User Tools
решение_haproxy
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
решение_haproxy [2024/03/04 09:31] val |
решение_haproxy [2025/01/14 14:50] (current) val |
||
|---|---|---|---|
| Line 4: | Line 4: | ||
| * [[https://www.haproxy.com/documentation/haproxy-configuration-tutorials/http-rewrites/|HAProxy config tutorials HTTP rewrites]] | * [[https://www.haproxy.com/documentation/haproxy-configuration-tutorials/http-rewrites/|HAProxy config tutorials HTTP rewrites]] | ||
| * [[https://serverfault.com/questions/560978/configure-multiple-ssl-certificates-in-haproxy|Configure multiple SSL certificates in Haproxy]] | * [[https://serverfault.com/questions/560978/configure-multiple-ssl-certificates-in-haproxy|Configure multiple SSL certificates in Haproxy]] | ||
| + | * [[https://youtu.be/oIczkkD-hOU|Видео урок: Доступ к приложениям в Bare-Metal Kubernetes]] | ||
| <code> | <code> | ||
| gate# apt install haproxy | gate# apt install haproxy | ||
| - | gate# cat gowebd.crt wild.key > /etc/ssl/private/wild.crtkey | + | gate# cat wild.crt wild.key > /etc/ssl/private/wild.crtkey |
| + | gate# ###cat gowebd.crt gowebd.key > /etc/ssl/private/gowebd.crtkey | ||
| gate# ###cat keycloak.crt keycloak.key > /etc/ssl/private/keycloak.crtkey | gate# ###cat keycloak.crt keycloak.key > /etc/ssl/private/keycloak.crtkey | ||
| Line 31: | Line 33: | ||
| backend bk-kube-ingress | backend bk-kube-ingress | ||
| - | # http-request set-header X-Forwarded-Proto https if { ssl_fc } # For Proto | + | # http-request set-header X-Forwarded-Proto https if { ssl_fc } |
| # http-request set-header X-Forwarded-Host %[req.hdr(Host)] | # http-request set-header X-Forwarded-Host %[req.hdr(Host)] | ||
| # http-request set-header X-Forwarded-Port %[dst_port] | # http-request set-header X-Forwarded-Port %[dst_port] | ||
| Line 42: | Line 44: | ||
| balance roundrobin | balance roundrobin | ||
| - | server kube1 kube2:80 check | + | server kube1 kube1:80 check |
| server kube2 kube2:80 check | server kube2 kube2:80 check | ||
| server kube3 kube3:80 check | server kube3 kube3:80 check | ||
| Line 59: | Line 61: | ||
| # tail -f /var/log/haproxy.log | # tail -f /var/log/haproxy.log | ||
| # journalctl -f | grep proxy | # journalctl -f | grep proxy | ||
| + | # ###haproxy -f /etc/haproxy/haproxy.cfg -d | ||
| - | haproxy# curl http://localhost/ -H "Host: gowebd.corpX.un" | + | # echo "show stat" | socat stdio /run/haproxy/admin.sock | cut -d ',' -f 1,2,18 |
| + | |||
| + | haproxy# curl https://localhost/ -H "Host: gowebd.corpX.un" -k | ||
| </code> | </code> | ||
решение_haproxy.1709533899.txt.gz · Last modified: 2024/03/04 09:31 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
