keepalived ipvsadm -lcn ipvs connection en

15、tries pro pire state source virtual destination tcp 00:24 none 65:0 26:80 31:80 tcp 14:43 established 65:3610 26:80 31:80 tcp 00:27 none 52:0 26:80 31:80 系统会自动写入要转发的规章 /etc/sysconfig/ipvsadm -a -t 192.

16、168.1.226:38438 -s wlc -p 50 -a -t 26:80 -s wlc -p 50 -a -t 26:80 -r 32:80 -g -w 100 -a -t 26:80 -r 31:80 -g -w 100 -a -t 25:81 -s wlc -p 180 问题：查看ipvsadm发觉 fin_wait数量无数，由于persistence_out 180,保持衔接时光太想，就在1.219改这时光，重启lvs服务后225:81不能拜访 ro

17、otkslvs2 ipvsadm -lcn |awk print $3 | | -c |sort -rn 3453 fin_wait 2039 established 4 none; 1 state 1 entries 要是lvs 1.219 25:81/onlinecore/出问题不能拜访，删除/etc/sysconfig/ipvsadm,停掉service ipvsadm stop service ipvsadm stop, lvs 1.218启动lvs 然后再启动lvs 1.219,本来的ipvsadm又会产生新规章，前提，要把全部的服务(80 81 3

18、8438)都开了，全部的服务才都会有规章，比如上面只开228:81,就没有229.81的规章 -a -t 25:81 -r 28:81 -g -w 100 总结：设定好keepalied.conf规章再启动lvs，要改规章要两台lvs一起改,要不然一台就不能转发 - established: 呼叫建立 syn_recv: 接收数据 - ipvsadm -l -timeout 改这个时光，fin_wait也会变少 timeout (tcp tcpfin udp): 900 120 300 默认fin_wait是120秒 修改成60 ipvsadm - 900 60 300 - 只开1.219的规章 lvs 1.219的 /etc/sysconfig/ipvsadm -a -t 26:38438 -s wlc -p 50 -a -t 26:38438 -r 32:38438 -g -w 100 -a -t 26:38438 -r 31:38438 -g -w 100