{"id":56,"date":"2014-09-20T01:54:00","date_gmt":"2014-09-20T01:54:00","guid":{"rendered":"http:\/\/onlinelab.info\/2014\/09\/20\/cai-dat-ha-lvs\/"},"modified":"2014-09-20T01:54:00","modified_gmt":"2014-09-20T01:54:00","slug":"cai-dat-ha-lvs","status":"publish","type":"post","link":"https:\/\/www.asianux.org.vn\/index.php\/2014\/09\/20\/cai-dat-ha-lvs\/","title":{"rendered":"C\u00e0i \u0111\u1eb7t HA & LVS"},"content":{"rendered":"

1. M\u00f4 h\u00ecnh<\/p>\n

\"\"<\/a><\/div>\n

<\/p>\n

C\u00e1c b\u01b0\u1edbc c\u00e0i \u0111\u1eb7t HA v\u00e0 LVS cho c\u00e1c m\u00e1y ch\u1ee7 Load  <\/span>balancing v\u00e0 database<\/span><\/b><\/span><\/div>\n
    <\/span>*  <\/span>heartbeat<\/span><\/div>\n
          <\/span>o heartbeat-pils<\/span><\/div>\n
          <\/span>o heartbeat-stonith <\/span><\/div>\n
    <\/span>* heartbeat-ldirectord<\/span><\/div>\n
          <\/span>o ipvsadm<\/span><\/div>\n
          <\/span>o perl-MailTools<\/span><\/div>\n
                <\/span>+ perl-TimeDate <\/span><\/div>\n
          <\/span>o perl-Net-IMAP-Simple<\/span><\/div>\n
          <\/span>o perl-Net-IMAP-Simple-SSL<\/span><\/div>\n
                <\/span>+ perl-IO-Socket-SSL<\/span><\/div>\n
                      <\/span># perl-Net-SSLeay <\/span><\/div>\n
          <\/span>o perl-Mail-POP3Client<\/span><\/div>\n
          <\/span>o perl-Mail-IMAPClient<\/span><\/div>\n
         <\/span> <\/span>o perl-Authen-Radius<\/span><\/div>\n
                <\/span>+ perl-Data-HexDump<\/span><\/div>\n
C\u1ea5u h\u00ecnh load balancing<\/span><\/b><\/span><\/div>\n

<\/p>\n

\"\"<\/a><\/div>\n

<\/p>\n

C\u1ea5u h\u00ecnh load blance b\u1eb1ng LVS \/ NAT<\/span><\/i><\/b><\/div>\n
    \n
  1. Cho ph\u00e9p IP fowarding <\/span><\/li>\n<\/ol>\n
    # echo “1” > \/proc\/sys\/net\/ipv4\/ip_forward  <\/span><\/div>\n
      \n
    1. T\u1ea1o virtual service cho LV server (qua ph\u01b0\u01a1ng th\u1ee9c round robin )<\/span><\/li>\n<\/ol>\n
      # ipvsadm -A -t 172.16.0.1:http -s rr  <\/span><\/div>\n
        \n
      1. \u0110\u1ed1i v\u1edbi d\u1ecbch d\u1ecbch v\u1ee5 virtual tr\u00ean , d\u00f9ng c\u00e1c l\u1ec7nh sau \u0111\u1ec3 c\u1ea5u h\u00ecnh cho realserver <\/span><\/li>\n<\/ol>\n
        # ipvsadm -a -t 172.16.0.1:http -r 10.0.0.101:http -m
        # ipvsadm -a -t 172.16.0.1:http -r 10.0.0.102:http -m <\/span><\/div>\n
          \n
        1. C\u00f3 th\u1ec3 ki\u1ec3m tra k\u1ebft qu\u1ea3 b\u1eb1ng l\u1ec7nh <\/span><\/li>\n<\/ol>\n
          #ipvsadm -L   <\/span><\/div>\n
            \n
          1. Ch\u1ec9nh default gateway t\u1ea1i m\u00e1y load balancing<\/span><\/li>\n<\/ol>\n
            #route add -net default gw 10.0.0.1  <\/span><\/div>\n
            Load blance b\u1eb1ng LVS \/ DR<\/span><\/i><\/b><\/span><\/i><\/div>\n
              \n
            1. Th\u00eam interface \u1ea3o cho load balancing (v\u00ec m\u00f4 h\u00ecnh LVS\/DR y\u00eau c\u1ea7u ta ph\u1ea3i t\u1ea1o th\u00eam virtual IP)<\/span><\/li>\n<\/ol>\n
               <\/span># ifconfig eth1:0 10.0.0.100 netmask 255.255.255.0  <\/span><\/div>\n
                \n
              1. Khai b\u00e1o d\u1ecbch v\u1ee5 \u1ea3o cho load balancing<\/span><\/li>\n<\/ol>\n
                # ipvsadm -A -t 10.0.0.100:http -s rr   <\/span><\/div>\n
                  \n
                1. Khai b\u00e1o server th\u1eadt  <\/span>tr\u00ean loadbalancing<\/span><\/li>\n<\/ol>\n
                  # ipvsadm -a -t 10.0.0.100:http -r 10.0.0.101:http -m <\/span><\/div>\n
                  # ipvsadm -a -t 10.0.0.100:http -r 10.0.0.102:http -m <\/span><\/div>\n
                    \n
                  1. C\u00f3 th\u1ec3 ki\u1ec3m tra k\u1ebft qu\u1ea3 b\u1eb1ng l\u1ec7nh <\/span><\/li>\n<\/ol>\n
                    #ipvsadm -L   <\/span><\/div>\n
                    C\u1ea5u h\u00ecnh file \u0111\u1ec3 kh\u00f4ng b\u1ecb m\u1ea5t khi kh\u1edfi \u0111\u1ed9ng<\/span><\/i><\/b><\/div>\n
                    <\/p>\n
                    # \/etc\/ha.d\/ldirectord.cf<\/b><\/pre>\n
                    checktimeout=15<\/pre>\n
                    checkinterval=5<\/pre>\n
                    autoreload=yes<\/pre>\n
                    logfile=\"\/var\/log\/ldirectord.log\"<\/pre>\n
                    quiescent=yes<\/pre>\n
                    virtual=10.0.0.100<\/span>:80<\/pre>\n
                            <\/span>fallback=127.0.0.1:80<\/pre>\n
                            <\/span>real=10.0.0.101<\/span>:80 gate<\/pre>\n
                            <\/span>real=10.0.0.102<\/span>:80 gate<\/pre>\n
                            <\/span>service=http<\/pre>\n
                            <\/span>request=\"test.html\"<\/pre>\n
                            <\/span>receive=\"Still alive\"<\/pre>\n
                            <\/span>scheduler=rr<\/pre>\n
                            <\/span>persistent=600<\/pre>\n
                            <\/span>protocol=tcp<\/pre>\n
                            <\/span>checktype=negotiate<\/pre>\n<\/div>\n
                      \n
                    1. Ch\u1ea1y d\u1ecbch v\u1ee5 <\/span><\/li>\n<\/ol>\n
                      #\/etc\/init.d\/ldirectord start<\/span><\/div>\n
                        \n
                      1. Ki\u1ec3m tra k\u1ebft qu\u1ea3<\/span><\/li>\n<\/ol>\n
                        #ipvsadm -L \u2013n<\/span><\/div>\n
                        C\u1ea5u h\u00ecnh m\u00e1y ch\u1ee7 th\u1eadt \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o x\u1eed l\u00fd g\u00f3i tin<\/span><\/i><\/b><\/div>\n
                          \n
                        1. T\u1ea1o card m\u1ea1ng \u1ea3o \u0111\u1ec3 nh\u1eadn g\u00f3i tin g\u1eedi t\u1edbi theo \u0111\u1ecba ch\u1ec9      card m\u1ea1ng \u1ea3o<\/span><\/li>\n<\/ol>\n
                          #vi  <\/span>\/etc\/sysconfig\/network-scripts\/ifcfg-lo:0<\/span><\/div>\n
                          \n
                          DEVICE=lo:0<\/span><\/div>\n
                          IPADDR=10.0.0.100<\/span><\/div>\n
                          NETMASK=255.255.255.255<\/span><\/div>\n
                          NETWORK=10.0.0.0<\/span><\/div>\n
                          BROADCAST=10.0.0.255<\/span><\/div>\n
                          ONBOOT=yes<\/span><\/div>\n
                          NAME=loopback <\/span><\/div>\n<\/div>\n
                          #\/etc\/init.d\/network restart<\/span><\/div>\n
                          # ip add sh lo<\/span><\/div>\n
                            \n
                          1. Gi\u1edbi h\u1ea1n vi\u1ec7c qu\u1ea3ng b\u00e1 g\u00f3i tin ARP<\/span><\/li>\n<\/ol>\n
                            # vi \/etc\/sysctl.conf<\/span><\/div>\n
                            \n
                            net.ipv4.conf.all.arp_ignore =  <\/span>1<\/span><\/div>\n
                            net.ipv4.conf.eth0.arp_ignore =  <\/span>1<\/span><\/div>\n
                            net.ipv4.conf.all.arp_announce =  <\/span>2<\/span><\/div>\n
                            net.ipv4.conf.eth0.arp_announce =  <\/span>2<\/span><\/div>\n<\/div>\n
                            # sysctl -p<\/span><\/div>\n
                              \n
                            1. C\u1ea5u h\u00ecnh  <\/span>default      gateway<\/span><\/li>\n<\/ol>\n
                              #echo “any v default  <\/span>gw 10.0.0.1″ > <\/span>\/etc\/sysconfig\/static-routes<\/span><\/div>\n
                              #service network restart<\/span><\/div>\n
                              #route -n<\/span><\/div>\n
                                \n
                              1. T\u1ea1o trang web \u0111\u1ec3 ki\u1ec3m tra<\/span><\/li>\n<\/ol>\n
                                #echo “Still alive” > \/var\/www\/html\/<\/span>ldirectord.html<\/span><\/div>\n
                                #echo “Real server 1” > \/var\/www\/html\/index.html<\/span><\/div>\n
                                  \n
                                1. Ch\u1ea1y th\u1eed web server<\/span><\/li>\n<\/ol>\n
                                  #service httpd restart<\/span><\/div>\n
                                  Ki\u1ec3m tra ldirectord<\/b><\/span><\/div>\n