Configuration haproxy

http

Download the basic configuration for a redundant load balancer with http access:

curl https://cdn.jtel.de/downloads/configs/haproxy2.redundant.http-.deb.cfg > /etc/haproxy/haproxy.cfg

https

Download the basic configuration for a redundant load balancer with http access:

curl https://cdn.jtel.de/downloads/configs/haproxy2.redundant.https-.deb.cfg > /etc/haproxy/haproxy.cfg

For a https configuration, the file /etc/haproxy/haproxy.pem must also be created, which contains the certificates and keys for https. This file must also be given special access privileges otherwise haproxy may not start.

See the sections on certificates for the role LB for further details.

chmod 400 /etc/haproxy/haproxy.pem

Firewall

Configure the firewall for MySQL Access with the following commands:

ufw allow 3306/tcp
ufw allow 3307/tcp
ufw allow 3308/tcp