LVS NAT模式实战案例

概论

LVS介绍以及NTA模式介绍可以看我的这篇博客：https://www.cnblogs.com/yanshicheng/p/15760843.html

LVS实战案例

主机IP地址划分

此实验用到四台服务器具体角色如下：

序号	角色名	IP	网关	备注
1	客户端	192.168.10.100/24		模拟客户端访问后端服务器
2	LVS服务器	192.168.10.201/24
		10.10.0.100/24
3	WEB服务器1	10.10.0.105/24	10.10.0.100	后端WEB服务器
4	WEB服务器2	10.10.0.106/24	10.10.0.100	后端WEB服务器

拓扑图：

配置过程

LVS 服务器加载 模块

 for i in $(ls /lib/modules/$(uname -r)/kernel/net/netfilter/ipvs|grep -o "^[^.]*");do echo $i; /sbin/modinfo -F filename $i >/dev/null 2>&1 && /sbin/modprobe $i; done
 ls /lib/modules/$(uname -r)/kernel/net/netfilter/ipvs|grep -o "^[^.]*" >> /etc/modulesx
  lsmod | grep ip_vs

配置LVS服务器

# 创建一个集群
ipvsadm -A -t 192.168.10.201:80 -s wrr
# 集群中添加后端服务器地址
ipvsadm -a -t 192.168.10.201:80 -r 10.10.0.105:80 -m -w 1
ipvsadm -a -t 192.168.10.201:80 -r 10.10.0.106:80 -m -w 1

检查配置

root@ops103:~# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.10.201:80 wrr
  -> 10.10.0.105:80               Masq    1      0          0 
  -> 10.10.0.106:80               Masq    1      0          0  

备份恢复指令

# 恢复
ipvsadm-restore < /etc/ipvsadm.rules
# 备份
exec /sbin/ipvsadm -S -n >  /etc/ipvsadm.rules

验证

客户端验证

root@ops102:~# for i in  $(seq 10);do curl 192.168.10.201;done
this is WEB1 10.10.0.105 page
this is WEB2 10.10.0.106 page
this is WEB1 10.10.0.105 page
this is WEB2 10.10.0.106 page
this is WEB1 10.10.0.105 page
this is WEB2 10.10.0.106 page
this is WEB1 10.10.0.105 page
this is WEB2 10.10.0.106 page
this is WEB1 10.10.0.105 page
this is WEB2 10.10.0.106 page

查看LVS状态

root@ops103:~# ipvsadm -Ln --stats
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port               Conns   InPkts  OutPkts  InBytes OutBytes
  -> RemoteAddress:Port
TCP  192.168.10.201:80                  17      104       52     8064     6140
  -> 10.10.0.105:80                      8       62       28     5316     3194
  -> 10.10.0.106:80                      9       42       24     2748     2946
root@ops103:~# cat /proc/net/ip
ip6_flowlabel       ip_mr_cache         ip_tables_names     ip_vs               ip_vs_conn_sync
ip6_mr_cache        ip_mr_vif           ip_tables_targets   ip_vs_app           ip_vs_stats
ip6_mr_vif          ip_tables_matches   ipv6_route          ip_vs_conn          ip_vs_stats_percpu

root@ops103:~# cat /proc/net/ip_vs
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP  C0A80AC9:0050 wrr  
  -> 0A0A006A:0050      Masq    1      0          5
  -> 0A0A0069:0050      Masq    1      0          5
root@ops103:~# ipvsadm -Lnc
IPVS connection entries
pro expire state       source             virtual            destination
TCP 01:46  TIME_WAIT   192.168.10.100:29542 192.168.10.201:80  10.10.0.105:80
TCP 01:46  TIME_WAIT   192.168.10.100:29528 192.168.10.201:80  10.10.0.106:80
TCP 01:46  TIME_WAIT   192.168.10.100:29540 192.168.10.201:80  10.10.0.106:80
TCP 01:46  TIME_WAIT   192.168.10.100:29538 192.168.10.201:80  10.10.0.105:80
TCP 01:46  TIME_WAIT   192.168.10.100:29544 192.168.10.201:80  10.10.0.106:80
TCP 01:46  TIME_WAIT   192.168.10.100:29536 192.168.10.201:80  10.10.0.106:80
TCP 01:46  TIME_WAIT   192.168.10.100:29534 192.168.10.201:80  10.10.0.105:80
TCP 01:46  TIME_WAIT   192.168.10.100:29532 192.168.10.201:80  10.10.0.106:80
TCP 01:46  TIME_WAIT   192.168.10.100:29526 192.168.10.201:80  10.10.0.105:80
TCP 01:46  TIME_WAIT   192.168.10.100:29530 192.168.10.201:80  10.10.0.105:80
root@ops103:~# cat /proc/net/ip_vs_conn
Pro FromIP   FPrt ToIP     TPrt DestIP   DPrt State       Expires PEName PEData
TCP C0A80A64 7366 C0A80AC9 0050 0A0A0069 0050 TIME_WAIT        88
TCP C0A80A64 7358 C0A80AC9 0050 0A0A006A 0050 TIME_WAIT        88
TCP C0A80A64 7364 C0A80AC9 0050 0A0A006A 0050 TIME_WAIT        88
TCP C0A80A64 7362 C0A80AC9 0050 0A0A0069 0050 TIME_WAIT        88
TCP C0A80A64 7368 C0A80AC9 0050 0A0A006A 0050 TIME_WAIT        88
TCP C0A80A64 7360 C0A80AC9 0050 0A0A006A 0050 TIME_WAIT        88
TCP C0A80A64 735E C0A80AC9 0050 0A0A0069 0050 TIME_WAIT        88
TCP C0A80A64 735C C0A80AC9 0050 0A0A006A 0050 TIME_WAIT        88
TCP C0A80A64 7356 C0A80AC9 0050 0A0A0069 0050 TIME_WAIT        88
TCP C0A80A64 735A C0A80AC9 0050 0A0A0069 0050 TIME_WAIT        88