haproxy | Development repository for the haproxy cookbook | Configuration Management library
kandi X-RAY | haproxy Summary
kandi X-RAY | haproxy Summary
Installs and configures HAProxy.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of haproxy
haproxy Key Features
haproxy Examples and Code Snippets
Community Discussions
Trending Discussions on haproxy
QUESTION
Grok is parsing successfully when Haproxy gives a log - from var/log/haproxy.log - similar to:
ANSWER
Answered 2021-May-21 at 13:51I had a look at your pipeline grok patterns. Taking cue from that, I modified the IP section a bit.
QUESTION
i have a question related to design and architecture needs instead of issue one, we have a kubernetes cluster which handle our production workload, we need to secure external traffic to this cluster so we have designed this approach :
- make a worker node with ingress controller and without any workload
- place this worker node in a DMZ zone in order to handle external traffic to our clusterIP services of our applications.
is that a good idea for securing our workloads ?
if we place an HAproxy in a DMZ zone (as a L4 just to load balance traffic to workers to be handled by ingress nginx for ex) it'll not give us an other level of security (protocol break)
note that we don't have a WAF. Any ideas please??
...ANSWER
Answered 2021-Jun-09 at 23:29Agree to use two dedicated nodes, for high availability, for external traffic entry point.
I would use the haproxy ingress controller Announcing HAProxy Kubernetes Ingress Controller 1.6 with Evolving Kubernetes networking with the Gateway API
QUESTION
I am using Kubernetes services with custom endpoints to access external redis cluster.
But I can't know which one is master and I want to ensure it only forward incoming connections to reach a master.
Is there anything in Kubernetes I could use for checking nodes and to get master?
This is piece of code from haproxy that does the job I need
...ANSWER
Answered 2021-Jun-09 at 11:14If I understand correctly, you are looking for a native k8s solution to detect which of external redis nodes are master nodes and point traffic to them.
My answer is: There is no way to do it natively.
You need to use some custom solution (such as your haproxy) to achieve it.
QUESTION
I have configured a K8S cluster with istio-ingressgateway as per the docs.
Although the HPE Container Platform managed haproxy gateway can route traffic to the istio-ingressgateway, I would like to access the host endpoints directly.
How can I determine the ingress IP addresses and ports for the hosts avoiding the managed haproxy gateway?
...ANSWER
Answered 2021-May-30 at 14:49This is how I found the information:
QUESTION
I have a PostgreSQL cluster on Patroni (Haproxy+Keepalived+etcd) - one primary node and two standby nodes.
For now, Haproxy is configured in this way:
- port
5000to connect to the primary node - port
5001to connect to the standby nodes
How can I configure Haproxy so that the port 5001 is used to connect to the standby nodes as well as the primary node?
This is my haproxy.cfg below:
ANSWER
Answered 2021-May-19 at 18:38In a patroni documentation I found the /health endpoint patroni rest-api:
returns HTTP status code 200 only when PostgreSQL is up and running.
I tried to use that endpoint in haproxy configuration, and it works like expected, patroni give all 3 nodes when all nodes alive, and don't give nodes that aren't in running state
So, if you want to add all nodes to haproxy balance, create a new backend in haproxy.conf
QUESTION
I am using HAProxy as the ingress-controller in my GKE clusters. And exposing HAProxy service as LoadBalancer service(Internal).
Recently, I experienced an issue, where the HA-Proxy service changed its EXTERNAL-IP, and traffic stopped routing to HAProxy. This issue occurred multiple times on different days(now it has stopped). I had to manually add that new External-IP to the frontend of that Loadbalancer to allow traffic to HAProxy.
There were two pods running for HAProxy, and both had been running for days, and there was nothing in their logs. I assume it was something related to Service or GCP LB and not HAProxy itself.
I am afraid that I don't have any logs related to that.
I still don't know, what caused the service IP to change. As there were no recent changes, and the cluster and all services were running for many days properly, and suddenly this occurred.
Has anyone faced a similar issue earlier? Or what can I do to avoid such issue in future?
What could have caused the IP to change?
This is how my service is configured:
...ANSWER
Answered 2021-May-16 at 00:48Unfortunately without logs it's hard to say anything for sure. You should check the audit logs that GKE ships to Cloud Logging as that might give you some idea of what happened. One option is the GCP "oops"'d the GLB and GKE recreated it, thus giving it a new IP. I've never heard of that happening with LBs though (it happens pretty often with nodes, but not LBs). A more common case would be you ran some kubectl command that inadvertently removed the Service object and then it was recreated by some management layer you have set up (Argo, Flux, Helm Operator, whatever) but delete+recreate again means it's a new LB with a new IP. The latter case should be visible in the audit logs so check those out for sure.
QUESTION
I'm final student who research and implement Openstack Victoria. When I configure Project: Octavia - Loadbalancer on multi-node - CentOS8, I have a issue. Seem like octavia.amphorae.drivers.haproxy.rest_api_driver couldn't connect to Amphora instance and port 9443 didn't run on my Network Node aka Octavia-API. In controller node, the amphora instance still running nornally. I follow https://www.server-world.info/en/note?os=CentOS_8&p=openstack_victoria4&f=11 to configure my lab. This is my cfg file below, pls help me to figure out. Regards!
I created lb_net in type vxlan and lb-secgroup, when i use command to create lb it still pending-create:
...ANSWER
Answered 2021-May-14 at 18:28Okay, my problem is fixed. The Octavia-api node can't connect to amphorae-instance because they do not match the same network type (node - LAN and amphorae - VXLAN). So, I create a bridge interface at a node to convert vxlan for lan can connect (You can read here at step 7: create a network).
Best regard!
QUESTION
I would like to use the haproxy option forwardfor except network-here for multiple networks, not just a single one.
I'm looking for something like
...ANSWER
Answered 2021-May-13 at 04:07I ended up using a somewhat hacky solution, it was not my first choice but it works for my needs. In the haproxy config I am using an acl whitelist that contains all the ips that I do not wish to forwardfor. If the request comes from an ip that exists in the whitelist, haproxy will use a second backend that is identical to the first one, except that it does not forwardfor. I basically moved the forwardfor option to the backend portion instead of the frontend.
so,
QUESTION
I have two servers, one serves HTTP and the other serves HTTPS.
I opened a TCP connection to the HTTP server
...ANSWER
Answered 2021-May-10 at 18:35It is not that unusual to have a fairly long timeout when waiting for a request to start. This is most useful to keep a TCP connection alive between requests to speed the response to subsequent requests. It makes sense to keep a TCP connection around in case you need it soon.
It is, however, unusual to pause in the middle of a request. That is much more likely to indicate that the connection isn't working correctly. Why would the client start sending a request if they weren't going to send the entire request? Also, the server is using more resources because it has to store the portions of the request that have already been sent. So it makes sense to use a much shorter timeout here.
In summary, in the case of a new TCP connection, you are getting the "wait for start of request" timeout, which it makes sense to make fairly long. In the case of a partial quest, you are getting the "stopped in the middle of a request" timeout, which it makes sense to keep fairly short.
QUESTION
I configure openstack victoria multi-node on CentOS8. When I create amphora-disk-image (option -r rootpassword), I have an issue:
...ANSWER
Answered 2021-May-10 at 18:31I successfully created amphora-image with my option. I don't know what cause that issue, I just boot all openstack-multi node and let octavia-disk-image-create running until done. Regards !
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install haproxy
On a UNIX-like operating system, using your system’s package manager is easiest. However, the packaged Ruby version may not be the newest one. There is also an installer for Windows. Managers help you to switch between multiple Ruby versions on your system. Installers can be used to install a specific or multiple Ruby versions. Please refer ruby-lang.org for more information.
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page
