Two HAProxy load balancers are deployed as a failover cluster to protect the load balancer against outages. See the schema below for more information. lvs-hap03/lvs-hap04 – real servers, both running a pre-configured Apache webserver with SSL.lvs-hap02 – the backup HAProxy router with keepalived,.lvs-hap01 – the active HAProxy router with keepalived,.Hostnames and roles of the virtual machines we are going to use: 10.8.8.0/24 – LAN with access to the Internet.Keepalived uses LVS to perform load balancing and failover tasks on active and passive LVS routers, while HAProxy performs load balancing and high-availability services to TCP and HTTP applications. Materials are provided for informational, personal or non-commercial use within your organization and are presented 'AS IS' WITHOUT WARRANTY OF ANY KIND.We will be setting up a load balancer using two main technologies to monitor cluster members and cluster services: Keepalived and HAProxy. This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. If there are firewall rules blocking port 9000, use ssh tunneling to proxy the connection:.Add the following to /etc/haproxy/haproxy.cfg before the frontend section.NOTE: The default gateway for all 3 Rancher nodes must be the load balancer.Server rancher03 192.168.1.105:80 check weight 1 maxconn 1024Įxample config Option C - TCP pass-through Verify Rancher URL works went connecting directly to a Rancher node.Server rancher03 192.168.1.105:443 check weight 1 maxconn 1024 ssl verify noneĮxample config Option B - External TLS Termination Server rancher02 192.168.1.104:443 check weight 1 maxconn 1024 ssl verify none Server rancher01 192.168.1.103:443 check weight 1 maxconn 1024 ssl verify none Server rancher03 192.168.1.105:80 check weight 1 maxconn 1024 backend rancher-https Add backends to /etc/haproxy/haproxy.cfg:.Add frontend to /etc/haproxy/haproxy.cfg:ĭefault_backend rancher-http frontend www-https.Copy cert and key into a single file called /etc/haproxy/cert.pem.Verify Rancher URL works when connecting directly to a Rancher node.Systemctl start haproxy Example HAProxy Config Option A - Full SSL Systemctl start haproxy CentOS / RedHat yum update Setup HAProxy as a frontend load balancer for Rancher v2.x.

Install haproxy on redhat 6