LVS实验
环境配置
需要4台虚拟机
client 作为测试
lvs 需配置
rs1和rs2为客户端
1.配置ip地址
client ip为12.25.254.111 NAT模式
lvs ip有两个,172.25.254.100和192.168.0.100 两张网卡:NAT和仅主机
rs1 ip:192.168.0.10 仅主机
rs2 ip:192.168.0.20 仅主机
2.rs1配置
开启httpd,关闭火墙,把ip地址写进index.html中
用lvs检测是否写入
3.rs2配置
与rs1一致
lvs检测
4.lvs配置
sysctl -a | grep ip_forwarld
将0改为1
安装ipvsadm
增加策略
[root@huazi ~]# ipvsadm -A -t 172.25.254.100:80 -s rr
[root@huazi ~]# ipvsadm -E -t 172.25.254.100:80 -s wrr
[root@huazi ~]# ipvsadm -E -t 172.25.254.100:80 -s wrr -p 360
[root@huazi ~]# ipvsadm -A -f 66 -s rr
[root@huazi ~]# ipvsadm -D -f 66
[root@huazi ~]# ipvsadm -C[root@huazi ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port Forward Weight ActiveConn InActConn[root@huazi ~]# ipvsadm -a -t 172.25.254.100:80 -r 192.168.0.10 -m
[root@huazi ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.25.254.100:80 rr-> 192.168.0.10:80 Masq 1 0 0[root@huazi ~]# ipvsadm -a -t 172.25.254.100:80 -r 192.168.0.20 -g
[root@huazi ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.25.254.100:80 rr-> 192.168.0.10:80 Masq 1 0 0-> 192.168.0.20:80 Route 1 0 0[root@huazi ~]# ipvsadm -e -t 172.25.254.100:80 -r 192.168.0.10 -i
[root@huazi ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.25.254.100:80 rr-> 192.168.0.10:80 Tunnel 1 0 0-> 192.168.0.20:80 Route 1 0 0[root@huazi ~]# ipvsadm -e -t 172.25.254.100:80 -r 192.168.0.10 -i -w 2
[root@huazi ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.25.254.100:80 rr-> 192.168.0.10:80 Tunnel 2 0 0-> 192.168.0.20:80 Route 1 0 0
实验NAT模式
1.lvs添加路由策略

2.用client测试
连接不上,有可能没关闭火墙
3. rs1和rs2关闭火墙
rs1:
rs2:
再用client测试发现无任何显示
4.编辑rs1和rs2里面 /etc/NetworkManager/system-connections/ens160.nmconnection
rs1:
rs2:
再用client测试