编写haproxy镜像

制作haproxy镜像

结构

[root@localhost ~]# tree haproxy/
haproxy/
├── Dockerfile
└── files
    ├── haproxy-2.4.0.tar.gz
    ├── install.sh
    └── start.sh
[root@localhost ~]# tree /haproxy_config/
/haproxy_config/
└── RSs.txt

Dockerfile

[root@localhost ~]# cat haproxy/Dockerfile 
FROM alpine

LABEL MAINTAINER='xxkk 1@2.com'

ADD files/haproxy-2.4.0.tar.gz /usr/src/
ADD files/install.sh /tmp/
ADD files/start.sh /start.sh

EXPOSE 8189 80
RUN /tmp/install.sh

CMD ["/start.sh"]

安装脚本

[root@localhost ~]# cat haproxy/files/install.sh 
#!/bin/sh

sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/' /etc/apk/repositories
apk update

adduser -S -H -s /sbin/nologin haproxy
apk add --no-cache -U make gcc pcre-dev bzip2-dev openssl-dev elogind-dev libc-dev dahdi-tools dahdi-tools-dev libexecinfo libexecinfo-dev ncurses-dev zlib-dev zlib

cd /usr/src/haproxy-2.4.0
make clean && \
        make TARGET=linux-glibc  \
        USE_OPENSSL=1  \
        USE_ZLIB=1  \
        USE_PCRE=1  \
        USE_SYSTEMD=1 && \
        make install PREFIX=/usr/local/haproxy && \
cp haproxy /usr/sbin/
echo 'net.ipv4.ip_nonlocal_bind = 1' >>  /etc/sysctl.conf
echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf
mkdir -p /usr/local/haproxy/conf/
rm -rf /tmp/* /var/cache/*
apk del gcc  make

启动脚本

[root@localhost ~]# cat haproxy/files/start.sh 
#!/bin/sh
cat > /usr/local/haproxy/conf/haproxy.cfg << EOF
#--------------全局配置----------------
global
    log 127.0.0.1 local0  info
    #log loghost local0 info
    maxconn 20480
#chroot /usr/local/haproxy
    pidfile /var/run/haproxy.pid
    #maxconn 4000
    user haproxy
    group haproxy
    daemon
#---------------------------------------------------------------------
#common defaults that all the 'listen' and 'backend' sections will
#use if not designated in their block
#---------------------------------------------------------------------
defaults
    mode http
    log global
    option dontlognull
    option httpclose
    option httplog
    #option forwardfor
    option redispatch
    balance roundrobin
    timeout connect 10s
    timeout client 10s
    timeout server 10s
    timeout check 10s
    maxconn 60000
    retries 3
#--------------统计页面配置------------------
listen admin_stats
    bind 0.0.0.0:8189
    stats enable
    mode http
    log global
    stats uri /haproxy_stats
    stats realm Haproxy\ Statistics
    stats auth admin:admin
    #stats hide-version
    stats admin if TRUE
    stats refresh 30s
#---------------web设置-----------------------
listen webcluster
    bind 0.0.0.0:80
    mode http
    #option httpchk GET /index.html
    log global
    maxconn 3000
    balance roundrobin
    cookie SESSION_COOKIE insert indirect nocache
EOF
count=1
for rs_ip in $(cat /tmp/RSs.txt);do
cat >> /usr/local/haproxy/conf/haproxy.cfg << EOF
server web$count $rs_ip:80 check inter 2000 fall 5
EOF
let count++
done

/usr/local/haproxy/sbin/haproxy -f /usr/local/haproxy/conf/haproxy.cfg

RS文件

[root@localhost ~]# cat /haproxy_config/RSs.txt 
192.168.100.3
192.168.100.4

创建容器

[root@localhost ~]# docker run -tid --name haproxy -v /haproxy_config:/tmp  -p 80:80 -p 8189:8189 haproxy:v0.1
a3275698b793ba05bd31aa556447532426ec52e988c189b4f2682b3706ad50dd
[root@localhost ~]# ss -antl
State         Recv-Q        Send-Q               Local Address:Port               Peer Address:Port        Process        
LISTEN        0             128                        0.0.0.0:8189                    0.0.0.0:*                          
LISTEN        0             128                        0.0.0.0:80                      0.0.0.0:*                          
LISTEN        0             128                        0.0.0.0:22                      0.0.0.0:*                          
LISTEN        0             128                           [::]:8189                       [::]:*                          
LISTEN        0             128                           [::]:80                         [::]:*                          
LISTEN        0             128                           [::]:22                         [::]:*                          

查看效果

[root@1d142875d771 /]# echo 'web1' > /var/www/html/index.html
[root@1d142875d771 /]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
73: eth0@if74: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:c0:a8:64:03 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 192.168.100.3/24 brd 192.168.100.255 scope global eth0
       valid_lft forever preferred_lft forever
[root@ead8b195bb62 /]# echo 'web2' > /var/www/html/index.html
[root@ead8b195bb62 /]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
75: eth0@if76: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:c0:a8:64:04 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 192.168.100.4/24 brd 192.168.100.255 scope global eth0
       valid_lft forever preferred_lft forever