Differences

This shows you the differences between two versions of the page.

--- linux_wiki:load_balancing_haproxy_and_keepalived [2018/04/09 00:14]
billdozor [Reboots]
+++ linux_wiki:load_balancing_haproxy_and_keepalived [2018/04/10 10:09]
billdozor
@@ Line 89: / Line 89: @@
 Official Site: http://www.haproxy.org/
+==== Main Config ====
   * Configure HA-Proxy (/etc/haproxy/haproxy.cfg)
     * Remove all example frontend and backend config sections (leave default section)
+    * Add a section for the HAProxy Stats page<code bash>#---------------------------------------------------------------------
+# HAProxy Stats
+#---------------------------------------------------------------------
+listen stats
+  # SSL Mode and Cert
+  bind *:9000 ssl crt /etc/pki/tls/mycertfiles.pem
+  mode http
+  # Enable Stats and Hide Version
+  stats enable
+  stats hide-version
+  # Authentication realm. This can be set to anything. Escape space characters with a backslash.
+  stats realm HAProxy\ Statistics
+  # The virtual URL to access the stats page
+  stats uri /haproxy_stats
+  # The user/pass you want to use. Change this password!
+  stats auth admin:adminpassword</code>
+  * The pem certificate file is a concatenation of the SSL key, cert, and certificate authority. Example<code bash>cat mykey.key mycert.crt myCAs.crt >> mycertfiles.pem</code>
+==== Frontend/Backend Configs ====
     * Create new directory to hold frontend/backend config files<code bash>mkdir /etc/haproxy/config.d</code>
     * Create new frontend/backend config files (Example: /etc/haproxy/config.d/http.cfg)
@@ Line 147: / Line 173: @@
 OPTIONS="-f /etc/haproxy/config.d/http.cfg"</code>
     * Multiple config files example:<code bash>OPTIONS="-f /etc/haproxy/config.d/http.cfg -f /etc/haproxy/config.d/otherfrontend.cfg"</code>
+==== Additional Config Examples ====
+**Session Persistence**
+  * Cookies: Application layer persistence (app needs to support cookies)<code bash>    #-- Balancing --#
+    balance  leastconn
+    # Use Cookie for Session Persistence
+    cookie SERVERID insert indirect nocache
+    # fullconn: does nothing since we are not using minconn (just makes the dashboard less confusing)
+    fullconn 1000
+    server  web01 10.1.2.50:80 check cookie web01 maxconn 500
+    server  web02 10.1.2.51:80 check cookie web02 maxconn 500</code>
+  * Source IP: Affinity based on source IP hash (app doesn't need to know about it)<code bash>    #-- Balancing --#
+    balance  source
+    # fullconn: does nothing since we are not using minconn (just makes the dashboard less confusing)
+    fullconn 1000
+    server  web01 10.1.2.50:80 check maxconn 500
+    server  web02 10.1.2.51:80 check maxconn 500</code>
 ----