FreeBSD 14
Sponsored Link

Nginx : Load Balancing2024/02/13

 
Configure Nginx as a Load Balancing Server.
This example is based on the environment like follows.
-----------+---------------------------+-----
           |                           |
           |10.0.0.31                  |
+----------+-----------+               |
|   [ www.srv.world ]  |               |
|        Nginx         |               |
+----------------------+               |
                                       |
------------+--------------------------+--------------------------+------------
            |                          |                          |
            |10.0.0.51                 |10.0.0.52                 |10.0.0.53
+-----------+----------+   +-----------+----------+   +-----------+----------+
| [ node01.srv.world ] |   | [ node02.srv.world ] |   | [ node03.srv.world ] |
|      Web Server#1    |   |      Web Server#2    |   |      Web Server#3    |
+----------------------+   +----------------------+   +----------------------+

[1]
[2] Configure Nginx.
root@www:~ #
vi /usr/local/etc/nginx/nginx.conf
# add in the [http] section
# [backup] means this server is balanced only when other servers are down
# [weight=*] means balancing weight

http {
    upstream backends {
        server node01.srv.world:80 weight=2;
        server node02.srv.world:80;
        server node03.srv.world:80 backup;
    }


    # change content of [server] section like follows
    # replace server name or certificates to yours
    server {
        listen      80 default_server;
        listen      [::]:80 default_server;
        listen      443 ssl http2 default_server;
        listen      [::]:443 ssl http2 default_server;
        server_name www.srv.world;
        
        ssl_certificate "/usr/local/etc/letsencrypt/live/www.srv.world/fullchain.pem";
        ssl_certificate_key "/usr/local/etc/letsencrypt/live/www.srv.world/privkey.pem";
        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout  5m;

        proxy_redirect      off;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header    Host $http_host;

        location / {
                proxy_pass http://backends;
        }
    }

root@www:~ #
service nginx reload
[3] Configure backend Nginx server to log X-Forwarded-For header.
root@node01:~ #
vi /usr/local/etc/nginx/nginx.conf
# line 26-28 : uncomment

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    # add lines in [server] section
    server {
        listen       80;
        server_name  node01.srv.world;
        set_real_ip_from   10.0.0.0/24;
        real_ip_header     X-Forwarded-For;


root@node01:~ #
service nginx reload
[4] Verify it works fine to access to frontend Nginx Server from any Client Computer.
Matched Content