HA Proxy Setup - Revision history

Sfiggins at 15:44, 10 September 2020

2020-09-10T15:44:59Z

Sfiggins at 21:46, 23 July 2020

2020-07-23T21:46:45Z

Sfiggins at 05:18, 23 July 2020

2020-07-23T05:18:28Z

Sfiggins at 05:12, 23 July 2020

2020-07-23T05:12:14Z

Sfiggins: Created page with "First set up new CentOS 78 machine from ISO with minimal install and configure per the following article. New CentOS 7 Server Setup Commands Then install and configure H..."

2020-07-23T01:33:42Z

Created page with "First set up new CentOS 78 machine from ISO with minimal install and configure per the following article. New CentOS 7 Server Setup Commands Then install and configure H..."

New page

First set up new CentOS 78 machine from ISO with minimal install and configure per the following article.

[[New CentOS 7 Server Setup Commands]]

Then install and configure HA PRoxy:

Install haproxy.

# yum install haproxy

Configure haproxy for SELinux and HTTP.

# vim /etc/firewalld/services/haproxy-http.xml

Add the following lines:

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

As root, assign the correct SELinux context and file permissions to the haproxy-http.xml file.

# cd /etc/firewalld/services
# restorecon haproxy-http.xml
# chmod 640 haproxy-http.xml

If you intend to use HTTPS, configure haproxy for SELinux and HTTPS.

# vim /etc/firewalld/services/haproxy-https.xml

Add the following lines:

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

As root, assign the correct SELinux context and file permissions to the haproxy-https.xml file.

# cd /etc/firewalld/services
# restorecon haproxy-https.xml
# chmod 640 haproxy-https.xml

If you intend to use HTTPS, generate keys for SSL. If you do not have a certificate, you may use a self-signed certificate. For information on generating keys and on self-signed certificates, see the Red Hat Enterprise Linux System Administrator's Guide.
Finally, put the certificate and key into a PEM file.

# cat example.com.crt example.com.key > example.com.pem
# cp example.com.pem /etc/ssl/private/

Configure HAProxy.

# vim /etc/haproxy/haproxy.cfg

The global and defaults sections of haproxy.cfg may remain unchanged. After the defaults sections, you will need to configure frontend and backend sections, as in the following example:

frontend http_web *:80
mode http
default_backend rgw

frontend rgw-https
bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
default_backend rgw

backend rgw
balance roundrobin
mode http
server rgw1 10.0.0.71:80 check
server rgw2 10.0.0.80:80 check

Enable/start haproxy

# systemctl enable haproxy
# systemctl start haproxy

@@ Line 118: / Line 118: @@
      http-send-name-header Host
      server www.movingtargetracing.com 66.180.172.109:80 check
 </pre>

@@ Line 105: / Line 105: @@
 backend www.labrats.us
      mode http
      option forwardfor
      http-request set-header Host www.labrats.us
@@ Line 113: / Line 114: @@
 backend www.movingtargetracing.com
      mode http
      option forwardfor
      http-send-name-header Host
      server www.movingtargetracing.com 66.180.172.109:80 check
 </pre>

@@ Line 68: / Line 68: @@
 The global and defaults sections of haproxy.cfg may remain unchanged. After the defaults sections, you will need to configure frontend and backend sections, as in the following example:
-    frontend http_web *:80
+<pre>
-        mode http
+frontend http_web *:80
-        default_backend rgw
+    mode http
-    frontend rgw-https
+frontend rgw-https
-      bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
+    bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
-      default_backend rgw
+    default_backend rgw
-    backend rgw
+backend rgw
-        balance roundrobin
+    balance roundrobin
-        mode http
+    mode http
-        server  rgw1 10.0.0.71:80 check
+    server  rgw1 10.0.0.71:80 check
-        server  rgw2 10.0.0.80:80 check
+    server  rgw2 10.0.0.80:80 check
 Enable/start haproxy
-    # systemctl enable haproxy
+<pre>
-    # systemctl start haproxy
+# systemctl enable haproxy

@@ Line 46: / Line 46: @@
      # restorecon haproxy-https.xml
      # chmod 640 haproxy-https.xml
 If you intend to use HTTPS, generate keys for SSL. If you do not have a certificate, you may use a self-signed certificate. For information on generating keys and on self-signed certificates, see the Red Hat Enterprise Linux System Administrator's Guide.