4.7.4. HAProxy 설치 및 구성

dnf install haproxy

[root@haproxy]# dnf install haproxy

vim /etc/firewalld/services/haproxy-http.xml

[root@haproxy]# vim /etc/firewalld/services/haproxy-http.xml

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

cd /etc/firewalld/services
restorecon haproxy-http.xml
chmod 640 haproxy-http.xml

[root@haproxy]# cd /etc/firewalld/services
[root@haproxy]# restorecon haproxy-http.xml
[root@haproxy]# chmod 640 haproxy-http.xml

vim /etc/firewalld/services/haproxy-https.xml

[root@haproxy]# vim /etc/firewalld/services/haproxy-https.xml

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

cd /etc/firewalld/services
restorecon haproxy-https.xml
chmod 640 haproxy-https.xml

# cd /etc/firewalld/services
# restorecon haproxy-https.xml
# chmod 640 haproxy-https.xml

cat example.com.crt example.com.key > example.com.pem
cp example.com.pem /etc/ssl/private/

[root@haproxy]# cat example.com.crt example.com.key > example.com.pem
[root@haproxy]# cp example.com.pem /etc/ssl/private/

vim /etc/haproxy/haproxy.cfg

[root@haproxy]# vim /etc/haproxy/haproxy.cfg

frontend http_web
  bind *:80
  mode http
  default_backend rgw

frontend rgw­-https
  bind *:443 ssl crt /etc/ssl/private/example.com.pem
  default_backend rgw

backend rgw
    balance roundrobin
    mode http
    server  rgw1 10.0.0.71:80 check
    server  rgw2 10.0.0.80:80 check

frontend http_web
  bind *:80
  mode http
  default_backend rgw

frontend rgw­-https
  bind *:443 ssl crt /etc/ssl/private/example.com.pem
  default_backend rgw

backend rgw
    balance roundrobin
    mode http
    server  rgw1 10.0.0.71:80 check
    server  rgw2 10.0.0.80:80 check

systemctl enable haproxy
systemctl start haproxy

[root@haproxy]# systemctl enable haproxy
[root@haproxy]# systemctl start haproxy