惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
T
Troy Hunt's Blog
P
Proofpoint News Feed
V
Vulnerabilities – Threatpost
C
Cybersecurity and Infrastructure Security Agency CISA
K
Kaspersky official blog
Cyberwarzone
Cyberwarzone
T
Tor Project blog
Cisco Talos Blog
Cisco Talos Blog
S
Securelist
L
Lohrmann on Cybersecurity
Security Latest
Security Latest
T
Threatpost
H
Heimdal Security Blog
W
WeLiveSecurity
A
Arctic Wolf
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
G
GRAHAM CLULEY
IT之家
IT之家
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
TaoSecurity Blog
TaoSecurity Blog
A
About on SuperTechFans
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
N
News and Events Feed by Topic
Hacker News - Newest:
Hacker News - Newest: "LLM"
Last Week in AI
Last Week in AI
T
The Blog of Author Tim Ferriss
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Microsoft Azure Blog
Microsoft Azure Blog
Hugging Face - Blog
Hugging Face - Blog
Google DeepMind News
Google DeepMind News
量子位
Stack Overflow Blog
Stack Overflow Blog
Know Your Adversary
Know Your Adversary
B
Blog RSS Feed
阮一峰的网络日志
阮一峰的网络日志
WordPress大学
WordPress大学
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
AI
AI
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
GbyAI
GbyAI
Vercel News
Vercel News
C
Cyber Attacks, Cyber Crime and Cyber Security
Latest news
Latest news
D
Darknet – Hacking Tools, Hacker News & Cyber Security
大猫的无限游戏
大猫的无限游戏
Forbes - Security
Forbes - Security

mephisto.cc

修复rime-ice无法弹出候选框的问题 开机滚动字体显示优化 个人网站安全防护 树莓派上部署Vaultwarden 使用goaccess实时分析Caddy日志 个人网站监控 Hugo全站AVIF记 Linux下尝试使用Godot开发小游戏 Arch linux dae 透明代理 Airflow接管galler-dl下载任务 如何使用gallery-dl批量下载图像 Arch核显下如何愉快玩Dota2和CS2 Arch/labwc 环境网络相关设置 Rime添加dota2词库 Arch 重装记录 Supertuxkart iOS版终于发布了 打造自己的流媒体音乐服务 剪切板管理工具clipcat推荐 MangoHud性能监控 微信小程序开发记 Rofi试用 解决Arch下VSCode无法输入中文的问题 独立窗口管理器下无法录屏问题处理 上海市二手房成交数据监控 OpenLDAP监控 Arch linux如何顺畅连接蓝牙设备 使用Git和Ansible管理配置文件 Arch Linux SSL VPN 客户端配置 简单获取celery任务实时结果 Arch linux下iNode客户端的安装和使用方法 券商费率调整记 迷你主机组装记 Labwc更换定制皮肤 树莓派跑分流代理 实用自动代理配置示例 九年老鼠标复活记 Openvpn示例 Mac下如何旋转webp图片 如何隐藏Vscode中Markdown PDF插件的头部内容 解决Linux下网络配置无法变更保存的问题 labwc环境启用wlogout Ubuntu下新官方微信尝鲜 简单检测用户是否开启广告屏蔽 Atuin ZFS下卡顿问题解决 Wine安装64位微信 Fish 和 Atuin使用记 Fastapi简单实现临时下载链接 Fastapi微信公众号开发简要 Hugo根据语种展示不同内容 如何修复Waybar微信图标错误 信封加密简要 Linux环境下维护公众号记录 快速隐藏和呼出终端 Wayland环境自动切换壁纸 SuperTuxKart 试玩 简单抓取雪球股票快讯 为什么你的kill命令不能列出信号表 Wine安装微信保姆教程 Hysteria科学上网简要 Ubuntu 23.10 钉钉无法启动解决方法 网站导航栏防止插入Adsense自动广告 Linux环境按键检测 Hugo文末添加最后修改时间 Wayland环境ksnip无法复制问题解决 我眼中的股票市场 Caddy简单图片防盗链 greetd和regreet使用教程 Wayland环境下截图加后期修改 Wayland 环境下gif录屏 Firefox的一些有趣功能 Ubuntu 切换系统语言 Firefox 标题栏高度调整 网站添加回到顶部功能 Hugo自定义字体 Labwc 便捷配置 Wofi使用教程 窗口管理器labwc使用记 文件共享软件Dufs推荐 Hugo静态站点接入Adsense广告 Fcitx5配置详解 Ubuntu安装chrome的方法总结 一种Xterm.js的全屏方案 Google网址收录api Python示例 手机听离线音乐 Snipe it资产导入 应用启动器yofi使用配置 Snipe it资产管理系统安装使用 Ubuntu开机启动加速 Vue3 vite TypeScript跨域等相关设置 Ubuntu手动升级Libreoffice Ubuntu设置alacritty为默认终端 简体文章批量转换为繁体 使用Inkscape调整svg图片大小 实用命令 使用mitmproxy给手机app抓包 Python中rstrip方法细解 Github同主机多仓库部署deploy key问题处理 Linux安装最新版本Python KeePassXC使用教程 Ubuntu 22.10连接蓝牙耳机报错br-connection-profile-unavailable解决方法
lvs端部署
2022-05-25 · via mephisto.cc

1. ipvsadm

yum install ipvsadm

2. keepalived

yum install keepalived

3. vim /etc/keepalived/keepalived.conf, 测试示例如下

    ! Configuration File for keepalived

global_defs {
   notification_email {
     haha@test.com
   }
   router_id LVS_M
}

vrrp_instance VI_1 {
    state MASTER
    interface em1
    virtual_router_id 99
    priority 100
    advert_int 1
    smtp_alert
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        your_vip_1 
        your_vip_2
        your_vip_3
    }
}

virtual_server your_vip_1 80{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP

    real_server your_rs_1 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }
}

virtual_server your_vip_2 80{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP


    real_server your_rs_1 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

}

virtual_server  your_vip_3 80{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP


    real_server your_rs_1 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 80 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

}

#https

virtual_server your_vip_1 443{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP

    real_server your_rs1 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }
}

virtual_server your_vip_2 443{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP


    real_server your_rs_1 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

}

virtual_server your_vip_3 443{
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    protocol TCP


    real_server your_rs_1 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_2 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

    real_server your_rs_3 443 {
        weight 1
        MISC_CHECK {
            misc_path "/opt/adminsh/check-realserver-health.sh"
            misc_timeout 5
        }
    }

}

4. slave 端部署同master一样, 只需要调整router_id、state、prority参数

  /sbin/iptables -A INPUT -p vrrp -j ACCEPT  添加防火墙规则

realserver端部署:

1. vim /etc/init.d/realserver

#!/bin/sh
### BEGIN INIT INFO
# Provides: lvs_realserver
# Default-Start:  3 4 5
# Default-Stop: 0 1 6
# Short-Description: LVS real_server service scripts
# Description: LVS real_server start and stop controller
### END INIT INFO
#  Copyright 2013 lxcong
#
#  chkconfig: - 20 80
#
#  Author:  xxxx@xxxx

#有多个虚拟IP,以空格分隔
SNS_VIP="1.1.1.1"
. /etc/rc.d/init.d/functions
if [[ -z "$SNS_VIP"  ]];then
    echo Please set vips in $0 with SNS_VIP!
fi

start(){
num=0
for loop in $SNS_VIP
do
    /sbin/ifconfig lo:$num $loop netmask 255.255.255.255 broadcast $loop
    /sbin/route add -host $loop dev lo:$num
    ((num++))
done
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -e -p >/dev/null 2>&1
} 

stop(){
num=0
for loop in $SNS_VIP
do
    /sbin/ifconfig lo:$num down
    /sbin/route del -host $loop >/dev/null 2>&1
    ((num++))
done
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -e -p >/dev/null 2>&1
} 

case "$1" in
    start)
        start
        echo "RealServer Start OK"
        ;;
    stop)
        stop
        echo "RealServer Stoped"
        ;;
    restart)
        stop
        start
        ;;
    *)
         echo "Usage: $0 {start|stop|restart}"
         exit 1
esac
exit 0

2. 启动文件

chmod +x /etc/init.d/realserver

3. 启动

service realserver start

4. 配置开机启动

chkconfig realserver on

5. realserver 开启服务,进行各项测试