haproxy+keepalived实现高可用负载均衡

#———————————————————————
# Example configuration for a possible web application. See the
# full configuration options online.
#
# http://haproxy.1wt.eu/download/1.3/doc/configuration.txt
#
#———————————————————————

#———————————————————————
# Global settings
#———————————————————————
global
log 127.0.0.1 local2
chroot /var/lib/haproxy #安装目录
pidfile /var/run/haproxy.pid
maxconn 4000 #最大连接数
user nobody
group nobody
daemon #守护进程运行 

#———————————————————————
# common defaults that all the ‘listen’ and ‘backend’ sections will
# use if not designated in their block
#———————————————————————
defaults
mode http #7层,默认的模式mode {tcp|http|health},tcp是4层,http是7层
log global
option dontlognull #来防止记录 Alteo(4层负载均衡)发出的健康检测,如果一个 session 交互没有数据,这个 session就不会被记录 
option httpclose #主动关闭http通道,HA-Proxy不支持keep-alive模式
option httplog #http 日志格式
option forwardfor #后端服务器需要获得客户端的真实IP,将从Http Header中获得客户端IP 
option redispatch #serverId对应的服务器挂掉后,强制定向到其他健康的服务器
timeout connect 10000 # default 10 second time out if a backend is not found
timeout client 300000 #客户端超时(毫秒)
timeout server 300000 #服务器超时(毫秒)
maxconn 60000 #最大连接数
retries 3

#———————————————————————
# main frontend which proxys to the backends
#———————————————————————
frontend main *:80
# acl url_static path_beg -i /static /images /javascript /stylesheets
# acl url_static path_end -i .jpg .gif .png .css .js

# use_backend static if url_static
mode http
default_backend app

#———————————————————————
# static backend for serving up images, stylesheets and such
#———————————————————————
#backend static
#balance roundrobin
#server static 127.0.0.1:4331 check

#———————————————————————
# round robin balancing between the various backends
#———————————————————————
backend app
balance roundrobin
server app1 192.168.1.101:80 cookie 1 check inter 2000 rise 3 fall 3
server app2 192.168.1.102:80 cookie 1 check inter 2000 rise 3 fall 3

#———————————————————————
# check status
#———————————————————————
listen secure #自定义一个frontend，也可以放在listen或者backend中
bind *:8080 #监听的ip端口号
stats enable #开关
stats uri /admin?admin #访问的uri ip:8080/admin?admin
stats auth admin:admin #认证用户名和密码
stats hide-version #隐藏HAProxy的版本号
stats refresh 5s #统计页面自动刷新时间

多后端配置文件：

global

    log 127.0.0.1 local0 notice

    maxconn 20480

    ulimit-n 65535

    uid nobody

   gid nobody

   daemon

   nbproc 2

   pidfile /var/run/haproxy.pid

defaults

    log global

    mode http

    option httplog

    option httpclose

    option forwardfor

    option dontlognull

    option redispatch

    retries 3

    balance roundrobin

    timeout connect 5000

    timeout client 50000

    timeout server 50000

##frontend settings ######

frontend test

    bind 192.168.1.241:80

    mode http

    #capture request header Host len 32

    #log-format %hr\ %r\ %st\ %B\ %Tr

    #http-request add-header X-Req %[env(USER)]

    option httpclose

    option httplog

    option dontlognull

    option forwardfor

    default_backend x.yxpai.com

##setting ACLs ##

#acl ua_moz hdr_reg(User-Agent) -i ^iphone.*

acl host_x hdr_reg(host) -i ^(x.yxpai.com)$

#http-request deny if host_x

##applying ACLs#####

use_backend x.yxpai.com if host_x

#use_backend moz if ua_moz

#redirect code 301 prefix http://192.168.1.64 if ua_moz

###testing how to modify HTTP response HEADER##

##setting up backends###

backend x.yxpai.com

    option httplog

    option httpclose

    option forwardfor

    http-response set-header X-Server-Port %[dst_port]

    #http-response set-header X-Handled-By %[env(USER)]

    http-response add-header X-Cached %[env(HOSTNAME)]

    http-response replace-value Server ^nginx.*$ Apache2

    http-response replace-header X-Powered-By ^.*$ PHP

    http-response del-header X-Powered-By

    http-response del-header Server

    #http-response replace-value Cache-control ^public$ private

    cookie PHPSESSID insert indirect nocache ##setting session sticky

    server app1 192.168.1.102:80 maxconn 3000 cookie app1 check inter 5s rise 3 fall 3

backend moz

    balance roundrobin

    option httplog

    option httpclose

    option forwardfor

    server app1 192.168.1.101:80 maxconn 3000 cookie app1 check inter 5s rise 3 fall 3

# option httpchk GET /index.html

listen status *:8080

    stats enable

    stats uri /stats

    stats auth admin:123456

    #stats admin if TRUE

    stats realm (Haproxy\statistic)