![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061811-698d70a3a45ea.png\")
<\/p>\n\u4e00.\u8d1f\u8f7d\u5747\u8861<\/p>\n
1.1.\u4ec0\u4e48\u662f\u8d1f\u8f7d\u5747\u8861 \u8d1f\u8f7d\u5747\u8861：Load Balance，\u7b80\u79f0LB，\u662f\u4e00\u79cd\u670d\u52a1\u6216\u57fa\u4e8e\u786c\u4ef6\u8bbe\u5907\u7b49\u5b9e\u73b0\u7684\u9ad8\u53ef\u7528\u53cd\u5411\u4ee3\u7406\u6280\u672f，\u8d1f\u8f7d\u5747\u8861\u5c06\u7279\u5b9a\u7684\u4e1a\u52a1(web\u670d\u52a1\u3001\u7f51\u7edc\u6d41\u91cf\u7b49)\u5206\u62c5\u7ed9\u6307\u5b9a\u7684\u4e00\u4e2a\u6216\u591a\u4e2a\u540e\u7aef\u7279\u5b9a\u7684\u670d\u52a1\u5668\u6216\u8bbe\u5907，\u4ece\u800c\u63d0\u9ad8\u4e86\u516c\u53f8\u4e1a\u52a1\u7684\u5e76\u53d1\u5904\u7406\u80fd\u529b\u3001\u4fdd\u8bc1\u4e86\u4e1a\u52a1\u7684\u9ad8\u53ef\u7528\u6027\u3001\u65b9\u4fbf\u4e86\u4e1a\u52a1\u540e\u671f\u7684\u6c34\u5e73\u52a8\u6001\u6269\u5c55 \u963f\u91cc\u4e91SLB\u4ecb\u7ecd ：https:\/\/yq.aliyun.com\/articles\/1803\u00a0\u00a0<\/p>\n
1.2.\u4e3a\u4ec0\u4e48\u7528\u8d1f\u8f7d\u5747\u8861 \u2022 \u00a0Web\u670d\u52a1\u5668\u7684\u52a8\u6001\u6c34\u5e73\u6269\u5c55–>\u5bf9\u7528\u6237\u65e0\u611f\u77e5 \u00a0<\/p>\n
\u2022 \u00a0\u589e\u52a0\u4e1a\u52a1\u5e76\u53d1\u8bbf\u95ee\u53ca\u5904\u7406\u80fd\u529b–>\u89e3\u51b3\u5355\u670d\u52a1\u5668\u74f6\u9888\u95ee\u9898 \u00a0<\/p>\n
\u2022 \u00a0\u8282\u7ea6\u516c\u7f51IP\u5730\u5740–>\u964d\u4f4eIT\u652f\u51fa\u6210\u672c<\/p>\n
\u00a0\u2022 \u00a0\u9690\u85cf\u5185\u90e8\u670d\u52a1\u5668IP–>\u63d0\u9ad8\u5185\u90e8\u670d\u52a1\u5668\u5b89\u5168\u6027<\/p>\n
\u00a0\u2022 \u00a0\u914d\u7f6e\u7b80\u5355–>\u56fa\u5b9a\u683c\u5f0f\u7684\u914d\u7f6e\u6587\u4ef6 \u00a0<\/p>\n
\u2022 \u00a0\u529f\u80fd\u4e30\u5bcc–>\u652f\u6301\u56db\u5c42\u548c\u4e03\u5c42，\u652f\u6301\u52a8\u6001\u4e0b\u7ebf\u4e3b\u673a \u00a0<\/p>\n
\u2022 \u00a0\u6027\u80fd\u8f83\u5f3a–>\u5e76\u53d1\u6570\u4e07\u751a\u81f3\u6570\u5341\u4e07 \u00a0<\/p>\n
1.3.\u8d1f\u8f7d\u5747\u8861\u7c7b\u578b<\/p>\n
1.3.1\u786c\u4ef6：<\/p>\n
F5\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0\u7f8e\u56fdF5\u7f51\u7edc\u516c\u53f8 \u00a0https:\/\/f5.com\/zh<\/p>\n
Netscaler \u00a0 \u00a0 \u00a0 \u7f8e\u56fd\u601d\u6770\u516c\u53f8 \u00a0 \u00a0 \u00a0https:\/\/www.citrix.com.cn\/products\/citrix-adc\/<\/p>\n
Array\u00a0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u534e\u8000 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 https:\/\/www.arraynetworks.com.cn\/<\/p>\n
AD-1000 \u00a0 \u00a0 \u00a0 \u00a0 \u6df1\u4fe1\u670d \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http:\/\/www.sangfor.com.cn\/<\/p>\n
1.3.2.\u56db\u5c42\u8d1f\u8f7d\u5747\u8861<\/p>\n
1.\u901a\u8fc7ip+port\u51b3\u5b9a\u8d1f\u8f7d\u5747\u8861\u7684\u53bb\u5411\u3002<\/p>\n
2.\u5bf9\u6d41\u91cf\u8bf7\u6c42\u8fdb\u884cNAT\u5904\u7406，\u8f6c\u53d1\u81f3\u540e\u53f0\u670d\u52a1\u5668\u3002<\/p>\n
3.\u8bb0\u5f55tcp\u3001udp\u6d41\u91cf\u5206\u522b\u662f\u7531\u54ea\u53f0\u670d\u52a1\u5668\u5904\u7406，\u540e\u7eed\u8be5\u8bf7\u6c42\u8fde\u63a5\u7684\u6d41\u91cf\u90fd\u901a\u8fc7\u8be5\u670d\u52a1\u5668\u5904\u7406\u3002<\/p>\n
4.\u652f\u6301\u56db\u5c42\u7684\u8f6f\u4ef6<\/p>\n
\u2022 \u00a0lvs：\u91cd\u91cf\u7ea7\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u5668\u3002<\/p>\n
\u00a0\u2022 \u00a0Nginx：\u8f7b\u91cf\u7ea7\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u5668，\u53ef\u7f13\u5b58\u3002（nginx\u56db\u5c42\u662f\u901a\u8fc7upstream\u6a21\u5757） \u00a0<\/p>\n
\u2022 \u00a0Haproxy：\u6a21\u62df\u56db\u5c42\u8f6c\u53d1\u3002 \u00a0<\/p>\n
1.3.3.\u4e03\u5c42\u8d1f\u8f7d\u5747\u8861<\/p>\n
1.\u901a\u8fc7\u865a\u62dfur|\u6216\u4e3b\u673aip\u8fdb\u884c\u6d41\u91cf\u8bc6\u522b，\u6839\u636e\u5e94\u7528\u5c42\u4fe1\u606f\u8fdb\u884c\u89e3\u6790，\u51b3\u5b9a\u662f\u5426\u9700\u8981\u8fdb\u884c\u8d1f\u8f7d\u5747\u8861\u3002<\/p>\n
2.\u4ee3\u7406\u540e\u53f0\u670d\u52a1\u5668\u4e0e\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5，\u5982nginx\u53ef\u4ee3\u7406\u524d\u540e\u7aef，\u4e0e\u524d\u7aef\u5ba2\u6237\u7aeftcp\u8fde\u63a5，\u4e0e\u540e\u7aef\u670d\u52a1\u5668\u5efa\u7acbtcp\u8fde\u63a5<\/p>\n
3.\u652f\u63017\u5c42\u4ee3\u7406\u7684\u8f6f\u4ef6：<\/p>\n
\u2022 \u00a0Nginx:\u57fa\u4e8ehttp\u534f\u8bae(nginx\u4e03\u5c42\u662f\u901a\u8fc7proxy_pass) \u00a0<\/p>\n
\u2022 \u00a0Haproxy:\u4e03\u5c42\u4ee3\u7406，\u4f1a\u8bdd\u4fdd\u6301\u3001\u6807\u8bb0\u3001\u8def\u5f84\u8f6c\u79fb\u7b49\u3002 \u00a0<\/p>\n
1.3.4 \u56db\u5c42\u548c\u4e03\u5c42\u7684\u533a\u522b \u6240\u8c13\u7684\u56db\u5230\u4e03\u5c42\u8d1f\u8f7d\u5747\u8861，\u5c31\u662f\u5728\u5bf9\u540e\u53f0\u7684\u670d\u52a1\u5668\u8fdb\u884c\u8d1f\u8f7d\u5747\u8861\u65f6，\u4f9d\u636e\u56db\u5c42\u7684\u4fe1\u606f\u6216\u4e03\u5c42\u7684\u4fe1\u606f\u6765\u51b3\u5b9a\u600e\u4e48\u6837\u8f6c\u53d1\u6d41\u91cf<\/p>\n
\u56db\u5c42\u7684\u8d1f\u8f7d\u5747\u8861，\u5c31\u662f\u901a\u8fc7\u53d1\u5e03\u4e09\u5c42\u7684IP\u5730\u5740（VIP），\u7136\u540e\u52a0\u56db\u5c42\u7684\u7aef\u53e3\u53f7，\u6765\u51b3\u5b9a\u54ea\u4e9b\u6d41\u91cf\u9700\u8981\u505a\u8d1f\u8f7d\u5747\u8861，\u5bf9\u9700\u8981\u5904\u7406\u7684\u6d41\u91cf\u8fdb\u884cNAT\u5904\u7406，\u8f6c\u53d1\u81f3\u540e\u53f0\u670d\u52a1\u5668，\u5e76\u8bb0\u5f55\u4e0b\u8fd9\u4e2aTCP\u6216\u8005UDP\u7684\u6d41\u91cf\u662f\u7531\u54ea\u53f0\u670d\u52a1\u5668\u5904\u7406\u7684，\u540e\u7eed\u8fd9\u4e2a\u8fde\u63a5\u7684\u6240\u6709\u6d41\u91cf\u90fd\u540c\u6837\u8f6c\u53d1\u5230\u540c\u4e00\u53f0\u670d\u52a1\u5668\u5904\u7406<\/p>\n
\u4e03\u5c42\u7684\u8d1f\u8f7d\u5747\u8861，\u5c31\u662f\u5728\u56db\u5c42\u7684\u57fa\u7840\u4e0a（\u6ca1\u6709\u56db\u5c42\u662f\u7edd\u5bf9\u4e0d\u53ef\u80fd\u6709\u4e03\u5c42\u7684），\u518d\u8003\u8651\u5e94\u7528\u5c42\u7684\u7279\u5f81，\u6bd4\u5982\u540c\u4e00\u4e2aWeb\u670d\u52a1\u5668\u7684\u8d1f\u8f7d\u5747\u8861，\u9664\u4e86\u6839\u636eVIP\u52a080\u7aef\u53e3\u8fa8\u522b\u662f\u5426\u9700\u8981\u5904\u7406\u7684\u6d41\u91cf，\u8fd8\u53ef\u6839\u636e\u4e03\u5c42\u7684URL\u3001\u6d4f\u89c8\u5668\u7c7b\u522b\u3001\u8bed\u8a00\u6765\u51b3\u5b9a\u662f\u5426\u8981\u8fdb\u884c\u8d1f\u8f7d\u5747\u8861\u3002 \u200b<\/p>\n
1.\u5206\u5c42\u4f4d\u7f6e:\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u5728\u4f20\u8f93\u5c42\u53ca\u4ee5\u4e0b，\u4e03\u5c42\u8d1f\u8f7d\u5747\u8861\u5728\u5e94\u7528\u5c42\u53ca\u4ee5\u4e0b<\/p>\n
2.\u6027\u80fd :\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u67b6\u6784\u65e0\u9700\u89e3\u6790\u62a5\u6587\u6d88\u606f\u5185\u5bb9，\u5728\u7f51\u7edc\u541e\u5410\u91cf\u4e0e\u5904\u7406\u80fd\u529b\u4e0a\u8f83\u9ad8:\u4e03\u5c42\u53ef\u652f\u6301\u89e3\u6790\u5e94\u7528\u5c42\u62a5\u6587\u6d88\u606f\u5185\u5bb9，\u8bc6\u522bURL\u3001Cookie\u3001HTTP header\u7b49\u4fe1\u606f\u3002<\/p>\n
3.\u539f\u7406 :\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u662f\u57fa\u4e8eip+port;\u4e03\u5c42\u662f\u57fa\u4e8e\u865a\u62df\u7684URL\u6216\u4e3b\u673aIP\u7b49\u3002<\/p>\n
4.\u529f\u80fd\u7c7b\u6bd4:\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u7c7b\u4f3c\u4e8e\u8def\u7531\u5668;\u4e03\u5c42\u7c7b\u4f3c\u4e8e\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n
5.\u5b89\u5168\u6027:\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u65e0\u6cd5\u8bc6\u522bDDoS\u653b\u51fb;\u4e03\u5c42\u53ef\u9632\u5fa1SYN Cookie\/Flood\u653b\u51fb<\/p>\n
\u4e8c\u3001\u4ec0\u4e48\u662fhaproxy<\/p>\n
HAProxy\u662f\u6cd5\u56fd\u5f00\u53d1\u8005 \u5a01\u5229\u5854\u7f57(Willy Tarreau) \u57282000\u5e74\u4f7f\u7528C\u8bed\u8a00\u5f00\u53d1\u7684\u4e00\u4e2a\u5f00\u6e90\u8f6f\u4ef6 \u662f\u4e00\u6b3e\u5177\u5907\u9ad8\u5e76\u53d1(\u4e07\u7ea7\u4ee5\u4e0a)\u3001\u9ad8\u6027\u80fd\u7684TCP\u548cHTTP\u8d1f\u8f7d\u5747\u8861\u5668 \u652f\u6301\u57fa\u4e8ecookie\u7684\u6301\u4e45\u6027，\u81ea\u52a8\u6545\u969c\u5207\u6362，\u652f\u6301\u6b63\u5219\u8868\u8fbe\u5f0f\u53caweb\u72b6\u6001\u7edf\u8ba1<\/p>\n
\u4f01\u4e1a\u7248\u7f51\u7ad9：https:\/\/www.haproxy.com<\/p>\n
\u793e\u533a\u7248\u7f51\u7ad9：http:\/\/www.haproxy.org<\/p>\n
github：https:\/\/github.com\/haprox<\/p>\n
\u4e09\u3001HAPORXY\u5b9e\u9a8c\u73af\u5883\u8bbe\u5b9a<\/p>\n
<\/p>\n
1.haproxy\u4e3b\u673a<\/p>\n
[root@haproxy ~]# vmset.sh eth0 172.25.254.100 haproxy
\n\u8fde\u63a5\u5df2\u6210\u529f\u6fc0\u6d3b（D-Bus \u6d3b\u52a8\u8def\u5f84：\/org\/freedesktop\/NetworkManager\/ActiveConnection\/7）
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
\n\u00a0 \u00a0 link\/ether 00:0c:29:0c:6f:ee brd ff:ff:ff:ff:ff:ff
\n\u00a0 \u00a0 altname enp3s0
\n\u00a0 \u00a0 altname ens160
\n\u00a0 \u00a0 inet 172.25.254.100\/24 brd 172.25.254.255 scope global noprefixroute eth0
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\n\u00a0 \u00a0 inet6 fe80::20c:29ff:fe0c:6fee\/64 scope link tentative noprefixroute
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\nhaproxy
\n[root@haproxy ~]# vmset.sh eth1 192.168.0.100 haproxy norouter
\n\u8fde\u63a5\u5df2\u6210\u529f\u6fc0\u6d3b（D-Bus \u6d3b\u52a8\u8def\u5f84：\/org\/freedesktop\/NetworkManager\/ActiveConnection\/8）
\n3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
\n\u00a0 \u00a0 link\/ether 00:0c:29:0c:6f:f8 brd ff:ff:ff:ff:ff:ff
\n\u00a0 \u00a0 altname enp19s0
\n\u00a0 \u00a0 altname ens224
\n\u00a0 \u00a0 inet 192.168.0.100\/24 brd 192.168.0.255 scope global noprefixroute eth1
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\n\u00a0 \u00a0 inet6 fe80::4ca7:8cde:1244:8df\/64 scope link tentative noprefixroute
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\nhaproxy<\/p>\n
#\u914d\u7f6e\u5185\u6838\u8def\u7531\u529f\u80fd
\n[root@haproxy ~]# echo net.ipv4.ip_forward=1 > \/etc\/sysctl.conf
\n[root@haproxy ~]# sysctl -p
\nnet.ipv4.ip_forward = 1<\/p>\n
2.webserver1<\/p>\n
[root@webserver1 ~]# vmset.sh eth0 192.168.0.10 webserver1 noroute
\n\u8fde\u63a5\u5df2\u6210\u529f\u6fc0\u6d3b（D-Bus \u6d3b\u52a8\u8def\u5f84：\/org\/freedesktop\/NetworkManager\/ActiveConnection\/4）
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
\n\u00a0 \u00a0 link\/ether 00:0c:29:8c:96:72 brd ff:ff:ff:ff:ff:ff
\n\u00a0 \u00a0 altname enp3s0
\n\u00a0 \u00a0 altname ens160
\n\u00a0 \u00a0 inet 192.168.0.10\/24 brd 192.168.0.255 scope global noprefixroute eth0
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\n\u00a0 \u00a0 inet6 fe80::20c:29ff:fe8c:9672\/64 scope link tentative noprefixroute
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\nwebserver1<\/p>\n
[root@webserver1 ~]# dnf install httpd -y
\nroot@webserver1 ~]# echo webserver1 – 192.168.0.10 > \/var\/www\/html\/index.html
\n[root@webserver1 ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service.<\/p>\n
[root@webserver2 ~]# vmset.sh eth0 192.168.0.20 webserver2 noroute
\n\u8fde\u63a5\u5df2\u6210\u529f\u6fc0\u6d3b（D-Bus \u6d3b\u52a8\u8def\u5f84：\/org\/freedesktop\/NetworkManager\/ActiveConnection\/4）
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
\n\u00a0 \u00a0 link\/ether 00:0c:29:8c:96:72 brd ff:ff:ff:ff:ff:ff
\n\u00a0 \u00a0 altname enp3s0
\n\u00a0 \u00a0 altname ens160
\n\u00a0 \u00a0 inet 192.168.0.20\/24 brd 192.168.0.255 scope global noprefixroute eth0
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\n\u00a0 \u00a0 inet6 fe80::20c:29ff:fe8c:9672\/64 scope link tentative noprefixroute
\n\u00a0 \u00a0 \u00a0 \u00a0valid_lft forever preferred_lft forever
\nwebserver2
\n[root@webserver2 ~]# dnf install httpd -y\u00a0
\n[root@webserver2 ~]# \u00a0echo webserver2 – 192.168.0.20 > \/var\/www\/html\/index.html
\n[root@webserver2 ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service.<\/p>\n
3.\u9a8c\u8bc1\u73af\u5883<\/p>\n
#\u5728haproxy\u4e2d\u8bbf\u95ee<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a401f35.png\")
<\/p>\n
\u56db\u3001Haproxy\u7684\u5b89\u88c5\u53ca\u914d\u7f6e\u53c2\u6570<\/p>\n
1.\u5b89\u88c5<\/p>\n
#\u5728\u8c03\u5ea6\u5668（\u53cc\u7f51\u5361\u4e3b\u673a\u4e2d）
\n[root@haproxy ~]# dnf install haproxy.x86_64 -y
\n[root@haproxy ~]# systemctl enable –now haproxy
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/haproxy.service \u2192 \/usr\/lib\/systemd\/system\/haproxy.service.<\/p>\n
2.harpoxy\u7684\u53c2\u6570\u8be6\u89e3\u5b9e\u9a8c<\/p>\n
1.\u5b9e\u73b0\u6700\u57fa\u672c\u7684\u8d1f\u8f7d<\/p>\n
#\u8bbe\u5b9avim\u4e2dtab\u952e\u7684\u7a7a\u683c\u4e2a\u6570
\n[root@haproxy ~]# vim ~\/.vimrc
\nset ts=4 ai<\/p>\n
#\u524d\u540e\u7aef\u5206\u5f00\u8bbe\u5b9a
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\n
frontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 use_backend \u00a0 \u00a0 webserver-80<\/p>\n
backend webserver-80
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5：
\n[root@haproxy ~]# curl \u00a0172.25.254.100
\nwebserver2 – 192.168.0.20
\n[root@haproxy ~]# curl \u00a0172.25.254.100
\nwebserver1 – 192.168.0.10<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a41cc6c.png\")
<\/p>\n
#\u7528listen\u65b9\u5f0f\u4e66\u5199\u8d1f\u8f7d\u5747\u8861
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5
\n[root@haproxy ~]# curl \u00a0172.25.254.100
\nwebserver2 – 192.168.0.20
\n[root@haproxy ~]# curl \u00a0172.25.254.100
\nwebserver1 – 192.168.0.10<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a458268.png\")
<\/p>\n
2.log \u00a0 \u00a0 \u00a0 \u00a0 127.0.0.1 local2<\/p>\n
\u6307\u5b9a\u628a\u65e5\u5fd7\u53d1\u9001\u5230\u54ea\u91cc \u5b9e\u9a8c\u3002\u6307\u5b9a\u65e5\u5fd7\u53d1\u9001\u5230192.168.0.10<\/p>\n
#\u5728192.168.0.10 \u5f00\u542f\u63a5\u53d7\u65e5\u5fd7\u7684\u7aef\u53e3
\n[root@webserver1 ~]# vim \/etc\/rsyslog.conf
\n\u00a032 module(load="imudp") # needs to be done just once
\n\u00a033 input(type="imudp" port="514")
\n\u00a0
\n[root@webserver1 ~]# systemctl restart rsyslog.service<\/p>\n
#\u6d4b\u8bd5\u63a5\u53d7\u65e5\u5fd7\u7aef\u53e3\u662f\u5426\u5f00\u542f
\n[root@webserver1 ~]# netstat -antlupe | grep rsyslog
\nudp \u00a0 \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a00 0.0.0.0:514 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 0.0.0.0:* \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a074140 \u00a0 \u00a0 \u00a030965\/rsyslogd
\nudp6 \u00a0 \u00a0 \u00a0 0 \u00a0 \u00a0 \u00a00 :::514 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0:::* \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a0 \u00a0 \u00a074141 \u00a0 \u00a0 \u00a030965\/rsyslogd<\/p>\n
#\u5728haproxy\u4e3b\u673a\u4e2d\u8bbe\u5b9a\u65e5\u5fd7\u53d1\u9001\u4fe1\u606f
\n[root@haproxy haproxy]# vim haproxy.cfg<\/p>\n
log \u00a0 \u00a0 \u00a0 \u00a0 192.168.0.10 local2<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a485905.png\")
<\/p>\n
3.\u5b9e\u73b0haproxy\u7684\u591a\u8fdb\u7a0b<\/p>\n
#\u9ed8\u8ba4haproxy\u662f\u5355\u8fdb\u7a0b
\n[root@haproxy ~]# pstree -p | grep haproxy
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0|-haproxy(31439)—haproxy(31441)-+-{haproxy}(31442)
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nnbproc \u00a0 \u00a0 \u00a02<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u591a\u8fdb\u7a0bcpu\u7ed1\u5b9a
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\n\u00a0 \u00a0 nbproc \u00a0 \u00a0 \u00a02
\n\u00a0 \u00a0 cpu-map \u00a0 \u00a0 1 0
\n\u00a0 \u00a0 cpu-map \u00a0 \u00a0 2 1
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u4e3a\u4e0d\u540c\u8fdb\u7a0b\u51c6\u5907\u4e0d\u540c\u5957\u63a5\u5b57
\n[root@haproxy ~]# systemctl stop haproxy.service
\n[root@haproxy ~]# rm -fr \/var\/lib\/haproxy\/stats
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\n\u00a0 \u00a0 #stats socket \/var\/lib\/haproxy\/stats
\n\u00a0 \u00a0 stats socket \/var\/lib\/haproxy\/haproxy1 \u00a0mode 600 level admin process 1
\n\u00a0 \u00a0 stats socket \/var\/lib\/haproxy\/haporxy2 \u00a0mode 660 level admin process 1<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6548\u679c
\n[root@haproxy ~]# ll \/var\/lib\/haproxy\/<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a4d6f17.png\")
<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061812-698d70a4eba75.png\")
<\/p>\n
4.haproxy\u5b9e\u73b0\u591a\u7ebf\u7a0b<\/p>\n
#\u67e5\u770b\u5f53\u524dhaproxy\u7684\u8fdb\u7a0b\u4fe1\u606f
\n[root@haproxy ~]# pstree -p | grep haproxy
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0|-haproxy(31742)-+-haproxy(31744)
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0| \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0`-haproxy(31745)
\n\u00a0#\u67e5\u770bhaproxy\u5b50\u8fdb\u7a0b\u7684\u7ebf\u7a0b\u4fe1\u606f
\n[root@haproxy ~]# cat \/proc\/31744\/status \u00a0| grep Threads
\nThreads: \u00a0 \u00a0 \u00a0 \u00a01<\/p>\n
#\u542f\u7528\u591a\u7ebf\u7a0b
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\n
\u00a0\u00a0 \u00a0#nbproc \u00a0 \u00a0 2
\n\u00a0 \u00a0 #cpu-map \u00a0 \u00a01 0
\n\u00a0 \u00a0 #cpu-map \u00a0 \u00a02 1
\n\u00a0 \u00a0 nbthread \u00a0 \u00a02
\n\u00a0 \u00a0 # turn on stats unix socket
\n\u00a0 \u00a0 stats socket \/var\/lib\/haproxy\/stats
\n\u00a0 \u00a0 #stats socket \/var\/lib\/haproxy\/haproxy1 \u00a0mode 600 level admin process 1
\n\u00a0 \u00a0 #stats socket \/var\/lib\/haproxy\/haporxy2 \u00a0mode 660 level admin process 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6548\u679c<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a50f1f0.png\")
<\/p>\n
5.socat\u70ed\u66f4\u65b0\u5de5\u5177<\/p>\n
\u5bf9\u670d\u52a1\u5668\u52a8\u6001\u6743\u91cd\u548c\u5176\u5b83\u72b6\u6001\u53ef\u4ee5\u5229\u7528 socat\u5de5\u5177\u8fdb\u884c\u8c03\u6574，Socat \u662f Linux \u4e0b\u7684\u4e00\u4e2a\u591a\u529f\u80fd\u7684\u7f51\u7edc\u5de5\u5177，\u540d\u5b57\u6765\u7531\u662fSocket CAT，\u76f8\u5f53\u4e8enetCAT\u7684\u589e\u5f3a\u7248.Socat \u7684\u4e3b\u8981\u7279\u70b9\u5c31\u662f\u5728\u4e24\u4e2a\u6570\u636e\u6d41\u4e4b\u95f4\u5efa\u7acb\u53cc\u5411\u901a\u9053，\u4e14\u652f\u6301\u4f17\u591a\u534f\u8bae\u548c\u94fe\u63a5\u65b9\u5f0f\u3002\u5982 IP\u3001TCP\u3001 UDP\u3001IPv6\u3001Socket\u6587\u4ef6\u7b49<\/p>\n
\u70ed\u66f4\u65b0\u200b \u5728\u670d\u52a1\u6216\u8f6f\u4ef6\u4e0d\u505c\u6b62\u7684\u60c5\u51b5\u4e0b\u66f4\u65b0\u8f6f\u4ef6\u6216\u670d\u52a1\u7684\u5de5\u4f5c\u65b9\u5f0f，\u5b8c\u6210\u5bf9\u8f6f\u4ef6\u4e0d\u505c\u5de5\u66f4\u65b0，\u5178\u578b\u7684\u70ed\u66f4\u65b0\u8bbe\u5907，usb，\u5728\u4f7f\u7528usb\u8fdb\u884c\u63d2\u62d4\u65f6，\u7535\u8111\u7cfb\u7edf\u65f6\u4e0d\u9700\u8981\u505c\u6b62\u5de5\u4f5c\u7684，\u8fd9\u4e2d\u8bbe\u5907\u53eb\u70ed\u63d2\u62d4\u8bbe\u5907<\/p>\n
1.\u5b89\u88c5socat<\/p>\n
[root@haproxy ~]# dnf install socat -y
\n[root@haproxy ~]# socat \u00a0-h<\/p>\n
2.\u5229\u7528socat\u67e5\u770bhaproxy\u4fe1\u606f<\/p>\n
[root@haproxy ~]# echo "show servers state" \u00a0| socat stdio \/var\/lib\/haproxy\/stats
\n1
\n# be_id be_name srv_id srv_name srv_addr srv_op_state srv_admin_state srv_uweight srv_iweight srv_time_since_last_change srv_check_status srv_check_result srv_check_health srv_check_state srv_agent_state bk_f_forced_id srv_f_forced_id srv_fqdn srv_port srvrecord srv_use_ssl srv_check_port srv_check_addr srv_agent_addr srv_agent_port
\n2 webcluster 1 haha 192.168.0.10 2 0 1 1 275 6 3 7 6 0 0 0 – 80 – 0 0 – – 0
\n2 webcluster 2 hehe 192.168.0.20 2 0 1 1 275 6 3 7 6 0 0 0 – 80 – 0 0 – – 0<\/p>\n
\n[root@haproxy ~]# echo "get \u00a0weight webcluster\/haha" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n1 (initial 1)<\/p>\n
[root@haproxy ~]# echo "get \u00a0weight webcluster\/hehe" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n1 (initial 1)<\/p>\n
3.\u5229\u7528socat\u66f4\u6539haproxy\u4fe1\u606f<\/p>\n
#\u76f4\u63a5\u66f4\u6539\u62a5\u9519
\n[root@haproxy ~]# echo "set \u00a0weight \u00a0webcluster\/haha 2 " | socat stdio \/var\/lib\/haproxy\/stats
\nPermission denied<\/p>\n
#\u5bf9socket\u8fdb\u884c\u6388\u6743
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nstats socket \/var\/lib\/haproxy\/stats mode 600 level admin<\/p>\n
\n[root@haproxy ~]# rm -rf \/var\/lib\/haproxy\/*<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service
\n[root@haproxy ~]# ll \/var\/lib\/haproxy\/
\n\u603b\u7528\u91cf 0
\nsrw——- 1 root root 0 \u00a01\u6708 25 10:04 stats<\/p>\n
\n#\u6267\u884c\u6743\u91cd\u66f4\u6539
\n[root@haproxy ~]# echo "get \u00a0weight webcluster\/hehe" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n1 (initial 1)<\/p>\n
[root@haproxy ~]# echo "set \u00a0weight \u00a0webcluster\/hehe 4 " | socat stdio \/var\/lib\/haproxy\/stats<\/p>\n
[root@haproxy ~]# echo "get \u00a0weight webcluster\/hehe" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n4 (initial 1)<\/p>\n
#\u6d4b\u8bd5<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a539751.png\")
<\/p>\n
6.haproxy\u7684\u7b97\u6cd5<\/p>\n
HAProxy\u901a\u8fc7\u56fa\u5b9a\u53c2\u6570 balance \u6307\u660e\u5bf9\u540e\u7aef\u670d\u52a1\u5668\u7684\u8c03\u5ea6\u7b97\u6cd5<\/p>\n
balance\u53c2\u6570\u53ef\u4ee5\u914d\u7f6e\u5728listen\u6216backend\u9009\u9879\u4e2d\u3002<\/p>\n
HAProxy\u7684\u8c03\u5ea6\u7b97\u6cd5\u5206\u4e3a\u9759\u6001\u548c\u52a8\u6001\u8c03\u5ea6\u7b97\u6cd5<\/p>\n
\u6709\u4e9b\u7b97\u6cd5\u53ef\u4ee5\u6839\u636e\u53c2\u6570\u5728\u9759\u6001\u548c\u52a8\u6001\u7b97\u6cd5\u4e2d\u76f8\u4e92\u8f6c\u6362\u3002<\/p>\n
（1）\u9759\u6001\u7b97\u6cd5<\/p>\n
\u9759\u6001\u7b97\u6cd5：\u6309\u7167\u4e8b\u5148\u5b9a\u4e49\u597d\u7684\u89c4\u5219\u8f6e\u8be2\u516c\u5e73\u8c03\u5ea6，\u4e0d\u5173\u5fc3\u540e\u7aef\u670d\u52a1\u5668\u7684\u5f53\u524d\u8d1f\u8f7d\u3001\u8fde\u63a5\u6570\u548c\u54cd\u5e94\u901f\u5ea6\u7b49，\u4e14\u65e0\u6cd5\u5b9e\u65f6\u4fee\u6539\u6743\u91cd(\u53ea\u80fd\u4e3a0\u548c1,\u4e0d\u652f\u6301\u5176\u5b83\u503c)，\u53ea\u80fd\u9760\u91cd\u542fHAProxy\u751f\u6548\u3002<\/p>\n
static-rr：\u57fa\u4e8e\u6743\u91cd\u7684\u8f6e\u8be2\u8c03\u5ea6 \u2022 \u00a0\u4e0d\u652f\u6301\u8fd0\u884c\u65f6\u5229\u7528socat\u8fdb\u884c\u6743\u91cd\u7684\u52a8\u6001\u8c03\u6574(\u53ea\u652f\u63010\u548c1,\u4e0d\u652f\u6301\u5176\u5b83\u503c) \u00a0\u2022 \u00a0\u4e0d\u652f\u6301\u7aef\u670d\u52a1\u5668\u6162\u542f\u52a8 \u00a0\u2022 \u00a0\u5176\u540e\u7aef\u4e3b\u673a\u6570\u91cf\u6ca1\u6709\u9650\u5236，\u76f8\u5f53\u4e8eLVS\u4e2d\u7684 wrr<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 static-rr
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a5653fc.png\")
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a57e7bd.png\")
<\/p>\n
#\u68c0\u6d4b\u662f\u5426\u652f\u6301\u70ed\u66f4\u65b0
\n[root@haproxy ~]# echo "get \u00a0weight webcluster\/haha" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n2 (initial 2)<\/p>\n
[root@haproxy ~]# echo "set \u00a0weight \u00a0webcluster\/haha 1 \u00a0" | socat stdio \/var\/lib\/haproxy\/stats \u00a0 \u00a0 \u00a0 Backend is using a static LB algorithm and only accepts weights '0%' and '100%'<\/p>\n
first<\/p>\n
\u2022\u00a0 \u6839\u636e\u670d\u52a1\u5668\u5728\u5217\u8868\u4e2d\u7684\u4f4d\u7f6e，\u81ea\u4e0a\u800c\u4e0b\u8fdb\u884c\u8c03\u5ea6 \u00a0<\/p>\n
\u2022 \u00a0\u5176\u53ea\u4f1a\u5f53\u7b2c\u4e00\u53f0\u670d\u52a1\u5668\u7684\u8fde\u63a5\u6570\u8fbe\u5230\u4e0a\u9650，\u65b0\u8bf7\u6c42\u624d\u4f1a\u5206\u914d\u7ed9\u4e0b\u4e00\u53f0\u670d\u52a1 \u00a0<\/p>\n
\u2022 \u00a0\u5176\u4f1a\u5ffd\u7565\u670d\u52a1\u5668\u7684\u6743\u91cd\u8bbe\u7f6e \u00a0<\/p>\n
\u2022 \u00a0\u4e0d\u652f\u6301\u7528socat\u8fdb\u884c\u52a8\u6001\u4fee\u6539\u6743\u91cd,\u53ef\u4ee5\u8bbe\u7f6e0\u548c1,\u53ef\u4ee5\u8bbe\u7f6e\u5176\u5b83\u503c\u4f46\u65e0\u6548<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 first
\n\u00a0 \u00a0 server haha 192.168.0.10:80 maxconn 1 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a5b1b32.png\")
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061813-698d70a5c92dd.png\")
<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a60a16c.png\")
<\/p>\n
（2）\u52a8\u6001\u7b97\u6cd5<\/p>\n
\u57fa\u4e8e\u540e\u7aef\u670d\u52a1\u5668\u72b6\u6001\u8fdb\u884c\u8c03\u5ea6\u9002\u5f53\u8c03\u6574，<\/p>\n<\/li>\n
\u65b0\u8bf7\u6c42\u5c06\u4f18\u5148\u8c03\u5ea6\u81f3\u5f53\u524d\u8d1f\u8f7d\u8f83\u4f4e\u7684\u670d\u52a1\u5668<\/p>\n<\/li>\n
\u6743\u91cd\u53ef\u4ee5\u5728haproxy\u8fd0\u884c\u65f6\u52a8\u6001\u8c03\u6574\u65e0\u9700\u91cd\u542f<\/p>\n<\/li>\n<\/ul>\n
roundrobin<\/p>\n
1. \u00a0\u57fa\u4e8e\u6743\u91cd\u7684\u8f6e\u8be2\u52a8\u6001\u8c03\u5ea6\u7b97\u6cd5， \u00a0<\/p>\n
2. \u00a0\u652f\u6301\u6743\u91cd\u7684\u8fd0\u884c\u65f6\u8c03\u6574，\u4e0d\u540c\u4e8elvs\u4e2d\u7684rr\u8f6e\u8bad\u6a21\u5f0f，<\/p>\n
3. \u00a0HAProxy\u4e2d\u7684roundrobin\u652f\u6301\u6162\u542f\u52a8(\u65b0\u52a0\u7684\u670d\u52a1\u5668\u4f1a\u9010\u6e10\u589e\u52a0\u8f6c\u53d1\u6570)，<\/p>\n
4. \u00a0\u5176\u6bcf\u4e2a\u540e\u7aefbackend\u4e2d\u6700\u591a\u652f\u63014095\u4e2areal server， \u00a0<\/p>\n
5. \u00a0\u652f\u6301\u5bf9real server\u6743\u91cd\u52a8\u6001\u8c03\u6574， \u00a0<\/p>\n
6. \u00a0roundrobin\u4e3a\u9ed8\u8ba4\u8c03\u5ea6\u7b97\u6cd5,\u6b64\u7b97\u6cd5\u4f7f\u7528\u5e7f\u6cdb<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a625cb9.png\")
<\/p>\n
#\u52a8\u6001\u6743\u91cd\u66f4\u65b0<\/p>\n
[root@haproxy ~]# echo "get \u00a0weight webcluster\/haha" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n2 (initial 2)<\/p>\n
[root@haproxy ~]# echo "set \u00a0weight \u00a0webcluster\/haha 1 \u00a0" | socat stdio \/var\/lib\/haproxy\/stats \u00a0 \u00a0 \u00a0\u00a0
\n[root@haproxy ~]# echo "get \u00a0weight webcluster\/haha" | socat \u00a0stdio \/var\/lib\/haproxy\/stats
\n1 (initial 2)<\/p>\n
#\u6548\u679c
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a642cbb.png\")
<\/p>\n
leastconn\n<\/p>\n
leastconn\u52a0\u6743\u7684\u6700\u5c11\u8fde\u63a5\u7684\u52a8\u6001\n<\/p>\n
\u652f\u6301\u6743\u91cd\u7684\u8fd0\u884c\u65f6\u8c03\u6574\u548c\u6162\u542f\u52a8，\u5373:\u6839\u636e\u5f53\u524d\u8fde\u63a5\u6700\u5c11\u7684\u540e\u7aef\u670d\u52a1\u5668\u800c\u975e\u6743\u91cd\u8fdb\u884c\u4f18\u5148\u8c03\u5ea6(\u65b0\u5ba2\u6237\u7aef\u8fde\u63a5)<\/p>\n
\u6bd4\u8f83\u9002\u5408\u957f\u8fde\u63a5\u7684\u573a\u666f\u4f7f\u7528，\u6bd4\u5982：MySQL\u7b49\u573a\u666f\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 leastconn
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a68f019.png\")
<\/p>\n
（3）\u6df7\u5408\u7b97\u6cd5<\/p>\n
source<\/p>\n
\u6e90\u5730\u5740hash，\u57fa\u4e8e\u7528\u6237\u6e90\u5730\u5740hash\u5e76\u5c06\u8bf7\u6c42\u8f6c\u53d1\u5230\u540e\u7aef\u670d\u52a1\u5668，\u540e\u7eed\u540c\u4e00\u4e2a\u6e90\u5730\u5740\u8bf7\u6c42\u5c06\u88ab\u8f6c\u53d1\u81f3\u540c\u4e00\u4e2a\u540e\u7aefweb\u670d\u52a1\u5668\u3002\u6b64\u65b9\u5f0f\u5f53\u540e\u7aef\u670d\u52a1\u5668\u6570\u636e\u91cf\u53d1\u751f\u53d8\u5316\u65f6，\u4f1a\u5bfc\u81f4\u5f88\u591a\u7528\u6237\u7684\u8bf7\u6c42\u8f6c\u53d1\u81f3\u65b0\u7684\u540e\u7aef\u670d\u52a1\u5668，\u9ed8\u8ba4\u4e3a\u9759\u6001\u65b9\u5f0f，\u4f46\u662f\u53ef\u4ee5\u901a\u8fc7hash-type\u652f\u6301\u7684\u9009\u9879\u66f4\u6539\u8fd9\u4e2a\u7b97\u6cd5\u4e00\u822c\u662f\u5728\u4e0d\u63d2\u5165Cookie\u7684TCP\u6a21\u5f0f\u4e0b\u4f7f\u7528，\u4e5f\u53ef\u7ed9\u62d2\u7edd\u4f1a\u8bddcookie\u7684\u5ba2\u6237\u63d0\u4f9b\u6700\u597d\u7684\u4f1a\u8bdd\u7c98\u6027，\u9002\u7528\u4e8esession\u4f1a\u8bdd\u4fdd\u6301\u4f46\u4e0d\u652f\u6301cookie\u548c\u7f13\u5b58\u7684\u573a\u666f\u6e90\u5730\u5740\u6709\u4e24\u79cd\u8f6c\u53d1\u5ba2\u6237\u7aef\u8bf7\u6c42\u5230\u540e\u7aef\u670d\u52a1\u5668\u7684\u670d\u52a1\u5668\u9009\u53d6\u8ba1\u7b97\u65b9\u5f0f，\u5206\u522b\u662f\u53d6\u6a21\u6cd5\u548c\u4e00\u81f4\u6027hash<\/p>\n
#\u9ed8\u8ba4\u9759\u6001\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 source
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#source\u52a8\u6001\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 source
\n\u00a0 \u00a0 hash-type \u00a0\u00a0 \u00a0consistent
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a6ad65a.png\")
<\/p>\n
uri<\/p>\n
\u57fa\u4e8e\u5bf9\u7528\u6237\u8bf7\u6c42\u7684URI\u7684\u5de6\u534a\u90e8\u5206\u6216\u6574\u4e2auri\u505ahash，\u518d\u5c06hash\u7ed3\u679c\u5bf9\u603b\u6743\u91cd\u8fdb\u884c\u53d6\u6a21\u540e \u6839\u636e\u6700\u7ec8\u7ed3\u679c\u5c06\u8bf7\u6c42\u8f6c\u53d1\u5230\u540e\u7aef\u6307\u5b9a\u670d\u52a1\u5668 \u9002\u7528\u4e8e\u540e\u7aef\u662f\u7f13\u5b58\u670d\u52a1\u5668\u573a\u666f \u9ed8\u8ba4\u662f\u9759\u6001\u7b97\u6cd5，\u4e5f\u53ef\u4ee5\u901a\u8fc7hash-type\u6307\u5b9amap-based\u548cconsistent，\u6765\u5b9a\u4e49\u4f7f\u7528\u53d6\u6a21\u6cd5\u8fd8\u662f\u4e00\u81f4\u6027hash<\/p>\n
#\u4e3b\u5907\u5b9e\u9a8c\u73af\u5883
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index1.html
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index2.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index1.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index2.html<\/p>\n
#\u8bbe\u5b9auri\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 uri
\n\u00a0 \u00a0 hash-type \u00a0\u00a0 \u00a0consistent
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061814-698d70a6ed65c.png\")
<\/p>\n
url_param<\/p>\n
url_param\u5bf9\u7528\u6237\u8bf7\u6c42\u7684url\u4e2d\u7684 params \u90e8\u5206\u4e2d\u7684\u4e00\u4e2a\u53c2\u6570key\u5bf9\u5e94\u7684value\u503c\u4f5chash\u8ba1\u7b97，\u5e76\u7531\u670d\u52a1\u5668\u603b\u6743\u91cd\u76f8\u9664\u4ee5\u540e\u6d3e\u53d1\u81f3\u67d0\u6311\u51fa\u7684\u670d\u52a1\u5668,\u540e\u7aef\u641c\u7d22\u540c\u4e00\u4e2a\u6570\u636e\u4f1a\u88ab\u8c03\u5ea6\u5230\u540c\u4e00\u4e2a\u670d\u52a1\u5668，\u591a\u7528\u4e0e\u7535\u5546 \u901a\u5e38\u7528\u4e8e\u8ffd\u8e2a\u7528\u6237，\u4ee5\u786e\u4fdd\u6765\u81ea\u540c\u4e00\u4e2a\u7528\u6237\u7684\u8bf7\u6c42\u59cb\u7ec8\u53d1\u5f80\u540c\u4e00\u4e2areal server \u5982\u679c\u65e0\u6ca1key，\u5c06\u6309roundrobin\u7b97\u6cd5<\/p>\n
#\u4e3b\u5907\u5b9e\u9a8c\u73af\u5883
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index1.html
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index2.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index1.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index2.html<\/p>\n
#\u8bbe\u5b9aurl_param\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 url_param name
\n\u00a0 \u00a0 hash-type \u00a0\u00a0 \u00a0consistent
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260212061815-698d70a73dcd7.png\")
<\/p>\n
hdr<\/p>\n
\u9488\u5bf9\u7528\u6237\u6bcf\u4e2ahttp\u5934\u90e8(header)\u8bf7\u6c42\u4e2d\u7684\u6307\u5b9a\u4fe1\u606f\u505ahash， \u6b64\u5904\u7531 name \u6307\u5b9a\u7684http\u9996\u90e8\u5c06\u4f1a\u88ab\u53d6\u51fa\u5e76\u505ahash\u8ba1\u7b97， \u7136\u540e\u7531\u670d\u52a1\u5668\u603b\u6743\u91cd\u53d6\u6a21\u4ee5\u540e\u6d3e\u53d1\u81f3\u67d0\u6311\u51fa\u7684\u670d\u52a1\u5668，\u5982\u679c\u65e0\u6709\u6548\u503c，\u5219\u4f1a\u4f7f\u7528\u9ed8\u8ba4\u7684\u8f6e\u8be2\u8c03\u5ea6\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 hdr（User-Agent）
\n\u00a0 \u00a0 hash-type \u00a0\u00a0 \u00a0consistent
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"2026-02-12kgix50ovi4i.png\")
<\/p>\n
（4）\u57fa\u4e8ecookie\u7684\u4f1a\u8bdd\u4fdd\u6301<\/p>\n
cookie value：\u4e3a\u5f53\u524dserver\u6307\u5b9acookie\u503c，\u5b9e\u73b0\u57fa\u4e8ecookie\u7684\u4f1a\u8bdd\u9ecf\u6027，\u76f8\u5bf9\u4e8e\u57fa\u4e8e source \u5730\u5740hash \u8c03\u5ea6\u7b97\u6cd5\u5bf9\u5ba2\u6237\u7aef\u7684\u7c92\u5ea6\u66f4\u7cbe\u51c6，\u4f46\u540c\u65f6\u4e5f\u52a0\u5927\u4e86haproxy\u8d1f\u8f7d，\u76ee\u524d\u6b64\u6a21\u5f0f\u4f7f\u7528\u8f83\u5c11， \u5df2\u7ecf\u88absession\u5171\u4eab\u670d\u52a1\u5668\u4ee3\u66ff<\/p>\n
\u5982\u679c\u5728haprorxy\u4e2d\u8bbe\u5b9a\u7b97\u6cd5\u4e3asource，\u5728\u540c\u4e00\u53f0\u5ba2\u6237\u7aef\u4e3b\u673a\u4e2d，\u65e0\u8bba\u4f7f\u7528\u4ec0\u4e48\u6d4f\u89c8\u5668\u8bbf\u95ee\u7684\u6700\u7ec8\u670d\u52a1\u5668\u662f\u540c\u4e00\u4e2a \u53ef\u4ee5\u4f7f\u7528cookie\u503c\u8fdb\u884c\u4f18\u5316，\u8ba9\u540c\u4e00\u53f0\u5ba2\u6237\u7aef\u4e2d\u540c\u4e00\u4e2a\u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\u7684\u662f\u540c\u4e00\u4e2a\u670d\u52a1\u5668 \u4e0d\u540c\u6d4f\u89c8\u5668\u8bbf\u95ee\u7684\u662f\u4e0d\u540c\u7684\u670d\u52a1\u5668<\/p>\n
\u914d\u7f6e\u9009\u9879<\/p>\n
cookie name [ rewrite | insert | prefix ][ indirect ] [ nocache ][ postonly ] [ preserve ][ httponly ] [ secure ][ domain ]* [ maxidle <idle> ][ maxlife ]<\/p>\n
\nname：\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#cookie \u7684 key\u540d\u79f0，\u7528\u4e8e\u5b9e\u73b0\u6301\u4e45\u8fde\u63a5
\ninsert：\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u63d2\u5165\u65b0\u7684cookie,\u9ed8\u8ba4\u4e0d\u63d2\u5165cookie
\nindirect：\u00a0\u00a0 \u00a0#\u5982\u679c\u5ba2\u6237\u7aef\u5df2\u7ecf\u6709cookie,\u5219\u4e0d\u4f1a\u518d\u53d1\u9001cookie\u4fe1\u606f
\nnocache：\u00a0\u00a0 \u00a0#\u5f53client\u548chapoxy\u4e4b\u95f4\u6709\u7f13\u5b58\u670d\u52a1\u5668（\u5982：CDN）\u65f6，\u4e0d\u5141\u8bb8\u4e2d\u95f4\u7f13\u5b58\u5668\u7f13\u5b58cookie，
\n\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 #\u56e0\u4e3a\u8fd9\u4f1a\u5bfc\u81f4\u5f88\u591a\u7ecf\u8fc7\u540c\u4e00\u4e2aCDN\u7684\u8bf7\u6c42\u90fd\u53d1\u9001\u5230\u540c\u4e00\u53f0\u540e\u7aef\u670d\u52a1\u5668<\/p>\n
#\u914d\u5408\u57fa\u4e8ecookie\u7684\u4f1a\u8bdd\u4fdd\u6301\u65b9\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 hash-type \u00a0 consistent
\n\u00a0 \u00a0 cookie WEBCOOKIE insert nocache indirect
\n\u00a0 \u00a0 server haha 192.168.0.10:80 cookie web1 check inter 3s fall 3 rise 5 weight 2
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 cookie web2 check inter 3s fall 3 rise 5 weight 1![\"\"](\"2026-02-124qei1x0z3ky.png\")
<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"2026-02-12r01y50oys0g.png\")
<\/p>\n
![\"\"](\"2026-02-12hbueb3oz5ww.png\")
<\/p>\n
（5）HAProxy\u72b6\u6001\u9875<\/p>\n
\u901a\u8fc7web\u754c\u9762，\u663e\u793a\u5f53\u524dHAProxy\u7684\u8fd0\u884c\u72b6\u6001<\/p>\n
\u72b6\u6001\u9875\u914d\u7f6e\u9879<\/p>\n
stats enable\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 #\u57fa\u4e8e\u9ed8\u8ba4\u7684\u53c2\u6570\u542f\u7528stats page
\nstats hide-version\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 #\u5c06\u72b6\u6001\u9875\u4e2dhaproxy\u7248\u672c\u9690\u85cf
\nstats refresh <delay>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0#\u8bbe\u5b9a\u81ea\u52a8\u5237\u65b0\u65f6\u95f4\u95f4\u9694，\u9ed8\u8ba4\u4e0d\u81ea\u52a8\u5237\u65b0
\nstats uri <prefix>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 #\u81ea\u5b9a\u4e49stats page uri，\u9ed8\u8ba4\u503c：\/haproxy?stats\u00a0
\nstats auth <user>:<passwd>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0#\u8ba4\u8bc1\u65f6\u7684\u8d26\u53f7\u548c\u5bc6\u7801，\u53ef\u5b9a\u4e49\u591a\u4e2a\u7528\u6237,\u6bcf\u884c\u6307\u5b9a\u4e00\u4e2a\u7528\u6237
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 #\u9ed8\u8ba4：no authentication
\nstats admin { if | unless } <cond>\u00a0 \u00a0 \u00a0 #\u542f\u7528stats page\u4e2d\u7684\u7ba1\u7406\u529f\u80fd<\/p>\n
\u542f\u7528\u72b6\u6001\u9875<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten stats
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 bind 0.0.0.0:4321
\n\u00a0 \u00a0 stats \u00a0 \u00a0 \u00a0 enable
\n\u00a0 \u00a0 log \u00a0 \u00a0 \u00a0 \u00a0 global
\n# \u00a0 stats \u00a0 \u00a0 \u00a0 refresh
\n\u00a0 \u00a0 stats uri \u00a0 \/status\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0#\u81ea\u5b9a\u4e49stats page uri
\n\u00a0 \u00a0 stats auth \u00a0lee:lee\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0#\u8ba4\u8bc1，\u6b64\u884c\u53ef\u4ee5\u51fa\u73b0\u591a\u6b21
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
\u767b\u5f55\u6d4b\u8bd5<\/p>\n
![\"\"](\"2026-02-1213wunmi4vnu.png\")
<\/p>\n
\u767b\u5f55\u72b6\u6001\u9875<\/p>\n
#pid\u4e3a\u5f53\u524dpid\u53f7，process\u4e3a\u5f53\u524d\u8fdb\u7a0b\u53f7，nbproc\u548cnbthread\u4e3a\u4e00\u5171\u591a\u5c11\u8fdb\u7a0b\u548c\u6bcf\u4e2a\u8fdb\u7a0b\u591a\u5c11\u4e2a\u7ebf\u7a0b
\npid = 27134 (process #1, nbproc = 1, nbthread = 1)\u00a0<\/p>\n
#\u542f\u52a8\u4e86\u591a\u957f\u65f6\u95f4
\nuptime = 0d 0h00m04s\u00a0<\/p>\n
#\u7cfb\u7edf\u8d44\u6e90\u9650\u5236：\u5185\u5b58\/\u6700\u5927\u6253\u5f00\u6587\u4ef6\u6570\/
\nsystem limits: memmax = unlimited; ulimit-n = 200029\u00a0<\/p>\n
#\u6700\u5927socket\u8fde\u63a5\u6570\/\u5355\u8fdb\u7a0b\u6700\u5927\u8fde\u63a5\u6570\/\u6700\u5927\u7ba1\u9053\u6570maxpipes
\nmaxsock = 200029; maxconn = 100000; maxpipes = 0\u00a0<\/p>\n
#\u5f53\u524d\u8fde\u63a5\u6570\/\u5f53\u524d\u7ba1\u9053\u6570\/\u5f53\u524d\u8fde\u63a5\u901f\u7387
\ncurrent conns = 2; current pipes = 0\/0; conn rate = 2\/sec; bit rate = 0.000 kbps\u00a0<\/p>\n
#\u8fd0\u884c\u7684\u4efb\u52a1\/\u5f53\u524d\u7a7a\u95f2\u7387
\nRunning tasks: 1\/14; idle = 100 %\u00a0<\/p>\n
\nactive UP：\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u5728\u7ebf\u670d\u52a1\u5668
\nbackup UP： \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u6807\u8bb0\u4e3abackup\u7684\u670d\u52a1\u5668
\nactive UP, going down：\u00a0\u00a0 \u00a0#\u76d1\u6d4b\u672a\u901a\u8fc7\u6b63\u5728\u8fdb\u5165down\u8fc7\u7a0b
\nbackup UP, going down：\u00a0\u00a0 \u00a0#\u5907\u4efd\u670d\u52a1\u5668\u6b63\u5728\u8fdb\u5165down\u8fc7\u7a0b
\nactive DOWN, going up：\u00a0\u00a0 \u00a0#down\u7684\u670d\u52a1\u5668\u6b63\u5728\u8fdb\u5165up\u8fc7\u7a0b
\nbackup DOWN, going up：\u00a0\u00a0 \u00a0#\u5907\u4efd\u670d\u52a1\u5668\u6b63\u5728\u8fdb\u5165up\u8fc7\u7a0b
\nactive or backup DOWN：\u00a0\u00a0 \u00a0#\u5728\u7ebf\u7684\u670d\u52a1\u5668\u6216\u8005\u662fbackup\u7684\u670d\u52a1\u5668\u5df2\u7ecf\u8f6c\u6362\u6210\u4e86down\u72b6\u6001
\nnot checked：\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u6807\u8bb0\u4e3a\u4e0d\u76d1\u6d4b\u7684\u670d\u52a1\u5668<\/p>\n
#active\u6216\u8005backup\u670d\u52a1\u5668\u4eba\u4e3a\u4e0b\u7ebf\u7684
\nactive or backup DOWN for maintenance (MAINT)<\/p>\n
#active\u6216\u8005backup\u88ab\u4eba\u4e3a\u8f6f\u4e0b\u7ebf(\u4eba\u4e3a\u5c06weight\u6539\u62100)
\nactive or backup SOFT STOPPED for maintenance<\/p>\n
backend server\u4fe1\u606f<\/p>\n
session rate(\u6bcf\u79d2\u7684\u8fde\u63a5\u4f1a\u8bdd\u4fe1\u606f):\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0Errors(\u9519\u8bef\u7edf\u8ba1\u4fe1\u606f)：
\ncur:\u6bcf\u79d2\u7684\u5f53\u524d\u4f1a\u8bdd\u6570\u91cf :\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0Req:\u9519\u8bef\u8bf7\u6c42\u91cf
\nmax:\u6bcf\u79d2\u65b0\u7684\u6700\u5927\u4f1a\u8bdd\u6570\u91cf \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 conn:\u9519\u8bef\u94fe\u63a5\u91cf
\nlimit:\u6bcf\u79d2\u65b0\u7684\u4f1a\u8bdd\u9650\u5236\u91cf\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0Resp:\u9519\u8bef\u54cd\u5e94\u91cf
\nsessions(\u4f1a\u8bdd\u4fe1\u606f):\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0Warnings(\u8b66\u544a\u7edf\u8ba1\u4fe1\u606f)：
\ncur:\u5f53\u524d\u4f1a\u8bdd\u91cf\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 Retr:\u91cd\u65b0\u5c1d\u8bd5\u6b21\u6570
\nmax:\u6700\u5927\u4f1a\u8bdd\u91cf\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Redis:\u518d\u6b21\u53d1\u9001\u6b21\u6570
\nlimit: \u9650\u5236\u4f1a\u8bdd\u91cf
\nTotal:\u603b\u5171\u4f1a\u8bdd\u91cf \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 Server(real server\u4fe1\u606f)：
\nLBTot:\u9009\u4e2d\u4e00\u53f0\u670d\u52a1\u5668\u6240\u7528\u7684\u603b\u65f6\u95f4 \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 Status:\u540e\u7aef\u673a\u7684\u72b6\u6001，\u5305\u62ecUP\u548cDOWN
\nLast：\u548c\u670d\u52a1\u5668\u7684\u6301\u7eed\u8fde\u63a5\u65f6\u95f4 \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 LastChk:\u6301\u7eed\u68c0\u67e5\u540e\u7aef\u670d\u52a1\u5668\u7684\u65f6\u95f4
\nWght:\u6743\u91cd
\nBytes(\u6d41\u91cf\u7edf\u8ba1)： \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 Act:\u6d3b\u52a8\u94fe\u63a5\u6570\u91cf
\nIn:\u7f51\u7edc\u7684\u5b57\u8282\u8f93\u5165\u603b\u91cf \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 Bck:\u5907\u4efd\u7684\u670d\u52a1\u5668\u6570\u91cf
\nOut:\u7f51\u7edc\u7684\u5b57\u8282\u8f93\u51fa\u603b\u91cf \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Chk:\u5fc3\u8df3\u68c0\u6d4b\u65f6\u95f4
\nDwn:\u540e\u7aef\u670d\u52a1\u5668\u8fde\u63a5\u540e\u90fd\u662fDOWN\u7684\u6570\u91cf
\nDenied(\u62d2\u7edd\u7edf\u8ba1\u4fe1\u606f)： \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Dwntme:\u603b\u7684downtime\u65f6\u95f4
\nReq:\u62d2\u7edd\u8bf7\u6c42\u91cf \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Thrtle:server \u72b6\u6001
\nResp:\u62d2\u7edd\u56de\u590d\u91cf<\/p>\n
\u5f00\u542f\u81ea\u52a8\u5237\u65b0<\/p>\n
![\"\"](\"2026-02-12nzbpocotqat.png\")
<\/p>\n
![\"\"](\"2026-02-1235iwtozodbc.png\")
<\/p>\n
（6）IP\u900f\u4f20<\/p>\n
web\u670d\u52a1\u5668\u4e2d\u9700\u8981\u8bb0\u5f55\u5ba2\u6237\u7aef\u7684\u771f\u5b9eIP\u5730\u5740，\u7528\u4e8e\u505a\u8bbf\u95ee\u7edf\u8ba1\u3001\u5b89\u5168\u9632\u62a4\u3001\u884c\u4e3a\u5206\u6790\u3001\u533a\u57df\u6392\u884c\u7b49\u573a\u666f\u3002<\/p>\n
\u4e03\u5c42IP\u900f\u4f20<\/p>\n
\u5f53haproxy\u5de5\u4f5c\u5728\u4e03\u5c42\u7684\u65f6\u5019，\u4e5f\u53ef\u4ee5\u900f\u4f20\u5ba2\u6237\u7aef\u771f\u5b9eIP\u81f3\u540e\u7aef\u670d\u52a1\u5668<\/p>\n
\u5728\u7531haproxy\u53d1\u5f80\u540e\u7aef\u4e3b\u673a\u7684\u8bf7\u6c42\u62a5\u6587\u4e2d\u6dfb\u52a0\u201cX-Forwarded-For"\u9996\u90e8，\u5176\u503c\u4e3a\u524d\u7aef\u5ba2\u6237\u7aef\u7684\u5730\u5740；\u7528\u4e8e\u5411\u540e\u7aef\u4e3b\u53d1\u9001\u771f\u5b9e\u7684\u5ba2\u6237\u7aefIP<\/p>\n
#\u5b9e\u9a8c\u73af\u5883
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5\u73af\u5883<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..5}
\n> do
\n> curl 172.25.254.100
\n> done
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10<\/p>\n
#\u5728rs\u4e3b\u673a\u4e2d\u9ed8\u8ba4\u662f\u672a\u5f00\u542f\u900f\u4f20\u529f\u80fd\u7684<\/p>\n
![\"\"](\"2026-02-12bpt1aouazbm.png\")
<\/p>\n
#\u5f00\u542fip\u900f\u4f20\u7684\u65b9\u5f0f
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\ndefaults
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 log \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 global
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0httplog
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0dontlognull
\n\u00a0 \u00a0 option http-server-close
\n\u00a0 \u00a0 option forwardfor \u00a0 \u00a0 \u00a0 except 127.0.0.0\/8\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u5f00\u542fhaproxy\u900f\u4f20\u529f\u80fd
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0redispatch
\n\u00a0 \u00a0 retries \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3
\n\u00a0 \u00a0 timeout http-request \u00a0 \u00a010s
\n\u00a0 \u00a0 timeout queue \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1m
\n\u00a0 \u00a0 timeout connect \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 timeout client \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout server \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout http-keep-alive 10s
\n\u00a0 \u00a0 timeout check \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 maxconn \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3000<\/p>\n
#\u5728rs\u4e2d\u8bbe\u5b9a\u91c7\u96c6\u900f\u4f20IP
\n[root@webserver2 ~]# \u00a0vim \/etc\/httpd\/conf\/httpd.conf
\n201 \u00a0 \u00a0 LogFormat "%h %l %u %t \\\\"%r\\\\" %>s %b \\\\"%{X-Forwarded-For}i\\\\" \\\\"%{Referer}i\\\\" \\\\"%{User-Agent}i \u00a0 \u00a0\\\\"" combined<\/p>\n
[root@webserver2 ~]# systemctl restart httpd<\/p>\n
![\"\"](\"2026-02-12tmkhhgv4eub.png\")
<\/p>\n
\u56db\u5c42IP\u900f\u4f20<\/p>\n
#\u73af\u5883\u8bbe\u7f6e
\n#\u5728RS\u4e2d\u628aapache\u505c\u6b62
\n[root@webserver1 ~]# systemctl disable –now httpd
\n[root@webserver2 ~]# systemctl disable –now httpd<\/p>\n
#\u90e8\u7f72nginx
\n[root@webserver1 ~]# dnf install nginx -y
\n[root@webserver2 ~]# dnf install nginx -y
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/usr\/share\/nginx\/html\/index.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/usr\/share\/nginx\/html\/index.html
\n[root@webserver1 ~]# systemctl enable –now nginx
\n[root@webserver2 ~]# systemctl enable –now nginx<\/p>\n
#\u6d4b\u73af\u5883
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..5}; do curl 172.25.254.100; done
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10<\/p>\n
#\u542f\u7528nginx\u7684\u56db\u5c42\u8bbf\u95ee\u63a7\u5236
\n[root@webserver1 ~]# vim \/etc\/nginx\/nginx.conf
\n\u00a0 \u00a0 server {
\n\u00a0 \u00a0 \u00a0 \u00a0 listen \u00a0 \u00a0 \u00a0 80 proxy_protocol;\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u542f\u7528\u56db\u5c42\u8bbf\u95ee\u63a7\u5236
\n\u00a0 \u00a0 \u00a0 \u00a0 listen \u00a0 \u00a0 \u00a0 [::]:80;
\n\u00a0 \u00a0 \u00a0 \u00a0 server_name \u00a0_;
\n\u00a0 \u00a0 \u00a0 \u00a0 root \u00a0 \u00a0 \u00a0 \u00a0 \/usr\/share\/nginx\/html;<\/p>\n
\u00a0 \u00a0 \u00a0 \u00a0 # Load configuration files for the default server block.
\n\u00a0 \u00a0 \u00a0 \u00a0 include \/etc\/nginx\/default.d\/*.conf;<\/p>\n
\u00a0 \u00a0 \u00a0 \u00a0 error_page 404 \/404.html;
\n\u00a0 \u00a0 \u00a0 \u00a0 location = \/404.html {
\n\u00a0 \u00a0 \u00a0 \u00a0 }
\n\u00a0 \u00a0 \u00a0 \u00a0\u00a0
\n[root@webserver2 ~]# vim \/etc\/nginx\/nginx.conf
\n\u00a0 \u00a0 server {
\n\u00a0 \u00a0 \u00a0 \u00a0 listen \u00a0 \u00a0 \u00a0 80 proxy_protocol;\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u542f\u7528\u56db\u5c42\u8bbf\u95ee\u63a7\u5236
\n\u00a0 \u00a0 \u00a0 \u00a0 listen \u00a0 \u00a0 \u00a0 [::]:80;
\n\u00a0 \u00a0 \u00a0 \u00a0 server_name \u00a0_;
\n\u00a0 \u00a0 \u00a0 \u00a0 root \u00a0 \u00a0 \u00a0 \u00a0 \/usr\/share\/nginx\/html;<\/p>\n
\u00a0 \u00a0 \u00a0 \u00a0 # Load configuration files for the default server block.
\n\u00a0 \u00a0 \u00a0 \u00a0 include \/etc\/nginx\/default.d\/*.conf;<\/p>\n
\u00a0 \u00a0 \u00a0 \u00a0 error_page 404 \/404.html;
\n\u00a0 \u00a0 \u00a0 \u00a0 location = \/404.html {
\n\u00a0 \u00a0 \u00a0 \u00a0 }
\n\u00a0 \u00a0 \u00a0 \u00a0\u00a0
\n[root@webserver1 ~]# systemctl restart nginx.service
\n[root@webserver2 ~]# systemctl restart nginx.service<\/p>\n
#\u6d4b\u8bd5
\nAdministrator.DESKTOP-VJ307M3] \u27a4 for i in {1..5}; do curl 172.25.254.100; done
\n<html><body><h1>502 Bad Gateway<\/h1>
\nThe server returned an invalid or incomplete response.
\n<\/body><\/html><\/p>\n
\u51fa\u73b0\u4e0a\u8ff0\u62a5\u9519\u6807\u8bc6nginx\u53ea\u652f\u6301\u56db\u5c42\u8bbf\u95ee<\/p>\n
#\u8bbe\u5b9ahaproxy\u8bbf\u95ee4\u5c42
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0tcp\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u56db\u5c42\u8bbf\u95ee
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:80 send-proxy check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 send-proxy check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5\u56db\u5c42\u8bbf\u95ee<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..5}; do curl 172.25.254.100; done
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10<\/p>\n
\n#\u8bbe\u7f6e4\u5c42ip\u900f\u4f20
\n[root@webserver1&2 ~]# vim \/etc\/nginx\/nginx.conf<\/p>\n
\u00a0 \u00a0 log_format \u00a0main \u00a0'$remote_addr – $remote_user [$time_local] "$request" '
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 '"$proxy_protocol_addr"'\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u91c7\u96c6\u900f\u4f20\u4fe1\u606f
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 '$status $body_bytes_sent "$http_referer" '
\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 '"$http_user_agent" "$http_x_forwarded_for"';<\/p>\n
\n[root@webserver1&2 ~]# systemctl restart nginx.service<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..5}; do curl 172.25.254.100; done
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20
\nRS1 – 192.168.0.10
\nRS2 – 192.168.0.20<\/p>\n
![\"\"](\"2026-02-12yhmhvm3tmut.png\")
<\/p>\n
（7）\u56db\u5c42\u8d1f\u8f7d<\/p>\n
\u9488\u5bf9\u9664HTTP\u4ee5\u5916\u7684TCP\u534f\u8bae\u5e94\u7528\u670d\u52a1\u8bbf\u95ee\u7684\u5e94\u7528\u573a\u666f<\/p>\n
MySQL
\nRedis
\nMemcache
\nRabbitMQ<\/p>\n
1.\u73af\u5883\u8bbe\u5b9a<\/p>\n
#\u90e8\u7f72mariadb\u6570\u636e\u5e93
\n[root@webserver1+2 ~]# dnf install mariadb-server mariadb \u00a0-y
\n[root@webserver1+1 ~]# vim \/etc\/my.cnf.d\/mariadb-server.cnf
\n[mysqld]
\nserver_id=10\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u8bbe\u5b9a\u6570\u636e\u5e93\u6240\u5728\u4e3b\u673a\u7684id\u6807\u8bc6，\u572820\u4e0a\u8bbe\u5b9aid\u4e3a20
\ndatadir=\/var\/lib\/mysql
\nsocket=\/var\/lib\/mysql\/mysql.sock
\nlog-error=\/var\/log\/mariadb\/mariadb.log
\npid-file=\/run\/mariadb\/mariadb.pid<\/p>\n
\n#\u5efa\u7acb\u8fdc\u7a0b\u767b\u5f55\u7528\u6237\u5e76\u6388\u6743<\/p>\n
![\"\"](\"2026-02-12refl2ydqhy4.png\")
<\/p>\n
#\u6d4b\u8bd5
\n[root@webserver2 ~]# mysql -ulee -plee -h 192.168.0.20 \u00a0 #\u6d4b\u8bd510\u65f6\u4fee\u6539ip\u5373\u53ef<\/p>\n
![\"\"](\"2026-02-124ym1oqyndoo.png\")
<\/p>\n
2.\u56db\u5c42\u8d1f\u8f7d\u64cd\u4f5c<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten mariadbcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:6663
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0tcp
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:3306 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:3306 \u00a0check inter 3s fall 3 rise 5 weight 1
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\n
#\u68c0\u6d4b\u7aef\u53e3
\n[root@haproxy ~]# netstat -antlupe \u00a0| grep haproxy
\ntcp \u00a0 \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a00 0.0.0.0:6663 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a00.0.0.0:* \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 LISTEN \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a0 \u00a0 \u00a044430 \u00a0 \u00a0 \u00a02136\/haproxy
\ntcp \u00a0 \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a00 0.0.0.0:80 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a00.0.0.0:* \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 LISTEN \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a0 \u00a0 \u00a044429 \u00a0 \u00a0 \u00a02136\/haproxy
\ntcp \u00a0 \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a00 0.0.0.0:4321 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a00.0.0.0:* \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 LISTEN \u00a0 \u00a0 \u00a00 \u00a0 \u00a0 \u00a0 \u00a0 \u00a044431 \u00a0 \u00a0 \u00a02136\/haproxy<\/p>\n
backup\u53c2\u6570<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten mariadbcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:6663
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0tcp
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:3306 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:3306 \u00a0check inter 3s fall 3 rise 5 weight 1 backup<\/p>\n
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. \u00a0Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\n
Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| \u00a0 \u00a0 \u00a0 \u00a0 \u00a010 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\n
MariaDB [(none)]> quit
\nBye<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. \u00a0Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\n
Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| \u00a0 \u00a0 \u00a0 \u00a0 \u00a010 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\n
MariaDB [(none)]> quit
\nBye<\/p>\n
\n#\u5173\u95ed10\u7684mariadb\u5e76\u7b49\u5f851\u5206\u949f
\n[root@webserver1 ~]# systemctl stop mariadb
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 1 "Operation not permitted" \u00a0 \u00a0#\u6807\u8bc6haproxy \u6ca1\u6709\u5b8c\u6210\u6545\u969c\u8f6c\u6362，\u9700\u8981\u7b49\u5f85
\n\u00a0\u00a0
\n\u00a0\u00a0
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. \u00a0Commands end with ; or \\\\g.
\nYour MariaDB connection id is 11
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\n
Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| \u00a0 \u00a0 \u00a0 \u00a0 \u00a020 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\n
MariaDB [(none)]><\/p>\n
\n#\u8fd8\u539f\u6545\u969c\u4e3b\u673a\u7b49\u5f85\u7247\u523b
\n[root@webserver1 ~]# systemctl start mariadb<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. \u00a0Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\n
Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| \u00a0 \u00a0 \u00a0 \u00a0 \u00a010 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\n
MariaDB [(none)]><\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663<\/p>\n
![\"\"](\"2026-02-12b3xm2eyhzor.png\")
<\/p>\n
（8）\u81ea\u5b9a\u4e49haproxy\u9519\u8bef\u754c\u9762<\/p>\n
\u5bf9\u6307\u5b9a\u7684\u62a5\u9519\u8fdb\u884c\u91cd\u5b9a\u5411，\u8fdb\u884c\u4f18\u96c5\u7684\u663e\u793a\u9519\u8bef\u9875\u9762 \u4f7f\u7528errorfile\u548cerrorloc\u6307\u4ee4\u7684\u4e24\u79cd\u65b9\u6cd5，\u53ef\u4ee5\u5b9e\u73b0\u81ea\u5b9a\u4e49\u5404\u79cd\u9519\u8bef\u9875\u9762<\/p>\n
1.sorryserver\u7684\u8bbe\u5b9a<\/p>\n
\u6b63\u5e38\u7684\u6240\u6709\u670d\u52a1\u5668\u5982\u679c\u51fa\u73b0\u5b95\u673a，\u90a3\u4e48\u5ba2\u6237\u5c06\u88ab\u5b9a\u5411\u5230\u6307\u5b9a\u7684\u4e3b\u673a\u4e2d，\u8fd9\u4e2a\u5f53\u4e1a\u52a1\u4e3b\u673a\u51fa\u95ee\u9898\u65f6\u88ab\u4e34\u65f6\u8bbf\u95ee\u7684\u4e3b\u673a\u53eb\u505asorryserver<\/p>\n
#\u5728\u65b0\u4e3b\u673a\u4e2d\u5b89\u88c5apache（\u53ef\u4ee5\u7528haproxy\u4e3b\u673a\u4ee3\u66ff）
\n[root@haproxy ~]# dnf install httpd -y
\n[root@haproxy ~]# vim \/etc\/httpd\/conf\/httpd.conf
\n47 Listen 8080
\n[root@haproxy ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service.<\/p>\n
[root@haproxy ~]# echo "\u674e\u54e5\u5728，\u6ca1\u610f\u5916" > \/var\/www\/html\/index.html<\/p>\n
\n#\u914d\u7f6esorryserver\u4e0a\u7ebf\u3001
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0tcp
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:80 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server wuwu 192.168.0.100:8080 \u00a0backup\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#sorryserver
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"2026-02-12oa3kvxcsk1m.png\")
<\/p>\n
![\"\"](\"2026-02-12ljtdr1e4zpb.png\")
<\/p>\n
#\u5173\u95ed\u4e24\u53f0\u6b63\u5e38\u7684\u4e1a\u52a1\u4e3b\u673a
\n[root@webserver1+2 ~]# systemctl stop httpd<\/p>\n
![\"\"](\"2026-02-121ecsyo4s4fy.png\")
<\/p>\n
2.\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762<\/p>\n
\u5f53\u6240\u6709\u4e3b\u673a\u5305\u62ecsorryserver\u90fd\u5b95\u673a\u4e86，\u90a3\u4e48haproxy\u4f1a\u63d0\u4f9b\u4e00\u4e2a\u9ed8\u8ba4\u8bbf\u95ee\u7684\u9519\u8bef\u9875\u9762，\u8fd9\u4e2a\u9519\u8bef\u9875\u9762\u8ddf\u62a5\u9519\u4ee3\u7801\u6709\u5173，\u8fd9\u4e2a\u9875\u9762\u53ef\u4ee5\u901a\u8fc7\u5b9a\u4e49\u6765\u673a\u578b\u8bbe\u7f6e<\/p>\n
#\u51fa\u73b0\u7684\u9519\u8bef\u9875\u9762
\n[root@webserver1+2 ~]# systemctl stop httpd
\n[root@haproxy ~]# systemctl stop httpd<\/p>\n
#\u6240\u6709\u540e\u7aefweb\u670d\u52a1\u90fd\u5b95\u673a<\/p>\n
![\"\"](\"2026-02-122kplgpnnzf0.png\")
<\/p>\n
[root@haproxy ~]# mkdir \/errorpage\/html\/ -p
\n[root@haproxy ~]# vim \/errorpage\/html\/503.http
\nHTTP\/1.0 503 Service Unavailable
\nCache-Control: no-cache
\nConnection: close
\nContent-Type: text\/html;charset=UTF-8<\/p>\n
<html><body><h1>\u4ec0\u4e48\u52a8\u7269\u751f\u6c14\u6700\u5b89\u9759<\/h1>
\n\u5927\u7329\u7329！！
\n<\/body><\/html><\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\ndefaults
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 log \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 global
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0httplog
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0dontlognull
\n\u00a0 \u00a0 option http-server-close
\n\u00a0 \u00a0 option forwardfor \u00a0 \u00a0 \u00a0 except 127.0.0.0\/8
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0redispatch
\n\u00a0 \u00a0 retries \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3
\n\u00a0 \u00a0 timeout http-request \u00a0 \u00a010s
\n\u00a0 \u00a0 timeout queue \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1m
\n\u00a0 \u00a0 timeout connect \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 timeout client \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout server \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout http-keep-alive 10s
\n\u00a0 \u00a0 timeout check \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 maxconn \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3000
\n\u00a0 \u00a0 errorfile 503 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \/errorpage\/html\/503.http\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#error \u9875\u9762<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
![\"\"](\"2026-02-12yawq5ivxqjp.png\")
<\/p>\n
3.\u4ece\u5b9a\u5411\u9519\u8bef\u5230\u6307\u5b9a\u7f51\u7ad9<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\ndefaults
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 log \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 global
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0httplog
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0dontlognull
\n\u00a0 \u00a0 option http-server-close
\n\u00a0 \u00a0 option forwardfor \u00a0 \u00a0 \u00a0 except 127.0.0.0\/8
\n\u00a0 \u00a0 option \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0redispatch
\n\u00a0 \u00a0 retries \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3
\n\u00a0 \u00a0 timeout http-request \u00a0 \u00a010s
\n\u00a0 \u00a0 timeout queue \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1m
\n\u00a0 \u00a0 timeout connect \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 timeout client \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout server \u00a0 \u00a0 \u00a0 \u00a0 \u00a01m
\n\u00a0 \u00a0 timeout http-keep-alive 10s
\n\u00a0 \u00a0 timeout check \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 10s
\n\u00a0 \u00a0 maxconn \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 3000
\n\u00a0 \u00a0 errorloc 503 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http:\/\/www.baidu.com\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#error \u9875\u9762
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u5728\u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee<\/p>\n
![\"\"](\"2026-02-12x04scj4yf4h.png\")
<\/p>\n
（9）ACL\u8bbf\u95ee\u63a7\u5236<\/p>\n
\u8bbf\u95ee\u63a7\u5236\u5217\u8868（ACL，Access Control Lists） \u662f\u4e00\u79cd\u57fa\u4e8e\u5305\u8fc7\u6ee4\u7684\u8bbf\u95ee\u63a7\u5236\u6280\u672f \u5b83\u53ef\u4ee5\u6839\u636e\u8bbe\u5b9a\u7684\u6761\u4ef6\u5bf9\u7ecf\u8fc7\u670d\u52a1\u5668\u4f20\u8f93\u7684\u6570\u636e\u5305\u8fdb\u884c\u8fc7\u6ee4(\u6761\u4ef6\u5339\u914d)\u5373\u5bf9\u63a5\u6536\u5230\u7684\u62a5\u6587\u8fdb\u884c\u5339\u914d\u548c\u8fc7\u6ee4，\u57fa\u4e8e\u8bf7\u6c42\u62a5\u6587\u5934\u90e8\u4e2d\u7684\u6e90\u5730\u5740\u3001\u6e90\u7aef\u53e3\u3001\u76ee\u6807\u5730\u5740\u3001\u76ee\u6807\u7aef\u53e3\u3001\u8bf7\u6c42\u65b9\u6cd5\u3001URL\u3001\u6587\u4ef6\u540e\u7f00\u7b49\u4fe1\u606f\u5185\u5bb9\u8fdb\u884c\u5339\u914d\u5e76\u6267\u884c\u8fdb\u4e00\u6b65\u64cd\u4f5c，\u6bd4\u5982\u5141\u8bb8\u5176\u901a\u8fc7\u6216\u4e22\u5f03\u3002<\/p>\n
ACL\u914d\u7f6e\u9009\u9879<\/p>\n
#\u7528acl\u6765\u5b9a\u4e49\u6216\u58f0\u660e\u4e00\u4e2aacl
\nacl \u00a0\u00a0<aclname> <criterion> \u00a0\u00a0[flags]\u00a0 \u00a0 \u00a0 \u00a0 [operator]\u00a0 \u00a0 \u00a0 \u00a0 \u00a0[<value>]
\nacl \u00a0\u00a0\u00a0\u00a0\u540d\u79f0 \u00a0 \u00a0 \u00a0\u5339\u914d\u89c4\u8303 \u00a0 \u00a0 \u00a0 \u5339\u914d\u6a21\u5f0f \u00a0 \u00a0 \u00a0\u5177\u4f53\u64cd\u4f5c\u7b26 \u00a0 \u00a0\u64cd\u4f5c\u5bf9\u8c61\u7c7b\u578b<\/p>\n
ACL-Name \u540d\u79f0<\/p>\n
acl \u00a0\u00a0 \u00a0test \u00a0\u00a0 \u00a0path_end \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0-m \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0sub \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\/a<\/p>\n
#ACL\u540d\u79f0，\u53ef\u4ee5\u4f7f\u7528\u5927\u5b57\u6bcdA-Z\u3001\u5c0f\u5199\u5b57\u6bcda-z\u3001\u6570\u5b570-9\u3001\u5192\u53f7：\u3001\u70b9.\u3001\u4e2d\u6a2a\u7ebf\u548c\u4e0b\u5212\u7ebf，\u5e76\u4e14\u4e25\u683c\u533a\u5206\u5927\u5c0f\u5199，\u6bd4\u5982:my_acl\u548cMy_Acl\u5c31\u662f\u4e24\u4e2a\u5b8c\u5168\u4e0d\u540c\u7684acl5.8.1.2 ACL-criterion<\/p>\n
ACL-criterion \u5339\u914d\u89c4\u8303<\/p>\n
\u5b9a\u4e49ACL\u5339\u914d\u89c4\u8303，\u5373：\u5224\u65ad\u6761\u4ef6<\/p>\n
hdr string，\u63d0\u53d6\u5728\u4e00\u4e2aHTTP\u8bf7\u6c42\u62a5\u6587\u7684\u9996\u90e8
\nhdr（[<name> [，<occ>]]）：\u5b8c\u5168\u5339\u914d\u5b57\u7b26\u4e32,header\u7684\u6307\u5b9a\u4fe1\u606f，<occ> \u8868\u793a\u5728\u591a\u503c\u4e2d\u4f7f\u7528\u7684\u503c\u7684\u51fa\u73b0\u6b21\u6570
\nhdr_beg（[<name> [，<occ>]]）：\u524d\u7f00\u5339\u914d，header\u4e2d\u6307\u5b9a\u5339\u914d\u5185\u5bb9\u7684begin
\nhdr_end（[<name> [，<occ>]]）：\u540e\u7f00\u5339\u914d，header\u4e2d\u6307\u5b9a\u5339\u914d\u5185\u5bb9end
\nhdr_dom（[<name> [，<occ>]]）：\u57df\u5339\u914d，header\u4e2d\u7684dom（host）<\/p>\n
hdr_dir（[<name> [，<occ>]]）：\u8def\u5f84\u5339\u914d，header\u7684uri\u8def\u5f84
\nhdr_len（[<name> [，<occ>]]）：\u957f\u5ea6\u5339\u914d，header\u7684\u957f\u5ea6\u5339\u914d
\nhdr_reg（[<name> [，<occ>]]）：\u6b63\u5219\u8868\u8fbe\u5f0f\u5339\u914d，\u81ea\u5b9a\u4e49\u8868\u8fbe\u5f0f(regex)\u6a21\u7cca\u5339\u914d
\nhdr_sub（[<name> [，<occ>]]）：\u5b50\u4e32\u5339\u914d，header\u4e2d\u7684uri\u6a21\u7cca\u5339\u914d \u6a21\u7cca\u5339\u914dc \u62a5\u6587\u4e2da\/b\/c\u4e5f\u4f1a\u5339\u914d\u00a0<\/p>\n
#\u793a\u4f8b：
\nhdr(<string>) \u7528\u4e8e\u6d4b\u8bd5\u8bf7\u6c42\u5934\u90e8\u9996\u90e8\u6307\u5b9a\u5185\u5bb9<\/p>\n
hdr_dom(host) \u8bf7\u6c42\u7684host\u540d\u79f0，\u5982 www.timinglee.org
\nhdr_beg(host) \u8bf7\u6c42\u7684host\u5f00\u5934，\u5982 www. \u00a0\u00a0img. \u00a0\u00a0video. \u00a0\u00a0download. \u00a0\u00a0ftp.
\nhdr_end(host) \u8bf7\u6c42\u7684host\u7ed3\u5c3e，\u5982 .com \u00a0\u00a0.net \u00a0\u00a0.cn<\/p>\n
#\u793a\u4f8b：
\nacl bad_agent hdr_sub(User-Agent) -i curl wget
\nhttp-request deny \u00a0if bad_agent<\/p>\n
#\u6709\u4e9b\u529f\u80fd\u662f\u7c7b\u4f3c\u7684，\u6bd4\u5982\u4ee5\u4e0b\u51e0\u4e2a\u90fd\u662f\u5339\u914d\u7528\u6237\u8bf7\u6c42\u62a5\u6587\u4e2dhost\u7684\u5f00\u5934\u662f\u4e0d\u662fwww
\nacl short_form hdr_beg(host) \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 www.
\nacl alternate1 hdr_beg(host) -m beg www.
\nacl alternate2 hdr_dom(host) -m beg www.
\nacl alternate3 hdr(host) \u00a0\u00a0\u00a0\u00a0-m beg www.<\/p>\n
base : string
\n#\u8fd4\u56de\u7b2c\u4e00\u4e2a\u4e3b\u673a\u5934\u548c\u8bf7\u6c42\u7684\u8def\u5f84\u90e8\u5206\u7684\u8fde\u63a5，\u8be5\u8bf7\u6c42\u4ece\u4e3b\u673a\u540d\u5f00\u59cb，\u5e76\u5728\u95ee\u53f7\u4e4b\u524d\u7ed3\u675f,\u5bf9\u865a\u62df\u4e3b\u673a\u6709\u7528
\n<scheme>:\/\/<user>:<password>@#<host>:<port>\/<path>;<params>#?<query>#<frag>
\n\u00a0base \u00a0\u00a0\u00a0\u00a0: exact string match
\n\u00a0base_beg : prefix match
\n\u00a0base_dir : subdir match
\n\u00a0base_dom : domain match
\n\u00a0base_end : suffix match
\n\u00a0base_len : length match
\n\u00a0base_reg : regex match
\n\u00a0base_sub : substring match<\/p>\n
path : string
\n#\u63d0\u53d6\u8bf7\u6c42\u7684URL\u8def\u5f84，\u8be5\u8def\u5f84\u4ece\u7b2c\u4e00\u4e2a\u659c\u6760\u5f00\u59cb，\u5e76\u5728\u95ee\u53f7\u4e4b\u524d\u7ed3\u675f（\u65e0\u4e3b\u673a\u90e8\u5206）
\n<scheme>:\/\/<user>:<password>@<host>:<port>#\/<path>;<params>#?<query>#<frag>
\n\u00a0path \u00a0\u00a0\u00a0\u00a0: exact string match
\n\u00a0path_beg : prefix match \u00a0#\u8bf7\u6c42\u7684URL\u5f00\u5934，\u5982\/static\u3001\/images\u3001\/img\u3001\/css
\n\u00a0path_end : suffix match \u00a0#\u8bf7\u6c42\u7684URL\u4e2d\u8d44\u6e90\u7684\u7ed3\u5c3e，\u5982 .gif .png .css .js .jpg \u00a0.jpeg
\n\u00a0path_dom : domain match
\n\u00a0path_dir : subdir match
\n\u00a0path_len : length match
\n\u00a0path_reg : regex match
\n\u00a0path_sub : substring match<\/p>\n
#\u793a\u4f8b：
\n\u00a0path_beg -i \/haproxy-status\/\u00a0
\n\u00a0path_end .jpg .jpeg .png .gif\u00a0
\n\u00a0path_reg ^\/images.*\\\\.jpeg$\u00a0
\n\u00a0path_sub image \u00a0
\n\u00a0path_dir jpegs\u00a0
\n\u00a0path_dom timinglee<\/p>\n
url : string
\n#\u63d0\u53d6\u8bf7\u6c42\u4e2d\u7684\u6574\u4e2aURL\u3002
\n\u00a0url ：exact string match
\n\u00a0url_beg : prefix match
\n\u00a0url_dir : subdir match
\n\u00a0url_dom : domain match
\n\u00a0url_end : suffix match
\n\u00a0url_len : length match
\n\u00a0url_reg : regex match
\n\u00a0url_sub : substring match<\/p>\n
dst \u00a0\u00a0 \u00a0 #\u76ee\u6807IP
\ndst_port #\u76ee\u6807PORT<\/p>\n
src \u00a0\u00a0\u00a0\u00a0 \u00a0 #\u6e90IP
\nsrc_port #\u6e90PORT<\/p>\n
#\u793a\u4f8b：
\nacl invalid_src src 10.0.0.7 192.168.1.0\/24
\nacl invalid_src src 172.16.0.0\/24<\/p>\n
acl invalid_port src_port 0:1023<\/p>\n
status : integer \u00a0#\u8fd4\u56de\u5728\u54cd\u5e94\u62a5\u6587\u4e2d\u7684\u72b6\u6001\u7801<\/p>\n
#\u4e03\u5c42\u534f\u8bae
\nacl valid_method method GET HEAD
\nhttp-request deny if ! valid_method<\/p>\n
ACL-flags \u5339\u914d\u6a21\u5f0f<\/p>\n
ACL\u5339\u914d\u6a21\u5f0f<\/p>\n
-i \u4e0d\u533a\u5206\u5927\u5c0f\u5199
\n-m \u4f7f\u7528\u6307\u5b9a\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u5339\u914d\u65b9\u6cd5
\n-n \u4e0d\u505aDNS\u89e3\u6790
\n-u \u7981\u6b62acl\u91cd\u540d，\u5426\u5219\u591a\u4e2a\u540c\u540dACL\u5339\u914d\u6216\u5173\u7cfb<\/p>\n
ACL \u64cd\u4f5c\u7b26<\/p>\n
\u6574\u6570\u6bd4\u8f83：eq\u3001ge\u3001gt\u3001le\u3001lt
\n\u5b57\u7b26\u6bd4\u8f83：
\n– exact match \u00a0\u00a0\u00a0\u00a0(-m str) :\u5b57\u7b26\u4e32\u5fc5\u987b\u5b8c\u5168\u5339\u914d\u6a21\u5f0f
\n– substring match (-m sub) :\u5728\u63d0\u53d6\u7684\u5b57\u7b26\u4e32\u4e2d\u67e5\u627e\u6a21\u5f0f，\u5982\u679c\u5176\u4e2d\u4efb\u4f55\u4e00\u4e2a\u88ab\u53d1\u73b0，ACL\u5c06\u5339\u914d
\n– prefix match \u00a0\u00a0(-m beg) :\u5728\u63d0\u53d6\u7684\u5b57\u7b26\u4e32\u9996\u90e8\u4e2d\u67e5\u627e\u6a21\u5f0f，\u5982\u679c\u5176\u4e2d\u4efb\u4f55\u4e00\u4e2a\u88ab\u53d1\u73b0，ACL\u5c06\u5339\u914d
\n– suffix match \u00a0\u00a0(-m end) :\u5c06\u6a21\u5f0f\u4e0e\u63d0\u53d6\u5b57\u7b26\u4e32\u7684\u5c3e\u90e8\u8fdb\u884c\u6bd4\u8f83，\u5982\u679c\u5176\u4e2d\u4efb\u4f55\u4e00\u4e2a\u5339\u914d，\u5219ACL\u8fdb\u884c\u5339\u914d
\n– subdir match \u00a0\u00a0(-m dir) :\u67e5\u770b\u63d0\u53d6\u51fa\u6765\u7684\u7528\u659c\u7ebf\u5206\u9694（\u201c\/"）\u7684\u5b57\u7b26\u4e32，\u5982\u5176\u4e2d\u4efb\u4e00\u4e2a\u5339\u914d，\u5219ACL\u8fdb\u884c\u5339\u914d
\n– domain match \u00a0\u00a0(-m dom) :\u67e5\u627e\u63d0\u53d6\u7684\u7528\u70b9（\u201c."）\u5206\u9694\u5b57\u7b26\u4e32，\u5982\u679c\u5176\u4e2d\u4efb\u4f55\u4e00\u4e2a\u5339\u914d，\u5219ACL\u8fdb\u884c\u5339\u914d<\/p>\n
value\u7684\u7c7b\u578b<\/p>\n
The ACL engine can match these types against patterns of the following types :
\n– Boolean #\u5e03\u5c14\u503c
\n– integer or integer range \u00a0\u00a0 \u00a0#\u6574\u6570\u6216\u6574\u6570\u8303\u56f4，\u6bd4\u5982\u7528\u4e8e\u5339\u914d\u7aef\u53e3\u8303\u56f4
\n– IP address \/ network \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#IP\u5730\u5740\u6216IP\u8303\u56f4, 192.168.0.1 ,192.168.0.1\/24
\n– string–> www.timinglee.org
\n\u00a0 exact \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u7cbe\u786e\u6bd4\u8f83
\n\u00a0 substring \u00a0\u00a0 \u00a0#\u5b50\u4e32
\n\u00a0 suffix \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u540e\u7f00\u6bd4\u8f83
\n\u00a0 prefix \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u524d\u7f00\u6bd4\u8f83
\n\u00a0 subdir \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u8def\u5f84， \/wp-includes\/js\/jquery\/jquery.js
\n\u00a0 domain \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#\u57df\u540d，www.timinglee.org
\n– regular expression \u00a0\u00a0 \u00a0#\u6b63\u5219\u8868\u8fbe\u5f0f
\n– hex block \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#16\u8fdb\u5236<\/p>\n
1.\u5b9e\u9a8c\u7d20\u6750<\/p>\n
#\u5728\u6d4f\u89c8\u5668\u6216\u8005curl\u4e3b\u673a\u4e2d\u8bbe\u5b9a\u672c\u5730\u89e3\u6790
\n\u5728windows\u4e2d\u8bbe\u5b9a\u89e3\u6790<\/p>\n
![\"\"](\"2026-02-12sqvlz3uxner.png\")
<\/p>\n
![\"\"](\"2026-02-12bphqeq01btg.png\")
<\/p>\n
\u6d4b\u8bd5<\/p>\n
ping \u00a0bbs.timinglee.org<\/p>\n
2.\u8bbe\u5b9a\u57fa\u7840\u7684haproxy\u5b9e\u9a8c\u914d\u7f6e<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 use_backend \u00a0 \u00a0 webserver-80-web1<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
3.\u57fa\u7840acl\u793a\u4f8b<\/p>\n
#\u5728\u8bbf\u95ee\u7684\u7f51\u5740\u4e2d，\u6240\u6709\u4ee5.com \u00a0\u7ed3\u5c3e\u7684\u8bbf\u95ee10，\u5176\u4ed6\u8bbf\u95ee20
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl test hdr_end(host) -i .com\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if test\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u5339\u914d
\n\u00a0 \u00a0 default_backend webserver-80-web2\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
![\"\"](\"2026-02-12t2tidetaq43.png\")
<\/p>\n
![\"\"](\"2026-02-12tmqncs41mux.png\")
<\/p>\n
#\u57fa\u4e8e\u8bbf\u95ee\u5934\u90e8
\n\u00a0 \u00a0 acl head hdr_beg(host) -i bbs.
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if head
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl test hdr_end(host) -i .com\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl head hdr_beg(host) -i bbs.
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if head
\n\u00a0 \u00a0 default_backend webserver-80-web2<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
#base\u53c2\u6570acl
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl pathdir base_dir -i \/lee
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if pathdir
\n\u00a0 \u00a0 default_backend webserver-80-web2\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
[root@webserver1+2 ~]# mkdir -p \/var\/www\/html\/lee\/
\n[root@webserver1+2 ~]# \u00a0mkdir -p \/var\/www\/html\/lee\/test\/<\/p>\n
\n[root@webserver1 ~]# echo lee – 192.168.0.10 \u00a0> \/var\/www\/html\/lee\/index.html
\n[root@webserver1 ~]# echo lee\/test – 192.168.0.10 > \/var\/www\/html\/lee\/test\/index.html
\n[root@webserver2 ~]# echo lee – 192.168.0.20 \u00a0> \/var\/www\/html\/lee\/index.html
\n[root@webserver2 ~]# echo lee\/test – 192.168.0.10 > \/var\/www\/html\/lee\/test\/index.html<\/p>\n
#\u6d4b\u8bd5<\/p>\n
![\"\"](\"2026-02-12kdzbnqz5e1p.png\")
<\/p>\n
![\"\"](\"2026-02-12d4pitoejx2i.png\")
<\/p>\n
![\"\"](\"2026-02-125ptqsxjfau1.png\")
<\/p>\n
#acl\u7981\u6b62\u5217\u8868\u9ed1\u540d\u5355
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl test hdr_end(host) -i .com\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if test\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u5339\u914d
\n\u00a0 \u00a0 default_backend webserver-80-web2\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\n
\u00a0\u00a0 \u00a0acl invalid_src src 172.25.254.1
\n\u00a0 \u00a0 http-request deny if invalid_src<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
#\u6d4b\u8bd5：<\/p>\n
![\"\"](\"2026-02-125ce1cykxjoq.png\")
<\/p>\n
#\u7981\u6b62\u5217\u8868\u767d\u540d\u5355
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 acl test hdr_end(host) -i .com\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0 use_backend \u00a0webserver-80-web1 if test\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u5339\u914d
\n\u00a0 \u00a0 default_backend webserver-80-web2\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\n
\u00a0\u00a0 \u00a0acl invalid_src src 172.25.254.1
\n\u00a0 \u00a0 http-request deny if ！ invalid_src<\/p>\n
backend webserver-80-web1
\n\u00a0 \u00a0 server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\n
backend webserver-80-web2
\n\u00a0 \u00a0 server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n
#\u6d4b\u8bd5：<\/p>\n
![\"\"](\"2026-02-12jh2e5olt32h.png\")
<\/p>\n
![\"\"](\"2026-02-12ovrandy3fly.png\")
<\/p>\n
（10）Haproxy\u5168\u7ad9\u52a0\u5bc6<\/p>\n
haproxy\u53ef\u4ee5\u5b9e\u73b0https\u7684\u8bc1\u4e66\u5b89\u5168,\u4ece\u7528\u6237\u5230haproxy\u4e3ahttps,\u4ecehaproxy\u5230\u540e\u7aef\u670d\u52a1\u5668\u7528http\u901a\u4fe1<\/p>\n
\u4f46\u57fa\u4e8e\u6027\u80fd\u8003\u8651,\u751f\u4ea7\u4e2d\u8bc1\u4e66\u90fd\u662f\u5728\u540e\u7aef\u670d\u52a1\u5668\u6bd4\u5982nginx\u4e0a\u5b9e\u73b0<\/p>\n
#\u914d\u7f6eHAProxy\u652f\u6301https\u534f\u8bae，\u652f\u6301ssl\u4f1a\u8bdd；
\n\u00a0bind *:443 ssl crt \/PATH\/TO\/SOME_PEM_FILE\u00a0<\/p>\n
#\u6307\u4ee4 crt \u540e\u8bc1\u4e66\u6587\u4ef6\u4e3aPEM\u683c\u5f0f，\u9700\u8981\u540c\u65f6\u5305\u542b\u8bc1\u4e66\u548c\u6240\u6709\u79c1\u94a5
\n\u00a0cat demo.key demo.crt > demo.pem\u00a0<\/p>\n
#\u628a80\u7aef\u53e3\u7684\u8bf7\u6c42\u91cd\u5411\u5b9a443
\n\u00a0bind *:80
\n\u00a0redirect scheme https if !{ ssl_fc }<\/p>\n
1.\u5236\u4f5c\u8bc1\u4e66<\/p>\n
[root@haproxy ~]# mkdir \/etc\/haproxy\/certs\/
\n[root@haproxy ~]# openssl req -newkey rsa:2048 -nodes -sha256 \u00a0-keyout \/etc\/haproxy\/certs\/timinglee.org.key -x509 -days 365 -out \/etc\/haproxy\/certs\/timinglee.org.crt<\/p>\n
![\"\"](\"2026-02-12r3chfjmaixm.png\")
<\/p>\n
[root@haproxy ~]# ls \/etc\/haproxy\/certs\/
\ntiminglee.org.crt \u00a0timinglee.org.key<\/p>\n
[root@haproxy ~]# cat \/etc\/haproxy\/certs\/timinglee.org.{key,crt} > \/etc\/haproxy\/certs\/timinglee.pem<\/p>\n
2.\u5168\u7ad9\u52a0\u5bc6<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster-http
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:80
\n\u00a0 \u00a0 redirect scheme https if ! { ssl_fc }<\/p>\n
listen webcluster-https
\n\u00a0 \u00a0 bind \u00a0 \u00a0 \u00a0 \u00a0*:443 ssl \u00a0crt \/etc\/haproxy\/certs\/timinglee.pem
\n\u00a0 \u00a0 mode \u00a0 \u00a0 \u00a0 \u00a0http
\n\u00a0 \u00a0 balance \u00a0 \u00a0 roundrobin
\n\u00a0 \u00a0 server haha 192.168.0.10:80 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0 server hehe 192.168.0.20:80 \u00a0check inter 3s fall 3 rise 5 weight 1
\n\u00a0 \u00a0\u00a0
\n\u00a0 \u00a0\u00a0
\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u6d4b\u8bd5：curl -v -k -L http:\/\/172.25.254.100<\/p>\n
![\"\"](\"2026-02-12dhgvrl3vghx.png\")
<\/p>\n
![\"\"](\"2026-02-12wbzbcwmxcje.png\")
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e00.\u8d1f\u8f7d\u5747\u88611.1.\u4ec0\u4e48\u662f\u8d1f\u8f7d\u5747\u8861 \u8d1f\u8f7d\u5747\u8861：Load Balance，\u7b80\u79f0LB，\u662f\u4e00\u79cd\u670d\u52a1\u6216\u57fa\u4e8e\u786c\u4ef6\u8bbe\u5907\u7b49\u5b9e\u73b0\u7684\u9ad8\u53ef\u7528\u53cd\u5411\u4ee3\u7406\u6280\u672f，\u8d1f\u8f7d\u5747\u8861\u5c06\u7279\u5b9a\u7684\u4e1a\u52a1(web\u670d\u52a1\u3001\u7f51\u7edc\u6d41\u91cf\u7b49)\u5206\u62c5\u7ed9\u6307\u5b9a\u7684\u4e00\u4e2a\u6216\u591a\u4e2a\u540e\u7aef\u7279\u5b9a\u7684\u670d\u52a1\u5668\u6216\u8bbe\u5907，\u4ece\u800c\u63d0\u9ad8\u4e86\u516c\u53f8\u4e1a\u52a1\u7684\u5e76\u53d1\u5904\u7406\u80fd\u529b\u3001\u4fdd\u8bc1\u4e86\u4e1a\u52a1\u7684\u9ad8\u53ef\u7528\u6027\u3001\u65b9\u4fbf\u4e86\u4e1a\u52a1\u540e\u671f\u7684\u6c34\u5e73\u52a8\u6001\u6269\u5c55 \u963f\u91cc\u4e91SLB\u4ecb\u7ecd ：https:\/\/yq.aliyun.com\/articles\/1<\/p>\n","protected":false},"author":2,"featured_media":75510,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,44],"topic":[],"class_list":["post-75530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-linux","tag-43","tag-44"],"yoast_head":"\n