{"id":565,"date":"2022-08-14T17:43:43","date_gmt":"2022-08-14T09:43:43","guid":{"rendered":"https:\/\/frogvps.com\/?p=565"},"modified":"2022-08-14T17:43:44","modified_gmt":"2022-08-14T09:43:44","slug":"lvs%e7%9a%84%e5%87%a0%e7%a7%8d%e5%b7%a5%e4%bd%9c%e6%a8%a1%e5%bc%8f%e7%9a%84%e5%8c%ba%e5%88%ab","status":"publish","type":"post","link":"https:\/\/frogvps.com\/?p=565","title":{"rendered":"LVS\u7684\u51e0\u79cd\u5de5\u4f5c\u6a21\u5f0f\u7684\u533a\u522b"},"content":{"rendered":"\n

LVS\u4ecb\u7ecd<\/h2>\n\n\n\n

LVS (Linux Virtual Server) \u662f\u5168\u7403\u6700\u6d41\u884c\u7684\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u5f00\u6e90\u8f6f\u4ef6\uff0c\u662flinux\u7684\u5185\u6838\u96c6\u529f\u80fd\uff0c\u5de5\u4f5c\u5728INPUT\u94fe\u7684\u4f4d\u7f6e\u3002LVS \u6839\u636e\u8bf7\u6c42\u62a5\u6587\u7684\u76ee\u6807IP\u3001\u534f\u8bae\u3001\u7aef\u53e3\u5c06\u8bf7\u6c42\u8f6c\u53d1\u81f3\u540e\u7aef\u7684 Real Server\uff08RS\uff09\uff0c\u4f7f\u7528\u8c03\u5ea6\u7b97\u6cd5\u6765\u9009\u62e9 RS\u3002<\/p>\n\n\n\n

LVS\u5e38\u7528\u7684\u96c6\u7fa4\u672f\u8bed<\/strong><\/p>\n\n\n\n

VS\uff1aVirtual Server\uff08LVS\u670d\u52a1\u5668\uff09\u3001Director Server\uff08DS\u8c03\u5ea6\u5668\uff09\u3001Dispatcher\u3001Load Balancer (LB)<\/p>\n\n\n\n

RS\uff1aReal Server<\/p>\n\n\n\n

CIP\uff1aClient IP \uff08\u5ba2\u6237\u7aefIP\uff09<\/p>\n\n\n\n

VIP\uff1aVirtual Serve IP \uff08\u865a\u62dfIP\uff0cVS\u7684\u5916\u7f51IP\uff09<\/p>\n\n\n\n

DIP\uff1aDirector IP \uff08VS\u7684\u5185\u7f51IP\uff09<\/p>\n\n\n\n

RIP\uff1aReal Server IP<\/p>\n\n\n\n

\u8bbf\u95ee\u6d41\u7a0b\uff1aCIP <–> VIP == DIP <–> RIP<\/p>\n\n\n\n

\n\n\n\n

LVS\u96c6\u7fa4\u7684\u5de5\u4f5c\u6a21\u5f0f<\/h2>\n\n\n\n

LVS-NAT\uff1a\u4fee\u6539\u8bf7\u6c42\u62a5\u6587\u7684\u76ee\u6807IP\uff0c\u591a\u76ee\u6807\u7684DNAT
LVS-DR\uff1a\u5c01\u88c5\u65b0\u7684MAC\u5730\u5740
LVS-TUN\uff1a\u5728\u539f\u8bf7\u6c42IP\u62a5\u6587\u4e0a\u65b0\u52a0\u4e00\u4e2aIP\u9996\u90e8
LVS-FULLNAT\uff1a\u4fee\u6539\u8bf7\u6c42\u62a5\u6587\u7684\u6e90IP\u548c\u76ee\u6807IP<\/p>\n\n\n\n

\n\n\n\n

LVS-NAT \u6a21\u5f0f<\/h2>\n\n\n\n
\"\"
LVS-NAT<\/figcaption><\/figure>\n\n\n\n
\"\"
LVS-NAT<\/figcaption><\/figure>\n\n\n\n

NAT \u7f51\u7edc\u5730\u5740\u8f6c\u6362\uff0c\u5206\u4e3a SNAT \u548c DNAT \u3002\u5185\u7f51\u8ba1\u7b97\u673a\u8bbf\u95ee\u5916\u7f51\u65f6\u7528 SNAT \u628a\u5185\u90e8\u79c1\u7f51IP\u8f6c\u6362\u4e3a\u516c\u7f51IP\uff0c\u53cd\u4e4b\u5c31\u662f DNAT \u3002<\/p>\n\n\n\n

\u4e2d\u95f4\u7684LVS\u670d\u52a1\u5668\u7528\u4e8e\u63a5\u6536\u7528\u6237\u7684\u8bf7\u6c42\uff0cLVS \u901a\u8fc7\u4ea4\u6362\u673a\u548c\u540e\u7aef RS \u76f8\u8fde\uff0c\u628a\u8bf7\u6c42\u8f6c\u53d1\u5230\u540e\u7aef\u7684\u67d0\u4e00\u53f0 RS \uff0c\u8f6c\u53d1\u65f6 LVS \u4f1a\u5c06\u8bf7\u6c42\u62a5\u6587\u7684\u76ee\u6807\u5730\u5740\uff08VIP\uff09 \u66ff\u6362\u6210\u5185\u7f51\u67d0\u4e00\u53f0 RS \u7684\u5730\u5740\uff08RIP1\uff09\uff0c\u7aef\u53e3\u53f7\uff08Port\uff09\u4e5f\u53ef\u4ee5\u4fee\u6539\u3002RS\u6536\u5230\u8bf7\u6c42\u4ee5\u540e\uff0c\u4f1a\u53d1\u9001\u54cd\u5e94\u62a5\u6587\uff0c\u8fd9\u65f6\u5019\u6e90IP\u662fRIP1\uff0c\u76ee\u6807IP\u662f\u5ba2\u6237\u7aefCIP\uff0c\u62a5\u6587\u5728\u7ecf\u8fc7LVS\u670d\u52a1\u5668\u539f\u8def\u8fd4\u56de\u5ba2\u6237\u7aef\u65f6\uff0c\u6e90IP\u4ece RIP1 \u66ff\u6362\u4e3a VIP\u3002<\/p>\n\n\n\n

\u4e00\u822c\u540e\u7aef\u6709\u591a\u53f0RS\u5b9e\u73b0\u8d1f\u8f7d\u5747\u8861\uff0cLVS\u53ef\u4ee5\u5c06\u8bf7\u6c42\u8f6c\u53d1\u7ed9\u5176\u4e2d\u7684\u4efb\u610f\u4e00\u53f0\uff0c\u6240\u4ee5LVS\u7684 NAT \u6a21\u5f0f\u662f\u591a\u76ee\u6807\u7684 DNAT\u3002<\/p>\n\n\n\n

LVS-NAT\u6a21\u5f0f\u7279\u70b9<\/strong><\/p>\n\n\n\n

  • LVS\u548cRS\u4e4b\u95f4\u4e00\u822c\u90fd\u662f\u4ea4\u6362\u673a\uff08\u4e5f\u53ef\u4ee5\u7528\u8def\u7531\u5668\uff09\uff0c\u4e5f\u5c31\u662f\u8bf4\u5e94\u8be5\u5728\u540c\u4e00\u4e2a\u7f51\u6bb5\uff0c\u4f7f\u7528\u5185\u7f51\u5740<\/li>
  • \u8bf7\u6c42\u62a5\u6587\u548c\u54cd\u5e94\u62a5\u6587\u90fd\u5fc5\u987b\u7ecf\u7531Director\u8f6c\u53d1\uff08\u539f\u8def\u8fd4\u56de\uff09\uff0cLVS\u8d1f\u8f7d\u5f88\u91cd\uff0c\u6613\u4e8e\u6210\u4e3a\u7cfb\u7edf\u9888<\/li>
  • \u652f\u6301\u7aef\u53e3\u6620\u5c04\uff0c\u53ef\u4fee\u6539\u8bf7\u6c42\u62a5\u6587\u7684\u76ee\u6807PORT<\/li>
  • LVS\u5fc5\u987b\u662fLinux\u7cfb\u7edf\uff0cRS\u53ef\u4ee5\u662f\u4efb\u610f\u64cd\u4f5c\u7cfb\u7edf<\/li><\/ul>\n\n\n\n
    \n\n\n\n

    LVS\u7684DR\u6a21\u5f0f<\/h2>\n\n\n\n
    \"\"
    LVS-DR<\/figcaption><\/figure>\n\n\n\n

    DR\uff1aDirect Routing\uff08\u76f4\u63a5\u8def\u7531\uff09\uff0cLVS\u7684\u9ed8\u8ba4\u6a21\u5f0f\uff0c\u5e94\u7528\u6700\u5e7f\u6cdb\u3002\u5ba2\u6237\u7aef\u53d1\u9001\u8bf7\u6c42\uff0c\u7ecf\u8fc7LVS\u8f6c\u53d1\u7684\u65f6\u5019\uff0c\u6e90IP\uff08CIP\uff09\u3001\u76ee\u7684IP\uff08VIP\uff09\u3001\u7aef\u53e3\u90fd\u6ca1\u6709\u53d1\u751f\u6539\u53d8\uff0c\u76ee\u6807MAC\u6539\u6210\u67d0\u4e00\u4e2aRS\u7684MAC\u5730\u5740\uff08LVS\u901a\u8fc7ARP\u5e7f\u64ad\u627e\u5230RS\u7684MAC\u5730\u5740\uff09\u3002\u6700\u7ec8RS\u63a5\u6536\u5230\u6570\u636e\u62a5\u6587\u76f4\u63a5\u8fdb\u884c\u56de\u5e94\uff0c\u8fd4\u56de\u4e0d\u7ecf\u8fc7LVS\uff0c\u51cf\u5c11\u4e86LVS\u7684\u8d1f\u8f7d\uff0c\u63d0\u5347\u4e86\u5de5\u4f5c\u6548\u7387\u3002<\/p>\n\n\n\n

    DR\u6a21\u5f0f\u7684\u7279\u70b9\uff1a<\/strong><\/p>\n\n\n\n

    • LVS\u670d\u52a1\u5668\u548c\u540e\u7aefRS\u90fd\u914d\u7f6e\u6709VIP<\/li>
    • \u786e\u4fdd\u524d\u7aef\u8def\u7531\u5668\u5c06\u76ee\u6807IP\u4e3aVIP\u7684\u8bf7\u6c42\u62a5\u6587\u53d1\u5f80LVS \u5728\u524d\u7aef\u7f51\u5173\u505a\u9759\u6001\u7ed1\u5b9aVIP\u548cDirector MAC\u5730\u5740
      \u5728RS\u4e0a\u4f7f\u7528arptables\u5de5\u5177<\/li><\/ul>\n\n\n\n
        arptables -A IN -d $VIP -j DROP\n  arptables -A OUT -s $VIP -j mangle --mangle-ip-s $RIP<\/code><\/pre>\n\n\n\n
      \u5728RS\u4e0a\u4fee\u6539\u5185\u6838\u53c2\u6570\u4ee5\u9650\u5236ARP\u901a\u544a\u53ca\u5e94\u7b54\u7ea7\u522b<\/p>\n\n\n\n
        \/proc\/sys\/net\/ipv4\/conf\/all\/arp_ignore\n  \/proc\/sys\/net\/ipv4\/conf\/all\/arp_announce<\/code><\/pre>\n\n\n\n
      • RS\u548cLVS\u8981\u5728\u540c\u4e00\u4e2a\u7269\u7406\u7f51\u7edc<\/li>
      • \u8bf7\u6c42\u62a5\u6587\u8981\u7ecf\u7531LVS\uff0c\u4f46\u54cd\u5e94\u62a5\u6587\u4e0d\u7ecf\u7531LVS\uff0c\u800c\u7531RS\u76f4\u63a5\u53d1\u5f80Client<\/li>
      • \u4e0d\u652f\u6301\u7aef\u53e3\u6620\u5c04\uff08\u7aef\u53e3\u4e0d\u80fd\u4fee\u6539\uff09<\/li>
      • \u65e0\u9700\u5f00\u542f ip_forward<\/li><\/ul>\n\n\n\n
        \n\n\n\n
        LVS\u7684TUN\u6a21\u5f0f<\/h2>\n\n\n\n
        \"\"
        LVS-TUN<\/figcaption><\/figure>\n\n\n\n
        \"\"
        LVS-TUN<\/figcaption><\/figure>\n\n\n\n
        \u4e0d\u4fee\u6539\u8bf7\u6c42\u62a5\u6587\u7684IP\u9996\u90e8\uff08\u6e90IP\u4e3aCIP\uff0c\u76ee\u6807IP\u4e3aVIP\uff09\uff0c\u800c\u5728\u539fIP\u62a5\u6587\u4e4b\u5916\u518d\u5c01\u88c5\u4e00\u4e2aIP\u9996\u90e8\uff08\u6e90IP\u662fDIP\uff0c\u76ee\u6807IP\u662fRIP\uff09\uff0c\u5c06\u62a5\u6587\u53d1\u5f80\u6311\u9009\u51fa\u7684\u76ee\u6807RS\u3002RS\u6536\u5230\u8bf7\u6c42\u540e\u76f4\u63a5\u54cd\u5e94\u7ed9\u5ba2\u6237\u7aef\uff08\u6e90IP\u662fVIP\uff0c\u76ee\u6807IP\u662fCIP\uff09\u3002<\/p>\n\n\n\n
        TUN\u6a21\u5f0f\u7279\u70b9\uff1a<\/strong><\/p>\n\n\n\n
        • RIP\u548cDIP\u53ef\u4ee5\u4e0d\u5904\u4e8e\u540c\u4e00\u7269\u7406\u7f51\u7edc\u4e2d\uff0cRS\u7684\u7f51\u5173\u4e00\u822c\u4e0d\u80fd\u6307\u5411DIP,\u4e14RIP\u53ef\u4ee5\u548c\u516c\u7f51\u901a\u4fe1\u3002\u4e5f\u5c31\u662f\u8bf4\u96c6\u7fa4\u8282\u70b9\u53ef\u4ee5\u8de8\u4e92\u8054\u7f51\u5b9e\u73b0\u3002DIP\uff0cVIP\uff0cRIP\u53ef\u4ee5\u662f\u516c\u7f51\u5730\u5740\u3002<\/li>
        • RealServer\u7684tun\u63a5\u53e3\u4e0a\u9700\u8981\u914d\u7f6eVIP\u5730\u5740\uff0c\u4ee5\u4fbf\u63a5\u6536director\u8f6c\u53d1\u8fc7\u6765\u7684\u6570\u636e\u5305\uff0c\u4ee5\u53ca\u4f5c\u4e3a\u54cd\u5e94\u7684\u62a5\u6587\u6e90IP<\/li>
        • Director\u8f6c\u53d1\u7ed9RealServer\u65f6\u9700\u8981\u501f\u52a9\u96a7\u9053\uff0c\u96a7\u9053\u5916\u5c42\u7684IP\u5934\u90e8\u7684\u6e90IP\u662fDIP\uff0c\u76ee\u6807IP\u662fRIP\uff0c\u800cRealServer\u54cd\u5e94\u7ed9\u5ba2\u6237\u7aef\u7684IP\u5934\u90e8\u662f\u6839\u636e\u96a7\u9053\u5185\u5c42\u7684IP\u5934\u5206\u6790\u5f97\u5230\u7684\uff0c\u6e90IP\u662fVIP\uff0c\u76ee\u6807IP\u662fCIP\u3002<\/li>
        • \u8bf7\u6c42\u62a5\u6587\u8981\u7ecf\u7531Director\uff0c\u4f46\u54cd\u5e94\u4e0d\u7ecf\u7531Director\uff0c\u54cd\u5e94\u7531RealServer\u81ea\u5df1\u5b8c\u6210<\/li>
        • \u4e0d\u652f\u6301\u7aef\u53e3\u6620\u5c04<\/li><\/ul>\n\n\n\n
          LVS\u5de5\u4f5c\u6a21\u5f0f\u603b\u7ed3\u548c\u6bd4\u8f83<\/h2>\n\n\n\n
          <\/th>NAT<\/th>TUN<\/th>DR<\/th><\/tr><\/thead>
          Real Server<\/td>any<\/td>Tunneling<\/td>Non-arp device<\/td><\/tr>
          Real server network<\/td>private<\/td>LAN\/WAN<\/td>LAN<\/td><\/tr>
          Real server number<\/td>low(10~20)<\/td>High (100)<\/td>High (100)<\/td><\/tr>
          Real server gateway<\/td>Load Balancer<\/td>router<\/td>router<\/td><\/tr>
          \u4f18\u70b9<\/td>\u7aef\u53e3\u8f6c\u6362<\/td>WAN<\/td>\u6027\u80fd\u6700\u597d<\/td><\/tr>
          \u7f3a\u70b9<\/td>\u6027\u80fd\u74f6\u9888<\/td>\u8981\u6c42RS\u652f\u6301\u96a7\u9053\u529f\u80fd\uff0c\u4e0d\u652f\u6301\u7aef\u53e3\u8f6c\u6362<\/td>\u4e0d\u652f\u6301\u8de8\u7f51\u6bb5\u548c\u7aef\u53e3\u8f6c\u6362<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
          <\/p>\n","protected":false},"excerpt":{"rendered":"
          LVS\u4ecb\u7ecd LVS (Linux Virtual Server) \u662f\u5168\u7403\u6700\u6d41\u884c\u7684\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u5f00\u6e90\u8f6f\u4ef6\uff0c\u662flinux\u7684\u5185\u6838\u96c6\u529f\u80fd\uff0c\u5de5\u4f5c\u5728INPUT\u94fe\u7684\u4f4d\u7f6e\u3002LVS \u6839\u636e\u8bf7\u6c42\u62a5\u6587\u7684\u76ee\u6807IP\u3001\u534f\u8bae\u3001\u7aef\u53e3\u5c06\u8bf7\u6c42\u8f6c\u53d1\u81f3\u540e\u7aef\u7684 Real Server\uff08…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[46,19],"topic":[],"class_list":["post-565","post","type-post","status-publish","format-standard","hentry","category-linux","tag-lvs","tag-19"],"_links":{"self":[{"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/posts\/565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/frogvps.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=565"}],"version-history":[{"count":5,"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/posts\/565\/revisions"}],"predecessor-version":[{"id":576,"href":"https:\/\/frogvps.com\/index.php?rest_route=\/wp\/v2\/posts\/565\/revisions\/576"}],"wp:attachment":[{"href":"https:\/\/frogvps.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/frogvps.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/frogvps.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=565"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/frogvps.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftopic&post=565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}