Virtual Private Cloud:HaVip

Crear y asociar un HaVip

1. Vaya a la página VPC Console - HaVip. Seleccione la región de sus instancias ECS y luego haga clic en Create HaVip.

2. Seleccione la VPC y el vSwitch a los que pertenecen las instancias ECS. Puede asignar automáticamente una dirección IP privada desde el bloque CIDR del vSwitch o especificar una dirección IP no asignada.

3. Instale Keepalived en las instancias ECS principal y en espera, y ejecute systemctl start keepalived para iniciar Keepalived.

   Ejemplo de instalación de Keepalived

   Este ejemplo instala Keepalived en instancias ECS basadas en CentOS dentro de un clúster de dos nodos con configuración principal/secundaria. Utilice Keepalived V1.2.15 o una versión posterior.

   Si tiene varias instancias ECS en espera, debe declarar las direcciones IP de todas las instancias pares en el parámetro unicast_peer de cada instancia ECS.

   Reporte problemas y consulte recursos de solución de incidencias en Keepalived GitHub .

   Configuración del servidor principal

   1. Inicie sesión en la instancia ECS principal.

   2. Ejecute yum install keepalived para instalar Keepalived.

   3. Ejecute vim /etc/keepalived/keepalived.conf para editar el archivo keepalived.conf.

      Este ejemplo muestra únicamente los parámetros que requieren modificación. Configure los valores según su instancia específica. No sobrescriba su archivo keepalived.conf actual con este ejemplo.

      ! Configuration File for keepalived
      vrrp_instance VI_1 {
          state MASTER            # Set as the primary instance.
          interface eth0          # The network interface controller (NIC) to which the virtual IP (VIP) address is bound. This example uses eth0.
          virtual_router_id 51    # The virtual_router_id of the primary/standby cluster. Different primary/standby clusters in the same Virtual Private Cloud (VPC) must have different virtual_router_id values.
          nopreempt               # Set to non-preemptive mode.
          priority 100            # The priority. A larger number indicates a higher priority. In this example, the priority is set to 100 to make this the primary instance.
          advert_int 1            # The interval, in seconds, for sending heartbeat packets. A small value can cause frequent failovers or a temporary split-brain due to network jitter. A large value can increase the failover time if the primary instance fails.
          authentication {
              auth_type PASS
              auth_pass 1111
          }
          unicast_src_ip 192.168.0.25     # The private IP address of this instance. This example uses 192.168.0.25.
          unicast_peer {
              192.168.0.26          # The private IP address of the peer instance. This example uses 192.168.0.26. If you have multiple standby ECS instances, list the IP address of each peer instance on a separate line without commas or other separators.
          }
          virtual_ipaddress {
              192.168.0.24          # The virtual IP address. Set this to the IP address of the HaVip. This example uses 192.168.0.24.
          }   
          garp_master_delay 1       # The delay, in seconds, to update the ARP cache after the instance becomes the primary.
          garp_master_refresh 5     # The interval, in seconds, for sending ARP packets.
      
          track_interface {
              eth0                  # The NIC bound to the VIP address. This example uses eth0.
          }
      }

   4. Ejecute systemctl start keepalived para iniciar Keepalived.

   Configuración del servidor secundario

   1. Inicie sesión en la instancia ECS secundaria.

   2. Ejecute yum install keepalived para instalar Keepalived.

   3. Ejecute vim /etc/keepalived/keepalived.conf para editar el archivo keepalived.conf.

      Este ejemplo muestra únicamente las secciones que requieren modificación. Configure los valores según su instancia específica. No sobrescriba su archivo keepalived.conf actual con este ejemplo.

      ! Configuration File for keepalived
      vrrp_instance VI_1 {
          state BACKUP            # Set the instance as the secondary instance.
          interface eth0          # The NIC to which the VIP is bound. This example uses eth0.
          virtual_router_id 51    # The virtual_router_id of the primary/secondary cluster. Different primary/secondary clusters in the same VPC must have different virtual_router_id values.
          nopreempt               # Set to non-preemptive mode.
          priority 10             # The priority. A larger value indicates a higher priority. In this example, the priority is set to 10 to configure this instance as the secondary instance.
          advert_int 1            # The interval for sending heartbeat packets, in seconds. If this value is too small, the service is susceptible to network jitter, which can cause frequent failovers and temporary dual-primary scenarios (split-brain). If this value is too large, the failover time may be long after the primary instance fails.
          authentication {
              auth_type PASS
              auth_pass 1111
          }
          unicast_src_ip 192.168.0.26   # The private IP address of this instance. In this example, it is 192.168.0.26.
          unicast_peer {
              192.168.0.25          # The private IP address of the peer instance. In this example, it is 192.168.0.25. You must declare the IP addresses of all peer instances. Each address must be on a separate line, without commas or other separators.
          }
          virtual_ipaddress {
              192.168.0.24          # The virtual IP address. Set this to the IP address of the HaVip. In this example, it is 192.168.0.24.
          }    
          garp_master_delay 1       # The delay, in seconds, to update the ARP cache after this instance becomes the primary instance.
          garp_master_refresh 5     # The interval for sending ARP packets, in seconds.
      
          track_interface {
              eth0                  # The NIC to which the VIP is bound. This example uses eth0.
          }
      }

   4. Ejecute systemctl start keepalived para iniciar Keepalived.

4. Haga clic en el ID del HaVip de destino. En la sección Resources, haga clic en Bind a la derecha de ECS Instances y seleccione las instancias ECS o ENI que desea asociar.

   Una vez completada la asociación, puede consultar el estado principal y secundario en la columna Associated Instance o en la sección Resources de la página de detalles.

5. Compruebe el resultado:

   1. Ejecute los siguientes comandos en las instancias principal y secundaria para crear un servicio web de prueba que devuelva resultados distintos.

      Compruebe el uso del puerto ejecutando el comando netstat -an | grep 8000 . Si el puerto 8000 está ocupado, seleccione otro puerto.

      Instancia principal:

      echo "ECS 1" > index.html  # The primary instance returns "ECS 1"
      python3 -m http.server 8000

      Instancia secundaria:

      echo "ECS 2" > index.html  # The secondary instance returns "ECS 2"
      python3 -m http.server 8000

   2. Desde otra instancia ECS ubicada en la misma VPC, al ejecutar curl <havip_private_ip>:8000 se obtiene ECS 1. Después de que el servidor principal se detenga, devuelve ECS 2.

      Asegúrese de que los security groups de las instancias principal y secundaria permitan el tráfico HTTP desde la misma VPC hacia el puerto 8000.

Desasociar recursos

Haga clic en el ID del HaVip de destino. En la sección Resources, busque la instancia ECS o la interfaz de red elástica de destino en la lista de recursos Associated y haga clic en Delete Association.

Eliminar un HaVip

Antes de eliminar un HaVip, asegúrese de que no esté asociado con ninguna instancia ECS, ENI ni EIP. En la columna Actions del HaVip de destino, o en su página de detalles, haga clic en Delete.

# Specify the region where you want to create the HaVip.
provider "alicloud" {
  region = "cn-hangzhou"
}

# Specify the ID of the VPC.
variable "vpc_id" {
  default = "vpc-bp1k******" # Replace with the actual ID of your VPC.
}

# Specify the vSwitch ID.
variable "vswitch_id" {
  default = "vsw-bp1y******" # Replace with the actual ID of your vSwitch.
}

# Specify the instance type.
variable "instance_type" {
  default = "ecs.e-c1m1.large"
}

# Specify the image ID.
variable "image_id" {
  default = "aliyun_3_x64_20G_alibase_20221102.vhd"
}

# Create an HaVip.
resource "alicloud_havip" "test_havip" {
  ha_vip_name = "test_havip_name"
  vswitch_id  = var.vswitch_id
  ip_address  = "192.168.0.24" # Specify an IP address for the HaVip from the vSwitch CIDR block. If not specified, the system assigns one.
}

# Create a security group.
resource "alicloud_security_group" "test_security_group" {
  security_group_name = "test_security_group_name"
  vpc_id              = var.vpc_id
}

# Create a security group rule. You need to adjust the protocol, source, and port based on your actual traffic.
resource "alicloud_security_group_rule" "allow_vpc_tcp" {
  type              = "ingress"
  ip_protocol       = "tcp"
  nic_type          = "intranet"
  policy            = "accept"
  port_range        = "8000/8000"
  priority          = 1
  security_group_id = alicloud_security_group.test_security_group.id
  cidr_ip           = "192.168.0.0/24"
}

# Create the primary server. 
resource "alicloud_instance" "test_master_instance" {
  instance_name        = "test_master_instance_name"
  vswitch_id           = var.vswitch_id
  instance_type        = var.instance_type
  image_id             = var.image_id
  system_disk_category = "cloud_essd"
  security_groups      = [alicloud_security_group.test_security_group.id]
  user_data = base64encode(<<-EOT
    #!/bin/sh
    yum install keepalived -y

    printf '! Configuration File for keepalived
    vrrp_instance VI_1 {
        state MASTER            # Set as the primary instance.
        interface eth0          # The network interface to which the virtual IP address is bound. This example uses eth0.  
        virtual_router_id 51    # The virtual_router_id of the primary/secondary cluster. Different clusters in the same VPC require different virtual_router_id values.
        nopreempt               # Set to non-preemptive mode.
        priority 100            # The priority. A higher value indicates a higher priority. This example sets the priority to 100 to make this instance the primary instance.
        advert_int 1            # The interval at which heartbeat messages are sent, in seconds. A small value makes the configuration susceptible to network jitter, which can cause frequent failovers or temporary split-brain scenarios. A large value can increase the failover time after the primary instance fails.
        authentication {
            auth_type PASS
            auth_pass 1111
        }
        unicast_src_ip 192.168.0.25     # The private IP address of this instance. This example uses 192.168.0.25.
        unicast_peer {
            192.168.0.26                # The private IP address of the peer instance. This example uses 192.168.0.26. If you have multiple secondary ECS instances, declare the IP address of each peer instance on a new line. Do not use commas or other separators.
        }
        virtual_ipaddress {
            192.168.0.24                # The virtual IP address. Set this to the HaVip's IP address. This example uses 192.168.0.24.
        }   
        garp_master_delay 1             # The delay in seconds before updating the ARP cache after a failover to this instance. 
        garp_master_refresh 5           # The interval at which ARP messages are sent, in seconds. 

        track_interface {
            eth0                        # The network interface to which the virtual IP address is bound. This example uses eth0.
        }
    }' > /etc/keepalived/keepalived.conf
    systemctl start keepalived
  EOT
  )                                           # Specify the initialization script for the primary server to install Keepalived.
  private_ip           = "192.168.0.25"       # Specify the private IP address of the primary server.
  instance_charge_type = "PostPaid"           # Set the billing method to pay-as-you-go.
  spot_strategy        = "SpotWithPriceLimit" # Set as a spot instance with a price limit.
}

# Create the secondary server. 
resource "alicloud_instance" "test_backup_instance" {
  instance_name        = "test_backup_instance_name"
  vswitch_id           = var.vswitch_id
  instance_type        = var.instance_type
  image_id             = var.image_id
  system_disk_category = "cloud_essd"
  security_groups      = [alicloud_security_group.test_security_group.id]
  user_data = base64encode(<<-EOT
    #!/bin/sh
    yum install keepalived -y

    printf '! Configuration File for keepalived
    vrrp_instance VI_1 {
        state BACKUP            # Set as the secondary instance.
        interface eth0          # The network interface to which the virtual IP address is bound. This example uses eth0.  
        virtual_router_id 51    # The virtual_router_id of the primary/secondary cluster. Different clusters in the same VPC require different virtual_router_id values.
        nopreempt               # Set to non-preemptive mode.
        priority 10             # The priority. A higher value indicates a higher priority. This example sets the priority to 10 to make this instance the secondary instance.
        advert_int 1            # The interval at which heartbeat messages are sent, in seconds. A small value makes the configuration susceptible to network jitter, which can cause frequent failovers or temporary split-brain scenarios. A large value can increase the failover time after the primary instance fails.
        authentication {
            auth_type PASS
            auth_pass 1111
        }
        unicast_src_ip 192.168.0.26   # The private IP address of this instance. This example uses 192.168.0.26.
        unicast_peer {
            192.168.0.25          # The private IP address of the peer instance. This example uses 192.168.0.25. If you have multiple secondary ECS instances, declare the IP address of each peer instance on a new line. Do not use commas or other separators.
        }
        virtual_ipaddress {
            192.168.0.24          # The virtual IP address. Set this to the HaVip's IP address. This example uses 192.168.0.24. 
        }    
        garp_master_delay 1       # The delay in seconds before updating the ARP cache after a failover to this instance. 
        garp_master_refresh 5     # The interval at which ARP messages are sent, in seconds. 

        track_interface {
            eth0                  # The network interface to which the virtual IP address is bound. This example uses eth0.
        }
    }' > /etc/keepalived/keepalived.conf
    systemctl start keepalived
  EOT
  )                                           # Specify the initialization script for the secondary server to install Keepalived.
  private_ip           = "192.168.0.26"       # Specify the private IP address of the secondary server. 
  instance_charge_type = "PostPaid"           # Set the billing method to pay-as-you-go.
  spot_strategy        = "SpotWithPriceLimit" # Set as a spot instance with a price limit.
}

# Associate with the primary server.
resource "alicloud_havip_attachment" "test_havip_attachment" {
  ha_vip_id   = alicloud_havip.test_havip.id
  instance_id = alicloud_instance.test_master_instance.id # Specify the ID of the instance to associate with the HaVip.
}

# Associate with the secondary server.
resource "alicloud_havip_attachment" "test_havip_attachment_new" {
  ha_vip_id   = alicloud_havip.test_havip.id
  instance_id = alicloud_instance.test_backup_instance.id # Specify the ID of the instance to associate with the HaVip.
}

Asociar o desasociar una EIP

Antes de asociar una EIP, cree una en la consola de EIP o haga clic en Create EIP en la página de asociación.

En la columna Actions del HaVip de destino, haga clic en Associate EIP o en Disassociate EIP.

# Specify the region of the HaVip. 
provider "alicloud" {
  region = "cn-hangzhou"
}

# Specify the ID of the HaVip.
variable "havip_id" {
  default = "havip-8vb0******"  # Replace with the actual ID of your HaVip.
}

# Create an EIP.
resource "alicloud_eip_address" "test_eip" {
  address_name = "test_eip_name"
  isp          = "BGP"
  netmode      = "public"
  bandwidth    = "1"
  payment_type = "PayAsYouGo"
}

# Associate the EIP.
resource "alicloud_eip_association" "test_eip_havip_association" {
  allocation_id = alicloud_eip_address.test_eip.id
  instance_type = "HAVIP"
  instance_id   = var.havip_id # Specify the ID of the HaVip.
}