Nginx+Keepalived+Haproxy+DNS+DHCP综合实验

准备工作

1、DNS(网卡模式:Host-only)ens33：192.168.191.128
2、DHCP	192.168.191.128
3、server1(网卡模式:NAT)ens33：192.168.2.128
4、server2(网卡模式:NAT)ens33：192.168.2.129
5、keepalived+haproxy主：(网卡模式:NAT+Host-only)ens33：192.168.2.148、ens37192.168.191.22（ens37是通过dhcp获取的）
6、keepalived+haproxy备：(网卡模式:NAT+Host-only)ens33：192.168.2.208、ens37192.168.191.21（ens37是通过dhcp获取的）
7、客户端（通过dhcp获取）

一、配置dns+dhcp

配置dns

安装dns服务
yum install bind*

修改dns配置文件
vi /etc/named.conf
 	listen-on port 53 { any; };
	allow-query     { any; };

vi /etc/named.rfc1912.zones (末尾添加)
zone "test.com" IN {
        type master;
       	file "test.com.zone";
        allow-update { none; };
};

cp -a /var/named/named.localhost /var/named/test.com.zone
vi /var/named/test.com.zone
$TTL 1D
@      IN SOA  test.com. root.test.com. (2019011512 1H 15M 1W 1D)
          IN NS   www.test.com.
www  IN A    192.168.191.100

启动服务
systemctl start named
systemctl anable named
systemctl status named
                              
关闭防火墙
systemctl stop firewalld
setenforce 0

配置静态IP地址
BOOTPROTO=static
IPADDR=192.168.192.191.128
NETMASK=255.255.255.0
GATEWAY=192.168.191.2
DNS1=192.168.191.128

测试dns服务

！！！如果dns解析没成功请用named-checkzo、nenamed-checkconf命令检查配置文件 

配置dhcp

安装dhcp
yum -y install dhcp

修改主配置文件
vi /etc/dhcp/dhcpd.conf
	ddns-update-style none;
	ignore client-updates;
	default-lease-time 259200;
	max-lease-time 518400;
	option domain-name-servers 192.168.191.128;    # 服务器域名

	subnet 192.168.191.0 netmask 255.255.255.0 {        # 分配和的网段
    	range 192.168.191.20 192.168.191.100;               # IP地址范围
    	option subnet-mask 255.255.255.0;					   # IP地址子网掩码		
    	option routers 192.168.191.2;								   # IP地址的网关 
}

dhcp要关掉vmware自动分发功能

启动dhcp服务
systemctl restart dhcpd
systemctl enable dhcpd
systemctl status dhcpd

客户机（网卡和dhcp服务在同一种模式中）

二、服务服务器（主从）

Server1

安装nginx
yum -y install epel-release
yum -y install nginx
修改nginx主页
mv /usr/share/nginx/html/index.html /usr/share/nginx/html/111  # 备份主页
echo "server 11111111" > /usr/share/nginx/html/index.html
启动服务
systemctl start nginx
systemctl enable nginx
systemctl status nginx
关闭防火前
systemctl stop firewalld
setenforce 0

测试nginx服务

Server2

安装nginx
yum -y install epel-release
yum -y install nginx
修改nginx主页
mv /usr/share/nginx/html/index.html /usr/share/nginx/html/222  # 备份主页
echo "server 2222222" > /usr/share/nginx/html/index.html
启动服务
systemctl start nginx
systemctl enable nginx
systemctl status nginx
关闭防火前
systemctl stop firewalld
setenforce 0

测试nginx服务

三、配置Keepalive

配置keepalive（主）
添加网卡

安装
yum -y install keepalived
修改配置文件
mv /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.bak   #   备份主配置文件

vi /etc/keepalived/keepalived.conf
	global_defs {
    router_id test
}
vrrp_instance VI_1 {
    state MASTER
    interface ens37
    virtual_router_id 51
    priority 99
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1234
    }
    virtual_ipaddress {
        192.168.191.100
    }
}

启动服务
systemctl start keepalived
systemctl enable keepalived
systemctl status keepalived
关闭防火墙 
systemctl stop firewalld
setenforce 0

检验

配置keepalive（从）
添加网卡

安装
yum -y install keepalived
修改配置文件
mv /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.bak   #   备份主配置文件

vi /etc/keepalived/keepalived.conf
	global_defs {
    router_id test
}
vrrp_instance VI_1 {
    state BACKUP		# 为备份
    interface ens37
    virtual_router_id 51
    priority 90				# 优先级小于主
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1234
    }
    virtual_ipaddress {
        192.168.191.100
    }
}

启动服务
systemctl start keepalived
systemctl enable keepalived
systemctl status keepalived
关闭防火墙 
systemctl stop firewalld
setenforce 0

验证

配置haproxy 1

安装服务
yum -y install haproxy

修改主配置文件
mv /etc/haproxy/haproxy.cfg /etc/haproxy/haproxy.cfg.bak      # 备份主配置文件
vi /etc/haproxy/haproxy.cfg
global
    log 127.0.0.1 local3 info
    chroot /var/lib/haproxy
    maxconn 4000
    daemon
    user haproxy
    group haproxy

defaults
    log global
    mode http
    option httplog
    retries 3
    timeout connect 5000
    timeout client 50000
    timeout server 50000

listen stats
    mode http
    bind 0.0.0.0:8080
    stats enable
    stats uri /stats
    stats realm Haproxy\ Statistics
    stats auth admin:admin

listen nginxserver
    bind 192.168.191.100:80      	# 监听虚拟IP地址
    mode http
    default_backend nginx

backend nginx
    balance roundrobin
    option httpchk GET /index.html
    server nginx1 192.168.2.128:80 check inter 2000 rise 3 fall 3 weight 30    # nginx1服务健康检查
    server nginx2 192.168.2.129:80 check inter 2000 rise 3 fall 3 weight 30    # nginx2服务健康检查


启动服务
systemctl start haproxy
systemctl enable haproxy
systemctl status haproxy

配置haproxy 2

安装服务
yum -y install haproxy

修改主配置文件
mv /etc/haproxy/haproxy.cfg /etc/haproxy/haproxy.cfg.bak      # 备份主配置文件
vi /etc/haproxy/haproxy.cfg
global
    log 127.0.0.1 local3 info
    chroot /var/lib/haproxy
    maxconn 4000
    daemon
    user haproxy
    group haproxy

defaults
    log global
    mode http
    option httplog
    retries 3
    timeout connect 5000
    timeout client 50000
    timeout server 50000

listen stats
    mode http
    bind 0.0.0.0:8080
    stats enable
    stats uri /stats
    stats realm Haproxy\ Statistics
    stats auth admin:admin

listen nginxserver
    bind 192.168.191.100:80      	# 监听虚拟IP地址
    mode http
    default_backend nginx

backend nginx
    balance roundrobin
    option httpchk GET /index.html
    server nginx1 192.168.2.128:80 check inter 2000 rise 3 fall 3 weight 30    # nginx1服务健康检查
    server nginx2 192.168.2.129:80 check inter 2000 rise 3 fall 3 weight 30    # nginx2服务健康检查


启动服务
systemctl start haproxy
systemctl enable haproxy
systemctl status haproxy

关于keepalived和haproxy出现de问题：
在主上面启动keepalived和haproxy成功之后，在从上面启动keepalived可以成功，但启动haproxy就失败，报错在监听的端口。

原因：
keepalive的主上面会有虚拟IP地址就可以启动keepalived+haproxy成功，在keepalive的主的没有死掉，从的上面没有IP地址，所以从的上面haproxy不知道监听那个虚拟IP地址，所以启动haproxy就失败

解决办法
方法1：
把从服务器的监听端口的IP地址改为*号，让它监听所有IP地址，重启就不会报错了
listen nginxserver
    bind *:80
    mode http
    default_backend nginx

方法2:
先关闭主的keepalive的服务，虚拟IP就会到从的服务上，启动haproxy服务，再去主的上面启动keepalive服务
主	systemctl stop keepalived
从	systemctl start haproxy
主	systemctl start keepalived

在浏览器验证haproxy


在客户机验证