HAProxy - Revision history

Donsez: /* Configuration en SSL Terminaison */

2016-09-13T15:02:24Z

Configuration en SSL Terminaison

← Older revision		Revision as of 15:02, 13 September 2016
Line 73:		Line 73:
	<pre>		<pre>
	sudo mkdir /etc/ssl/air		sudo mkdir /etc/ssl/air
	sudo openssl genrsa -out /etc/ssl/air/air.key ~~1024~~		sudo openssl genrsa -out /etc/ssl/air/air.key 2048
	sudo openssl req -new -key /etc/ssl/air/air.key -multivalue-rdn -subj "/C=FR/L=GRENOBLE/O=UGA/O=POLYTECH/OU=RICM/CN=AIR/emailAddress=air@imag.fr" -out /etc/ssl/air/air.csr		sudo openssl req -new -key /etc/ssl/air/air.key -multivalue-rdn -subj "/C=FR/L=GRENOBLE/O=UGA/O=POLYTECH/OU=RICM/CN=AIR/emailAddress=air@imag.fr" -out /etc/ssl/air/air.csr
	sudo openssl x509 -req -days 365 -in /etc/ssl/air/air.csr -signkey /etc/ssl/air/air.key -out /etc/ssl/air/air.crt		sudo openssl x509 -req -days 365 -in /etc/ssl/air/air.csr -signkey /etc/ssl/air/air.key -out /etc/ssl/air/air.crt

2016-08-30T07:16:21Z

HATop

← Older revision		Revision as of 07:16, 30 August 2016
Line 210:		Line 210:
	</pre>		</pre>

			Installer HATop
	<pre>		<pre>
	wget http://hatop.googlecode.com/files/hatop-0.7.7.tar.gz		wget http://hatop.googlecode.com/files/hatop-0.7.7.tar.gz
	tar xf hatop-0.7.7.tar.gz		tar xf hatop-0.7.7.tar.gz
			</pre>

			Lancer HATop
			<pre>
	cd hatop-0.7.7/bin		cd hatop-0.7.7/bin
	sudo ./hatop -s /run/haproxy/admin.sock		sudo ./hatop -s /run/haproxy/admin.sock

2016-08-29T19:07:28Z

Configuration en SSL Terminaison

← Older revision		Revision as of 19:07, 29 August 2016
Line 127:		Line 127:
	default_backend nodes		default_backend nodes

			# JavaEE servers are javaee01 and javaee02
	backend nodes		backend nodes
	mode http		mode http

2016-08-29T18:54:45Z

Monitoring

@@ Line 169: / Line 169: @@
 =Monitoring=
 ==HATop==
 http://feurix.org/projects/hatop/
@@ Line 192: / Line 223: @@
 sudo dpkg -i telegraf_0.12.0-1_amd64.deb
 </pre>
 =More=

2016-08-29T18:47:48Z

Configuration HA avec Keepalived

@@ Line 166: / Line 166: @@
 * https://www.howtoforge.com/setting-up-a-high-availability-load-balancer-with-haproxy-keepalived-on-debian-lenny
 * http://behindtheracks.com/2014/04/redundant-load-balancers-haproxy-and-keepalived/
 =More=

2016-08-29T18:43:02Z

Configuration en SSL Terminaison

← Older revision		Revision as of 18:43, 29 August 2016
Line 145:		Line 145:
	# Relancer le service		# Relancer le service
	sudo service haproxy restart		sudo service haproxy restart

			# Visualiser le certificat de haproxy
			HOST=xxx
			HAHOST=xxx
			HAPORT=443
			echo \| openssl s_client -showcerts -servername $HOST -connect $HAHOST:HAPORT 2>/dev/null \| openssl x509 -inform pem -noout -text

	# voir le log de HAproxy		# voir le log de HAproxy

2016-08-29T18:24:05Z

Configuration en SSL Terminaison

@@ Line 82: / Line 82: @@
 Editer le fichier de configuration /etc/haproxy/haproxy.cfg
 <pre>
 </pre>

2016-08-29T18:18:51Z

Configuration en SSL Terminaison

@@ Line 68: / Line 68: @@
 =Configuration en SSL Terminaison=
-Création d’un certificat auto-signé pour HAProxy ([https://serversforhackers.com/using-ssl-certificates-with-haproxy voir])
+Créer un certificat auto-signé pour le(s) ''frontend(s)'' HAProxy ([https://serversforhackers.com/using-ssl-certificates-with-haproxy voir])
 <pre>
 sudo mkdir /etc/ssl/air
@@ Line 77: / Line 77: @@
 sudo openssl x509 -req -days 365 -in /etc/ssl/air/air.csr -signkey /etc/ssl/air/air.key -out /etc/ssl/air/air.crt
 sudo cat /etc/ssl/air/air.crt /etc/ssl/air/air.key | sudo tee /etc/ssl/air/air.pem
 </pre>

2016-03-22T22:09:40Z

Configuration en SSL Pass-throught

2016-03-22T22:08:28Z

Configuration en SSL Terminaison

← Older revision		Revision as of 22:08, 22 March 2016
Line 64:		Line 64:
	TODO		TODO

			Création d’un certificat auto-signé pour HAProxy ([https://serversforhackers.com/using-ssl-certificates-with-haproxy voir])
			<pre>
			sudo mkdir /etc/ssl/air
			sudo openssl genrsa -out /etc/ssl/air/air.key 1024
			sudo openssl req -new -key /etc/ssl/air/air.key -multivalue-rdn -subj "/C=FR/L=GRENOBLE/O=UGA/O=POLYTECH/OU=RICM/CN=AIR/emailAddress=air@imag.fr" -out /etc/ssl/air/air.csr
			sudo openssl x509 -req -days 365 -in /etc/ssl/air/air.csr -signkey /etc/ssl/air/air.key -out /etc/ssl/air/air.crt
			sudo cat /etc/ssl/air/air.crt /etc/ssl/air/air.key \| sudo tee /etc/ssl/air/air.pem
			</pre>

	=Configuration en SSL Terminaison avec authentification mutuelle=		=Configuration en SSL Terminaison avec authentification mutuelle=