ロードバランサ

• Ubuntu

(16)
--LVS＋Keepalived

https://www.server-world.info/query?os=Ubuntu_16.04&p=lvs&f=1

LVS Server #1 mmm151 Ubuntu16
LVS Server #2 mmm135 Ubuntu16
バックエンドWebサーバ#1 mmm051 CnetOS7
バックエンドWebサーバ#2 mmm052 CnetOS7

VRRP VIP=192.168.137.120

--mmm151での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 100
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens160
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens160 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens160"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm135での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens33
virtual_router_id 51
priority 90
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens33
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens33 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens33"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm051とmmm052での作業

iptables -t nat -A PREROUTING -d 192.168.137.120 -j REDIRECT

(18)

--LVS＋Keepalived

LVS Server #1 mmm145 Ubuntu18
LVS Server #2 mmm130 Ubuntu18
バックエンドWebサーバ#1 mmm051 CnetOS7
バックエンドWebサーバ#2 mmm052 CnetOS7

VRRP VIP=192.168.137.120

--mmm145での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 100
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens160
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens160 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens160"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm130での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens33
virtual_router_id 51
priority 90
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens33
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens33 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens33"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm051とmmm052での作業

iptables -t nat -A PREROUTING -d 192.168.137.120 -j REDIRECT

• Debian

(9)
--LVS＋Keepalived

LVS Server #1 mmm146 debian9
LVS Server #2 mmm136 debian9
バックエンドWebサーバ#1 mmm051 CnetOS7
バックエンドWebサーバ#2 mmm052 CnetOS7

VRRP VIP=192.168.137.120

--mmm146での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens192
virtual_router_id 51
priority 100
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens192
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

apt -y install tcpdump
tcpdump -i ens192 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens192"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm136での作業

apt -y install ipvsadm keepalived

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens33
virtual_router_id 51
priority 90
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens33
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

apt -y install tcpdump
tcpdump -i ens33 vrrp -nn

vim /etc/default/ipvsadm

AUTO="true"
DAEMON="master"
IFACE="ens33"

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm051とmmm052での作業

iptables -t nat -A PREROUTING -d 192.168.137.120 -j REDIRECT

• CentOS

(7)

--LVS＋Keepalived

https://www.server-world.info/query?os=CentOS_7&p=lvs&f=1

LVS Server #1 mmm050 CnetOS7
LVS Server #2 mmm053 CnetOS7
バックエンドWebサーバ#1 mmm051 CnetOS7
バックエンドWebサーバ#2 mmm052 CnetOS7

VRRP VIP=192.168.137.120

--mmm050での作業

yum -y install ipvsadm keepalived

mv /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.orig

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 100
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens160
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens160 vrrp -nn

touch /etc/sysconfig/ipvsadm

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm053での作業

yum -y install ipvsadm keepalived

mv /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.orig

vim /etc/keepalived/keepalived.conf

global_defs {
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 90
nopreempt
advert_int 1

virtual_ipaddress {
192.168.137.120 dev ens160
}
}
virtual_server 192.168.137.120 80 {
delay_loop 3
lvs_sched rr
lvs_method DR
protocol TCP

real_server 192.168.137.51 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
real_server 192.168.137.52 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
}
}
}

systemctl enable keepalived
systemctl restart keepalived
systemctl status keepalived

tcpdump -i ens160 vrrp -nn

touch /etc/sysconfig/ipvsadm

systemctl enable ipvsadm
systemctl restart ipvsadm
systemctl status ipvsadm

ipvsadm -C
ipvsadm -A -t 192.168.137.120:80 -s rr
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.51:80 -g
ipvsadm -a -t 192.168.137.120:80 -r 192.168.137.52:80 -g

ipvsadm -l
ipvsadm -S > /etc/ipvsadm.rules

--mmm051とmmm052での作業

iptables -t nat -A PREROUTING -d 192.168.137.120 -j REDIRECT

• Windows Server

(2012R2)

--ネットワーク負荷分散(NLB)

NLB Server#1 (バックエンドWebサーバ#1) mmm061 Windows Server2012R2
NLB Server#2 (バックエンドWebサーバ#2) mmm062 Windows Server2012R2

NLB VIP=192.168.137.120

https://www.ipentec.com/document/windows-server-network-load-balancing-install
https://miya1beginner.com/how-to-configure-windows-nlb1

--全ノードでの作業

Install-WindowsFeature NLB,RSAT-NLB

--mmm061での作業

New-NlbCluster -InterfaceName "Ethernet0" -OperationMode Multicast -ClusterPrimaryIP 192.168.137.120 -ClusterName www.example.com
Add-NlbClusterNode -InterfaceName "Ethernet0" -NewNodeName "mmm062" -NewNodeInterface "Ethernet0"