清华镜像站
1 2 https://mirrors.tuna.tsinghua.edu.cn/ubuntu/pool/main/h/haproxy/
下载haproxy
1 2 https://mirrors.tuna.tsinghua.edu.cn/ubuntu/pool/main/h/haproxy/haproxy_1.6.3-1ubuntu0.3_amd64.deb
安装haproxy
1 2 sudo dpkg -i ./haproxy_1.6.3-1ubuntu0.3_amd64.deb
编辑配置文件
1 2 vim /etc/haproxy/haproxy.cfg
其默认配置如下
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon # Default SSL material locations ca-base /etc/ssl/certs crt-base /etc/ssl/private # Default ciphers to use on SSL-enabled listening sockets. # For more information, see ciphers(1SSL). This list is from: # https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS ssl-default-bind-options no-sslv3 defaults log global mode http option httplog option dontlognull timeout connect 5000 timeout client 50000 timeout server 50000 errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http
1. 开启stats page
添加如下配置开启haproxy的stats page页面，在页面中可以查看流程等信息
1 2 3 4 5 6 7 8 9 frontend stats bind *:8404 stats enable stats uri /stats stats refresh 10s # stats admin if LOCALHOST stats auth user:123 # stats hide-version # 可以隐藏haproxy的版本
参考文档
1 2 https://www.haproxy.com/blog/exploring-the-haproxy-stats-page/
访问localhost:8404可以查看haproxy状态
2. 给TCP端口配置load balancer，比如给hiveserver2配置负载均衡
参考文档
1 2 https://docs.cloudera.com/documentation/enterprise/5-15-x/topics/admin_ha_hiveserver2.html
添加如下配置开启haproxy作为load balancer
1 2 3 4 5 6 7 8 9 10 listen hiveserver2 bind 0.0.0.0:10001 mode tcp option tcplog balance source server hiveserver2_1 hs2-host-1.example.com:10000 check server hiveserver2_2 hs2-host-2.example.com:10000 check server hiveserver2_3 hs2-host-3.example.com:10000 check server hiveserver2_4 hs2-host-4.example.com:10000 check
比如
1 2 3 4 5 6 7 8 listen test bind 0.0.0.0:10001 mode tcp option tcplog balance leastconn server es localhost:9200 check server cerebro localhost:9090 check
haproxy的负载均衡策略有，中文请参考：关于haproxy负载均衡的算法整理
1 2 3 4 5 6 7 8 9 10 roundrobin static-rr leastconn first source URI URL parameter HDR rdp-cookie
参考：
1 2 https://d2c.io/post/haproxy-load-balancer-part-2-backend-section-algorithms
