Ubuntu 16.04 haproxy + keeplive

WEB架构

阐述各服务器用途：

   1、haproxy        实现后端Web服务器负载均衡

   2、keepalived    实现对haproxy的高可用

   3、apache static     实现静态页面的访问

   4、aoache dynamic    实现动态页面的访问

What is Keepalived ?

Keepalived is a routing software written in C. The main goal of this project is to provide simple and robust facilities(能力) for loadbalancing and high-availability to Linux system and Linux based infrastructures. Loadbalancing framework relies(依赖) on well-known and widely used Linux Virtual Server (IPVS) kernel module providing Layer4 loadbalancing. On the other hand high-availability is achieved by VRRP protocol.

 

1、安装Keepalived

~# apt-get install keepalived

 

2、配置Keepalived

一个功能比较完整的keepalived 的配置文件，其配置文件keepalived.conf 可以包含三个文本块：

全局定义块

VRRP 实例定义块

虚拟服务器定义块

 

haproxy

安装配置链接

配置文件：

global
    log /dev/log    local0
    log /dev/log    local1 notice
    chroot /var/lib/haproxy
    pidfile /var/run/haproxy.pid
    maxconn 4000
    stats socket /run/haproxy/admin.sock mode 660 level admin
    stats timeout 30s
    user haproxy
    group haproxy
    daemon

    # Default SSL material locations
    ca-base /etc/ssl/certs
    crt-base /etc/ssl/private

    # Default ciphers to use on SSL-enabled listening sockets.
    # For more information, see ciphers(1SSL). This list is from:
    #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
    ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
    ssl-default-bind-options no-sslv3

defaults
    log    global
    mode    http
    option    httplog
    option    dontlognull
    option  http-server-close
    option  forwardfor except 127.0.0.0/8
    maxconn 60000
    retries 3
        timeout connect 10s
        timeout client  1m
        timeout server  1m
    timeout check  10s
    errorfile 400 /etc/haproxy/errors/400.http
    errorfile 403 /etc/haproxy/errors/403.http
    errorfile 408 /etc/haproxy/errors/408.http
    errorfile 500 /etc/haproxy/errors/500.http
    errorfile 502 /etc/haproxy/errors/502.http
    errorfile 503 /etc/haproxy/errors/503.http
    errorfile 504 /etc/haproxy/errors/504.http

listen stats
    bind 0.0.0.0:1080
    stats refresh 30s
    stats uri /stats
    stats realm Haproxy Manager
    stats auth admin:admin
    
frontend main
    bind 0.0.0.0:80
    
    acl url_static path_beg -i /static /images /javascript /stylesheets
    acl url_static path_end -i .jpg .gif .png .css .js
    acl url_dynamic path_end -i .jsp
    use_backend static if url_static
    use_backend dynamic if url_dynamic
    default_backend static


backend static
    balance roundrobin
    server websrv1 192.168.20.178:80 check maxconn 1000
    server websrv2 192.168.20.179:80 check maxconn 1000

backend dynamic
    balance roundrobin
    server dynamic1 192.168.20.177:8080 inter 3000 rise 2 fall 3 check maxconn 100
    server dynamic2 192.168.20.181:8080 inter 3000 rise 3 fall 3 check maxconn 100

 

转载于:https://www.cnblogs.com/vincenshen/p/6417992.html