A.4. Install and Configure HAProxy

Install haproxy.

yum install haproxy

# yum install haproxy

Copy to Clipboard

Toggle word wrap

Configure haproxy for SELinux and HTTP.

vim /etc/firewalld/services/haproxy-http.xml

# vim /etc/firewalld/services/haproxy-http.xml

Copy to Clipboard

Toggle word wrap

Add the following lines:

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

Copy to Clipboard

Toggle word wrap

As root, assign the correct SELinux context and file permissions to the haproxy-http.xml file.

cd /etc/firewalld/services
restorecon haproxy-http.xml
chmod 640 haproxy-http.xml

# cd /etc/firewalld/services
# restorecon haproxy-http.xml
# chmod 640 haproxy-http.xml

Copy to Clipboard

Toggle word wrap

If you intend to use HTTPS, configure haproxy for SELinux and HTTPS.

vim /etc/firewalld/services/haproxy-https.xml

# vim /etc/firewalld/services/haproxy-https.xml

Copy to Clipboard

Toggle word wrap

Add the following lines:

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

Copy to Clipboard

Toggle word wrap

As root, assign the correct SELinux context and file permissions to the haproxy-https.xml file.

cd /etc/firewalld/services
restorecon haproxy-https.xml
chmod 640 haproxy-https.xml

# cd /etc/firewalld/services
# restorecon haproxy-https.xml
# chmod 640 haproxy-https.xml

Copy to Clipboard

Toggle word wrap

If you intend to use HTTPS, generate keys for SSL. If you do not have a certificate, you may use a self-signed certificate. For information on generating keys and on self-signed certificates, see the Red Hat Enterprise Linux System Administrator's Guide.

Finally, put the certificate and key into a PEM file.

cat example.com.crt example.com.key > example.com.pem
cp example.com.pem /etc/ssl/private/

# cat example.com.crt example.com.key > example.com.pem
# cp example.com.pem /etc/ssl/private/

Copy to Clipboard

Toggle word wrap

Configure HAProxy.

vim /etc/haproxy/haproxy.cfg

# vim /etc/haproxy/haproxy.cfg

Copy to Clipboard

Toggle word wrap

The global and defaults sections of haproxy.cfg may remain unchanged. After the defaults sections, you will need to configure frontend and backend sections, as in the following example:

frontend http_web *:80
    mode http
    default_backend rgw

frontend rgw-https
  bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
  default_backend rgw

backend rgw
    balance roundrobin
    mode http
    server  rgw1 10.0.0.71:80 check
    server  rgw2 10.0.0.80:80 check

frontend http_web *:80
    mode http
    default_backend rgw

frontend rgw-https
  bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
  default_backend rgw

backend rgw
    balance roundrobin
    mode http
    server  rgw1 10.0.0.71:80 check
    server  rgw2 10.0.0.80:80 check

Copy to Clipboard

Toggle word wrap

Enable/start haproxy

systemctl enable haproxy
systemctl start haproxy

# systemctl enable haproxy
# systemctl start haproxy

Copy to Clipboard

Toggle word wrap

Este conteúdo não está disponível no idioma selecionado.

Aprender

Experimente, compre e venda

Comunidades

Sobre a documentação da Red Hat

Tornando o open source mais inclusivo

Sobre a Red Hat

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links