[B! HAProxy] rx7ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

rx7 id:rx7

HAProxyã«é–¢ã™ã‚‹rx7ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æœ€è¿‘æ›¸ã„ãŸChefã®Cookbook(all-in-one_haproxy, redis)ã‚’å…¬é–‹ã—ã¾ã™ - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
å…¬é–‹ã—ã¾ã™ã€ã¨ã„ã†ã‹GitHubã«ç½®ã„ã¦ã„ãŸã ã‘ã§ã™ãŒãƒ¼ã€‚ all-in-one_haproxy 2å°ã‚»ãƒƒãƒˆã§ã®HAæ§‹æˆã‚’æƒ³å®šã—ãŸHAProxyã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã®Chef Cookbookã§ã™ã€‚2å°ã‚»ãƒƒãƒˆå†—é•·åŒ–æ¸ˆã®HAProxyã‚µãƒ¼ãƒã‚’ã•ãã£ã¨ä½œã‚‹ãŸã‚ã«æ›¸ãã¾ã—ãŸã€‚ https://github.com/namikawa/all-in-one_haproxy åŸºæœ¬çš„ã«ã¯ã€2å°ã§ä»¥ä¸‹æ©Ÿèƒ½ãŒé€£æºã—ã‚ã†å½¢ã§ç¨¼å‹•ã—ã¾ã™ã€‚ rsync + lsyncdã®ç¨¼åƒ (å„ç¨®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®åŒæœŸ) keepalivedã®ç¨¼åƒ (HAã‚¯ãƒ©ã‚¹ã‚¿æ§‹æˆã®å®Ÿç¾) HAProxyã®ç¨¼åƒ (LB/ReverseProxyã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ»SSLå¯¾å¿œ) iptables/ip6tablesã®ç¨¼åƒ (æŽ¥ç¶šå…ƒã®é™å®š) Quaggaã®ç¨¼åƒ (ã‚¨ãƒƒã‚¸ãƒ«ãƒ¼ã‚¿ç‰ã¨ã®å‹•çš„çµŒè·¯åºƒå ±ã®å®Ÿç¾) snmpdã®ç¨¼åƒ (å„ç¨®ãƒ¡ãƒˆãƒªã‚¯ã‚¹ã®å–å¾—) swapé ˜åŸŸ
rx7 2014/12/03
Chef

HAProxy

Redis
ãƒªãƒ³ã‚¯
HAProxy and SSLv3 Poodle Vulnerability
SSLv3 Poodle VulnerabilityYesterday, Google security researchers disclosed a new vulnerability in SSL protocol. Fortunately, this vulnerability is only on an old version of the SSL protocol: SSLv3 (15 years old protocol). An attacker can force a browser to downgrade the protocol version used to cipher traffic to SSLv3 in order to exploit the POODLE vulnerability and access data in clear. Some read
rx7 2014/11/06
HAProxy

SSL
ãƒªãƒ³ã‚¯
How to compile HAProxy from source and setup a basic configuration
rx7 2014/01/16
HAProxy
ãƒªãƒ³ã‚¯
HAProxyã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã‚’ã‚„ã£ãŸãƒ¡ãƒ¢(CPSç·¨) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HAProxyã‚’ä½¿ã†ä¸Šã§ã€ã©ã†ã‚„ã£ãŸã‚‰ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãŒä¸ŠãŒã‚‹ã®ã‹ã‚’æ¨¡ç´¢ã™ã‚‹ãƒ¡ãƒ¢ã€‚ åŸºæœ¬çš„ã«ã€ä¸‡èƒ½ãªãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¯ãªã„ã®ã§ã€ä»Šå›žã¯CPS(Connections per Second)ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã‚’ä¸Šã’ã‚‹ã“ã¨ã«ç„¦ç‚¹ã‚’çµžã‚Šã¾ã™ã€‚CPS(Connections per Second)ã¯ã€ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®æ€§èƒ½æŒ‡æ¨™ã®1ã¤ã¨ãªã£ã¦ã„ã‚‹æ•°å€¤ã§ã™ã€‚ ã‚ãã¾ã§è»½ãã‚„ã£ã¦ã¿ãŸéŽç¨‹ã®ãƒ¡ãƒ¢æ›¸ãã¿ãŸã„ãªã‚‚ã®ãªã®ã§ã€ã¾ã¨ã¾ã‚Šã‚‚ãªãã€ã¾ã ã¾ã æ”¹å–„ã®ä½™åœ°ãŒã‚ã‚‹ã¨ã¯æ€ã„ã¾ã™ãŒã€ä½•ã‹ã®å‚è€ƒã«ã—ã¦ãã ã•ã„ã€‚ å‰æ HAProxyã‚’å‹•ã‹ã™ã®ã«ä½¿ç”¨ã—ãŸç’°å¢ƒã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ Server: DELL PowerEdge R420 CPU: Intel Xeon E5-2430L @ 2.00GHz * 2 Memory: 96GB Ethernet controller: Intel Corporation Ethe
rx7 2013/12/20
HAProxy

ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹

ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°
ãƒªãƒ³ã‚¯
Tumblr: HAProxyã®ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ - ãƒ¯ã‚¶ãƒŽãƒ | wazanova
http://engineering.tumblr.com/post/67670365022/efficient-distribution-of-cacheable-http-requests-at TumblrãŒã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°ã§ã€HAProxyã®ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’æ”¹å–„ã—ãŸå–ã‚Šçµ„ã¿ã‚’ã‚’ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚ Tumblrã§ã¯ã€HAProxyã‚’åˆ©ç”¨ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚µãƒ¼ãƒã¸ã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨TCPç³»ã®ãƒˆãƒ©ãƒƒãƒ•ã‚£ã‚¯ã‚’ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã•ã›ã¦ã„ã¾ã™ã€‚HAProxyã¯ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’åŠ¹çŽ‡ã‚ˆãã‚ãƒ£ãƒƒã‚·ãƒ¥ã™ã‚‹ãŸã‚ã«ã€ç‰¹å®šã®ã‚µãƒ¼ãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ç¶™ç¶šçš„ã«ãƒãƒƒã‚·ãƒ¥ã—ã¾ã™ã€‚ãã®ãŠã‹ã’ã§ã€ã‚µãƒ¼ãƒãŒè¿½åŠ ã‚‚ã—ãã¯å¤–ã•ã‚ŒãŸã¨ãã¯ã€ã„ãã¤ã‹ã®ãƒžãƒƒãƒ”ãƒ³ã‚°ã ã‘ãŒå†åˆ†æ•£ã•ã‚Œã€ã‚ãƒ£ãƒƒã‚·ãƒ¥ã«ã¤ã„ã¦ã¯é«˜ã‚ã®ãƒ’ãƒƒãƒˆçŽ‡ã‚’ç¶æŒã§ãã¾ã™ã€‚ ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§é‡è¦ãªã®ã¯ã€è² è·ãŒãƒ—ãƒ¼ãƒ«å†…ã§å‡ç‰ã«åˆ†æ•£ã•ã‚Œã‚‹ã“ã¨ã€‚HAProxyã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§sdb
rx7 2013/12/06
HAProxy
ãƒªãƒ³ã‚¯
HAProxyã‚’é€éŽåž‹ã®ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ä½¿ã†(HAProxy with tproxy) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HAProxyã¯åŸºæœ¬çš„ã«L7ãƒ¬ã‚¤ãƒ¤ã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼(ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·)ãªã®ã§ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã«ã„ã‚‹ãƒªã‚¢ãƒ«ã‚µãƒ¼ãƒã«ã¯ã€ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‹ã‚‰å±Šã„ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒã€ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ãŒæ¥ãŸã‹ã®ã‚ˆã†ã«æŒ¯èˆžã„ã¾ã™ã€‚ ã§ã€HAProxyã¯tproxy(transparent proxy)ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã‚ˆã†ãªã®ã§ã€L4ã§å‹•ãé€éŽåž‹ã®ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ã‚‚æŒ¯èˆžã†ã“ã¨ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã§ã™ã€‚ã®ã§ã€ã¡ã‚‡ã£ã¨è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ ä½¿ã£ãŸOSã¯ã€CentOS 6.4ã§ã€HAProxyã¯é–‹ç™ºç‰ˆã®1.5-dev19ã§ã™ã€‚ å‚è€ƒ: Transparent proxy support (www.kernel.org/doc) https://www.kernel.org/doc/Documentation/networking/tproxy.txt Linux kernelã®nf_tproxy_coreãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’
rx7 2013/12/05
HAProxy

Linux
ãƒªãƒ³ã‚¯
HAProxyã§SSLå‡¦ç†ã‚’ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã¨ã‹ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚’ä½¿ã£ã¦è‰²ã€…ã‚„ã£ã¦ã„ã‚‹ã¨ã€HTTPS/SSLå¯¾å¿œã‹ãƒ¼ã€ã©ã†ã—ã‚ˆã†ã‹ãªãƒ¼ã¿ãŸã„ãªã“ã¨ã‚’è€ƒãˆã‚‹æ—¥ãŒãã®ã†ã¡ã‚„ã£ã¦ããŸã‚Šã™ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ã•ã¦ã€æœ€è¿‘è§¦ã‚Šå§‹ã‚ãŸHAProxyãªã‚“ã§ã™ãŒã€å…¬å¼ã‚µã‚¤ãƒˆã®è¨˜è¼‰ã‚’è¦‹ã¦ã„ã‚‹ã¨ã€é–‹ç™ºç‰ˆã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã ã¨SSLå‡¦ç†ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã¿ãŸã„ãªã‚“ã§ã™ã‚ˆããƒ¼ã€‚ Update [2012/09/11] : native SSL support was implemented in 1.5-dev12. The points above about CPU usage are still valid though. HAProxy - The Reliable, High Performance TCP/HTTP Load Balancer ãµã‚€ãµã‚€ã€"1.5-dev12"ä»¥é™ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚ã‚Œã°ä½¿ãˆãã†ã€‚ ã¨ã„ã†ã“ã¨ã§ã€å‰å›žã®ã‚¨ãƒ³ãƒˆãƒª
rx7 2013/12/02
HAProxy
ãƒªãƒ³ã‚¯
HAProxy version 1.5.18 - Configuration Manual
When haproxy is running in HTTP mode, both the request and the response are fully analyzed and indexed, thus it becomes possible to build matching criteria on almost anything found in the contents. However, it is important to understand how HTTP requests and responses are formed, and how HAProxy decomposes them. It will then become easier to write correct rules and to debug existing configurations
rx7 2013/11/29
HAProxy1.5(é–‹ç™ºç‰ˆ)ç”¨ã®è¨å®šãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã€‚

HAProxy
ãƒªãƒ³ã‚¯
HAProxy1.5ç³»(é–‹ç™ºç‰ˆ)ã®RPMã‚’ä½œæˆã™ã‚‹ - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
ã¾ãŸã—ã°ã‚‰ããƒ–ãƒã‚°ã‚’æ›¸ã„ã¦ã„ãªã‹ã£ãŸã€‚ã„ã¤ã‚‚æ›¸ã„ã¦ã‚‹ã‘ã©ã€ã“ã†ã„ã†ã¨ãã¯ãƒ©ã‚¤ãƒˆãªãƒã‚°ã‚’æ®‹ã™ã€‚ CentOS 6ç³»ã«HAProxyã®1.5ç³»(é–‹ç™ºç‰ˆ)ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã¹ãRPMã‚’ä½œã£ãŸã€‚ ã¨ã¯ã„ã£ã¦ã‚‚ã€HAProxyã®tarballã«ã¯ã€specãƒ•ã‚¡ã‚¤ãƒ«ãŒæ·»ä»˜ã•ã‚Œã¦ã„ã‚‹ã®ã§ã€ãƒ“ãƒ«ãƒ‰ã™ã‚‹ã ã‘ã§ã¯ã‚ã‚Šã¾ã™ãŒã€‚ å¯¾è±¡ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯ã€ç¾æ™‚ç‚¹ã§ã®é–‹ç™ºç‰ˆã®æœ€æ–°Ver. 1.5-dev19ã€‚ ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ï¼†æº–å‚™ RPMã‚’ä½œæˆã—ãŸã“ã¨ãŒãªã„ç’°å¢ƒã ã¨ã€ä»¥ä¸‹ã‚’ä½œæˆã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ # mkdir -p ~/rpm build/{BUILD,RPMS,SOURCES,SPECS,SRPMS}"rpm-build"ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚‚å…¥ã£ã¦ãªã‘ã‚Œã°ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ãã€‚(ãã®ä»–ã€gcc, makeãªã©æŒ™ã’ã¯ã˜ã‚ã‚‹ã¨ã‚ãƒªãŒãªã„ã®ã§å‰²æ„›ã€‚) # cd ~/rpm build/SOURCES/ # wget http
rx7 2013/11/28
HAProxy
ãƒªãƒ³ã‚¯
Serf+HAProxyã§ä½œã‚‹Automatic Load Balancer - Glide Note
hashicorp/serf Serf Serfä½¿ã£ã¦ã¾ã™ã‹ï¼ã‚µãƒ¼ãƒ•ï¼ è«¸äº‹æƒ…ã¨ã„ã†ã‹å¤§äººã®äº‹æƒ…ã§æ€¥é½è‡ªå‰ã§ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã‚’ç”¨æ„ã—ãªã„ã¨ã„ã‘ãªãã¦ã€ãã‚Œã‚’issueã«æ›¸ã„ã¦ãŸã‚‰ã€ ã‚ã‚“ã¡ã½ã•ã‚“ãŒSerf+HAProxyä½¿ã£ãŸã‚‰ã„ã„ã®ã§ã¯ã€ ã¨IRCã§åŠ©è¨€ã‚’ãã‚Œã¦ã€åŒæ—¥ã®mizzyã•ã‚“ã®ãƒ–ãƒã‚°ã§ã‚‚Serfã«è¨€åŠã—ã¦ã„ãŸã®ã§ã€ ã¡ã‚‡ã£ã¨Serfã®æ¦‚è¦ã‚’çŸ¥ã‚‹ãŸã‚ã¨ã€Serf+HAProxyãŒå®Ÿéš›ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã¨ã—ã¦ã©ã‚“ãªæ„Ÿã˜ã«ä½¿ãˆã‚‹ã®ã‹æ¤œè¨¼ã—ã¦ã¿ãŸã€‚ I told @glidenote about a combination of Serf and HAProxy this morning, and he has already implemented the arch. and done investigationâ€¦ â€” kentaro (@kentaro) October 29, 2013
rx7 2013/10/31
Serf

HAProxy
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
rx7 2013/10/03
HAProxy
ãƒªãƒ³ã‚¯
HAProxy ã§ graceful restart ã™ã‚‹æ–¹æ³• - é…’æ—¥è¨˜ ã¯ã¦ãªæ”¯åº—
haproxy ã«ã¯èµ·å‹•å¾Œã«è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è¾¼ã¿ç›´ã—ãŸã‚Šã™ã‚‹æ©Ÿèƒ½ãŒãªã„ã®ã§ã€ãƒãƒ©ãƒ³ã‚¹å…ˆã‚’è¿½åŠ ã™ã‚‹ãªã©ã®å¤‰æ›´ãŒç„¡åœæ¢ã§ã¯ã§ããªã„ã€ã¨æ€ã„è¾¼ã‚“ã§ã„ãŸã®ã ã‘ã©å®Ÿã¯é•ã£ãŸã€ã¨ã„ã†ãŠè©±ã€‚ å®Ÿéš›ã€åŒä¸€ãƒ—ãƒã‚»ã‚¹ã§èªã¿è¾¼ã¿ç›´ã™ã“ã¨ã¯ã§ããªã„ã®ã ã‘ã©ã‚‚ã€ä»¥ä¸‹ã®ã‚ˆã†ãªæ‰‹æ³•ã§ graceful ã«å†èµ·å‹•ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚man ã¯ã¡ã‚ƒã‚“ã¨èªã¿ã¾ã—ã‚‡ã†ã€‚ # haproxy -f /path/to/haproxy.conf -sf [æ—¢ã«å‹•ã„ã¦ã„ã‚‹haproxyã®pid]ã¨ã—ã¦ -sf ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã« pid ã‚’æ¸¡ã—ã¦èµ·å‹•ã™ã‚‹ã¨â€¦â€¦ haproxy[2] : èµ·å‹• haproxy[2] : æ—¢ã«å‹•ã„ã¦ã„ã‚‹ haproxy[1] ã« SIGTTOU ã‚’é€ä¿¡ haproxy[1] : SIGTTOU ã‚’å—ã‘ã‚‹ã¨ Listen ã‚’ã‚„ã‚ã‚‹ æ–°è¦æŽ¥ç¶šã¯å—ã‘ä»˜ã‘ãªã„ æ—¢ã«ç¢ºç«‹ã—ã¦ã„ã‚‹æŽ¥ç¶šã¯ãã®ã¾ã¾ç¶æŒ haproxy[2]
rx7 2011/11/20
HAProxy
ãƒªãƒ³ã‚¯
Zero-Downtime Restarts with HAProxy - igvita.com
By Ilya Grigorik on December 02, 2008 Putting up a maintenance page while you are doing an update and restarting your application servers is good practice, but it definitely hurts the user experience. This, in turn, translates to less frequent releases and frustration for both the developer and the users (release often, release early!). To address this, the Rails community has come up with a coupl
rx7 2008/12/04
HAProxy
ãƒªãƒ³ã‚¯
HAProxy - The Reliable, High Perf. TCP/HTTP Load Balancer
Quick News Feb, 26th, 2025 : HAProxyConf 2025 Early birds registration Early birds registration for HAProxy Conf 2025 is now available! Please check the link to book your tickets. Nov, 26th, 2024 : HAProxy 3.1.0 release This release brings a number of troubleshooting improvements. For example it offers new sample fetch methods to report information about last rule, termination states and syscall s
rx7 2008/06/14
HAProxy
ãƒªãƒ³ã‚¯
1