IntroductionThe role LB provides the central access point to the portal and the SOAP interfaces. This is where the requests are distributed to the available Web application servers, taking into account an even load distribution, the possible failure of one or more Web servers, and the service-specific restrictions. Furthermore, this role also handles the provision of the connection using HTTPS, which is encrypted using TLS. The service can be provided both on HTTP (port 80) and HTTPS (port 443). Automatic redirection to HTTPS or special URLs can also be implemented here, for example: Since the role usually requires very few resources, it is usually installed on the same machine on which the STORE role was installed. Install haproxyInstall SoftwareThe installation of haproxy is performed using the following commands: | Translations Ignore |
|---|
| Code Block |
|---|
| dnf -y install haproxy
mv /etc/haproxy/haproxy.cfg /etc/haproxy/haproxy.cfg.sample |
The second command renames the installed configuration, as this is not required. Acticate haproxyActivate the haproxy service with the following command: | Translations Ignore |
|---|
| Code Block |
|---|
| systemctl enable haproxy.service |
Configure the firewall with the following commands: | Translations Ignore |
|---|
| Code Block |
|---|
| firewall-cmd --zone=public --add-port=80/tcp --permanent
firewall-cmd --zone=public --add-port=443/tcp --permanent
firewall-cmd --zone=public --add-port=7777/tcp --permanent
firewall-cmd --reload |
SeLinux ConfigurationEnable haproxy to open any port with the following selinux command: | Translations Ignore |
|---|
| Code Block |
|---|
| setsebool -P haproxy_connect_any=1
semanage permissive -a haproxy_t |
haproxy LogTo allow the haproxy service to log to the syslog service, the following commands are executed. The logs from haproxy will be in /var/log/messages | Translations Ignore |
|---|
| Code Block |
|---|
| sed -i -e 's/#$ModLoad *imudp/$ModLoad imudp/' -e 's/#$UDPServerRun *514/$UDPServerRun 514/' /etc/rsyslog.conf
cat <<EOFF>/etc/rsyslog.d/haproxy.conf
local2.* /var/log/haproxy.log
EOFF
service rsyslog restart |
Installation Steps
| 