怎么用Keepalived+HAProxy高可用集群K8S实现

今天小编给大家分享一下怎么用Keepalived+HAProxy高可用集群K8S实现的相关知识点，内容详细，逻辑清晰，相信大部分人都还太了解这方面的知识，所以分享这篇文章给大家参考一下，希望大家阅读完这篇文章后有所收获，下面我们一起来了解一下吧。

准备环境：

架构图

注意：master集群采用奇数台数，3、5、7…

所有节点都进行hosts文件解析

tail -3 /etc/hosts192.168.10.4 k8s-master01192.168.10.5 k8s-master02192.168.10.6 k8s-master03

所有节点都要安装keepalived和haproxy软件

yum -y install haproxy keepalived

修改haproxy配置文件（所有节点配置相同）

最好选择2.x版本，当然这个版本也不影响使用，只是功能没有2.x版本多

vim /etc/haproxy/haproxy.cfgglobal  maxconn  2000  ulimit-n  16384  log  127.0.0.1 local0 err  stats timeout 30sdefaults  log global  mode  http  option  httplog  timeout connect 5000  timeout client  50000  timeout server  50000  timeout http-request 15s  timeout http-keep-alive 15sfrontend monitor-in  bind *:33305  mode http  option httplog  monitor-uri /monitorlisten stats  bind    *:8006  mode    http  stats   enable  stats   hide-version  stats   uri       /stats  stats   refresh   30s  stats   realm     Haproxy\ Statistics  stats   auth      admin:adminfrontend k8s-master  bind 0.0.0.0:16443  bind 127.0.0.1:16443  mode tcp  option tcplog  tcp-request inspect-delay 5s  default_backend k8s-masterbackend k8s-master  mode tcp  option tcplog  option tcp-check  balance roundrobin  default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100  server k8s-master01    192.168.10.4:6443  check  server k8s-master02    192.168.10.5:6443  check  server k8s-master03   192.168.10.6:6443  check

master01节点修改keepalived配置文件

vim /etc/keepalived/keepalived.conf! Configuration File for keepalivedglobal_defs {    router_id LVS_DEVEL}vrrp_script chk_apiserver {    script "/etc/keepalived/check_apiserver.sh"    interval 2    weight -5    fall 3      rise 2}vrrp_instance VI_1 {    state MASTER    interface eth0    mcast_src_ip 192.168.10.4    virtual_router_id 51    priority 100    advert_int 2    authentication {        auth_type PASS        auth_pass K8SHA_KA_AUTH    }    virtual_ipaddress {        192.168.10.150/24    }    track_script {       chk_apiserver    }

master02节点修改keepalived配置文件

vim /etc/keepalived/keepalived.conf! Configuration File for keepalivedglobal_defs {    router_id LVS_DEVEL}vrrp_script chk_apiserver {    script "/etc/keepalived/check_apiserver.sh"    interval 2    weight -5    fall 3      rise 2}vrrp_instance VI_1 {    state BACKUP    interface eth0    mcast_src_ip 192.168.10.5    virtual_router_id 51    priority 50    advert_int 2    authentication {        auth_type PASS        auth_pass K8SHA_KA_AUTH    }    virtual_ipaddress {        192.168.10.150/24    }    track_script {       chk_apiserver    }}

master03节点修改keepalived配置文件

vim /etc/keepalived/keepalived.conf! Configuration File for keepalivedglobal_defs {    router_id LVS_DEVEL}vrrp_script chk_apiserver {    script "/etc/keepalived/check_apiserver.sh"    interval 2    weight -5    fall 3      rise 2}vrrp_instance VI_1 {    state BACKUP    interface eth0    mcast_src_ip 192.168.10.6    virtual_router_id 51    priority 50    advert_int 2    authentication {        auth_type PASS        auth_pass K8SHA_KA_AUTH    }    virtual_ipaddress {        192.168.10.150/24    }    track_script {       chk_apiserver    }}

所有节点创建健康检查脚本

vim /etc/keepalived/check_apiserver.sh#!/bin/basherr=0for k in $(seq 1 5)do    check_code=$(pgrep haproxy)    if [[ $check_code == "" ]]; then        err=$(expr $err + 1)        sleep 5        continue    else        err=0        break    fidoneif [[ $err != "0" ]]; then    echo "systemctl stop keepalived"    /usr/bin/systemctl stop keepalived    exit 1else    exit 0fi

启动haproxy与keepalived服务

systemctl daemon-reload systemctl enable --now haproxysystemctl enable --now keepalived

可以用ping和telnet命令测试一下vip的可用性

ping 192.168.10.150PING 192.168.10.150 (192.168.10.150) 56(84) bytes of data.64 bytes from 192.168.10.150: icmp_seq=1 ttl=64 time=1.60 ms64 bytes from 192.168.10.150: icmp_seq=2 ttl=64 time=0.519 ms64 bytes from 192.168.10.150: icmp_seq=3 ttl=64 time=0.874 ms64 bytes from 192.168.10.150: icmp_seq=4 ttl=64 time=0.786 ms^C--- 192.168.10.150 ping statistics ---4 packets transmitted, 4 received, 0% packet loss, time 3009msrtt min/avg/max/mdev = 0.519/0.946/1.606/0.403 mstelnet 192.168.10.150 16443Trying 192.168.10.150...Connected to 192.168.10.150.Escape character is '^]'.Connection closed by foreign host.

再尝试一下断开vip所在节点的keepalived，看ip是否漂移，如果vip漂移至另一节点则代表成功

以上就是"怎么用Keepalived+HAProxy高可用集群K8S实现"这篇文章的所有内容，感谢各位的阅读！相信大家阅读完这篇文章都有很大的收获，小编每天都会为大家更新不同的知识，如果还想学习更多的知识，请关注行业资讯频道。