kamailio高可用建设

在sip业务中，kamailio算是比较重要的一个环节；kamailio高可用性建设也有很多中方案，本文在centos7采用的是虚拟ip漂移keepalived加sipsak的方式进行。这样就可以保证一台机器死掉以后另外一台机器随着虚拟IP的漂移能继续处理业务；另一方面，如果机器两台机器都没有宕机，而且只是kamailio进行挂掉了，也可以通过sipsak的健康检查，来使虚拟IP漂移，避免出现一台只有kamailio挂掉，机器还在keepalived还在，然后虚拟ip 不漂移的情况；

使用的开源库：keepalived + sipsak

 Keepalived 地址：https://github.com/acassen/keepalived.git
 sipsak地址：https://github.com/nils-ohlmeier/sipsak.git

keepalived 安装编译安装脚本：

yum install automake autoconf
yum install gcc openssl-devel libnl3-devel pcre-devel -y
git clone -b v2.1.5 https://github.com/acassen/keepalived.git
cd keepalived/
./autogen.sh
./configure --prefix=/usr/local/keepalived
make && make install
mkdir /etc/keepalived/
cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/
cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
cp /opt/keepalived/keepalived/keepalived.service /etc/systemd/system/
ln -s /usr/local/keepalived/sbin/keepalived /usr/sbin/
cp /opt/keepalived/keepalived/etc/init.d/keepalived /etc/init.d/
systemctl enable keepalived.service

Keepalived 一些相关操作：

systemctl daemon-reload  #重新加载
systemctl enable keepalived.service  #设置开机自动启动
systemctl disable keepalived.service #取消开机自动启动
systemctl start keepalived.service #启动
systemctl stop keepalived.service#停止

vim /lib/systemd/system/keepalived.service#打开keepalived.service文件,该文件主要配置keepalived service的内容如下：
[Unit]
Description=Keepalived
After=syslog.target network.target remote-fs.target nss-lookup.target
 
[Service]
Type=forking
PIDFile=/var/run/keepalived.pid
ExecStart=/usr/local/keepalived/sbin/keepalived -D
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s QUIT $MAINPID
PrivateTmp=true
 
[Install]
WantedBy=multi-user.target



ip addr #可以用此看到虚拟ip

sipsak编译安装：

cd sipsak
autoreconf --install
./configure
make
make install

主用服务配置keepalived.conf，该文件默认在/etc/keepalived/目录下：

! Configuration File for keepalived
  
   global_defs {
      notification_email {
       # [email protected]
        #[email protected]
        #[email protected]
      }
      #notification_email_from [email protected]
     #smtp_server 192.168.200.1
    # smtp_connect_timeout 30
     router_id LVS_DEVEL
     script_user root
     enable_script_security
     vrrp_skip_check_adv_addr
     vrrp_strict
    vrrp_garp_interval 0
  }
 vrrp_script  check_sip {
     script "/etc/keepalived/node01.sh" #sipsak 脚本
     interval 10
 }
 vrrp_instance VI_1 {
      state MASTER#主用标识
      interface eth0
      virtual_router_id 51
      priority 100#权重
      advert_int 1
      authentication {
          auth_type PASS
          auth_pass 1111
      }
      virtual_ipaddress {
        10.10.74.200#虚拟ip
      }
      track_script {
        check_sip#调用脚本函数
      }
  }

node01.sh 脚本内容：

   #!/bin/bash
  
   node01=10.10.74.186#主用KA服务器的地址
   node02=10.10.74.105#备用KA服务器的地址
   return_code=0 # success
  
   # check local instance
   timeout 5 sipsak -s sip:$node01:5060
   exit_status=$?
   if [[ $exit_status -eq 0 ]]; then
     echo "sip ping successful to node01 [$node01]"
     exit $return_code
   fi
 
   # local instance failed, check remote
   timeout 2 sipsak -s sip:$node02:5060
   exit_status=$?
   if [[ $exit_status -eq 0 ]]; then
     echo "sip ping successful to node02 [$node02]"
     return_code=1
   fi
 
   echo "return code [$return_code]"
  
   exit $return_code

备用服务配置keepalived.conf，该文件默认在/etc/keepalived/目录下：

! Configuration File for keepalived
  
   global_defs {
      notification_email {
       # [email protected]
        #[email protected]
        #[email protected]
      }
      #notification_email_from [email protected]
     #smtp_server 192.168.200.1
    # smtp_connect_timeout 30
     router_id LVS_DEVEL
     script_user root
     enable_script_security
     vrrp_skip_check_adv_addr
     vrrp_strict
    vrrp_garp_interval 0
  }
 vrrp_script  check_sip {
     script "/etc/keepalived/node02.sh" #sipsak 脚本
     interval 10
 }
 vrrp_instance VI_1 {
      state BACKUP#备用标识
      interface eth0
      virtual_router_id 51
      priority 50#权重
      advert_int 1
      authentication {
          auth_type PASS
          auth_pass 1111
      }
      virtual_ipaddress {
        10.10.74.200#虚拟ip
      }
      track_script {
        check_sip#调用脚本函数
      }
  }

node02.sh 脚本内容：

   #!/bin/bash
  
   node01=10.10.74.186#主用KA服务器的地址
   node02=10.10.74.105#备用KA服务器的地址
   return_code=1 # fail
  
   # check local instance
   timeout 5 sipsak -s sip:$node01:5060
   exit_status=$?
   if [[ $exit_status -eq 0 ]]; then
     echo "sip ping successful to node01 [$node01]"
     exit $return_code
   fi
 
   # local instance failed, check remote
   timeout 2 sipsak -s sip:$node02:5060
   exit_status=$?
   if [[ $exit_status -eq 0 ]]; then
     echo "sip ping successful to node02 [$node02]"
     return_code=1
   fi
 
   echo "return code [$return_code]"
  
   exit $return_code