global 

      log /dev/log    local0
      log /dev/log    local1 notice
      chroot /var/lib/haproxy
      stats socket /run/haproxy/admin.sock mode 660 level admin
      stats timeout 30s
      user haproxy
      group haproxy
      daemon
      # Default SSL material locations
      ca-base /etc/ssl/certs
      crt-base /etc/ssl/private
      # Default ciphers to use on SSL-enabled listening sockets.
      # For more information, see ciphers(1SSL). This list is from:
      #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
      ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
      ssl-default-bind-options no-sslv3

defaults 

      log     global
      maxconn 2000
      mode    http
      option  httplog
      option  dontlognull
      timeout connect 5000
      timeout client  90000
      timeout server  90000
      errorfile 400 /etc/haproxy/errors/400.http
      errorfile 403 /etc/haproxy/errors/403.http
      errorfile 408 /etc/haproxy/errors/408.http
      errorfile 500 /etc/haproxy/errors/500.http
      errorfile 502 /etc/haproxy/errors/502.http
      errorfile 503 /etc/haproxy/errors/503.http
      errorfile 504 /etc/haproxy/errors/504.http

listen stats :1936 

      stats enable
      stats uri /haproxy
      stats realm Haproxy\ Statistics
      stats auth admin:123456
      stats refresh 30s
      stats hide-version
      stats show-legends
      stats show-node

frontend Starlab 

      bind *:80
      maxconn 1000
      default_backend Starlab

backend Starlab 

      balance roundrobin
      maxconn 1000
      timeout connect 5s
      timeout queue   30s
      timeout client  5m
      timeout server  5m
      option httpclose
      option forwardfor
      option httpchk HEAD /haproxy_on HTTP/1.0
      server Starlab01 load1.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab02 load2.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab03 load3.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab04 load4.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40

frontend Starlab-int 

      bind *:81
      maxconn 3000
      default_backend Starlab-int

backend Starlab-int 

      balance roundrobin
      maxconn 120
      timeout connect 5s
      timeout client  20h
      timeout server  20h
      option httpclose
      option forwardfor
      option httpchk HEAD /haproxy_on HTTP/1.0
      server Starlab01 load1.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab02 load2.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab03 load3.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
      server Starlab04 load4.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40
 
linux/haproxy.txt · Last modified: 2019/10/23 10:41 by admin