Docker+Nginx+KeepaLived實(shí)現(xiàn)Nginx一主一從高可用方式

更新時(shí)間：2025年07月24日 14:19:17 作者：抹香鯨之海

在CentOS7主從服務(wù)器上部署Nginx容器并配置Keepalived實(shí)現(xiàn)高可用,通過(guò)虛擬IP自動(dòng)切換,主從均需安裝Keepalived,配置健康檢查腳本監(jiān)控Nginx狀態(tài),故障時(shí)自動(dòng)重啟或切換虛擬IP,需關(guān)閉防火墻和SELinux,并確保腳本有執(zhí)行權(quán)限

主從兩臺(tái)機(jī)器上分別啟動(dòng)nginx容器

兩臺(tái)nginx容器要用相同的端口號(hào)：

docker run -d --privileged=true --name keepalivedNginx -p 82:80 nanlist/nginx1.23.1:v1.0

在兩臺(tái)宿主機(jī)器上分別安裝 keepalived

（注意：keepalived安裝在實(shí)體機(jī)上，不是安裝到Docker容器中）

1.聯(lián)網(wǎng)下載到/usr/local目錄

下并解壓有可能會(huì)提示連接不成功,加上它提示的命令再下載就好了

如果下載不下來(lái)用瀏覽器下載下來(lái)再傳到服務(wù)上面也可以

兩臺(tái)服務(wù)器分別執(zhí)行下：

主：

[root@Master html]# cd /usr/local
[root@Master local]# wget https://www.keepalived.org/software/keepalived-1.4.2.tar.gz
[root@Master local]# tar -zxvf keepalived-1.4.2.tar.gz

從：

[root@Slave html]# cd /usr/local
[root@Slave local]# wget https://www.keepalived.org/software/keepalived-1.4.2.tar.gz
[root@Slave local]# tar -zxvf keepalived-1.4.2.tar.gz

2.安裝相關(guān)依賴,有不用下載了

主：

[root@Master local]# yum install -y gcc openssl-devel popt-devel

從：

[root@Slave local]# yum install -y gcc openssl-devel popt-devel

3.編譯安裝

主：

[root@Master local]# cd keepalived-1.4.2
[root@Master keepalived-1.4.2]# ./configure --prefix=/usr/local/keepalived
[root@Master keepalived-1.4.2]# make
[root@Master keepalived-1.4.2]# make install

從：

[root@Slave local]# cd keepalived-1.4.2
[root@Slave keepalived-1.4.2]# ./configure --prefix=/usr/local/keepalived
[root@Slave keepalived-1.4.2]# make
[root@Slave keepalived-1.4.2]# make install

4.相關(guān)配置,按命令執(zhí)行

主：

[root@Master keepalived-1.4.2]# pwd
/usr/local/keepalived-1.4.2
You have new mail in /var/spool/mail/root
[root@Master keepalived-1.4.2]# cp /usr/local/keepalived-1.4.2/keepalived/etc/init.d/keepalived /etc/init.d/
[root@Master keepalived-1.4.2]# mkdir /etc/keepalived
[root@Master keepalived-1.4.2]# cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/
[root@Master keepalived-1.4.2]# cp /usr/local/keepalived-1.4.2/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
[root@Master keepalived-1.4.2]# cp /usr/local/keepalived/sbin/keepalived /usr/sbin/

從：

[root@Slave keepalived-1.4.2]# pwd
/usr/local/keepalived-1.4.2
You have new mail in /var/spool/mail/root
[root@Slave keepalived-1.4.2]# cp /usr/local/keepalived-1.4.2/keepalived/etc/init.d/keepalived /etc/init.d/
[root@Slave keepalived-1.4.2]# mkdir /etc/keepalived
[root@Slave keepalived-1.4.2]# cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/
[root@Slave keepalived-1.4.2]# cp /usr/local/keepalived-1.4.2/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
[root@Slave keepalived-1.4.2]# cp /usr/local/keepalived/sbin/keepalived /usr/sbin/
[root@Slave keepalived-1.4.2]#

安裝之后

在 /etc/keepalived目錄下有個(gè) keepalived.conf 配置文件：

主：

vim /etc/keepalived/keepalived.conf

編輯內(nèi)容：

global_defs {  
	router_id LVS_DEVEL 
}  

# 檢查nginx狀態(tài)的腳本，健康監(jiān)測(cè)腳本
vrrp_script chk_nginx {
	script "/etc/keepalived/nginx_check.sh" # 腳本路徑
	interval 2 # 腳本執(zhí)行間隔時(shí)間
	weight -20
}
  
vrrp_instance VI_1 {  
    state MASTER  
    interface ens192  # 當(dāng)前進(jìn)行vrrp通訊的網(wǎng)絡(luò)接口卡(當(dāng)前centos的網(wǎng)卡) 用ifconfig查看你具體的網(wǎng)卡
    virtual_router_id 51  # 虛擬路由編號(hào)，主從要一至
    priority 150 # 優(yōu)先級(jí)，數(shù)值越大，獲取處理請(qǐng)求的優(yōu)先級(jí)越高 master要大于slave
	advert_int 1
	unicast_src_ip 10.10.11.79 # 本機(jī)ip
	
	track_script {
		chk_nginx
	}

    nopreempt
    authentication {  
        auth_type PASS  # 指定認(rèn)證方式。PASS簡(jiǎn)單密碼認(rèn)證(推薦),AH:IPSEC認(rèn)證(不推薦)
        auth_pass 1111  # 指定認(rèn)證所使用的密碼。最多8位
    }  
    unicast_peer { # 另外一臺(tái)的服務(wù)器ip，如果是多臺(tái)就配多個(gè)ip
        10.10.11.81
    }
    virtual_ipaddress {  # 指定VIP地址
        10.10.11.77
    }  

}

從：

編輯：

vim /etc/keepalived/keepalived.conf

配置內(nèi)容：

global_defs {
	router_id LVS_DEVEL
}

vrrp_script chk_nginx {
	script "/etc/keepalived/nginx_check.sh"
	interval 2
	weight -20 
}

vrrp_instance VI_1 {
	state Slave
	interface ens192
	virtual_router_id 51
	priority 90
	advert_int 1
	unicast_src_ip 10.10.11.81
	unicast_peer {
		10.10.11.79
	}

	nopreempt
	authentication {
		auth_type PASS
		auth_pass 1111
	}

	track_script {
		chk_nginx
	}

	virtual_ipaddress {
		10.10.11.77
	}
}

健康監(jiān)測(cè)腳本

主從機(jī)都需配置檢測(cè)nginx是否在運(yùn)行,不在允許就直接啟動(dòng)nginx的腳本,和keepalived放在一起

腳本名稱 nginx_check.sh

如果 nginx 停止運(yùn)行，嘗試啟動(dòng)，如果無(wú)法啟動(dòng)則殺死本機(jī)的 keepalived 進(jìn)程，keepalived將虛擬 ip 綁定到 BACKUP 機(jī)器上。內(nèi)容如下：

#!/bin/bash
#version 0.0.1
#當(dāng)nginx進(jìn)程不存在時(shí)，會(huì)自動(dòng)重啟nginx服務(wù)；
A=`ps -C nginx --no-header |wc -l`
if [ $A -eq 0 ];then
     docker restart keepalivedNginx     #重啟nginx
     sleep 2
     if [ `ps -C nginx --no-header |wc -l` -eq 0 ];then
        systemctl stop keepalived
     fi 
fi

編輯完以后放入到/etc/keepalived目錄下：

只要配置好了,以后直接啟動(dòng)keepalived就好了,keepalived運(yùn)行之后就會(huì)檢測(cè)nginx是否在運(yùn)行,不在運(yùn)行就通過(guò)腳本去啟動(dòng)

自動(dòng)重啟不了解決方案

查看腳本是否有運(yùn)行的權(quán)限

如果你是root登陸的話(不是的話，切換到root用戶，對(duì)*.sh 賦可執(zhí)行的權(quán)限)

chmod 777*.sh

或者

chmod +x *.sh

主從兩臺(tái)服務(wù)器這一步授權(quán)一定要執(zhí)行不然腳本會(huì)失效：

[root@Master keepalived]# chmod +x nginx_check.sh 
[root@Master keepalived]# ll
total 12
-rw-r--r-- 1 root root 572 Oct 12 03:55 keepalived.conf
-rw-r--r-- 1 root root 3550 Oct 12 03:48 keepalived.conf.bak
-rwxr-xr-x 1 root root 205 Oct 12 04:04 nginx_check.sh
[root@Master keepalived]#

腳本上傳以后重啟keepalived。