Openstack 集群，及常用服务的 高可用 haproxy配置

时间：2024-01-14 19:49:14

一、介绍

　　配置文件位置（yum 安装）：/etc/haproxy/haproxy.cfg

　　全局配置　　

#---------------------------------------------------------------------

# Global settings

#---------------------------------------------------------------------

global

    log         127.0.0.1 local2

    chroot      /var/lib/haproxy

    pidfile     /var/run/haproxy.pid

    maxconn     4000

    user        haproxy

    group       haproxy

    daemon

    stats socket /var/lib/haproxy/stats

　　默认配置　　

#---------------------------------------------------------------------

# common defaults that all the 'listen' and 'backend' sections will

# use if not designated in their block

#---------------------------------------------------------------------

defaults

    mode                    http

    log                     global

    option                  httplog

    option                  dontlognull

    option forwardfor

    option                  redispatch

    retries                 3

    timeout http-request    10s

    timeout queue           1m

    timeout connect         10s

    timeout client          1m

    timeout server          1m

    timeout http-keep-alive 10s

    timeout check           10s

    maxconn                 3000

　　配置haproxy 的统计页面　　

#---------------------------------------------------------------------

# tong ji ye mian pei zhi

#---------------------------------------------------------------------

    listen stats

    bind 10.6.32.200:1080

    mode http

    option httplog

    log 127.0.0.1 local0 err

    stats refresh 30s

    maxconn 10

    stats uri /admin

    stats realm Haproxy\ Statistics

    stats auth admin:admin    #web登录的账号密码

    stats hide-version

    stats admin if TRUE

　　　　在浏览器中访问：http://10.6.32.200:1080/admin

　　　　Openstack 集群，及常用服务的 高可用 haproxy配置

1、httpd 服务　　

#---------------------------------------------------------------------

# listen httpd server

#---------------------------------------------------------------------

    listen httpd_cluster

    bind 10.6.32.200:

    balance  roundrobin

    option  tcpka

    option  httpchk

    option  tcplog

    server controller1 controller1: check port  inter  rise  fall

    server controller2 controller2: check port  inter  rise  fall

    server controller3 controller3: check port  inter  rise  fall

2、mysql 服务　　

#---------------------------------------------------------------------

# listen Mysql-db server

#---------------------------------------------------------------------

listen mysql_cluster

    mode tcp

    bind 10.6.32.200:

    balance source

    option mysql-check user haproxy     # 需要在数据库中创建没有密码的 haproxy用户，不需要有任何权限，详情查看博客：Mysql 5.7 弱密码限制，及创建用户无密码用户

    server controller1 controller1: weight  check inter  rise  fall

    server controller2 controller2: weight  check inter  rise  fall

    server controller3 controller3: weight  check inter  rise  fall

3、 keystone-admin API　　

#---------------------------------------------------------------------

# listen keystone-admin server

#---------------------------------------------------------------------

listen keystone_admin

    bind 10.6.32.200:35357

    balance source

    option  tcpka

    option  httpchk

    option  tcplog

    http-request del-header X-Forwarded-Proto if { ssl_fc }

    server controller1 10.6.32.51:35357 check inter 2000 rise 2 fall 5

    server controller2 10.6.32.52:35357 check inter 2000 rise 2 fall 5

    server controller3 10.6.32.53:35357 check inter 2000 rise 2 fall 5

　　

4、keystone-public 和 keystone-internal  API

#---------------------------------------------------------------------

# listen keystone-public and  keystone-internal server

#---------------------------------------------------------------------

listen keystone_pub_int

    bind 10.6.32.200:5000    #需要将haproxy 默认自带的 frontend  main *:5000 区块注释掉，有端口冲突

    balance source

    option  tcpka

    option  httpchk

    option  tcplog

    http-request del-header X-Forwarded-Proto if { ssl_fc }

    server controller1 controller1:5000 check inter 2000 rise 2 fall 5

    server controller2 controller2:5000 check inter 2000 rise 2 fall 5

    server controller3 controller3:5000 check inter 2000 rise 2 fall 5

5、Glance-api server

#---------------------------------------------------------------------

# listen glance-admin,glance-public,glance-internal server

#---------------------------------------------------------------------

listen glance-api

  bind 10.6.32.200:9292

  balance source

  option  tcpka

  option  httpchk

  option  tcplog

  server controller1 10.6.32.51:9292 check inter 2000 rise 2 fall 5

  server controller2 10.6.32.52:9292 check inter 2000 rise 2 fall 5

  server controller3 10.6.32.53:9292 check inter 2000 rise 2 fall 5

6、Glance-registery server

#---------------------------------------------------------------------

# listen glance-registery server

#---------------------------------------------------------------------

listen glance-registery

  bind 10.6.32.200:9191

  balance source

  option  tcpka

  option  tcplog

  server controller1 10.6.32.51:9191 check inter 2000 rise 2 fall 5

  server controller2 10.6.32.52:9191 check inter 2000 rise 2 fall 5

  server controller3 10.6.32.53:9191 check inter 2000 rise 2 fall 5

7、rabbitmq-web

#---------------------------------------------------------------------

# listen Rabbitmq-web server

#---------------------------------------------------------------------

listen rabbitmq-web

  mode tcp

  bind 10.6.32.200:15671

  balance roundrobin

  server controller1 10.6.32.51:15672 check inter 2000 rise 2 fall 5

  server controller2 10.6.32.52:15672 check inter 2000 rise 2 fall 5

  server controller3 10.6.32.53:15672 check inter 2000 rise 2 fall 5

8、nova-api  server

#---------------------------------------------------------------------

# listen nova-api server

#---------------------------------------------------------------------

listen nova-api

    bind 10.6.32.200:8774

    balance source

    option  tcpka

    option  httpchk

    option  tcplog

    http-request del-header X-Forwarded-Proto if { ssl_fc }

    server controller1 controller1:8774 check inter 2000 rise 2 fall 5

    server controller2 controller2:8774 check inter 2000 rise 2 fall 5

    server controller3 controller3:8774 check inter 2000 rise 2 fall 5

　　

9、nova novncproxy server　

#---------------------------------------------------------------------

# listen nova-novncproxy server

#---------------------------------------------------------------------

listen nova_novncproxy

    bind 10.6.32.200:6080

    balance source

    option  tcpka

    option  tcplog

    http-request del-header X-Forwarded-Proto if { ssl_fc }

    http-request set-header X-Forwarded-Proto https if { ssl_fc }

    server controller1 controller1:6080 check inter 2000 rise 2 fall 5

    server controller2 controller2:6080 check inter 2000 rise 2 fall 5

    server controller3 controller3:6080 check inter 2000 rise 2 fall 5

10、nova-placement-api  server

#---------------------------------------------------------------------

# listen nova-placement public、internal、admin server

#---------------------------------------------------------------------

listen nova_placement-api

    bind 10.6.32.200:8778

    balance source

    option  tcpka

    option  tcplog

    http-request del-header X-Forwarded-Proto if { ssl_fc }

    server controller1 controller1:8778 check inter 2000 rise 2 fall 5

    server controller2 controller2:8778 check inter 2000 rise 2 fall 5

    server controller3 controller3:8778 check inter 2000 rise 2 fall 5

11、neutron server

#---------------------------------------------------------------------

# listen neutron server

#---------------------------------------------------------------------

listen neutron

　　bind 10.6.32.200:9696

　　balance source

　　option  tcpka

　　option  tcplog

　　server controller1 controller1:9696 check inter 2000 rise 2 fall 5

　　server controller2 controller2:9696 check inter 2000 rise 2 fall 5

　　server controller3 controller3:9696 check inter 2000 rise 2 fall 5

12、 memcache server

#---------------------------------------------------------------------

# listen memcached server

#---------------------------------------------------------------------

listen memcache

    mode tcp

    bind 10.6.32.200:11211

    balance static-rr

    server controller1 controller1:11211 weight 1 check inter 2000 rise 2 fall 5

    server controller2 controller2:11211 weight 10 check inter 2000 rise 2 fall 5

    server controller3 controller3:11211 weight 20 check inter 2000 rise 2 fall 5

　

13、cinder server

#---------------------------------------------------------------------

# listen cinder_api server

#---------------------------------------------------------------------

listen cinder_api

　　bind 10.6.32.200:8776

　　balance source

　　option  tcpka

　　option  tcplog

　　http-request del-header X-Forwarded-Proto if { ssl_fc }

　　server controller1 controller1:8776 check inter 2000 rise 2 fall 5

　　server controller2 controller2:8776 check inter 2000 rise 2 fall 5

　　server controller3 controller3:8776 check inter 2000 rise 2 fall 5

　　

　

　　

　　

　

相关文章