haproxy 配置基础

1. mode health
   该模式用于健康检查，tcp层面的，只返回OK，如下：
   
2. stats
   1. 通过http页面查看状态：
      
      listen status bind *:3127 mode http stats enable stats uri / stats realm HAProxy\ Statistics stats auth statsadmin:password

      1 2 3 4 5 6 7

      listen status   bind *:3127   mode http   stats enable   stats uri   /   stats realm  HAProxy\ Statistics   stats auth  statsadmin:password

   2.  通过tcp socket查看状态：
      
      stats socket *:3126 #写在global中就可以

      1	stats socket *:3126 #写在global中就可以

      
      
      这个socket也可以是一个unix socket：(或者同时写两个都是可以的）
      
      stats socket /var/lib/haproxy/stats #目录要事先创建好

      1	stats socket /var/lib/haproxy/stats #目录要事先创建好

      
      
      使用nc也行：
      
      tcp（或unix模式）有很多命令可以使用
      
   3. 一个一般的配置
      
      global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon # turn on stats unix socket stats socket /var/lib/haproxy/stats stats socket *:3126 defaults mode http log global option dontlognull retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 30000 resolvers dns nameserver svr1 172.16.162.194:53 listen status bind *:3127 mode http stats enable stats hide-version stats uri / stats realm HAProxy\ Statistics stats auth statsadmin:password listen http_health bind *:3129 mode health listen http_tun bind *:3128 mode http option http-tunnel default_backend http_tun_backend backend http_tun_backend mode http acl acl_baidu req.hdr(host) -i www.baidu.com use-server svr_baidu if acl_baidu server svr_baidu www.baidu.com:80 resolvers dns listen http_proxy bind *:80 mode http default_backend http_backend backend http_backend mode http acl acl_baidu req.hdr(host) -i www.baidu.com acl acl_beebank req.hdr(host) -i www.beebank.com use-server svr_baidu if acl_baidu use-server svr_beebank if acl_beebank server svr_baidu www.baidu.com:80 resolvers dns server svr_beebank www.beebank.com:80 resolvers dns listen ssl_proxy bind 127.0.0.1:443 mode tcp default_backend ssl_backend backend ssl_backend tcp-request inspect-delay 5s tcp-request content accept if { req_ssl_hello_type 1 } acl acl_baidu req_ssl_sni -i www.baidu.com acl acl_beebank req_ssl_sni -i www.beebank.com use-server svr_baidu if acl_baidu use-server svr_beebank if acl_beebank server svr_baidu www.baidu.com:443 resolvers dns server svr_beebank www.beebank.com:443 resolvers dns

      1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83

      global     log         127.0.0.1 local2     chroot      /var/lib/haproxy     pidfile     /var/run/haproxy.pid     maxconn     4000     user        haproxy     group       haproxy     daemon       # turn on stats unix socket     stats socket /var/lib/haproxy/stats     stats socket *:3126   defaults     mode                    http     log                     global     option                  dontlognull     retries                 3     timeout http-request    10s     timeout queue           1m     timeout connect         10s     timeout client          1m     timeout server          1m     timeout http-keep-alive 10s     timeout check           10s     maxconn                 30000   resolvers dns   nameserver svr1  172.16.162.194:53   listen status   bind *:3127   mode http   stats enable   stats hide-version   stats uri   /   stats realm  HAProxy\ Statistics   stats auth  statsadmin:password   listen http_health   bind *:3129   mode health   listen http_tun   bind *:3128   mode http   option http-tunnel   default_backend http_tun_backend   backend http_tun_backend   mode http   acl acl_baidu req.hdr(host) -i www.baidu.com   use-server svr_baidu if acl_baidu   server svr_baidu www.baidu.com:80 resolvers dns   listen http_proxy   bind *:80   mode http   default_backend http_backend   backend http_backend   mode http   acl acl_baidu req.hdr(host) -i www.baidu.com   acl acl_beebank req.hdr(host) -i www.beebank.com   use-server svr_baidu if acl_baidu   use-server svr_beebank if acl_beebank   server svr_baidu www.baidu.com:80 resolvers dns   server svr_beebank www.beebank.com:80 resolvers dns   listen ssl_proxy   bind 127.0.0.1:443   mode tcp   default_backend ssl_backend   backend ssl_backend   tcp-request inspect-delay 5s   tcp-request content accept if { req_ssl_hello_type 1 }   acl acl_baidu req_ssl_sni -i www.baidu.com   acl acl_beebank req_ssl_sni -i www.beebank.com   use-server svr_baidu if acl_baidu   use-server svr_beebank if acl_beebank   server svr_baidu www.baidu.com:443 resolvers dns   server svr_beebank www.beebank.com:443 resolvers dns

      
       

参考资料： http://www.ttlsa.com/linux/haproxy-study-tutorial/