kubernetes二进制负载均衡部署如何实现-创新互联

下文给大家带来kubernetes二进制负载均衡部署如何实现，希望能够给大家在实际运用中带来一定的帮助，负载均衡涉及的东西比较多，理论也不多，网上有很多书籍，今天我们就用创新互联在行业内累计的经验来做一个解答。
站在用户的角度思考问题，与客户深入沟通，找到肥东网站设计与肥东网站推广的解决方案，凭借多年的经验，让设计与互联网技术结合，创造个性化、用户体验好的作品，建站类型包括：成都网站设计、成都做网站、企业官网、英文网站、手机端网站、网站推广、域名注册、网站空间、企业邮箱。业务覆盖肥东地区。

实验环境：

负载均衡
Nginx1:192.168.35.104/24
Nginx2:192.168.35.105/24

Master节点
master1:192.168.35.100/24
master2:192.168.35.103/24

Node节点
node1：192.168.35.101/24
node2：192.168.35.102/24

nginx安装部署

lb01和lb02操作

1、关闭防火墙

[root@localhost ~]# systemctl stop firewalld.service 
[root@localhost ~]# setenforce 0

2、安装nginx服务，把nginx.sh和keepalived.conf脚本拷贝到家目录

[root@localhost ~]# ls
anaconda-ks.cfg    keepalived.conf  公共  视频  文档  音乐
initial-setup-ks.cfg  nginx.sh     模板  图片  下载  桌面

3、构建nginx的yum源环境

（1）复制配置文件

[root@localhost ~]# vim nginx.sh

cat > /etc/yum.repos.d/nginx.repo << EOF
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0                  #复制四行内容
EOF

stream {

  log_format  main  '$remote_addr $upstream_addr - [$time_local] $status $upstream_bytes_sent';
  access_log  /var/log/nginx/k8s-access.log  main;

  upstream k8s-apiserver {
    server 10.0.0.3:6443;
    server 10.0.0.8:6443;
  }
  server {
        listen 6443;
        proxy_pass k8s-apiserver;
  }
  }

（2）创建yum源，重新加载yum仓库，并安装nginx

[root@localhost ~]# vim /etc/yum.repos.d/nginx.repo

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0

[root@localhost ~]# yum list

[root@localhost ~]# yum install nginx -y

4、添加四层转发

（1）复制配置文件

[root@localhost ~]# vim nginx.sh

cat > /etc/yum.repos.d/nginx.repo << EOF
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0                  
EOF

stream {

  log_format  main  '$remote_addr $upstream_addr - [$time_local] $status $upstream_bytes_sent';
  access_log  /var/log/nginx/k8s-access.log  main;

  upstream k8s-apiserver {
    server 10.0.0.3:6443;
    server 10.0.0.8:6443;
  }
  server {
        listen 6443;
        proxy_pass k8s-apiserver;
  }
  }             #复制此段内容

（2）添加配置文件并修改

[root@localhost ~]# vim /etc/nginx/nginx.conf

user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid     /var/run/nginx.pid;

events {
  worker_connections  1024;
}

stream {

  log_format  main  '$remote_addr $upstream_addr - [$time_local] $status $upstream_bytes_sent';
  access_log  /var/log/nginx/k8s-access.log  main;

  upstream k8s-apiserver {
    server 192.168.35.100:6443;
    server 192.168.35.103:6443;         #只需修改IP为master1和master2的地址    
  }
  server {
        listen 6443;
        proxy_pass k8s-apiserver;
  }
  }

http {
  include    /etc/nginx/mime.types;
  default_type  application/octet-stream;

  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
           '$status $body_bytes_sent "$http_referer" '
           '"$http_user_agent" "$http_x_forwarded_for"';

  access_log  /var/log/nginx/access.log  main;

  sendfile     on;
  #tcp_nopush   on;

  keepalive_timeout  65;

  #gzip  on;

  include /etc/nginx/conf.d/*.conf;
}

（3）验证语法是否错误

[root@localhost ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

（4）修改首页，进行区分，一个master，一个backup。

lb01操作：

[root@localhost ~]# cd /usr/share/nginx/html/
[root@localhost html]# ls
50x.html  index.html
[root@localhost html]# vim index.html 

/14 Welcome to master ginx!

lb02操作：

[root@localhost ~]# cd /usr/share/nginx/html/
[root@localhost html]# ls
50x.html  index.html
[root@localhost html]# vim index.html 

/14 Welcome to backup ginx!

（5）开启服务，并访问首页

lb01：

[root@localhost ~]# systemctl start nginx

用浏览器访问http://192.168.35.104/

kubernetes二进制负载均衡部署如何实现

lb02：

[root@localhost ~]# systemctl start nginx

用浏览器访问http://192.168.35.105/

kubernetes二进制负载均衡部署如何实现

keepalived安装部署

lb01和lb02操作：

1、安装keepalived

[root@localhost ~]# yum install keepalived -y

2、修改配置文件

[root@localhost ~]# ls
anaconda-ks.cfg    keepalived.conf  公共  视频  文档  音乐
initial-setup-ks.cfg  nginx.sh     模板  图片  下载  桌面
[root@localhost ~]# cp keepalived.conf /etc/keepalived/keepalived.conf
cp：是否覆盖"/etc/keepalived/keepalived.conf"？ yes

[root@localhost ~]# vim /etc/keepalived/keepalived.conf

lb01是Master配置如下：

! Configuration File for keepalived

global_defs {
  # 接收邮件地址
  notification_email {
   acassen@firewall.loc
   failover@firewall.loc
   sysadmin@firewall.loc
  }
  # 邮件发送地址
  notification_email_from Alexandre.Cassen@firewall.loc
  smtp_server 127.0.0.1
  smtp_connect_timeout 30
  router_id NGINX_MASTER
}

vrrp_script check_nginx {
  script "/etc/nginx/check_nginx.sh"
}

vrrp_instance VI_1 {
  state MASTER 
  interface ens33
  virtual_router_id 51 # VRRP 路由 ID实例，每个实例是唯一的
  priority 100   # 优先级，备服务器设置 90  
  advert_int 1   # 指定VRRP 心跳包通告间隔时间，默认1秒
  authentication {  
    auth_type PASS
    auth_pass 1111
  }   
  virtual_ipaddress {
    192.168.35.200/24
  }
  track_script {
    check_nginx
  }
}

lb02是Backup配置如下：

! Configuration File for keepalived

global_defs {
  # 接收邮件地址
  notification_email {
   acassen@firewall.loc
   failover@firewall.loc
   sysadmin@firewall.loc
  }
  # 邮件发送地址
  notification_email_from Alexandre.Cassen@firewall.loc
  smtp_server 127.0.0.1
  smtp_connect_timeout 30
  router_id NGINX_MASTER
}

vrrp_script check_nginx {
  script "/etc/nginx/check_nginx.sh"
}

vrrp_instance VI_1 {
  state BACKUP 
  interface ens33
  virtual_router_id 51 # VRRP 路由 ID实例，每个实例是唯一的
  priority 90   # 优先级，备服务器设置 90  
  advert_int 1   # 指定VRRP 心跳包通告间隔时间，默认1秒
  authentication {  
    auth_type PASS
    auth_pass 1111
  }   
  virtual_ipaddress {
    192.168.35.200/24
  }
  track_script {
    check_nginx
  }
}

3、制作管理脚本

[root@localhost ~]# vim /etc/nginx/check_nginx.sh

count=$(ps -ef |grep nginx |egrep -cv "grep|$$")

if [ "$count" -eq 0 ];then
    systemctl stop keepalived
fi

4、赋予执行权限并开启服务

[root@localhost ~]# chmod +x /etc/nginx/check_nginx.sh
[root@localhost ~]# systemctl start keepalived

5、查看地址信息

（1）查看lb01地址信息

[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
  inet6 ::1/128 scope host 
    valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP qlen 1000
  link/ether 00:0c:29:ba:e6:18 brd ff:ff:ff:ff:ff:ff
  inet 192.168.35.104/24 brd 192.168.35.255 scope global ens33
    valid_lft forever preferred_lft forever
  inet 192.168.35.200/24 scope global secondary ens33       #漂移地址在lb01中 
    valid_lft forever preferred_lft forever
  inet6 fe80::6ec5:6d7:1b18:466e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::2a3:b621:ca01:463e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::d4e2:ef9e:6820:145a/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff
  inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff

（2）查看lb02地址信息

[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
  inet6 ::1/128 scope host 
    valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP qlen 1000
  link/ether 00:0c:29:1d:ec:b0 brd ff:ff:ff:ff:ff:ff
  inet 192.168.35.105/24 brd 192.168.35.255 scope global ens33
    valid_lft forever preferred_lft forever
  inet6 fe80::6ec5:6d7:1b18:466e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::2a3:b621:ca01:463e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::d4e2:ef9e:6820:145a/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff
  inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff

6、测试故障转移切换

（1）验证地址漂移（lb01中使用pkill nginx，再在lb02中使用ip a 查看）

[root@localhost ~]# pkill nginx
[root@localhost ~]# systemctl status nginx
● nginx.service - nginx - high performance web server
  Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
  Active: failed (Result: exit-code) since 六 2020-02-08 16:54:45 CST; 11s ago
   Docs: http://nginx.org/en/docs/
 Process: 13156 ExecStop=/bin/kill -s TERM $MAINPID (code=exited, status=1/FAILURE)
 Main PID: 6930 (code=exited, status=0/SUCCESS)

2月 08 16:54:45 localhost.localdomain kill[13156]: -q, --queue <信号>  …2)
2月 08 16:54:45 localhost.localdomain kill[13156]: -p, --pid       …号
2月 08 16:54:45 localhost.localdomain kill[13156]: -l, --list [=<信号>] …称
2月 08 16:54:45 localhost.localdomain kill[13156]: -L, --table      …值
2月 08 16:54:45 localhost.localdomain kill[13156]: -h, --help   显示此…出
2月 08 16:54:45 localhost.localdomain kill[13156]: -V, --version  输出版…出
2月 08 16:54:45 localhost.localdomain kill[13156]: 更多信息请参阅 kill(1)。
2月 08 16:54:45 localhost.localdomain systemd[1]: nginx.service: control...
2月 08 16:54:45 localhost.localdomain systemd[1]: Unit nginx.service ent...
2月 08 16:54:45 localhost.localdomain systemd[1]: nginx.service failed.
Hint: Some lines were ellipsized, use -l to show in full.

[root@localhost ~]# systemctl status keepalived.service       #keepalived服务也随之关闭，说明nginx中的check_nginx.sh生效
● keepalived.service - LVS and VRRP High Availability Monitor
  Loaded: loaded (/usr/lib/systemd/system/keepalived.service; disabled; vendor preset: disabled)
  Active: inactive (dead)

2月 08 16:39:26 localhost.localdomain Keepalived_vrrp[7319]: VRRP_Instan...
2月 08 16:39:26 localhost.localdomain Keepalived_vrrp[7319]: Sending gra...
2月 08 16:39:26 localhost.localdomain Keepalived_vrrp[7319]: Sending gra...
2月 08 16:39:26 localhost.localdomain Keepalived_vrrp[7319]: Sending gra...
2月 08 16:39:26 localhost.localdomain Keepalived_vrrp[7319]: Sending gra...
2月 08 16:54:46 localhost.localdomain Keepalived[7317]: Stopping
2月 08 16:54:46 localhost.localdomain systemd[1]: Stopping LVS and VRRP ...
2月 08 16:54:46 localhost.localdomain Keepalived_vrrp[7319]: VRRP_Instan...
2月 08 16:54:46 localhost.localdomain Keepalived_vrrp[7319]: VRRP_Instan...
2月 08 16:54:47 localhost.localdomain systemd[1]: Stopped LVS and VRRP H...
Hint: Some lines were ellipsized, use -l to show in full.

在lb01查看地址：

[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
  inet6 ::1/128 scope host 
    valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP qlen 1000
  link/ether 00:0c:29:ba:e6:18 brd ff:ff:ff:ff:ff:ff
  inet 192.168.35.104/24 brd 192.168.35.255 scope global ens33
    valid_lft forever preferred_lft forever
  inet6 fe80::6ec5:6d7:1b18:466e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::2a3:b621:ca01:463e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::d4e2:ef9e:6820:145a/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff
  inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff

在lb02查看地址：

[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
  inet6 ::1/128 scope host 
    valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP qlen 1000
  link/ether 00:0c:29:1d:ec:b0 brd ff:ff:ff:ff:ff:ff
  inet 192.168.35.105/24 brd 192.168.35.255 scope global ens33
    valid_lft forever preferred_lft forever
  inet 192.168.35.200/24 scope global secondary ens33        #漂移地址转移到lb02中
    valid_lft forever preferred_lft forever
  inet6 fe80::6ec5:6d7:1b18:466e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::2a3:b621:ca01:463e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::d4e2:ef9e:6820:145a/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff
  inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff

（2）恢复操作（在lb01中先启动nginx服务，再启动keepalived服务）

[root@localhost ~]# systemctl start nginx
[root@localhost ~]# systemctl start keepalived.service 
[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
  inet6 ::1/128 scope host 
    valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP qlen 1000
  link/ether 00:0c:29:ba:e6:18 brd ff:ff:ff:ff:ff:ff
  inet 192.168.35.104/24 brd 192.168.35.255 scope global ens33
    valid_lft forever preferred_lft forever
  inet 192.168.35.200/24 scope global secondary ens33        #漂移地址又转移回lb01中
    valid_lft forever preferred_lft forever
  inet6 fe80::6ec5:6d7:1b18:466e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::2a3:b621:ca01:463e/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
  inet6 fe80::d4e2:ef9e:6820:145a/64 scope link tentative dadfailed 
    valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff
  inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
  link/ether 52:54:00:14:39:99 brd ff:ff:ff:ff:ff:ff

（3）nginx站点/usr/share/nginx/html

在宿主机上ping虚拟IP，保证可以ping通，说明可以去进行访问

kubernetes二进制负载均衡部署如何实现

在lb01查看index.html

[root@localhost ~]# cat /usr/share/nginx/html/index.html 



Welcome to nginx!



Welcome to master ginx!
If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.

For online documentation and support please refer to
nginx.org.

Commercial support is available at
nginx.com.

Thank you for using nginx.



在lb01查看index.html

[root@localhost ~]# cat /usr/share/nginx/html/index.html 



Welcome to nginx!



Welcome to backup nginx!
If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.

For online documentation and support please refer to
nginx.org.

Commercial support is available at
nginx.com.

Thank you for using nginx.

因为漂移地址是在lb01上，所以访问漂移地址时现实的nginx首页应该是包含master的

kubernetes二进制负载均衡部署如何实现

node节点绑定VIP地址

1、修改node节点配置文件统一VIP（bootstrap.kubeconfig,kubelet.kubeconfig）

[root@localhost ~]# vim /opt/kubernetes/cfg/bootstrap.kubeconfig
[root@localhost ~]# vim /opt/kubernetes/cfg/kubelet.kubeconfig
[root@localhost ~]# vim /opt/kubernetes/cfg/kube-proxy.kubeconfig

#全部都改为VIP地址

server: https://192.168.35.200:6443

2、替换完成直接自检

[root@localhost ~]# cd /opt/kubernetes/cfg/

[root@localhost cfg]# grep 200 *
bootstrap.kubeconfig:   server: https://192.168.35.200:6443
kubelet.kubeconfig:   server: https://192.168.35.200:6443
kube-proxy.kubeconfig:   server: https://192.168.35.200:6443

3、重启服务

[root@localhost cfg]# systemctl restart kubelet.service 
[root@localhost cfg]# systemctl restart kube-proxy.service

4、在lb01上查看nginx的k8s日志

[root@localhost ~]# tail /var/log/nginx/k8s-access.log
192.168.35.102 192.168.35.100:6443 - [08/Feb/2020:17:42:00 +0800] 200 1119
192.168.35.102 192.168.35.103:6443 - [08/Feb/2020:17:42:00 +0800] 200 1121
192.168.35.101 192.168.35.100:6443 - [08/Feb/2020:17:42:14 +0800] 200 1121
192.168.35.101 192.168.35.100:6443 - [08/Feb/2020:17:42:14 +0800] 200 1121

在master01上操作

1、测试创建pod

[root@localhost k8s]# kubectl run nginx --image=nginx
kubectl run --generator=deployment/apps.v1beta1 is DEPRECATED and will be removed in a future version. Use kubectl create instead.
deployment.apps/nginx created

2、查看状态

[root@localhost k8s]# kubectl get pods
NAME           READY  STATUS   RESTARTS  AGE
nginx-dbddb74b8-cfggf  1/1    0   ContainerCreating   64s        #正在创建中
[root@localhost k8s]# kubectl get pods
NAME           READY  STATUS   RESTARTS  AGE
nginx-dbddb74b8-cfggf  1/1   Running  0      74s          #创建完成，运行中

3、注意日志问题（无法查看，会报错）

[root@localhost k8s]# kubectl logs nginx-dbddb74b8-cfggf
Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy) ( pods/log nginx-dbddb74b8-cfggf)

解决办法：

（1）权限提升

[root@localhost k8s]# kubectl create clusterrolebinding cluster-system-anonymous --clusterrole=cluster-admin --user=system:anonymous
clusterrolebinding.rbac.authorization.k8s.io/cluster-system-anonymous created

（2）在去进行日志查看

[root@localhost k8s]# kubectl logs nginx-dbddb74b8-cfggf

//并不会出现报错，只是因为没有去访问，所以没有产生日志

4、查看pod网络

[root@localhost k8s]# kubectl get pods -o wide
NAME           READY  STATUS   RESTARTS  AGE  IP       NODE       NOMINATED NODE
nginx-dbddb74b8-cfggf  1/1   Running  0      14m  172.17.45.2  192.168.35.101

5、在对应网段的node节点上操作可以直接访问

[root@localhost cfg]# curl 172.17.45.2



Welcome to nginx!



Welcome to nginx!
If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.

For online documentation and support please refer to
nginx.org.

Commercial support is available at
nginx.com.

Thank you for using nginx.

6、访问就会产生日志，回到master01操作

[root@localhost k8s]# kubectl logs nginx-dbddb74b8-cfggf

172.17.45.1 - - [08/Feb/2020:10:10:29 +0000] "GET / HTTP/1.1" 200 612 "-" "curl/7.29.0" "-"

看了以上关于kubernetes二进制负载均衡部署如何实现，如果大家还有什么地方需要了解的可以在创新互联行业资讯里查找自己感兴趣的或者找我们的专业技术工程师解答的，创新互联技术工程师在行业内拥有十几年的经验了。创新互联官网链接www.yisu.com

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。

网站栏目：kubernetes二进制负载均衡部署如何实现-创新互联
网站URL：http://cdweb.net/article/gpspi.html

NEWS

网站建设资讯

kubernetes二进制负载均衡部署如何实现-创新互联

实验环境：

nginx安装部署

lb01和lb02操作

1、关闭防火墙

2、安装nginx服务，把nginx.sh和keepalived.conf脚本拷贝到家目录

3、构建nginx的yum源环境

（1）复制配置文件

（2）创建yum源，重新加载yum仓库，并安装nginx

4、添加四层转发

（1）复制配置文件

（2）添加配置文件并修改

（3）验证语法是否错误

（4）修改首页，进行区分，一个master，一个backup。

lb01操作：

Welcome to master ginx!

lb02操作：

Welcome to backup ginx!

（5）开启服务，并访问首页

lb01：

用浏览器访问http://192.168.35.104/

lb02：

用浏览器访问http://192.168.35.105/

keepalived安装部署

lb01和lb02操作：

1、安装keepalived

2、修改配置文件

lb01是Master配置如下：

lb02是Backup配置如下：

3、制作管理脚本

4、赋予执行权限并开启服务

5、查看地址信息

（1）查看lb01地址信息

（2）查看lb02地址信息

6、测试故障转移切换

（1）验证地址漂移（lb01中使用pkill nginx，再在lb02中使用ip a 查看）

在lb01查看地址：

在lb02查看地址：

（2）恢复操作（在lb01中先启动nginx服务，再启动keepalived服务）

（3）nginx站点/usr/share/nginx/html

在宿主机上ping虚拟IP，保证可以ping通，说明可以去进行访问

在lb01查看index.html

Welcome to master ginx!

Welcome to backup nginx!

因为漂移地址是在lb01上，所以访问漂移地址时现实的nginx首页应该是包含master的

node节点绑定VIP地址

1、修改node节点配置文件统一VIP（bootstrap.kubeconfig,kubelet.kubeconfig）

2、替换完成直接自检

3、重启服务

4、在lb01上查看nginx的k8s日志

在master01上操作

1、测试创建pod

2、查看状态

3、注意日志问题（无法查看，会报错）

解决办法：

（1）权限提升

（2）在去进行日志查看

4、查看pod网络

5、在对应网段的node节点上操作可以直接访问

Welcome to nginx!

6、访问就会产生日志，回到master01操作

其他资讯