23: 10 10 80, 443 http: https:
所有的端口都作为集群服务
A persistent port connection (PPC) forces all connections from a client computer for a particular destination port number to the same real server. /sbin/ipvsadm -A -t 172.16.100.6:0 -s rr -p 1800 /sbin/ipvsadm -a -t 172.16.100.6:0 -r 192.168.10.11 -g /sbin/ipvsadm -a -t 172.16.100.6:0 -r 192.168.10.11 -g
Marking Packets with iptables
For example, say we want to create one-hour persistent port affinity between ports 80 and 443 on VIP 172.16.100.6 for real servers 172.16.100.7 and 172.16.100.8 : /sbin/iptables -F -t mangle
/sbin/iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 172.16.100.6 --dport 80 -j MARK --set-mark 1
/sbin/iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 172.16.100.6 --dport 443 -j MARK --set-mark 1 /sbin/ipvsadm -A -f 1 -s rr -p 3600 /sbin/ipvsadm -a -f 1 -r 172.16.100.7 -m /sbin/ipvsadm -a -f 1 -r 172.16.100.8 -m
IP-tunnel
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28.
实验步骤：
一、LoadBalancer配置 1）安装ipvsadm管理器
[root@LVS-Master/]# mount /dev/cdrom /media/ [root@LVS-Master/]# cd /media/Cluster
[root@LVS-MasterCluster]# rpm -ivh ipvsadm-1.24-8.1.i386.rpm 2）通过脚本/opt/ld-tun设置IP地址，并调整内核参数 [root@localhost ~]# vi /opt/ld-tun #!/bin/bash
/sbin/service network stop &>/dev/null /sbin/ifconfig eth0 132.96.138.33/24 up
/sbin/ifconfig eth0:0132.96.138.36 broadcast 132.96.138.36 netmask /sbin/route add -host 132.96.138.36 dev eth0:0 echo \>/proc/sys/net/ipv4/ip_forward
echo \>/proc/sys/net/ipv4/conf/all/send_redirects echo \>/proc/sys/net/ipv4/conf/default/send_redirects echo \>/proc/sys/net/ipv4/conf/eth0/send_redirects [root@localhost ~]# chmod +x /opt/ld-tun [root@localhost ~]#/opt/ld-tun
3）使用ipvsadm命令工具设置TUN模式负载均衡群集
[root@localhost ~]# ipvsadm -A -t 132.96.138.36:80-s wlc
[root@localhost ~]# ipvsadm -a -t 132.96.138.36:80-r 132.96.138.34:80-i [root@localhost ~]# ipvsadm -a -t 132.96.138.36:80-r 132.96.138.35:80-i [root@localhost ~]# ipvsadm-save >/etc/sysconfig/ipvsadm [root@localhost ~]# ipvsadm -L -n IP VirtualServer version 1.2.1(size=4096) ProtLocalAddress:PortSchedulerFlags
->RemoteAddress:PortForwardWeightActiveConnInActConn
255.255.255.255 up
29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. 59. 60. 61. 62. 63. 64. 65. 66. 67. 68. 69.
TCP 132.96.138.36:80 wlc ->132.96.138.34:80Tunnel100 ->132.96.138.35:80Tunnel100
二、Realserver服务器上的配置
提供服务的RealServer1和RealServer2不需要安装任何IPVS软件，只需要设置每台机1）在RealServer1上的设置
[root@localhost ~]# vi /opt/lvs-tun #!/bin/bash #
modprobe ipip
/sbin/service network stop &>/dev/null /sbin/ifconfig eth0 132.96.138.34/24 up
/sbin/ifconfig tunl0 132.96.138.36 broadcast 132.96.138.36 netmask /sbin/route add -host 132.96.138.36 dev tunl0 echo \>/proc/sys/net/ipv4/ip_forward
echo 1>/proc/sys/net/ipv4/conf/tunl0/arp_ignore echo 2>/proc/sys/net/ipv4/conf/tunl0/arp_announce echo 1>/proc/sys/net/ipv4/conf/all/arp_ignore echo 2>/proc/sys/net/ipv4/conf/all/arp_announce echo 0>/proc/sys/net/ipv4/conf/tunl0/rp_filter echo 0>/proc/sys/net/ipv4/conf/all/rp_filter
器的IP地址及修改内核参数，并开启apache服务器就好。
255.255.255.255 up
[root@localhost ~]# chmod +x /opt/lvs-tun [root@localhost ~]#/opt/lvs-tun 1）在RealServer2上的设置
[root@localhost ~]# vi /opt/lvs-tun #!/bin/bash#!/bin/bash #
modprobe ipip
/sbin/service network stop &>/dev/null /sbin/ifconfig eth0 132.96.138.35/24 up
/sbin/ifconfig tunl0 132.96.138.36 broadcast 132.96.138.36 netmask /sbin/route add -host 132.96.138.36 dev tunl0 echo \>/proc/sys/net/ipv4/ip_forward
echo 1>/proc/sys/net/ipv4/conf/tunl0/arp_ignore echo 2>/proc/sys/net/ipv4/conf/tunl0/arp_announce echo 1>/proc/sys/net/ipv4/conf/all/arp_ignore echo 2>/proc/sys/net/ipv4/conf/all/arp_announce echo 0>/proc/sys/net/ipv4/conf/tunl0/rp_filter echo 0>/proc/sys/net/ipv4/conf/all/rp_filter
255.255.255.255 up
70. 71. 72. 73. 74. 75. 76. 77. 78.
三、测试
在两台客户机上分别打开浏览器，输入http://132.96.138.36,将分别看到不同的页面。 [root@localhost ~]# ipvsadm -L -n IP VirtualServer version 1.2.1(size=4096) ProtLocalAddress:PortSchedulerFlags
->RemoteAddress:PortForwardWeightActiveConnInActConn TCP 132.96.138.36:80 wlc ->132.96.138.34:80Tunnel107 ->132.96.138.35:80Tunnel107