HAProxy : HTTP Load Balancing2024/05/16 |
Install HAProxy to configure Load Balancing Server.
This example is based on the environment like follows. -----------+---------------------------+--------------------------+------------ | | | |10.0.0.30 |10.0.0.51 |10.0.0.52 +----------+-----------+ +-----------+----------+ +-----------+----------+ | [ dlp.srv.world ] | | [ node01.srv.world ] | | [ node02.srv.world ] | | HAProxy | | Web Server#1 | | Web Server#2 | +----------------------+ +----------------------+ +----------------------+ |
Configure Servers that HTTP connection to HAProxy Server is forwarded to backend Web Servers.
|
|
[1] | Install HAProxy. |
[root@dlp ~]# dnf -y install haproxy
|
[2] | Configure HAProxy. |
[root@dlp ~]#
vi /etc/haproxy/haproxy.cfg # comment out all for existing [frontend ***] [backend ***] sections # and add follows to the end # define frontend ( any name is OK for [http-in] ) frontend http-in # listen 80 port bind *:80 # set default backend default_backend backend_servers # send X-Forwarded-For header option forwardfor # define backend backend backend_servers # balance with roundrobin balance roundrobin # define backend servers server node01 10.0.0.51:80 check server node02 10.0.0.52:80 check systemctl enable --now haproxy |
[3] | If Firewalld is running, allow ports HAProxy listens. |
[root@dlp ~]# firewall-cmd --add-service=http success [root@dlp ~]# firewall-cmd --runtime-to-permanent success |
[4] | By default setting of HAproxy, logs are sent to [local2] facility, so Configure Rsyslog to record it to a file. |
[root@dlp ~]#
vi /etc/rsyslog.conf # line 31, 32 : uncomment and add a line module(load="imudp") # needs to be done just once input(type="imudp" port="514") $AllowedSender UDP, 127.0.0.1
# line 47 : change like follows *.info;mail.none;authpriv.none;cron.none;local2.none /var/log/messages local2.* /var/log/haproxy.log[root@dlp ~]# systemctl restart rsyslog |
[5] | Change settings on Backend Web servers (Apache httpd on this example) to logging X-Forwarded-For header. |
[root@node01 ~]#
vi /etc/httpd/conf/httpd.conf # line 201, 202 : change like follows LogFormat " \"%{X-Forwarded-For}i\" %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combinedLogFormat " \"%{X-Forwarded-For}i\" %l %u %t \"%r\" %>s %b" common
systemctl restart httpd |
[6] | Verify working normally to access to frontend HAproxy Server. |
Sponsored Link |
|