实验环境&＃xff1a;
node3  varnish服务器&＃xff1a; ens192 192.168.170.10  
                                         ens224 192.168.10.254
node1  backend server 1&＃xff1a;192.168.10.10          
node2  backend server 2&＃xff1a;192.168.10.11
 

示例1&＃xff1a; 

[root&＃64;node1 ~]# vi /etc/rsyslog.conf
$ModLoad imudp 监听udp协议
$UDPServerRun 514 监听514端口local2.* /var/log/haproxy.log[root&＃64;node1 ~]# systemctl restart rsyslog.service
[root&＃64;node1 ~]# ss -tunlp | grep 514 日志功能生效安装haproxy并启动
[root&＃64;node1 ~]# yum -y install haproxy
[root&＃64;node1 ~]# systemctl start haproxy
[root&＃64;node1 ~]# rpm -ql haproxy[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfgfrontend webbind *:80default_backend websrvsbackend websrvsbalance roundrobinserver srv1 172.16.100.6:80 checkserver srv2 172.16.100.7:80 check :.,$s&＃64;[^{^#]&＃64;#$&＃64;g 从光标指定的当前行到最后一行没有#的行&＃xff0c;在行首添加#
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlpnode2 backend server 2[root&＃64;node2 ~]# yum -y install httpd
[root&＃64;node2 ~]# vi /etc/www/html/index.html


Backend Server 2

示例2&＃xff1a; 

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8default_backend websrvsbackend websrvsbalance uriserver srv1 172.16.100.6:80 check maxconn 3server srv2 172.16.100.7:80 checkhash-type consistent
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp[root&＃64;node2 ~]# cd /var/www/html
[root&＃64;node2 ~]# for i in {1..10}; do echo "Test Page $i &＃64;BES 1"> test$i.html; done[root&＃64;node3 ~]# cd /var/www/html
[root&＃64;node3 ~]# for i in {1..10}; do echo "Test Page $i &＃64;BES 2"> test$i.html; done测试&＃xff1a;
for i in {1..10}; do curl http://172.16.0.67/test1.html; done

示例3&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8default_backend websrvsbackend websrvsbalance hdr(User-Agent)server srv1 172.16.100.6:80 check maxconn 3server srv2 172.16.100.7:80 checkhash-type consistent
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp


 示例4&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinserver srv1 172.16.100.6:80 check maxconn 3server srv2 172.16.100.7:80 check backup[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp[root&＃64;node2~]# cp /var/log/httpd/access_log /var/www/html/log.txt[root&＃64;node3 ~]# cp /var/log/httpd/access_log /var/www/html/log.txt客户端浏览器&＃xff1a;http://172.16.0.67 or http://172.16.0.67/log.txt 是否压缩

示例5&＃xff1a; 

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinoption httpchk GET /test1.html HTTP/1.0server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 server srv2 172.16.100.7:80 check backup
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlpnode2
[root&＃64;node2 ~]# tail /var/log/httpd/access_log 有健康状态检查log信息

示例6&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobin#option httpchk GET /test1.html HTTP/1.0server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 redir http://www.baidu.com/server srv2 172.16.100.7:80 check backup
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp浏览器访问&＃xff1a;http://172.16.0.67 发现重定向到百度


示例7&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:8compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobin#option httpchk GET /test1.html HTTP/1.0server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp客户端&＃xff1a;命令行输入 2:1
for i in {1..10}; do curl http://172.16.0.67/test1.html; done

示例8&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinstate enable #option httpchk GET /test1.html HTTP/1.0server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp浏览器输入&＃xff1a;http://172.16.0.67/haproxy?/stats


示例9&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend webbind *:80state enable state realm "HAProxy State Page" state uri /myproxy?adminstats auth admin:adminstats admin if TRUEcompression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobin#option httpchk GET /test1.html HTTP/1.0server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp

示例10&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinoption httpchk 做七层检查&＃xff0c;如果不加是四层检测server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
listen statsbind :9099stats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp浏览器输入&＃xff1a;http://172.16.0.67:9099/myproxy?admin 正常

示例11&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinoption httpchk 做七层检查&＃xff0c;如果不加是四层检测server srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
listen statsbind :9099stats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUElisten sshsrvsbind *:22022balance leastconnmode tcpserver sshsrv1 172.16.100.6:22 checkserver sshsrv2 172.16.100.7:22 check
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp客户端&＃xff1a;ssh root&＃64;172.16.0.67 -p 22022 连接
ssh root&＃64;172.16.0.67 -p 22022 再连接


示例12&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascriptdefault_backend websrvsbackend websrvsbalance roundrobinCOOKIE WEBSRV insert nocache indirectserver srv1 172.16.100.6:80 weight 2 check rise 1 fall 2 maxconn 3000 COOKIE srv1server srv2 172.16.100.7:80 weight 1 check rise 1 fall 2 maxconn 3000 COOKIE srv2option httpchkserver srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1
listen statsbind :9099stats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80浏览器&＃xff1a;http://172.160.67/test3.html http://172.160.67/test7.html 请求报文srv&＃61;srv1

示例13&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
defaultoption forwarddor except 127.0.0.0/8 if-none
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80[root&＃64;node2 ~]# vi /etc/httpd/httpd.confLogFormat "%{X-Forwarded-For}i
[root&＃64;node1 ~]# systemctl restart httpd浏览器&＃xff1a;http://172.160.67/test3.html 可看到响应的是backend server

示例14&＃xff1a;

[root&＃64;node1 ~]# mkdir /etc/proxy/errorfiles
vi /etc/proxy/errorfiles/403.html
forbiden[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascripterrorfile 403 /etc/haproxy/errorfiles/403.htmlerrorloc 403 http://172.16.0.67:10080/errorloc/403.html default_backend websrvsbackend websrvsbalance roundrobinCOOKIE WEBSRV insert nocache indirectserver srv1 172.16.100.6:80 weight 2 check rise 1 fall 2 maxconn 3000 COOKIE srv1server srv2 172.16.100.7:80 weight 1 check rise 1 fall 2 maxconn 3000 COOKIE srv2option httpchkserver srv1 172.16.100.6:80 check inter 3000ms rise 1 fall 2 weight2server srv2 172.16.100.7:80 check weight 1listen statsbind :9099stats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# yum -y install nginx
[root&＃64;node1 ~]# vi /etc/nginx/conf.d/errorfile.conf
server {listen 10080;server_name error.magedu.com&＃xff1b;root /data/nginx/html;
}
[root&＃64;node1 ~]# mkdir -pv /etc/nginx/html/errorloc
[root&＃64;node1 ~]# vi /etc/nginx/html/errorloc/403.html
403 from nginx
[root&＃64;node1 ~]# systemctl restart nginx
[root&＃64;node1 ~]# vi /etc/nginx/nginx.conf
server {listen 8089 default_server;
}
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80浏览器&＃xff1a;http://172.160.67/test3.html http://172.160.67/test7.html 请求报文srv&＃61;srv1


示例15&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascripterrorfile 403 /etc/haproxy/errorfiles/403.htmlerrorloc 403 http://172.16.0.67:10080/errorloc/403.html reqadd -X Proxy-By:\ HAProxyrsqadd -X Proxy-By:\ HAProxy-1.5default_backend websrvs
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80[root&＃64;node2 ~]# vi /etc/httpd/httpd.confLogFormat "%{X Proxy-By}i
[root&＃64;node2 ~]# tail /var/log/message


示例16&＃xff1a;

示例14&＃xff1a;添加请求首部
[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascripterrorfile 403 /etc/haproxy/errorfiles/403.htmlerrorloc 403 http://172.16.0.67:10080/errorloc/403.html reqadd -X Proxy-By:\ HAProxyrspadd -X Proxy-By:\ HAProxy-1.5rspdel -X Proxy-By:.*default_backend websrvs
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80浏览器输入&＃xff1a;http://172.16.0.67/test1.html 响应首部带haproxy

示例17&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
listen statsbind :9099acl allowstats src 172.16.0.67block if ! allowstatserrorloc 403 http://172.16.0.67:10080/errorloc/403.htmlstats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80浏览器输入&＃xff1a;http://172.16.0.67:9099/myproxy?admin 正常
相反去掉&＃xff01;重启服务 http://172.16.0.67:10080/errorloc/403.html 自定义错误页

示例18&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
listen statsbind :9099http-request allow if allowstatsacl allowstats src 172.16.0.67stats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80
客户端访问&＃xff1a;
[root&＃64;node2 ~]# curl --basic --user admin:admin http://172.16.0.67:9099/myproxy?admin 正常访问

示例19&＃xff1a;

[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
listen statsbind :9099acl all src 0.0.0.0/0.0.0.0acl allowstats src 172.16.0.67http-request allow if allowstatshttp-request deny if allstats enablestate uri /myproxy?adminstats realm HAPorxy\ Stats\ Pagestats auth admin:adminstats admin if TRUE
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp | grep 80
客户端访问&＃xff1a;
[root&＃64;node2 ~]# curl --basic --user admin:admin http://172.16.0.67:9099/myproxy?admin 无法正常访问

示例20&＃xff1a;

node2
[root&＃64;node2 ~]# yum -y install php
[root&＃64;node2 ~]# mkdir /data/web/vhost{1,2} -pv
[root&＃64;node2 ~]# vi /data/web/vhost1/info.php


Application Server 1

示例21&＃xff1a;

示例21&＃xff1a;拒绝curl访问
[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascripterrorfile 403 /etc/haproxy/errorfiles/403.htmlerrorloc 403 http://172.16.0.67:10080/errorloc/403.html reqadd -X Proxy-By:\ HAProxyrspadd -X Proxy-By:\ HAProxy-1.5rspidel -X ^Server:.*acl static path_end .jpg .jpeg .gif .txt .html .css .Javascript .jsacl static path_beg /imgs /images /css /Javascriptsacl bad_browsers hdr_reg(User-Agent) .*curl.*block if bad_browsersuse _backend staticsrvs if staticdefault_backend dynsrvs
[root&＃64;node1 ~]# systemctl restart haproxy
[root&＃64;node1 ~]# ss -tunlp浏览器输入http://172.16.0.67/test.txt 正常
curl http://172.16.0.67/test.txt 无显示


示例22&＃xff1a;

示例23&＃xff1a;
[root&＃64;node1 ~]# vi /etc/haproxy/haproxy.cfg
frontend web *:80compression algo gzipcompression type text/html text/plain application/xml application/Javascripterrorfile 403 /etc/haproxy/errorfiles/403.htmlerrorloc 403 http://172.16.0.67:10080/errorloc/403.html reqadd -X Proxy-By:\ HAProxyrspadd -X Proxy-By:\ HAProxy-1.5rspidel -X ^Server:.*acl static path_end .jpg .jpeg .gif .txt .html .css .Javascript .jsacl static path_beg /imgs /images /css /Javascriptsacl valid_referers hdr_reg(Referer) \.magedu\.comblock unless valid_referersuse _backend staticsrvs if staticdefault_backend dynsrvs客户端使用curl命令
curl -e "http://www.magedu.com/admin.php" http://172.16.0.67/test.txt


正在完善中请见谅&＃xff01;