Q: 如何設置LVS,讓Director能將來自同一個Client的請求發給同一個RealServer
A: 對于這個問題可以分為兩個問題
一:如果Director上配置的服務為簡單服務,即客戶端只需要訪問服務器的一個固定端口,如
http服務(80),te.net(23),可以通過服務的persistence來設置。
以LVS-DR為例:(服務以telnet為例)
Client Client IP: 10.70.101.100
|
|
|
| Virtual IP: eth0:0 IP 10.71.101.230/32
Director Direcotor IP: eth0 IP 10.71.101.220/24
|
-------------|
| |
| RealServer1 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
| Real IP: eth0 IP 10.71.101.221/24
|------------|
| RealServer2 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
| Real IP: eth0 IP 10.71.101.222/24
|------------|
RealServer3 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
Real IP: eth0 IP 10.71.101.223/24
在Director上作的設置:
# ifconfig eth0 10.71.101.220 netmask 255.255.255.0 broadcast 10.71.101.255
# ifconfig eth0:0 10.71.101.230 netmask 255.255.255.255 broadcast 10.71.101.230
# route add -host 10.71.101.230 gw 10.71.101.230
# ipvsadm -A -t 10.71.101.230:23 -s wlc -p 9000
# ipvsadm -a -t 10.71.101.230:23 -r 10.71.101.221 -g -w 1
# ipvsadm -a -t 10.71.101.230:23 -r 10.71.101.222 -g -w 1
# ipvsadm -a -t 10.71.101.230:23 -r 10.71.101.223 -g -w 1
在RealServer1上作的設置(其他的RealServer的配置類似),除了配置telnet服務之外:
# ifconfig eth0 10.71.101.221 netmask 255.255.255.0 broadcast 10.71.101.255
# echo 0 > /proc/sys/net/ipv4/conf/all/hidden
# echo 0 > /proc/sys/net/ipv4/conf/eth0/hidden
# ifconfig eth0:0 10.71.101.230 netmask 255.255.255.255 broadcast 10.71.101.230
# route add -host 10.71.101.230 gw 10.71.101.230
二:如果Director上配置的服務為多個相關服務,客戶端要同時訪問服務器的多個端口,如
ftp服務,客戶要訪問服務器的ftp(21)和ftp-data(20)端口,所以要保證一個客戶端對
這兩個端口的訪問被定向到同一個服務器上,需要用lvs的fwmark加persistence設置。
http和https的設置與此類似。
以LVS-DR為例:(服務以ftp(21)和ftp-data(20)為例)
Client Client IP: 10.70.101.100
|
|
|
| Virtual IP: eth0:0 IP 10.71.101.230/32
Director Direcotor IP: eth0 IP 10.71.101.220/24
|
-------------|
| |
| RealServer1 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
| Real IP: eth0 IP 10.71.101.221/24
|------------|
| RealServer2 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
| Real IP: eth0 IP 10.71.101.222/24
|------------|
RealServer3 Virtual IP: eth0:0 IP 10.71.101.230/32 (hidden arp)
Real IP: eth0 IP 10.71.101.223/24
在Director上作的設置:
# ifconfig eth0 10.71.101.220 netmask 255.255.255.0 broadcast 10.71.101.255
# ifconfig eth0:0 10.71.101.230 netmask 255.255.255.255 broadcast 10.71.101.230
# route add -host 10.71.101.230 gw 10.71.101.230
# iptables -t mangle -A PREROUTING -d 10.71.101.230 --dport 20 -j MARK --set-mark 1
# iptables -t mangle -A PREROUTING -d 10.71.101.230 --dport 21 -j MARK --set-mark 1
# ipvsadm -A -f 1 -s wlc -p 9000
# ipvsadm -a -f 1 -r 10.71.101.221:0 -g -w 1
# ipvsadm -a -f 1 -r 10.71.101.222:0 -g -w 1
# ipvsadm -a -f 1 -r 10.71.101.223:0 -g -w 1
在RealServer1上作的設置(其他的RealServer的配置類似),除了配置telnet服務之外:
# ifconfig eth0 10.71.101.221 netmask 255.255.255.0 broadcast 10.71.101.255
# echo 0 > /proc/sys/net/ipv4/conf/all/hidden
# echo 0 > /proc/sys/net/ipv4/conf/eth0/hidden
# ifconfig eth0:0 10.71.101.230 netmask 255.255.255.255 broadcast 10.71.101.230
# route add -host 10.71.101.230 gw 10.71.101.230