haproxy调度web案例

时间 2020-09-12

原文原文链接

1、实验架构图html

haproxy经过ACL规则来实现智能负载均衡
当输入bbs.linux.com时，haproxy将请求转发到后端bbs服务器
当输入blog.linux.com时，haproxy将请求转发到后端blog服务器
前端两台haproxy服务器经过部署keepalived来实现haproxy高可用前端

2、准备工做linux

系统版本：centos7
haproxy服务器
haproxy01 192.168.122.100
haproxy02 192.168.122.200
bbs服务器
web01 192.168.122.101
web02 192.168.166.102
blog服务器
web03 192.168.122.103
web04 192.168.122.104
关闭firewalld和SElinux,各主机均为固定ipweb

3、部署bbs服务器和blog服务器的测试页面redis

安装httpd并启动vim

[root@web01 ~]# yum install -y httpd
[root@web01 ~]# echo "web01.bbs.com" >/var/www/html/index.html
[root@web01 ~]# systemctl start httpd
[root@web01 ~]# systemctl enable httpd

web01与web02测试页面分别为web01.bbs.com和web02.bbs.com
web03与web04测试页面分别为web03.blog.com和web04.blog.com后端

4、在haproxy01主机上安装haproxy,并进行配置centos

[root@haproxy01 ~]# yum install -y haproxy

配置文件所在位置浏览器

[root@haproxy01 ~]# rpm -qc haproxy
/etc/haproxy/haproxy.cfg
/etc/logrotate.d/haproxy

打开并编辑配置文件服务器

[root@haproxy01 ~]# vim /etc/haproxy/haproxy.cfg

global
        maxconn 2000
        nbproc 1
        user nobody
        group nobody
        log 127.0.0.1 local0 info
        daemon
        pidfile /var/run/haproxy.pid

defaults
        mode http
        retries 3
        timeout connect 5s
        timeout client 10s
        timeout server 30s
        timeout check 2s

listen admin_status
        bind 0.0.0.0:9088
        mode http
        log 127.0.0.1 local0 err
        stats refresh 30s
        stats uri /haproxy-status
        stats realm welcome login
        stats auth admin:admin
        stats hide-version
        stats admin if TRUE

frontend test-proxy
        bind *:80
        mode http
        log global
        option httplog
        option forwardfor

        acl host_bbs hdr_dom(host) -i bbs.linux.com
        acl host_blog hdr_beg(host) -i blog.

        use_backend server_bbs if host_bbs
        use_backend server_blog if host_blog

backend server_bbs
        mode http
        option redispatch
        cookie SERVERID
        option abortonclose
        balance roundrobin
        server bbs01 192.168.122.101:80 cookie bbs01 weight 3 check inter 2000 rise 1 fall 2
        server bbs02 192.168.122.102:80 cookie bbs02 weight 3 check inter 2000 rise 1 fall 2

backend server_blog
        mode http
        option redispatch
        cookie SERVERID
        option abortonclose
        balance roundrobin
        server blog01 192.168.122.103:80 cookie blog01 weight 3 check inter 2000 rise 1 fall 2
        server blog02 192.168.122.104:80 cookie blog02 weight 3 check inter 2000 rise 1 fall 2

启动haproxy服务

[root@haproxy01 ~]# systemctl start haproxy
[root@haproxy01 ~]# ss -antp |grep haproxy
LISTEN     0      128                       *:9088                     *:*      users:(("haproxy",8742,4),("haproxy",8741,4))
LISTEN     0      128                       *:80                       *:*      users:(("haproxy",8742,6),("haproxy",8741,6))

5、阶段测试
打开浏览器，经过输入bbs.linux.com,可看到web01和web02的负载均衡效果。经过输入blog.linux.com,可看到web03和web04的负载均衡效果。

6、测试访问haproxy的监控页面

7、安装配置haproxy02
软件安装方法和配置文件与haproxy01一致

[root@haproxy02 ~]# yum install -y haproxy
[root@haproxy02 ~]# scp 192.168.122.100:/etc/haproxy/haproxy.cfg /etc/haproxy/
[root@haproxy02 ~]# systemctl start haproxy
[root@haproxy02 ~]# systemctl enable haproxy

8、配置keepalived实现haproxy高可用

分别在两台haproxy主机上安装keepalived

[root@haproxy01 ~]# yum install -y keepalived

haproxy01主机keepalived配置文件以下
[root@haproxy01 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived

global_defs {
   router_id haproxy01
}

vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 80
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass redhat
    }
    virtual_ipaddress {
        192.168.122.111
    }
}

[root@haproxy01 ~]# scp /etc/keepalived/keepalived.conf 192.168.122.200:/etc/keepalived/

haproxy02主机keepalived配置文件以下

[root@haproxy01 ~]# scp /etc/keepalived/keepalived.conf 192.168.122.200:/etc/keepalived/

! Configuration File for keepalived

global_defs {
 router_id haproxy02
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 80
    priority 50
    advert_int 1
    authentication {
            auth_type PASS
            auth_pass redhat
    }
    virtual_ipaddress {
            192.168.122.111
    }
}

分别启动keepalived服务

[root@haproxy01 ~]# systemctl start keepalived
[root@haproxy01 ~]# systemctl enable keepalived
ln -s '/usr/lib/systemd/system/keepalived.service' '/etc/systemd/system/multi-user.target.wants/keepalived.service'
[root@haproxy01 ~]# systemctl status keepalived
keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled)
   Active: active (running) since 二 2018-06-05 19:56:24 CST; 33s ago
 Main PID: 8821 (keepalived)
   CGroup: /system.slice/keepalived.service
           ├─8821 /usr/sbin/keepalived -D
           ├─8822 /usr/sbin/keepalived -D
           └─8823 /usr/sbin/keepalived -D

[root@haproxy01 ~]# ip addr show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:00:4f:62:e6 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.100/24 brd 192.168.122.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet 192.168.122.111/32 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:ff:fe4f:62e6/64 scope link 
       valid_lft forever preferred_lft forever

[root@haproxy02 ~]# systemctl start keepalived
[root@haproxy02 ~]# systemctl enable keepalived
ln -s '/usr/lib/systemd/system/keepalived.service' '/etc/systemd/system/multi-user.target.wants/keepalived.service'
[root@haproxy02 ~]# systemctl status keepalived
keepalived.service - LVS and VRRP High Availability Monitor
   Loaded: loaded (/usr/lib/systemd/system/keepalived.service; enabled)
   Active: active (running) since 二 2018-06-05 19:57:24 CST; 12s ago
 Main PID: 8738 (keepalived)
   CGroup: /system.slice/keepalived.service
           ├─8738 /usr/sbin/keepalived -D
           ├─8739 /usr/sbin/keepalived -D
           └─8740 /usr/sbin/keepalived -D

配置haproxy的记录日志

[root@haproxy02 ~]# vim /etc/sysconfig/rsyslog

# Options for rsyslogd
# Syslogd options are deprecated since rsyslog v3.
# If you want to use them, switch to compatibility mode 2 by "-c 2"
# See rsyslogd(8) for more details
SYSLOGD_OPTIONS="-c 2 -r"

[root@haproxy02 ~]# vim /etc/rsyslog.conf 

$ModLoad imudp
$UDPServerRun 514

local0.*                                                /var/log/haproxy.log

[root@haproxy02 ~]# systemctl restart rsyslog.service haproxy.service
[root@haproxy02 ~]# ls /var/log/
anaconda  boot.log  cron   dmesg.old    lastlog  messages  rhsm    spooler   tuned  yum.log
audit     btmp      dmesg  haproxy.log  maillog  ppp       secure  tallylog  wtmp

[root@haproxy02 ~]# tail -f /var/log/haproxy.log 
Jun  5 20:13:58 localhost haproxy[8805]: Proxy test-proxy started.