1.LVS NAT模式搭建
①測試機器網絡環境準備工作
一號機：調度器
內網ip：192.168.231.128
外網ip：192.168.127.100
二號機：real server1
內網ip：192.168.231.129
網關：192.168.231.128
三號機：real server
內網ip：192.168.231.133
網關：192.168.231.128
②防火牆設置
※關閉防火牆firewalld
systemctl stop firewalld; systemctl disable firewalld
※清空iptables規則
systemctl enable iptables ;systemctl start iptables; iptables -F; service iptables save
※停用selinux
setenforce 0
③在調度器上安裝ipvsadm工具
[root@test_01 ~]# yum install -y ipvsdam
④新建腳本文件/usr/local/sbin/lvs_nat.sh，將如下內容寫入腳本文件中
#! /bin/bash # director 服務器上開啓路由轉發功能 echo 1 > /proc/sys/net/ipv4/ip_forward # 關閉icmp的重定向 echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects echo 0 > /proc/sys/net/ipv4/conf/default/send_redirects # 注意區分網卡名字 echo 0 > /proc/sys/net/ipv4/conf/ens33/send_redirects echo 0 > /proc/sys/net/ipv4/conf/ens37/send_redirects # director 設置nat防火牆 iptables -t nat -F iptables -t nat -X iptables -t nat -A POSTROUTING -s 192.168.231.0/24 -j MASQUERADE # director設置ipvsadm IPVSADM='/usr/sbin/ipvsadm' $IPVSADM -C $IPVSADM -A -t 192.168.127.100:80 -s wlc -p 3 $IPVSADM -a -t 192.168.127.100:80 -r 192.168.231.129:80 -m -w 1 $IPVSADM -a -t 192.168.127.100:80 -r 192.168.231.133:80 -m -w 1
⑤執行腳本，查看規則是否啓用
[root@test_01 ~]# sh /usr/local/sbin/lvs_nat.sh [root@test_01 ~]# ipvsadm -ln IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 192.168.127.100:80 rr persistent 3 -> 192.168.231.129:80 Masq 1 0 0 -> 192.168.231.133:80 Masq 1 0 0