zoukankan      html  css  js  c++  java
  • OpenStack (haproxy)

    openstack部署脚本

    链接:<https://pan.baidu.com/s/1BTp_tGNC6ZWwVmKkhwivgw >
    提取码:jxuz


    haproxy 官网:< https://www.haproxy.org/ >

    haproxy推荐阅读:http://www.ttlsa.com/linux/haproxy-study-tutorial/


    openstack部署haproxy

    在所有节点安装Haproxy

    第一步:安装haproxy

    yum -y install haproxy
    systemctl enable haproxy.service
    

    第二步:所有节点配置haproxy

    cat <<EOF>/etc/rsyslog.d/haproxy.conf
    $ModLoad imudp
    $UDPServerRun 514
    $template Haproxy,"%msg%n"
    local0.=info -/var/log/haproxy.log;Haproxy
    local0.notice -/var/log/haproxy-status.log;Haproxy
    local0.* ~
    EOF
    
    systemctl restart rsyslog.service
    systemctl status rsyslog.service
    
    cat <<EOF>/etc/haproxy/haproxy.cfg
    global
        log             127.0.0.1 local3
        chroot          /var/lib/haproxy
        pidfile         /var/run/haproxy.pid
        stats  socket     /var/lib/haproxy/stats
        maxconn         40000
        user            haproxy
        group           haproxy
        daemon
        spread-checks      3
        tune.bufsize      32768
        tune.maxrewrite 1024
        tune.ssl.default-dh-param  2048
    
    defaults
        mode    http
        log     global
        option  httplog
        option  tcplog
        option  redispatch
        option  http-server-close
        option  splice-auto
        option  dontlognull
        retries 3
        timeout http-request 20s
        timeout queue 1m
        timeout connect 10s
        timeout client 1m
        timeout server 1m
        timeout check 10s
        maxconn 8000
    
    listen stats
        bind 0.0.0.0:8789
        mode http
        stats enable
        stats uri /
        stats realm Haproxy Statistics
        stats auth admin:admin
        stats  refresh 15s
        stats  show-node
        stats  show-legends
        stats  hide-version
    
    listen dashboard_cluster
        bind 192.168.210.120:8080
        balance  source
        option  tcpka
        option  httpchk
        option  tcplog
        server node1 192.168.210.131:80 check inter 2000 rise 2 fall 5
        server node2 192.168.210.130:80 check inter 2000 rise 2 fall 5
        server node3 192.168.210.132:80 check inter 2000 rise 2 fall 5
    
    listen galera_cluster
        bind 192.168.210.120:3307
        balance source
        hash-type consistent
        mode       tcp
        option  tcplog
        option  clitcpka
        option  srvtcpka
        option  httpchk
        timeout client  28801s
        timeout server  28801s
                server node1 192.168.210.131:3306 check port 9200 inter 20s fastinter 2s downinter 2s rise 3 fall 3
                server node2 192.168.210.130:3306 check port 9200 inter 20s fastinter 2s downinter 2s rise 3 fall 3 backup
                server node3 192.168.210.132:3306 check port 9200 inter 20s fastinter 2s downinter 2s rise 3 fall 3 backup
    
    listen mq_cluster
        bind 192.168.210.120:5672 tcp-ut 5s
        mode tcp
        option tcpka
        balance roundrobin
                server node1 192.168.210.131:5672 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node2 192.168.210.130:5672 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node3 192.168.210.132:5672 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
    
    listen keystone_admin_cluster
        bind 192.168.210.120:35358
        http-request  set-header X-Forwarded-Proto https if { ssl_fc }
        option  httplog
        option  httpclose
        option  forwardfor
                server node1 192.168.210.131:35357 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node2 192.168.210.130:35357 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node3 192.168.210.132:35357 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
    
    listen keystone_public_internal_cluster
        bind 192.168.210.120:5001
        http-request  set-header X-Forwarded-Proto https if { ssl_fc }
        option  httplog
        option  httpclose
        option  forwardfor
                server node1 192.168.210.131:5000 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node2 192.168.210.130:5000 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
                server node3 192.168.210.132:5000 check inter 10s fastinter 2s downinter 2s rise 3 fall 3
    
    listen glance_registry_cluster
        bind 192.168.210.120:9192
        timeout server          30m
                server node1 192.168.210.131:9191 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:9191 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:9191 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen glance_api_cluster
        bind 192.168.210.120:9293
        http-request  set-header X-Forwarded-Proto https if { ssl_fc }
        option  httpchk /versions
        option  httplog
        option  httpclose
        timeout server  30m
                server node1 192.168.210.131:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen nova_ec2_api_cluster
        bind 192.168.210.120:9774
        http-request  set-header X-Forwarded-Proto https if { ssl_fc }
        option  httpchk
        option  httplog
        option  httpclose
        timeout server  600s
                server node1 192.168.210.131:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen nova_compute_api_cluster
        bind 192.168.210.120:9773
        http-request set-header X-Forwarded-Proto https if { ssl_fc }
        option  httpchk
        option  httplog
        option  httpclose
               server node1 192.168.210.131:8773 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
               server node2 192.168.210.131:8773 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
               server node3 192.168.210.131:8773 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen nova_metadata_api_cluster
        bind 192.168.210.120:9775
        option  httpchk
        option  httplog
        option  httpclose
                server node1 192.168.210.131:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen nova_vncproxy_cluster
        bind 192.168.210.120:6081
        http-request set-header X-Forwarded-Proto https if { ssl_fc }
                server node1 192.168.210.131:6080 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:6080 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:6080 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen nova_placement_cluster
        bind 192.168.210.120:9778
        http-request set-header X-Forwarded-Proto https if { ssl_fc }
                server node1 192.168.210.131:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen neutron_api_cluster
        bind 192.168.210.120:9697
        http-request set-header X-Forwarded-Proto https if { ssl_fc }
        option  httpchk
        option  httplog
        option  httpclose
                server node1 192.168.210.131:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen cinder_api_cluster
        bind 192.168.210.120:9776
        http-request set-header X-Forwarded-Proto https if { ssl_fc }
        option  httpchk
        option  httplog
        option  httpclose
                server node1 192.168.210.131:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node2 192.168.210.130:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                server node3 192.168.210.132:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    
    listen ceilometer_api_cluster
          bind 192.168.210.120:9777
          http-request set-header X-Forwarded-Proto https if { ssl_fc }
          option  httplog
          option  httpclose
                  server node1 192.168.210.131:8777 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                  server node2 192.168.210.130:8777 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
                  server node3 192.168.210.132:8777 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
    EOF
    
  • 相关阅读:
    靶机练习
    靶机练习
    靶机练习
    CTF-攻防世界-Web_php_unserialize(PHP反序列化)
    漏洞复现
    靶机练习
    靶机练习
    靶机练习
    糗事集合
    慕课前端入门-JS事件
  • 原文地址:https://www.cnblogs.com/du-z/p/11297495.html
Copyright © 2011-2022 走看看