HAProxy Cluster Setup Example - Revision history

Brian: Protected "HAProxy Cluster Setup Example" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

2019-06-28T03:51:16Z

Protected "HAProxy Cluster Setup Example" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

Brian at 03:50, 28 June 2019

2019-06-28T03:50:12Z

Brian: Created page with " [root@us ~]# cat /etc/haproxy/haproxy.cfg global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats timeout 30s user haproxy group..."

2019-06-28T03:48:51Z

Created page with " [root@us ~]# cat /etc/haproxy/haproxy.cfg global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats timeout 30s user haproxy group..."

New page

[root@us ~]# cat /etc/haproxy/haproxy.cfg
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats timeout 30s
user haproxy
group haproxy
daemon

listen stats
bind :1936
stats enable
stats uri /
stats refresh 10s
stats hide-version
stats auth esg:pw4nexcess

defaults
log global
mode http
option httplog
option dontlognull
option forwardfor

timeout connect 5000
timeout client 50000
timeout server 50000

frontend http_front
bind *:80
stats uri /haproxy?stats
# default_backend http_back
# redirect all to https
redirect scheme https if !{ ssl_fc }

frontend https_front
bind *:443 ssl crt /etc/haproxy/ssl/dev.briansnelson.com.pem
# reqadd X-Forwarded-Proto:\ https
mode http
acl https ssl_fc

# Add the X-Forwarded-Proto header if we're on https
http-request add-header X-Forwarded-Proto https if https
http-request set-header Ssl-Offloaded 1 if https
http-request set-header X-Forwarded-Port %[dst_port]

default_backend https_back

backend http_back
mode http
balance roundrobin
# server web01 108.61.205.235:80 check ssl verify none
# server web02 108.61.205.235:80 check ssl verify none

backend https_back
mode http
balance leastconn
server web01 127.0.0.1:6081 check ssl verify none
server web02 108.61.205.235:443 check ssl verify none backup

← Older revision	Revision as of 03:51, 28 June 2019
(No difference)

@@ Line 1: / Line 1: @@
 [root@us ~]# cat /etc/haproxy/haproxy.cfg
-global
+ global
-   log /dev/log local0
+    log /dev/log local0
-   log /dev/log local1 notice
+    log /dev/log local1 notice
-   chroot /var/lib/haproxy
+    chroot /var/lib/haproxy
-   stats timeout 30s
+    stats timeout 30s
-   user haproxy
+    user haproxy
-   group haproxy
+    group haproxy
-   daemon
+    daemon
-−
-−
-listen stats
+ defaults
-  bind :1936
+    log global
-  stats enable
+    mode http
-  stats uri /
+    option httplog
-  stats refresh 10s
+    option dontlognull
-  stats hide-version
+     option forwardfor
-  stats auth esg:pw4nexcess
+    timeout connect 5000
-defaults
+    timeout client 50000
-   log global
+    timeout server 50000
-   mode http
-   option httplog
+ frontend http_front
-   option dontlognull
+    bind *:80
-    option forwardfor
+    stats uri /haproxy?stats
+ #   default_backend http_back
-   timeout connect 5000
+   # redirect all to https
-   timeout client 50000
+   redirect scheme https if !{ ssl_fc }
-   timeout server 50000
+ frontend https_front
-frontend http_front
+    bind *:443 ssl crt /etc/haproxy/ssl/dev.briansnelson.com.pem
-   bind *:80
+ #   reqadd X-Forwarded-Proto:\ https
-   stats uri /haproxy?stats
+    mode http
-#   default_backend http_back
+    acl https ssl_fc
-  # redirect all to https
-  redirect scheme https if !{ ssl_fc }
-−
 frontend https_front
-   bind *:443 ssl crt /etc/haproxy/ssl/dev.briansnelson.com.pem
 #   reqadd X-Forwarded-Proto:\ https
-   mode http
-   acl https ssl_fc
-−
    # Add the X-Forwarded-Proto header if we're on https
    http-request add-header X-Forwarded-Proto https if https
    http-request set-header Ssl-Offloaded 1 if https
    http-request set-header X-Forwarded-Port %[dst_port]
-−
     default_backend https_back
-−
-backend http_back
+ backend http_back
-   mode http
+    mode http
-   balance roundrobin
+    balance roundrobin
-#   server web01 108.61.205.235:80 check ssl verify none
+ #   server web01 108.61.205.235:80 check ssl verify none
-#   server web02 108.61.205.235:80 check ssl verify none
+ #   server web02 108.61.205.235:80 check ssl verify none
-−
-backend https_back
+ backend https_back
-   mode http
+    mode http
-   balance leastconn
+    balance leastconn
-   server web01 127.0.0.1:6081 check ssl verify none
+    server web01 127.0.0.1:6081 check ssl verify none
-   server web02 108.61.205.235:443 check ssl verify none backup
+    server web02 108.61.205.235:443 check ssl verify none backup