keepalived ocp vrrp unicast poc

chk_masters

#!/bin/sh


if [ $(ss -nlt4H '( sport = :8443 )'|wc -c) -eq 0 ]; then exit 1; fi

chk_nexthop

#!/bin/sh

/usr/bin/ping -c 1 -W 5 $( ip -4 route get 1.1.1.1|head -n 1|awk '{print $3}')
exit $?

chk_routers

#!/bin/sh

if [ $(ss -nlt4H '( sport = :80 )'|wc -c) -eq 0 ]; then exit 1; fi

infra1-keepalived.conf

! Configuration File for keepalived

global_defs {
   vrrp_skip_check_adv_addr
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   enable_script_security
   script_user root root
   init_fail
}

vrrp_script chk_masters {
    script       "/etc/keepalived/chk_masters"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_routers {
    script       "/etc/keepalived/chk_routers"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_nexthop {
    script       "/etc/keepalived/chk_nexthop"
    interval 10
    weight -4
}

vrrp_instance VI_1 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 51
    priority 101
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME2
    }
    virtual_ipaddress {
        70.99.204.45/23 dev enp0s9
        172.21.255.1/16 dev enp0s8.21
    }
    track_script {
        chk_masters
        chk_routers
    }
    unicast_src_ip 172.21.10.2
    unicast_peer {
        172.21.10.1
        172.21.10.3
    }
}

vrrp_instance VI_2 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 52
    priority 103
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME
    }
    virtual_ipaddress {
        172.21.255.254/16 dev enp0s8.21
    }
    track_script {
        chk_nexthop
    }
    unicast_src_ip 172.21.10.1
    unicast_peer {
        172.21.10.2
        172.21.10.3
    }
}

infra2-keepalived.conf

! Configuration File for keepalived

global_defs {
   vrrp_skip_check_adv_addr
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   enable_script_security
   script_user root root
   init_fail
}

vrrp_script chk_masters {
    script       "/etc/keepalived/chk_masters"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_routers {
    script       "/etc/keepalived/chk_routers"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_nexthop {
    script       "/etc/keepalived/chk_nexthop"
    interval 10
    weight -4
}

vrrp_instance VI_1 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 51
    priority 102
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME2
    }
    virtual_ipaddress {
        70.99.204.45/23 dev enp0s9
        172.21.255.1/16 dev enp0s8.21
    }
    track_script {
        chk_masters
        chk_routers
    }
    unicast_src_ip 172.21.10.2
    unicast_peer {
        172.21.10.1
        172.21.10.3
    }
}

vrrp_instance VI_2 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 52
    priority 102
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME
    }
    virtual_ipaddress {
        172.21.255.254/16 dev enp0s8.21
    }
    track_script {
        chk_nexthop
    }
    unicast_src_ip 172.21.10.2
    unicast_peer {
        172.21.10.1
        172.21.10.3
    }
}

infra3-keepalived.conf

! Configuration File for keepalived

global_defs {
   vrrp_skip_check_adv_addr
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   enable_script_security
   script_user root root
   init_fail
}

vrrp_script chk_masters {
    script       "/etc/keepalived/chk_masters"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_routers {
    script       "/etc/keepalived/chk_routers"
    interval 2   # check every 2 seconds
    weight -4
}

vrrp_script chk_nexthop {
    script       "/etc/keepalived/chk_nexthop"
    interval 10
    weight -4
}

vrrp_instance VI_1 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 51
    priority 103
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME2
    }
    virtual_ipaddress {
        70.99.204.45/23 dev enp0s9
        172.21.255.1/16 dev enp0s8.21
    }
    track_script {
        chk_masters
        chk_routers
    }
    unicast_src_ip 172.21.10.3
    unicast_peer {
        172.21.10.1
        172.21.10.2
    }
}

vrrp_instance VI_2 {
    state MASTER
    interface enp0s8.21
    virtual_router_id 52
    priority 101
    advert_int 1
    track_interface {
        enp0s9
    }
    authentication {
        auth_type PASS
        auth_pass CHANGEME
    }
    virtual_ipaddress {
        172.21.255.254/16 dev enp0s8.21
    }
    track_script {
        chk_nexthop
    }
    unicast_src_ip 172.21.10.3
    unicast_peer {
        172.21.10.1
        172.21.10.2
    }
}