HAProxy Configuration: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 13: Line 13:
Add the following to the "global" section of the configuration file:
Add the following to the "global" section of the configuration file:


  log 127.0.0.1:514 local0
  log 127.0.0.1:514 local2
 
and then add the following to each "defaults" section or to each frontend and backend section:
 
log global


==Configure HAProxy to Log into a File==
==Configure HAProxy to Log into a File==

Revision as of 03:25, 4 July 2017

Internal

Overview

If installed with yum, the default configuration file is deployed in /etc/haproxy/haproxy.cfg and the systemd configuration file in /etc/sysconfig/haproxy.

Logging Configuration

HAProxy Concepts - Logging

Add the following to the "global" section of the configuration file:

log 127.0.0.1:514 local2

and then add the following to each "defaults" section or to each frontend and backend section:

log global

Configure HAProxy to Log into a File

Last time I tried this, it did not work:

Configure syslog to accept network log events. Add the '-r' option to the SYSLOGD_OPTIONS in /etc/sysconfig/rsyslog:

SYSLOGD_OPTIONS="-r"

Configure local2 events to go to the /var/log/haproxy.log file. Add the following line in /etc/rsyslog.conf:

local2.*  /var/log/haproxy.log

SSL Configuration

HAProxy SSL Pass-Through Configuration

Configuration

Options

httplog

tcplog

Logging is set to tcp instead of the default http.

ssl-hello-chk

A health check that verifies the the connection and its ability to handle SSL (SSLv3 specifically) connections.

global

defaults

mode

Possible values:

http

tcp

Used to pass secure connections off to a backend server without encrypting it.