<![CDATA[运维进行时]]>

<![CDATA[运维进行时]]> https://blog.liuts.com/index.php zh-cn https://blog.liuts.com/post/227/ <![CDATA[常见负载均衡器禁(启)用成员汇总[原创]]]> 刘天斯 <liutiansi@gmail.com> Mon, 09 May 2011 14:11:15 +0000 https://blog.liuts.com/post/227/
一、LVS负载均衡器
原理
使用LVS自带的管理工具来实现。

环境说明
Disable VIP:192.168.100.11:80
Disable REAL SERVER:192.168.100.78

实施步骤
1、初始状态
[devuser@lvsserver ~]# ipvsadm -Ln

引用

IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.100.11:80 rr persistent 60
  -> 192.168.100.74:80            Route   3      462        464
  -> 192.168.100.75:80            Route   3      420        440
  -> 192.168.100.76:80            Route   3      431        400
  -> 192.168.100.77:80            Route   3      430        432
  -> 192.168.100.78:80            Route   3      435        438

2、禁用成员
[devuser@lvsserver ~]# ipvsadm -d -t 192.168.100.11:80 -r 192.168.100.78

3、当前状态
[devuser@lvsserver ~]# ipvsadm -Ln

引用

4、启用成员
[devuser@lvsserver ~]#ipvsadm -a -t 192.168.100.11:80 -r 192.168.100.78

5、当前状态
[devuser@lvsserver ~]# ipvsadm -Ln

引用

二、Haproxy负载均衡器
原理
使用Haproxy的socket admin通道来实现。

环境说明
Disable backend:test.tianya.cn
Disable REAL SERVER:192.168.100.78

实施步骤
1、修改haproxy.cfg配置
#vi /usr/local/haproxy/etc/haproxy.cfg
在global域添加socket admin支持并重启Haproxy服务

引用

global
... ...
stats socket /usr/local/haproxy/HaproxySocket level admin
... ...

#service haproxy restart

2、安装socat(在任意的两个socket管道之间建立一个通道，在该通道中交换两端的数据。)

引用

wget http://www.dest-unreach.org/socat/download/socat-2.0.0-b3.tar.gz
./configure --disable-fips
make;make install

注：disable OpenSSL FIPS support "--disable-fips"，在没有安装fips包的情况下make时会提示：

引用

FIPSLD_CC=gcc fipsld -O -D_GNU_SOURCE -Wall -Wno-parentheses -DHAVE_CONFIG_H -I. -I. -c -o socat.o socat.c
/bin/sh: fipsld: command not found
make: *** [socat.o] Error 127

3、禁用成员
#echo "disable server test.tianya.cn/192.168.100.78" | socat stdio /usr/local/haproxy/HaproxySocket

4、启用成员
#echo "enable server test.tianya.cn/192.168.100.78" | socat stdio /usr/local/haproxy/HaproxySocket

三、F5-LTM负载均衡器
原理
使用F5-iControl开发包Pycontrol对F5设备进行管理。

环境说明
Disable POOL:test.tianya.cn
Disable SERVER:192.168.100.42:80 192.168.100.43:80 192.168.100.44:80

实施步骤
1、部署运行环境
#mkdir -p /home/install;cd /home/install
安装python环境(略)，要求py2.5或以上。
1.1、安装SUDS模块

引用

#wget https://fedorahosted.org/releases/s/u/suds/python-suds-0.3.8.tar.gz
#tar xvfz python-suds-0.3.8.tar.gz
#cd python-suds-0.3.8
#python setup.py install

1.2、安装PYCONTROL模块

引用

#wget http://trungale.net/pycontrol.tar.gz
#tar xvfz pycontrol.tar.gz
#cd trunk
#python setup.py install

1.3、校验安装结果
#python

2、编写LB_member.py代码

# -*- coding: utf-8 -*-
"""
----------------------------------------------------------------------------
 Disable/Enable F5-LTM POOL member 
 Name:        LB_member.py
 Author:      Liu tian si 
 Email:       liutiansi@gamil.com
 Created:     2011/05/08
 Version:     1.0
 Blog:        http://blog.liuts.com
 Copyright:   (c) 2011
----------------------------------------------------------------------------
"""

import sys
import time
import string
import pycontrol.pycontrol as pc

"""
----------------------------------------------------------------------------
 F5-LTM Disable/Enable Pool member Class
----------------------------------------------------------------------------
__init__() -Initialization F5-BIG object
set_pool_member() -Initialization pool and member object
member_factory() -Create a pool member object (Common.IPPortDefinition)
session_state_factory() -Create a session state object (LocalLB.PoolMember.MemberSessionState)
disable_member() -Disable menber methods
enable_member() -Enable menber methods
----------------------------------------------------------------------------
"""

class F5_LB_menber():

def __init__(self,_hostname,_username,_password):
        self.b = pc.BIGIP(
        hostname = _hostname,
        username = _username,
        password = _password,
        fromurl = True,
        wsdls = ['LocalLB.PoolMember'])
        self.sstate_seq = self.b.LocalLB.PoolMember.typefactory.create('LocalLB.PoolMember.MemberSessionStateSequence')

def set_pool_member(self,pool,members):
        self.POOL=pool
        self.members=members
        self.sstate_seq.item = self.session_state_factory()

def member_factory(self, member):
        ip,port = member.split(':')
        pmem = self.b.LocalLB.PoolMember.typefactory.create('Common.IPPortDefinition')
        pmem.address = ip
        pmem.port = int(port)
        return pmem

def session_state_factory(self):
        session_states = []
        for x in self.members:
            sstate = self.b.LocalLB.PoolMember.typefactory.create('LocalLB.PoolMember.MemberSessionState')
            sstate.member = self.member_factory(x)
            session_states.append(sstate)
        return session_states

def disable_member(self):
        for x in self.sstate_seq.item:
            x.session_state = 'STATE_DISABLED'
        try:
            self.b.LocalLB.PoolMember.set_session_enabled_state(pool_names =
                [self.POOL], session_states = [self.sstate_seq])
    
        except Exception, e:
            print e

def enable_member(self):
        for x in self.sstate_seq.item:
            x.session_state = 'STATE_ENABLED'
        try:
            self.b.LocalLB.PoolMember.set_session_enabled_state(pool_names = [self.POOL],
                session_states = [self.sstate_seq])
        except Exception, e:
            print e

if __name__ == "__main__":
    if len(sys.argv) < 4:
        print "Usage %s POOL MEMBER:port[,member1:80,member2:80,member3:80] enable|disable" % sys.argv[0]
        print "Examples: python LB_member.py app.domain.com 192.168.0.10:80,192.168.0.11:80,192.168.0.12:80 disable"
        sys.exit()

#F5 administrator info
    hostname="192.168.100.2"
    username="adminuser"
    password="adminpass"

App=F5_LB_menber(hostname,username,password)
    
    #init F5 pool and member
    CommandParameters = sys.argv[1:]
    pool=CommandParameters[0]
    members=string.split(CommandParameters[1],',')
    
    App.set_pool_member(pool,members)
    if CommandParameters[2]=="enable":
        App.enable_member()
    elif CommandParameters[2]=="disable":
        App.disable_member()
    else:
        print "opt parameters error!"
        sys.exit()

3、源码分析：
3.1、创建一个池成员对象，将用户传入的成员列表转成规范的pool成员，见member_factory()方法;
3.2、创建一个会话状态对象，追加成员对象到会话状态当中，见session_state_factory()方法;
3.3、创建一个队列，将会话状态对象添加到队列子项中，同时修改所处状态，见__init__()、set_pool_member()、disable_member()/enable_member()方法。

4、禁用成员
#python LB_member.py test.tianya.cn 192.168.100.42:80,192.168.100.43:80,192.168.100.44:80 disable

5、启用成员
#python LB_member.py test.tianya.cn 192.168.100.42:80,192.168.100.43:80,192.168.100.44:80 enable

如大家有什么疑问或感兴趣的话题可以通过weibo与我交流：http://t.qq.com/yorkoliu

参考文章
http://devcentral.f5.com/wiki/default.aspx/iControl.CodeShare
Tags - 负载均衡器 , 禁用 , 启用 , lvs , haproxy , f5 , python ]]> https://blog.liuts.com/post/227/#blogcomment691 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> higkoo <higkoo@tom.com> Tue, 10 May 2011 00:45:49 +0000 https://blog.liuts.com/post/227/#blogcomment691 https://blog.liuts.com/post/227/#blogcomment692 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> Sudu <sudu@sudu.us> Tue, 10 May 2011 00:57:57 +0000 https://blog.liuts.com/post/227/#blogcomment692 https://blog.liuts.com/post/227/#blogcomment693 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> newyue <LYJ_216@163.com> Tue, 10 May 2011 01:15:35 +0000 https://blog.liuts.com/post/227/#blogcomment693 https://blog.liuts.com/post/227/#blogcomment694 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> 飞仔 <oosyf-1@163.com> Tue, 10 May 2011 01:17:48 +0000 https://blog.liuts.com/post/227/#blogcomment694 https://blog.liuts.com/post/227/#blogcomment695 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> im@sorry.com <user@domain.com> Tue, 10 May 2011 03:43:54 +0000 https://blog.liuts.com/post/227/#blogcomment695 https://blog.liuts.com/post/227/#blogcomment696 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> relei <relei1999@qq.com> Tue, 10 May 2011 08:48:09 +0000 https://blog.liuts.com/post/227/#blogcomment696 https://blog.liuts.com/post/227/#blogcomment702 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> 可乐 <solihai@gmail.com> Wed, 11 May 2011 14:08:51 +0000 https://blog.liuts.com/post/227/#blogcomment702 https://blog.liuts.com/post/227/#blogcomment718 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> salamen <sala_1999@163.com> Sun, 15 May 2011 14:11:39 +0000 https://blog.liuts.com/post/227/#blogcomment718 https://blog.liuts.com/post/227/#blogcomment721 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> 诺菲尼 <yialmen@163.com> Tue, 17 May 2011 09:04:42 +0000 https://blog.liuts.com/post/227/#blogcomment721 https://blog.liuts.com/post/227/#blogcomment743 <![CDATA[[评论] 常见负载均衡器禁(启)用成员汇总[原创]]]> 宁波废铁回收 <pop45677@163.com> Mon, 30 May 2011 06:53:19 +0000 https://blog.liuts.com/post/227/#blogcomment743