View source for Configure a Proxy HA on Cloudstack

<span data-link_translate_en_title="Configure a Proxy HA on Cloudstack"  data-link_translate_en_url="Configure a Proxy HA on Cloudstack"></span>[[:en:Configure a Proxy HA on Cloudstack]][[en:Configure a Proxy HA on Cloudstack]]
<span data-link_translate_he_title="הגדר פרוקסי HA-Cloudstack"  data-link_translate_he_url="%D7%94%D7%92%D7%93%D7%A8+%D7%A4%D7%A8%D7%95%D7%A7%D7%A1%D7%99+HA-Cloudstack"></span>[[:he:הגדר פרוקסי HA-Cloudstack]][[he:הגדר פרוקסי HA-Cloudstack]]
<span data-link_translate_ro_title="Configuraţi un Proxy HA pe Cloudstack"  data-link_translate_ro_url="Configura%C5%A3i+un+Proxy+HA+pe+Cloudstack"></span>[[:ro:Configuraţi un Proxy HA pe Cloudstack]][[ro:Configuraţi un Proxy HA pe Cloudstack]]
<span data-link_translate_ru_title="Настроить прокси на Cloudstack"  data-link_translate_ru_url="%D0%9D%D0%B0%D1%81%D1%82%D1%80%D0%BE%D0%B8%D1%82%D1%8C+%D0%BF%D1%80%D0%BE%D0%BA%D1%81%D0%B8+%D0%BD%D0%B0+Cloudstack"></span>[[:ru:Настроить прокси на Cloudstack]][[ru:Настроить прокси на Cloudstack]]
<span data-link_translate_pl_title="Konfigurowanie serwera Proxy HA w Cloudstack"  data-link_translate_pl_url="Konfigurowanie+serwera+Proxy+HA+w+Cloudstack"></span>[[:pl:Konfigurowanie serwera Proxy HA w Cloudstack]][[pl:Konfigurowanie serwera Proxy HA w Cloudstack]]
<span data-link_translate_ja_title="Cloudstack で HA プロキシを構成します。"  data-link_translate_ja_url="Cloudstack+%E3%81%A7+HA+%E3%83%97%E3%83%AD%E3%82%AD%E3%82%B7%E3%82%92%E6%A7%8B%E6%88%90%E3%81%97%E3%81%BE%E3%81%99%E3%80%82"></span>[[:ja:Cloudstack で HA プロキシを構成します。]][[ja:Cloudstack で HA プロキシを構成します。]]
<span data-link_translate_ar_title="تكوين وكيل هكتار في كلودستاك"  data-link_translate_ar_url="%D8%AA%D9%83%D9%88%D9%8A%D9%86+%D9%88%D9%83%D9%8A%D9%84+%D9%87%D9%83%D8%AA%D8%A7%D8%B1+%D9%81%D9%8A+%D9%83%D9%84%D9%88%D8%AF%D8%B3%D8%AA%D8%A7%D9%83"></span>[[:ar:تكوين وكيل هكتار في كلودستاك]][[ar:تكوين وكيل هكتار في كلودستاك]]
<span data-link_translate_zh_title="配置一个代理医管局对 Cloudstack"  data-link_translate_zh_url="%E9%85%8D%E7%BD%AE%E4%B8%80%E4%B8%AA%E4%BB%A3%E7%90%86%E5%8C%BB%E7%AE%A1%E5%B1%80%E5%AF%B9+Cloudstack"></span>[[:zh:配置一个代理医管局对 Cloudstack]][[zh:配置一个代理医管局对 Cloudstack]]
<span data-link_translate_de_title="Konfigurieren Sie einen Proxy HA auf Cloudstack"  data-link_translate_de_url="Konfigurieren+Sie+einen+Proxy+HA+auf+Cloudstack"></span>[[:de:Konfigurieren Sie einen Proxy HA auf Cloudstack]][[de:Konfigurieren Sie einen Proxy HA auf Cloudstack]]
<span data-link_translate_nl_title="Configureer een Proxy HA op Cloudstack"  data-link_translate_nl_url="Configureer+een+Proxy+HA+op+Cloudstack"></span>[[:nl:Configureer een Proxy HA op Cloudstack]][[nl:Configureer een Proxy HA op Cloudstack]]
<span data-link_translate_it_title="Configurare un Proxy HA Cloudstack"  data-link_translate_it_url="Configurare+un+Proxy+HA+Cloudstack"></span>[[:it:Configurare un Proxy HA Cloudstack]][[it:Configurare un Proxy HA Cloudstack]]
<span data-link_translate_pt_title="Configurar um Proxy HA em Cloudstack"  data-link_translate_pt_url="Configurar+um+Proxy+HA+em+Cloudstack"></span>[[:pt:Configurar um Proxy HA em Cloudstack]][[pt:Configurar um Proxy HA em Cloudstack]]
<span data-link_translate_es_title="Configurar a un Proxy HA de Cloudstack"  data-link_translate_es_url="Configurar+a+un+Proxy+HA+de+Cloudstack"></span>[[:es:Configurar a un Proxy HA de Cloudstack]][[es:Configurar a un Proxy HA de Cloudstack]]
<span data-link_translate_fr_title="Configurer un HA Proxy sur Cloudstack"  data-link_translate_fr_url="Configurer_un_HA_Proxy_sur_Cloudstack"></span>[[:fr:Configurer un HA Proxy sur Cloudstack]][[fr:Configurer un HA Proxy sur Cloudstack]]
<br />

This article has been created by an automatic translation software. You can view the article source [[:fr:Configurer un HA Proxy sur Cloudstack|here]].<br /><span data-translate="fr"></span>

==Introduction ==
Yor  want to configure a  '''HA Proxy''' on the Clor dstack platform. This article will explain the approach thror gh a sample configuration.

==Implementation ==
Here is the procedure to follow in order to implement a  '''HA Proxy''' on a Debian instance  8 "Jessie " under Cloudstack. <br>
'''Note''':''This approach applies also in the framework of a dedicated provision ''.

===Create the new instance HAProxy ===
You will find the procedures for creating an instance Cloudstack en  ''direct-routing'' on  [[:fr:Deploiement d'une instance en zone direct-routing]] and in  ''advance-routing'' on  [[:fr:Deploiement d'une instance en zone advanced-routing]]

==Configure the new instance HAProxy ==
;Our VM is now started 
[[File:InfoVM.png]]
;We can connect from the integrated console or ssh 
[[File:ConnectVM.png]]
===Prerequisites ===
One of the prerequisite essential is to preserve its system as up-to-date as possible. <br>
<pre> apt-get update
 apt-get upgrade </pre>
Keeping your Debian system up-to-date, make sure you have a list of the official repositories. You can find a list of the available at Ikoula repositories and installation instructions  [[:fr:Quelles_sont_les_sources_des_d%C3%A9p%C3%B4ts_debian_chez_Ikoula|a this address]].
<div style="background-color: #FF9999;"> '''Warning ''': Before making any changes to your system are still planning a  {{Template:Sauvegarde}} your files in the event of improper handling. <br>
On a  {{Template:Serveur}} production, think perform these operations during off-peak hours to minimize the impact of your actions. </div>

For the installation of our instance of  ''Loadbalancing'' under Cloudstack we need service  '''HA Proxy'''.<br>

===HA Proxy Setup ===
;To install HA Proxy version  1.5, run the following command in your terminal 
<pre> apt-get install haproxy </pre>

;If you want the latest version of HA Proxy version  1.6, run the following commands 
<pre>
# Ajout du repo
echo deb http://httpredir.debian.org/debian jessie-backports main | tee /etc/apt/sources.list.d/backports.list
apt-get install debian-keyring
# Recuperation de la cle gpg
gpg --keyring /usr/share/keyrings/debian-keyring.gpg --export bernat@debian.org |  apt-key add -
# Mise a jour des depots
apt-get update
# Installation de haproxy
apt-get install haproxy -t jessie-backports-1.6
</pre>

===HA Proxy Activation ===
;HA Proxy is now installed, we now enable it by changing the ENABLED value =0 by ENABLED =1 in both files  /etc/default/haproxy et /etc/init.d/haproxy
<pre># activation de HA Proxy dans /etc/default/haproxy
sed -i "s/ENABLED=0/ENABLED=1/g" /etc/default/haproxy
# activation de HA Proxy dans /etc/init.d/haproxy
sed -i "s/ENABLED=0/ENABLED=1/g" /etc/init.d/haproxy
</pre>

===HA Proxy Configuration ===
HA Proxy configuration is performed in the file  '''/etc/haproxy/haproxy.cfg''' .
;Here is an example of configuration d ''''HAProxy'''
<pre>
global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        user haproxy
        group haproxy
        daemon
 
defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        contimeout 5000
        clitimeout 50000
        srvtimeout 50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http
 
listen cluster_web xxx.xxx.xxx.xxx:80

        mode http

        balance roundrobin
 

        option httpclose
        option forwardfor
 

        server web1 yyy.yyy.yyy.yyy:80 check
        server web2 zzz.zzz.zzz.zzz:80 check
 

        stats enable
        stats hide-version
        stats refresh 30s
        stats show-node
        stats auth ikoula:ikoula
        stats uri  /stats
</pre>
The ip address xxx.xxx.xxx.xxx is the ip address of our  {{Template:Serveur}} load balancing, yyy.yyy.yyy.yyy and zzz.zzz.zzz.zzz addresses are our  {{Template:Serveur}}web s behind the  ''LoadBalancer ''.

{| border="1" cellpadding="20" cellspacing="0"
|listen cluster_web 
|The address and port on which the service HA Proxy will need to listen for connections.
|-
|mode
|The swing mode, in our example  '''http''' for web 
|-
|balance
|The algorithm used for load distribution, in our example RoundRobin <br>The available values are : '''RoundRobin, Source, The ast connection, First Response'''
|-
|server
|Declaration of the various servers behind our  ''LoadBalancer '', in our example  '''web1''' et '''web2'''.
|-
|stats
|To configure access to the stats page of  ''LoadBalancer ''<br>In our example the page will be accessible on xxx.xxx.xxx.xxx /stats with  '''ikoula'''/'''ikoula''' such as login and password 
|-
|}

===HA Proxy start ===
;We can now start  '''HA Proxy'''
<pre> service haproxy start </pre>
ou
<pre> etc/init.d/haproxy start </pre>

;Making us on our xxx.xxx.xxx.xxx ip /stats and in using our login and password we arrive on the HA Proxy administration page.
[[File:HAProxyStats.png]]

;We can now connect to our  {{Template:Serveur}}s in  ''SSH'' typing 
<pre># Serveur web1
ssh root@yyy.yyy.yyy.yyy
# Serveur web2
ssh root@zzz.zzz.zzz.zzz
</pre>

===Configure the  {{Template:Serveur}}web s ===
;If the  {{Template:Serveur}}s do not yet have web service it does install a, for example 
<pre> apt-get install apache2 php5 </pre>

;Once the web services installed, or if the  {{Template:Serveur}} already had one web 1 and web 2 appear in green in the stats page 
[[File:HAProxyStat2.png]]

;If you try to access to the  {{Template:Serveur}} using the address xxx.xxx.xxx you fall on the test page the  {{Template:Serveur}} web1 or web 2 According to the allocation done 
[[File:HAProxSite.png]]

== Configure persistence  ==
===The persistence by Source IP ===
In order to configure persistence by Source IP simply change the swing mode in the HA Proxy configuration file by adding options  ''Sticky ''.
;Enable persistence by Source IP through a  ''stick-table'', here is the example with our configuration 
<pre>
listen cluster_web xxx.xxx.xxx.xxx:80

        mode http

       # Modifier le mode de balancement
       balance source
       hash-type consistent

       # Ajouter une stick-table afin de garder en mémoire les IP
       stick-table type ip size 1m expire 1h
       stick on src

        option httpclose
        option forwardfor

        server web1 yyy.yyy.yyy.yyy:80 check
        server web2 zzz.zzz.zzz.zzz:80 check

        stats enable
        stats hide-version
        stats refresh 30s
        stats show-node
        stats auth utilisateur:motdepasse
        stats uri  /stats
</pre>
The above example allows to implement a persistence of  ''load-balancing'' based on the user's IP. This persistence is ensured through a  ''stick-table'' who remembers the IPS who have contacted the  {{Template:Serveur}}.<br>
This  ''stick-table'' has a size of  1MB and expires every hour. When a user is attached to a  {{Template:Serveur}} It remains on this same  {{Template:Serveur}} until expiry of the table or in the event of error of  {{Template:Serveur}}.<br>
<div style="background-color: #FFCC99;"> '''Note''': The memory required for the  ''stick-table'' is relatively low, in the range of  25.000 addresses for  1MB. Either  40MB for  1.000.000 of IP addresses. </div>

===By Cookie persistence ===
Another method to ensure the persistence of the swing is to use a cookie. A cookie is a small file placed on the user's computer in order to store information of  {{Template:Serveur}}.<br>

====Method of  ''cookie-insert''====
The first example is the creation of a specifically designed additional cookie to  '''HA Proxy'''.
;Edit the HA Proxy configuration file and add the following lines to our configuration 
<pre>
listen cluster_web xxx.xxx.xxx.xxx:80

        mode http

        # Modifier le mode de balancement
        balance roundrobin

        # option du cookie
        cookie SRVNAME insert indirect nocache

        option httpclose
        option forwardfor

        server web1 yyy.yyy.yyy.yyy:80 cookie WeB1 check
        server web2 zzz.zzz.zzz.zzz:80 cookie WeB2 check

        stats enable
        stats hide-version
        stats refresh 30s
        stats show-node
        stats auth utilisateur:motdepasse
        stats uri  /stats
</pre>
The example above allows to implement our sessions through a dedicated cookie persistence. When connecting the  ''load - balancer '' will redirect the client to one of the two  {{Template:Serveur}}s and add a cookie called  '''SRVNAME''' with the value  '''WeB1''' ou '''WeB2''' following the distribution made. <br>
The option  ''indirect'' prevents the generation of a cookie if another valid cookie is already present for the visitor and  ''NoCache '' prevents caching of the cookie between the visitor and the  ''load - balancer ''.<br>
[[File:HACookieInsert.png]]

==== Method  ''cookie-prefix''====
The second example is the pre-fixage of a pre-existing cookie, this method can be useful if you want persistence only on some cookies or that you do not want to create a dedicated cookie to  '''HA Proxy'''.
;Edit the HA Proxy configuration file and add the following lines to our configuration 
<pre>
listen cluster_web xxx.xxx.xxx.xxx:80

        mode http

        # Modifier le mode de balancement
        balance roundrobin

        # option du cookie
        cookie PHPSESSID prefix indirect nocache

        option httpclose
        option forwardfor

        server web1 yyy.yyy.yyy.yyy:80 cookie WeB1 check
        server web2 zzz.zzz.zzz.zzz:80 cookie WeB2 check

        stats enable
        stats hide-version
        stats refresh 30s
        stats show-node
        stats auth utilisateur:motdepasse
        stats uri  /stats
</pre>
The example above allows to set up the persistence of our sessions through a prefix to an existing cookie. When connecting the  ''load - balancer '' will redirect the client to one of the two  {{Template:Serveur}}s and add a prefix to the named cookie  '''PHPSESSID''' with the value  '''WeB1''' ou '''WeB2''' following the distribution made. <br>
The option  ''indirect'' prevents the generation of a cookie if another valid cookie is already present for the visitor and  ''nocache'' prevents caching of the cookie between the visitor and the  ''load - balancer ''.<br>
[[File:HACookiePrefix.png]]

==Configure the  ''Keep-Alive''==
Depending on your configuration you may need to activate the  ''keep-alive''.<br>
Le ''keep-alive'' allows to the  ''load - balancer '' to reuse the existing connection between the  {{Template:Serveur}} and the user, rather than initiate a new connection for each requests.
;Edit the HA Proxy configuration file and add the following lines to our configuration 
<pre>
listen cluster_web xxx.xxx.xxx.xxx:80

        mode http

        balance roundrobin

        # Modifier la directive de fermeture
        option http-server-close
        # Ajouter un delai de 3000 secondes avant fermeture
        timeout http-keep-alive 3000

        option forwardfor

        server web1 yyy.yyy.yyy.yyy:80 check
        server web2 zzz.zzz.zzz.zzz:80 check

        stats enable
        stats hide-version
        stats refresh 30s
        stats show-node
        stats auth utilisateur:motdepasse
        stats uri  /stats
</pre>

==Implement SSL management ==
It may be useful to set up the SSL redirect your site management, for example in the case of a site that has space secure. <br>
In order to implement the HTTP redirect  -> HTTPS on his  '''HA Proxy''' documentation is available: [[:fr: Mettre en place une redirection SSL HA Proxy ]]

[[Category:cloudstack]]
[[Category:public_cloud]]
[[Category:private_cloud]]

<br />
<comments />