1. HAProxy \u662f\u4ec0\u4e48？<\/h3>\n
\u4e3b\u8981\u7528\u6765：<\/p>\n
- \n
- \u628a\u7528\u6237\u8bf7\u6c42\u5747\u5300\u5206\u7ed9\u591a\u53f0\u670d\u52a1\u5668<\/span><\/li>\n
- \u505a\u6d41\u91cf\u5165\u53e3\u3001\u7f51\u5173\u3001\u9ad8\u53ef\u7528<\/span><\/li>\n
- \u652f\u6301 HTTP\/HTTPS\/TCP \u7b49，\u6027\u80fd\u6781\u5f3a\u3001\u5f88\u7a33\u5b9a<\/span><\/li>\n<\/ul>\n
\u7b80\u5355\u7406\u89e3：\u4f60\u6709 10 \u53f0 Web \u670d\u52a1\u5668，\u7528\u6237\u4e0d\u77e5\u9053\u4e5f\u4e0d\u7528\u7ba1\u8fde\u54ea\u53f0，\u5168\u90fd\u5148\u8fde HAProxy，\u5b83\u5e2e\u4f60\u81ea\u52a8\u5206\u53d1\u3002<\/p>\n
2.\u00a0\u4e3a\u4ec0\u4e48\u8981\u5b66\u5b83？<\/h3>\n
1. \u51e0\u4e4e\u6240\u6709\u516c\u53f8\u90fd\u5728\u7528<\/p>\n
Nginx\u3001HAProxy \u662f\u540e\u7aef \/ \u8fd0\u7ef4 \/\u67b6\u6784\u6807\u914d，\u9762\u8bd5\u5fc5\u95ee\u3002<\/p>\n
2. \u4e13\u95e8\u625b\u9ad8\u5e76\u53d1\u3001\u625b\u6d41\u91cf<\/p>\n
\u6bd4 Nginx \u66f4\u64c5\u957f\u957f\u8fde\u63a5\u3001TCP \u4ee3\u7406\u3001\u56db\u5c42 \/ \u4e03\u5c42\u8d1f\u8f7d\u5747\u8861，\u5f88\u591a\u7f51\u5173\u3001API \u5165\u53e3\u3001\u5fae\u670d\u52a1\u7f51\u5173\u90fd\u7528\u5b83\u3002<\/p>\n
3. \u5b66\u5b8c\u76f4\u63a5\u63d0\u5347\u5c97\u4f4d\u7ade\u4e89\u529b<\/p>\n
\u4f1aHAProxy = \u4f60\u80fd\u641e\u5b9a：<\/p>\n
- \n
- \u670d\u52a1\u9ad8\u53ef\u7528<\/span><\/li>\n
- \u6d41\u91cf\u5206\u53d1<\/span><\/li>\n
- \u6545\u969c\u81ea\u52a8\u5254\u9664<\/span><\/li>\n
- \u7f51\u5173\u5c42\u67b6\u6784<\/span><\/li>\n<\/ul>\n
4.\u00a0\u4e91\u539f\u751f \/ \u5bb9\u5668 \/ K8s \u5fc5\u5907\u57fa\u7840<\/p>\n
Kubernetes \u91cc\u7684 Service\u3001Ingress \u5e95\u5c42\u601d\u60f3，\u8ddf HAProxy \u8d1f\u8f7d\u5747\u8861\u5b8c\u5168\u540c\u6e90，\u5b66\u4f1a HAProxy \u5f88\u5bb9\u6613\u770b\u61c2 K8s \u7f51\u7edc\u3002<\/p>\n
\n\u4e8c\u3001HAProxy \u6838\u5fc3\u6982\u5ff5<\/h2>\n
1. \u56db\u5c42\u8d1f\u8f7d\u5747\u8861（TCP）<\/p>\n
\u53ea\u770b IP + \u7aef\u53e3，\u8f6c\u53d1\u5feb，\u9002\u5408 MySQL\u3001Redis\u3001RPC \u7b49\u3002<\/p>\n
2. \u4e03\u5c42\u8d1f\u8f7d\u5747\u8861（HTTP\/HTTPS）<\/p>\n
\u80fd\u770b URL\u3001\u57df\u540d\u3001Cookie，\u505a\u8def\u7531\u3001\u4f1a\u8bdd\u4fdd\u6301\u3001\u5065\u5eb7\u68c0\u67e5\u3002<\/p>\n
3. \u524d\u7aef frontend<\/p>\n
\u63a5\u6536\u7528\u6237\u8bf7\u6c42\u7684\u5165\u53e3（\u76d1\u542c\u7aef\u53e3）\u3002<\/p>\n
4. \u540e\u7aef backend<\/p>\n
\u771f\u6b63\u63d0\u4f9b\u670d\u52a1\u7684\u670d\u52a1\u5668\u96c6\u7fa4\u3002<\/p>\n
5. \u5065\u5eb7\u68c0\u67e5<\/p>\n
\u81ea\u52a8\u628a\u6302\u6389\u7684\u670d\u52a1\u5668\u8e22\u51fa\u53bb，\u6062\u590d\u540e\u518d\u52a0\u56de\u6765\u3002<\/p>\n
6.\u00a0\u8d1f\u8f7d\u5747\u8861\u7b97\u6cd5<\/p>\n
- \n
- \n
roundrobin：\u8f6e\u8be2（\u9ed8\u8ba4）<\/p>\n<\/li>\n
- \n
leastconn：\u6700\u5c11\u8fde\u63a5（\u9002\u5408\u957f\u8fde\u63a5）<\/p>\n<\/li>\n
- \n
source：\u6309\u5ba2\u6237\u7aef IP \u54c8\u5e0c（\u4f1a\u8bdd\u4fdd\u6301）<\/p>\n<\/li>\n<\/ul>\n
7.\u00a0HAProxy \u548c Nginx \u533a\u522b？<\/p>\n
- \n
- \n
Nginx：\u504f Web \u670d\u52a1\u5668\u3001\u9759\u6001\u8d44\u6e90\u3001\u7f13\u5b58\u3002<\/p>\n<\/li>\n
- \n
HAProxy：\u4e13\u4e1a\u8d1f\u8f7d\u5747\u8861<\/span>，\u56db\u5c42 \/ TCP \u66f4\u5f3a，\u957f\u8fde\u63a5\u3001\u9ad8\u5e76\u53d1\u66f4\u7a33\u3002<\/p>\n<\/li>\n<\/ul>\n
8.\u00a0\u56db\u5c42\u548c\u4e03\u5c42\u533a\u522b？<\/p>\n
- \n
- \n
\u56db\u5c42：\u5feb\u3001\u901a\u7528（TCP）\u3002<\/p>\n<\/li>\n
- \n
\u4e03\u5c42：\u667a\u80fd\u3001\u80fd\u8bc6\u522b HTTP，\u4f46\u7a0d\u8017\u6027\u80fd\u3002<\/p>\n<\/li>\n<\/ul>\n
9.\u00a0\u600e\u4e48\u4fdd\u8bc1\u9ad8\u53ef\u7528？<\/p>\n
- \n
- \n
\u4e24\u53f0 HAProxy + Keepalived \u505a\u865a\u62df IP（VIP）\u3002<\/p>\n<\/li>\n<\/ul>\n
\n\u4e09\u3001\u73af\u5883\u4e0e\u6838\u5fc3\u914d\u7f6e<\/h2>\n
1. HAProxy \u7684\u5b89\u88c5\u53ca\u914d\u7f6e\u53c2\u6570\u8be6\u89e3<\/h3>\n
1.1 \u57fa\u7840\u5b89\u88c5<\/h4>\n
#\u5728\u8c03\u5ea6\u5668（\u53cc\u7f51\u5361\u4e3b\u673a\u4e2d）
\n[root@haproxy ~]# dnf install haproxy.x86_64 -y # \u5b89\u88c5Haproxy
\n[root@haproxy ~]# systemctl enable –now haproxy # \u5f00\u673a\u81ea\u542f\u5e76\u7acb\u5373\u542f\u52a8\u670d\u52a1
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/haproxy.service \u2192 \/usr\/lib\/systemd\/system\/haproxy.service. <\/p>\n1.2\u00a0\u57fa\u7840\u8d1f\u8f7d\u5747\u8861\u5b9e\u73b0<\/h4>\n
\u65b9\u5f0f 1：\u524d\u540e\u7aef\u5206\u79bb（frontend + backend）<\/h5>\n
\u914d\u7f6e\u903b\u8f91：<\/p>\n
- \n
- \n
frontend webcluster：\u5b9a\u4e49\u524d\u7aef\u76d1\u542c\u89c4\u5219，\u7ed1\u5b9a 80 \u7aef\u53e3\u3001\u6307\u5b9a HTTP \u6a21\u5f0f，\u5339\u914d\u8bf7\u6c42\u540e\u8f6c\u53d1\u5230webserver-80\u540e\u7aef\u96c6\u7fa4\u3002<\/p>\n<\/li>\n
- \n
backend webserver-80：\u5b9a\u4e49\u540e\u7aef\u670d\u52a1\u5668\u6c60，\u5305\u542b\u4e24\u53f0 Web \u8282\u70b9（192.168.0.10\/20:80），\u5e76\u914d\u7f6e\u5065\u5eb7\u68c0\u67e5\u53c2\u6570：<\/p>\n
- \n
- \n
check：\u542f\u7528\u5065\u5eb7\u68c0\u67e5；<\/p>\n<\/li>\n
- \n
inter 3s：\u6bcf 3 \u79d2\u68c0\u67e5\u4e00\u6b21；<\/p>\n<\/li>\n
- \n
fall 3：\u8fde\u7eed 3 \u6b21\u68c0\u67e5\u5931\u8d25\u5219\u6807\u8bb0\u4e3a\u4e0d\u53ef\u7528；<\/p>\n<\/li>\n
- \n
rise 5：\u8fde\u7eed 5 \u6b21\u68c0\u67e5\u6210\u529f\u5219\u6062\u590d\u53ef\u7528\u3002<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
#\u524d\u540e\u7aef\u5206\u5f00\u8bbe\u5b9a
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\nfrontend webcluster
\n bind *:80
\n mode http
\n use_backend webserver-80<\/p>\nbackend webserver-80
\n server web1 192.168.0.10:80 check inter 3s fall 3 rise 5
\n server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service #\u91cd\u542fhaproxy\u670d\u52a1 <\/p>\n
\u9a8c\u8bc1\u6548\u679c：\u901a\u8fc7curl 172.25.254.100\u6d4b\u8bd5，\u8bf7\u6c42\u4f1a\u8f6e\u8be2\u5206\u53d1\u5230 web1 \u548c web2，\u8fd4\u56de\u4e0d\u540c\u8282\u70b9\u7684\u6807\u8bc6\u4fe1\u606f\u3002<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143246-69a1ab0eecc0e.png\")
<\/p>\n\u65b9\u5f0f 2：listen \u6574\u5408\u5f0f\u914d\u7f6e<\/h5>\n
\u914d\u7f6e\u903b\u8f91：\u5c06\u524d\u7aef\u76d1\u542c\u548c\u540e\u7aef\u670d\u52a1\u5668\u6c60\u5408\u5e76\u5230listen\u5757\u4e2d，\u7b80\u5316\u914d\u7f6e（\u9002\u5408\u5c0f\u578b\u96c6\u7fa4）\u3002<\/p>\n
#\u7528listen\u65b9\u5f0f\u4e66\u5199\u8d1f\u8f7d\u5747\u8861
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n mode http
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u9a8c\u8bc1\u6548\u679c：\u4e0e\u524d\u540e\u7aef\u5206\u79bb\u65b9\u5f0f\u4e00\u81f4，\u8f6e\u8be2\u5206\u53d1\u8bf7\u6c42\u3002<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0f0ef4d.png\")
<\/p>\n1.3\u00a0\u65e5\u5fd7\u914d\u7f6e<\/h4>\n
\u5b9e\u73b0 Haproxy \u65e5\u5fd7\u7684\u8fdc\u7a0b\u8f6c\u53d1，\u4fbf\u4e8e\u96c6\u4e2d\u76d1\u63a7\u548c\u5ba1\u8ba1：<\/p>\n
\u6b65\u9aa4 1：\u65e5\u5fd7\u63a5\u6536\u7aef\u914d\u7f6e（192.168.0.10）<\/h5>\n
\u4fee\u6539\/etc\/rsyslog.conf，\u542f\u7528 UDP 514 \u7aef\u53e3\u63a5\u6536\u65e5\u5fd7：<\/p>\n
#\u5728192.168.0.10 \u5f00\u542f\u63a5\u53d7\u65e5\u5fd7\u7684\u7aef\u53e3
\n[root@webserver1 ~]# vim \/etc\/rsyslog.conf
\n 32 module(load="imudp") # needs to be done just once
\n 33 input(type="imudp" port="514") <\/p>\n\u91cd\u542f rsyslog \u670d\u52a1，\u9a8c\u8bc1\u7aef\u53e3\u76d1\u542c（netstat -antlupe | grep rsyslog）\u3002<\/p>\n
[root@webserver1 ~]# systemctl restart rsyslog.service<\/p>\n
#\u6d4b\u8bd5\u63a5\u53d7\u65e5\u5fd7\u7aef\u53e3\u662f\u5426\u5f00\u542f
\n[root@webserver1 ~]# netstat -antlupe | grep rsyslog
\nudp 0 0 0.0.0.0:514 0.0.0.0:* 0 74140 30965\/rsyslogd
\nudp6 0 0 :::514 :::* 0 74141 30965\/rsyslogd <\/p>\n\u6b65\u9aa4 2：Haproxy \u7aef\u914d\u7f6e<\/h5>\n
\u5728haproxy.cfg\u4e2d\u6dfb\u52a0\u65e5\u5fd7\u8f6c\u53d1\u89c4\u5219：log 192.168.0.10 local2（local2\u4e3a\u65e5\u5fd7\u8bbe\u65bd\u7ea7\u522b）\u3002<\/p>\n
[root@haproxy haproxy]# vim haproxy.cfg<\/p>\n
log 192.168.0.10 local2<\/p>\n
[root@haproxy haproxy]# systemctl restart haproxy.service #\u91cd\u542f Haproxy <\/p>\n
\u91cd\u542f Haproxy \u540e，\u901a\u8fc7curl\u89e6\u53d1\u8bf7\u6c42，\u5728\u65e5\u5fd7\u63a5\u6536\u7aef\u67e5\u770b\/var\/log\/messages，\u53ef\u770b\u5230 Haproxy \u7684\u8bbf\u95ee\u65e5\u5fd7（\u5305\u542b\u5ba2\u6237\u7aef IP\u3001\u8bf7\u6c42\u65f6\u95f4\u3001\u540e\u7aef\u8282\u70b9\u3001\u54cd\u5e94\u72b6\u6001\u7b49）\u3002<\/p>\n
#\u9a8c\u8bc1
\n\u2500
\n[2026-01-23 15:13.54] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\nwebserver1 – 192.168.0.10
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-23 15:19.05] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\nwebserver2 – 192.168.0.20
\n[root@webserver1 ~]# cat \/var\/log\/messages<\/p>\nJan 23 15:19:06 192.168.0.100 haproxy[31310]: 172.25.254.1:9514 [23\/Jan\/2026:15:19:06.320] webcluster webcluster\/haha 0\/0\/0\/1\/1 200 273 – – —- 1\/1\/0\/0\/0 0\/0 "GET \/ HTTP\/1.1"
\nJan 23 15:19:10 192.168.0.100 haproxy[31310]: 172.25.254.1:9519 [23\/Jan\/2026:15:19:10.095] webcluster webcluster\/hehe 0\/0\/0\/0\/0 200 273 – – —- 1\/1\/0\/0\/0 0\/0 "GET \/ HTTP\/1.1" <\/p>\n1.4\u00a0\u591a\u8fdb\u7a0b\u914d\u7f6e<\/h4>\n
\u4f18\u5316 Haproxy \u7684 CPU \u5229\u7528\u7387，\u901a\u8fc7\u591a\u8fdb\u7a0b\u63d0\u5347\u5e76\u53d1\u5904\u7406\u80fd\u529b：<\/p>\n
1. \u57fa\u7840\u591a\u8fdb\u7a0b<\/h5>\n
\u914d\u7f6enbproc 2：\u542f\u52a8 2 \u4e2a Haproxy \u8fdb\u7a0b；<\/p>\n
#\u9ed8\u8ba4haproxy\u662f\u5355\u8fdb\u7a0b
\n[root@haproxy ~]# pstree -p | grep haproxy
\n |-haproxy(31439)—haproxy(31441)-+-{haproxy}(31442)
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nnbproc 2 <\/p>\n\u9a8c\u8bc1：pstree -p | grep haproxy\u53ef\u770b\u5230\u591a\u8fdb\u7a0b\u7ed3\u6784\u3002<\/p>\n
#\u9a8c\u8bc1
\n[root@haproxy ~]# pstree -p | grep haproxy
\n |-haproxy(31549)-+-haproxy(31551)
\n | `-haproxy(31552) <\/p>\n2.\u00a0\u8fdb\u7a0b CPU \u7ed1\u5b9a<\/h5>\n
\u914d\u7f6ecpu-map 1 0\/cpu-map 2 1：\u5c06\u8fdb\u7a0b 1 \u7ed1\u5b9a\u5230 CPU0，\u8fdb\u7a0b 2 \u7ed1\u5b9a\u5230 CPU1，\u907f\u514d\u8fdb\u7a0b\u62a2\u5360 CPU \u8d44\u6e90\u3002<\/p>\n
#\u591a\u8fdb\u7a0bcpu\u7ed1\u5b9a
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\n nbproc 2
\n cpu-map 1 0
\n cpu-map 2 1
\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n3.\u00a0\u8fdb\u7a0b\u72ec\u7acb\u5957\u63a5\u5b57<\/h5>\n
\u4e3a\u4e0d\u540c\u8fdb\u7a0b\u914d\u7f6e\u72ec\u7acb\u7684 stats \u5957\u63a5\u5b57（\u7528\u4e8e\u8fdb\u7a0b\u7ba1\u7406）<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\n #stats socket \/var\/lib\/haproxy\/stats
\n stats socket \/var\/lib\/haproxy\/haproxy1 mode 600 level admin process 1
\n stats socket \/var\/lib\/haproxy\/haporxy2 mode 660 level admin process 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
\u9a8c\u8bc1：ll \/var\/lib\/haproxy\/\u53ef\u770b\u5230\u521b\u5efa\u7684\u5957\u63a5\u5b57\u6587\u4ef6\u3002<\/p>\n
#\u6548\u679c
\n[root@haproxy ~]# ll \/var\/lib\/haproxy\/
\n\u603b\u7528\u91cf 0
\nsrw-rw—- 1 root root 0 1\u6708 23 15:41 haporxy2
\nsrw——- 1 root root 0 1\u6708 23 15:41 haproxy1 <\/p>\n1.5\u00a0\u591a\u7ebf\u7a0b\u914d\u7f6e<\/h4>\n
\u6ce8\u610f：\u591a\u7ebf\u7a0b\u4e0e\u591a\u8fdb\u7a0b\u4e0d\u80fd\u540c\u65f6\u542f\u7528，\u9002\u7528\u4e8e\u5355\u8fdb\u7a0b\u4e0b\u63d0\u5347\u5e76\u53d1：<\/p>\n
1.\u00a0\u524d\u7f6e\u68c0\u67e5<\/h5>\n
\u67e5\u770b\u9ed8\u8ba4\u7ebf\u7a0b\u6570：cat \/proc\/[\u8fdb\u7a0bID]\/status | grep Threads，\u9ed8\u8ba4\u5355\u7ebf\u7a0b\u3002<\/p>\n
#\u67e5\u770b\u5f53\u524dhaproxy\u7684\u8fdb\u7a0b\u4fe1\u606f
\n[root@haproxy ~]# pstree -p | grep haproxy
\n |-haproxy(31742)-+-haproxy(31744)
\n | `-haproxy(31745)<\/p>\n#\u67e5\u770bhaproxy\u5b50\u8fdb\u7a0b\u7684\u7ebf\u7a0b\u4fe1\u606f
\n[root@haproxy ~]# cat \/proc\/31744\/status | grep Threads
\nThreads: 1 <\/p>\n2.\u00a0\u542f\u7528\u591a\u7ebf\u7a0b<\/h5>\n
- \n
- \n
\u6ce8\u91ca\u591a\u8fdb\u7a0b\u76f8\u5173\u914d\u7f6e，\u6dfb\u52a0nbthread 2：\u5355\u8fdb\u7a0b\u4e0b\u542f\u52a8 2 \u4e2a\u7ebf\u7a0b\u3002<\/p>\n<\/li>\n
- \n
\u6062\u590d\u9ed8\u8ba4 stats \u5957\u63a5\u5b57：stats socket \/var\/lib\/haproxy\/stats\u3002<\/p>\n<\/li>\n<\/ul>\n
#\u542f\u7528\u591a\u7ebf\u7a0b
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg<\/p>\n#nbproc 2
\n #cpu-map 1 0
\n #cpu-map 2 1
\n nbthread 2
\n # turn on stats unix socket
\n stats socket \/var\/lib\/haproxy\/stats
\n #stats socket \/var\/lib\/haproxy\/haproxy1 mode 600 level admin process 1
\n #stats socket \/var\/lib\/haproxy\/haporxy2 mode 660 level admin process 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
3.\u00a0\u9a8c\u8bc1\u6548\u679c<\/h5>\n
- \n
- \n
pstree -p | grep haproxy\u53ef\u770b\u5230\u8fdb\u7a0b\u4e0b\u7684\u7ebf\u7a0b\u5b50\u8fdb\u7a0b；<\/p>\n<\/li>\n
- \n
cat \/proc\/[\u8fdb\u7a0bID]\/status | grep Threads\u663e\u793a\u7ebf\u7a0b\u6570\u4e3a 2\u3002<\/p>\n<\/li>\n<\/ul>\n
#\u6548\u679c
\n[root@haproxy ~]# pstree -p | grep haproxy
\n |-haproxy(31858)—haproxy(31860)—{haproxy}(31861)<\/p>\n[root@haproxy ~]# cat \/proc\/31860\/status | grep Threads
\nThreads: 2 <\/p>\n- \n
- \n
nbproc：\u8fdb\u7a0b\u6570，\u5229\u7528\u591a CPU \u6838\u5fc3；<\/p>\n<\/li>\n
- \n
nbthread：\u7ebf\u7a0b\u6570，\u5355\u8fdb\u7a0b\u5185\u63d0\u5347\u5e76\u53d1；<\/p>\n<\/li>\n
- \n
cpu-map：\u8fdb\u7a0b CPU \u7ed1\u5b9a，\u4f18\u5316\u8d44\u6e90\u8c03\u5ea6；<\/p>\n<\/li>\n
- \n
stats socket：\u8fdb\u7a0b\u7ba1\u7406\u5957\u63a5\u5b57，\u7528\u4e8e\u8c03\u8bd5 \/ \u76d1\u63a7；<\/p>\n<\/li>\n
- \n
check\/inter\/fall\/rise：\u5065\u5eb7\u68c0\u67e5\u6838\u5fc3\u53c2\u6570，\u4fdd\u969c\u96c6\u7fa4\u53ef\u7528\u6027\u3002<\/p>\n<\/li>\n<\/ul>\n
2.\u00a0HAPORXY \u5b9e\u9a8c\u73af\u5883\u8bbe\u5b9a<\/h3>\n
\u8fd9\u4e00\u90e8\u5206\u662f\u5173\u4e8eHAProxy \u5b9e\u9a8c\u73af\u5883\u642d\u5efa\u7684\u64cd\u4f5c\u6307\u5f15，\u8be6\u7ec6\u8bb0\u5f55\u4e86\u5b9e\u9a8c\u4e2d\u5404\u8282\u70b9\u7684\u7f51\u7edc\u914d\u7f6e\u3001\u670d\u52a1\u90e8\u7f72\u53ca\u57fa\u7840\u8fde\u901a\u6027\u9a8c\u8bc1\u6b65\u9aa4，\u6574\u4f53\u56f4\u7ed5\u6784\u5efa\u4e00\u4e2a\u5305\u542b HAProxy \u4ee3\u7406\u8282\u70b9\u548c\u4e24\u53f0 Web \u670d\u52a1\u5668\u8282\u70b9\u7684\u5b9e\u9a8c\u73af\u5883\u5c55\u5f00<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0f2555c.png\")
<\/p>\n- \n
- \n
HAProxy \u4e3b\u673a（\u4ee3\u7406\u8282\u70b9）<\/p>\n<\/li>\n
- \n
webserver1（\u540e\u7aef Web \u670d\u52a1\u8282\u70b9 1）<\/p>\n<\/li>\n
- \n
webserver2（\u540e\u7aef Web \u670d\u52a1\u8282\u70b9 2）<\/p>\n<\/li>\n<\/ul>\n
2.1\u00a0HAProxy \u4e3b\u673a\u914d\u7f6e<\/h4>\n
\u8be5\u8282\u70b9\u662f\u5b9e\u9a8c\u7684\u6838\u5fc3\u4ee3\u7406\u8282\u70b9，\u91cd\u70b9\u5b8c\u6210\u53cc\u7f51\u5361\u7f51\u7edc\u914d\u7f6e\u548c\u5185\u6838\u8def\u7531\u8f6c\u53d1\u5f00\u542f（\u4e3a\u540e\u7eed\u4ee3\u7406 \/ \u8f6c\u53d1\u505a\u57fa\u7840）\u3002<\/p>\n
1.\u00a0\u7f51\u5361 eth0 \/\u00a0eth1 \u914d\u7f6e<\/p>\n
[root@haproxy ~]# vmset.sh eth0 172.25.254.100 haproxy
\n[root@haproxy ~]# vmset.sh eth1 192.168.0.100 haproxy norouter <\/p>\n2.\u00a0\u5185\u6838\u8def\u7531\u8f6c\u53d1<\/p>\n
– \u5f00\u542f Linux \u5185\u6838\u7684 IPv4 \u8f6c\u53d1\u529f\u80fd（\u6838\u5fc3\u914d\u7f6e）；<\/p>\n
– \u4f5c\u7528：\u8ba9 HAProxy \u8282\u70b9\u5177\u5907\u8def\u7531 \/ \u8f6c\u53d1\u80fd\u529b，\u80fd\u5c06\u5916\u90e8\u8bf7\u6c42\u8f6c\u53d1\u7ed9\u540e\u7aef Web \u670d\u52a1\u5668，\u540c\u65f6\u5c06\u54cd\u5e94\u56de\u4f20\u7ed9\u5ba2\u6237\u7aef\u3002<\/p>\n
#\u914d\u7f6e\u5185\u6838\u8def\u7531\u529f\u80fd
\n[root@haproxy ~]# echo net.ipv4.ip_forward=1 > \/etc\/sysctl.conf
\n[root@haproxy ~]# sysctl -p
\nnet.ipv4.ip_forward = 1 <\/p>\n2.2\u00a0webserver1 \u8282\u70b9\u914d\u7f6e<\/h4>\n
\u8be5\u8282\u70b9\u662f\u540e\u7aef Web \u670d\u52a1\u8282\u70b9，\u6838\u5fc3\u662f\u914d\u7f6e\u7f51\u7edc + \u90e8\u7f72 HTTP \u670d\u52a1\u3002<\/p>\n
1.\u00a0\u7f51\u7edc\u914d\u7f6e<\/p>\n
[root@webserver1 ~]# vmset.sh eth0 192.168.0.10 webserver1 noroute <\/p>\n
2. HTTP \u670d\u52a1\u90e8\u7f72<\/p>\n
# \u901a\u8fc7 DNF \u5305\u7ba1\u7406\u5668\u5b89\u88c5 Apache HTTP \u670d\u52a1（httpd）；
\n[root@webserver1 ~]# dnf install httpd -y
\n# \u81ea\u5b9a\u4e49 Web \u9875\u9762\u5185\u5bb9（\u7528\u4e8e\u533a\u5206\u4e0d\u540c Web \u8282\u70b9）；
\nroot@webserver1 ~]# echo webserver1 – 192.168.0.10 > \/var\/www\/html\/index.html
\n# \u8bbe\u7f6e httpd \u5f00\u673a\u81ea\u542f，\u5e76\u7acb\u5373\u542f\u52a8\u670d\u52a1
\n[root@webserver1 ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service. <\/p>\n2.3\u00a0\u00a0webserver2 \u8282\u70b9\u914d\u7f6e<\/h4>\n
\u548c webserver1 \u914d\u7f6e\u903b\u8f91\u5b8c\u5168\u4e00\u81f4，\u4ec5 IP \u548c\u6807\u8bc6\u4fe1\u606f\u4e0d\u540c，\u662f\u5197\u4f59\u7684\u540e\u7aef Web \u8282\u70b9（\u7528\u4e8e\u540e\u7eed HAProxy \u8d1f\u8f7d\u5747\u8861\u6d4b\u8bd5）\u3002<\/p>\n
1.\u00a0\u7f51\u7edc\u914d\u7f6e<\/p>\n
[root@webserver2 ~]# vmset.sh eth0 192.168.0.20 webserver2 noroute <\/p>\n
2.\u00a0HTTP \u670d\u52a1\u90e8\u7f72<\/p>\n
[root@webserver2 ~]# dnf install httpd -y
\n[root@webserver2 ~]# echo webserver2 – 192.168.0.20 > \/var\/www\/html\/index.html
\n[root@webserver2 ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service. <\/p>\n2.4\u00a0\u73af\u5883\u9a8c\u8bc1\u6b65\u9aa4<\/h4>\n
\u5728 HAProxy \u4e3b\u673a\u4e0a\u901a\u8fc7curl\u547d\u4ee4\u9a8c\u8bc1\u4e0e\u540e\u7aef Web \u8282\u70b9\u7684\u8fde\u901a\u6027<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0f68143.png\")
<\/p>\n\u56db\u3001\u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u80fd\u529b<\/h2>\n
1.\u00a0HAProxy \u56db\u5c42\u8d1f\u8f7d\u5747\u8861<\/h3>\n
1.1\u00a0\u4ec0\u4e48\u662f HAProxy \u56db\u5c42\u8d1f\u8f7d\u5747\u8861？<\/h4>\n
\u9996\u5148\u8981\u660e\u786e \u201c\u56db\u5c42\u201d \u6307\u7684\u662fTCP\/IP \u534f\u8bae\u6808\u7684\u4f20\u8f93\u5c42（\u7b2c\u56db\u5c42）<\/span>，\u5bf9\u5e94\u7684\u6838\u5fc3\u534f\u8bae\u662f TCP\/UDP\u3002HAProxy \u56db\u5c42\u8d1f\u8f7d\u5747\u8861，\u7b80\u5355\u8bf4\u5c31\u662f：HAProxy \u53ea\u5173\u6ce8\u7f51\u7edc\u8bf7\u6c42\u7684 \u201cIP \u5730\u5740 + \u7aef\u53e3\u53f7\u201d，\u4e0d\u89e3\u6790\u8bf7\u6c42\u7684\u5185\u5bb9（\u6bd4\u5982 HTTP \u62a5\u6587\u3001SQL \u8bed\u53e5），\u7eaf\u7cb9\u628a TCP\/UDP \u6570\u636e\u5305\u8f6c\u53d1\u5230\u540e\u7aef\u670d\u52a1\u5668<\/span>\u3002<\/span><\/p>\n
\u53ef\u4ee5\u505a\u4e2a\u5f62\u8c61\u6bd4\u55bb：<\/p>\n
- \n
- \n
\u56db\u5c42\u8d1f\u8f7d = \u5feb\u9012\u5206\u62e3\u5458：\u53ea\u770b\u5305\u88f9\u4e0a\u7684 \u201c\u6536\u4ef6\u5730\u5740（IP）+ \u95e8\u724c\u53f7（\u7aef\u53e3）\u201d，\u76f4\u63a5\u628a\u5305\u88f9\u9001\u5230\u5bf9\u5e94\u4ed3\u5e93，\u4e0d\u7ba1\u5305\u88f9\u91cc\u88c5\u7684\u662f\u6587\u4ef6\u8fd8\u662f\u96f6\u98df；<\/p>\n<\/li>\n
- \n
\u5bf9\u6bd4\u4e03\u5c42\u8d1f\u8f7d（HTTP）：\u76f8\u5f53\u4e8e\u5feb\u9012\u5458\u4e0d\u4ec5\u770b\u5730\u5740，\u8fd8\u4f1a\u6253\u5f00\u5305\u88f9\u770b\u5185\u5bb9，\u518d\u51b3\u5b9a\u9001\u5230\u54ea\u4e2a\u8d27\u67b6\u3002<\/p>\n<\/li>\n<\/ul>\n
1.2\u00a0\u5de5\u4f5c\u539f\u7406：\u6570\u636e\u5305\u662f\u600e\u4e48\u8f6c\u53d1\u7684？<\/h4>\n
- \n
\u76d1\u542c\u7aef\u53e3：HAProxy \u5728\u6307\u5b9a\u7aef\u53e3（\u6bd4\u5982 6663）\u76d1\u542c\u5ba2\u6237\u7aef\u7684 TCP\/UDP \u8fde\u63a5\u8bf7\u6c42；<\/p>\n<\/li>\n
- \n
\u5efa\u7acb\u8fde\u63a5：\u5ba2\u6237\u7aef\u5148\u548c HAProxy \u5efa\u7acb TCP \u8fde\u63a5（\u4e09\u6b21\u63e1\u624b）；<\/p>\n<\/li>\n
- \n
\u9009\u62e9\u540e\u7aef\u8282\u70b9：HAProxy \u6839\u636e\u9884\u8bbe\u7684\u8d1f\u8f7d\u5747\u8861\u7b97\u6cd5（\u5982\u8f6e\u8be2），\u4ece\u540e\u7aef\u670d\u52a1\u5668\u6c60\u4e2d\u9009\u4e00\u4e2a\u8282\u70b9；<\/p>\n<\/li>\n
- \n
\u8f6c\u53d1\u6570\u636e\u5305：HAProxy \u548c\u9009\u4e2d\u7684\u540e\u7aef\u8282\u70b9\u5efa\u7acb TCP \u8fde\u63a5，\u628a\u5ba2\u6237\u7aef\u7684\u6570\u636e\u5305\u539f\u5c01\u4e0d\u52a8\u8f6c\u53d1\u8fc7\u53bb，\u540c\u65f6\u628a\u540e\u7aef\u8282\u70b9\u7684\u54cd\u5e94\u6570\u636e\u5305\u56de\u4f20\u7ed9\u5ba2\u6237\u7aef；<\/p>\n<\/li>\n
- \n
\u7ef4\u6301\u8fde\u63a5：\u6574\u4e2a\u8fc7\u7a0b\u4e2d，HAProxy \u76f8\u5f53\u4e8e \u201c\u4e2d\u95f4\u4eba\u201d，\u53ea\u505a\u6570\u636e\u5305\u7684\u8f6c\u53d1，\u4e0d\u4fee\u6539\u3001\u4e0d\u89e3\u6790\u5185\u5bb9\u3002<\/p>\n<\/li>\n
\u6838\u5fc3\u7279\u70b9：\u901f\u5ea6\u5feb\u3001\u901a\u7528\u6027\u5f3a<\/span>（\u56e0\u4e3a\u53ea\u5904\u7406\u4f20\u8f93\u5c42，\u4e0d\u505a\u5e94\u7528\u5c42\u89e3\u6790，\u6027\u80fd\u635f\u8017\u6781\u4f4e）\u3002<\/p>\n
1.3\u00a0\u57fa\u4e8e HAProxy \u5b9e\u73b0 MariaDB \u6570\u636e\u5e93\u7684\u56db\u5c42\u8d1f\u8f7d\u5747\u8861<\/h4>\n
HAProxy \u662f\u4e00\u6b3e\u9ad8\u6027\u80fd\u7684 TCP\/HTTP \u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668，\u652f\u6301\u56db\u5c42（TCP）\u548c\u4e03\u5c42（HTTP）\u8d1f\u8f7d\u5747\u8861\u3002\u8fd9\u90e8\u5206\u805a\u7126\u56db\u5c42\u8d1f\u8f7d\u5747\u8861（\u57fa\u4e8e TCP \u534f\u8bae），\u9488\u5bf9 MariaDB \u6570\u636e\u5e93\u96c6\u7fa4\u5b9e\u73b0\u8bf7\u6c42\u5206\u53d1，\u5e76\u9a8c\u8bc1\u6545\u969c\u81ea\u52a8\u5207\u6362\u80fd\u529b\u3002<\/p>\n
1.3.1 \u6a21\u5757 1：\u73af\u5883\u8bbe\u5b9a（MariaDB \u6570\u636e\u5e93\u90e8\u7f72）<\/h5>\n
1. \u6570\u636e\u5e93\u5b89\u88c5\u4e0e\u914d\u7f6e<\/p>\n
- \n
- \n
server_id=10：\u6570\u636e\u5e93\u5b9e\u4f8b\u7684\u552f\u4e00\u6807\u8bc6（\u53e6\u4e00\u53f0\u6570\u636e\u5e93\u670d\u52a1\u5668\u9700\u8bbe\u4e3a20），\u7528\u4e8e\u533a\u5206\u96c6\u7fa4\u4e2d\u7684\u4e0d\u540c\u8282\u70b9\u3002<\/p>\n<\/li>\n
- \n
\u5176\u4ed6\u9879（datadir\/socket\/log-error \u7b49）：\u5b9a\u4e49\u6570\u636e\u5e93\u6570\u636e\u76ee\u5f55\u3001\u5957\u63a5\u5b57\u6587\u4ef6\u3001\u65e5\u5fd7\u8def\u5f84\u7b49\u57fa\u7840\u53c2\u6570\u3002<\/p>\n<\/li>\n<\/ul>\n
# \u5b89\u88c5mariadb\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef
\n[root@webserver1+2 ~]# dnf install mariadb-server mariadb -y
\n# \u7f16\u8f91\u6570\u636e\u5e93\u914d\u7f6e\u6587\u4ef6
\n[root@webserver1+1 ~]# vim \/etc\/my.cnf.d\/mariadb-server.cnf
\n[mysqld]
\nserver_id=10#\u8bbe\u5b9a\u6570\u636e\u5e93\u6240\u5728\u4e3b\u673a\u7684id\u6807\u8bc6，\u572820\u4e0a\u8bbe\u5b9aid\u4e3a20
\ndatadir=\/var\/lib\/mysql
\nsocket=\/var\/lib\/mysql\/mysql.sock
\nlog-error=\/var\/log\/mariadb\/mariadb.log
\npid-file=\/run\/mariadb\/mariadb.pid <\/p>\n2. \u8fdc\u7a0b\u767b\u5f55\u7528\u6237\u6388\u6743<\/p>\n
\u4e3a\u4e86\u8ba9 HAProxy \u548c\u5ba2\u6237\u7aef\u80fd\u8fdc\u7a0b\u8bbf\u95ee\u6570\u636e\u5e93，\u521b\u5efa\u5e76\u6388\u6743\u901a\u7528\u7528\u6237：<\/p>\n
# \u521b\u5efa\u7528\u6237lee，\u5141\u8bb8\u6240\u6709\u4e3b\u673a（%）\u8bbf\u95ee，\u5bc6\u7801\u4e3alee
\nMariaDB [(none)]> CREATE USER 'lee'@'%' identified by 'lee';
\n# \u6388\u4e88\u8be5\u7528\u6237\u6240\u6709\u5e93\u3001\u6240\u6709\u8868\u7684\u5168\u90e8\u6743\u9650
\nMariaDB [(none)]> GRANT ALL ON *.* TO 'lee'@'%'; <\/p>\n3. \u8fde\u901a\u6027\u6d4b\u8bd5<\/p>\n
\u76ee\u7684：\u9a8c\u8bc1\u6570\u636e\u5e93\u8282\u70b9\u53ef\u88ab\u8fdc\u7a0b\u8bbf\u95ee，\u4e3a\u540e\u7eed HAProxy \u8f6c\u53d1\u505a\u57fa\u7840\u3002<\/p>\n
[root@webserver2 ~]# mysql -ulee -plee -h 192.168.0.20 #\u6d4b\u8bd510\u65f6\u4fee\u6539ip\u5373\u53ef <\/p>\n
1.3.2 \u6a21\u5757 2：\u56db\u5c42\u8d1f\u8f7d\u5747\u8861\u6838\u5fc3\u914d\u7f6e<\/h5>\n
1. HAProxy \u914d\u7f6e\u6587\u4ef6\u4fee\u6539<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten mariadbcluster
\n bind *:6663
\n mode tcp
\n balance roundrobin
\n server haha 192.168.0.10:3306 check inter 3s fall 3 rise 5 weight 1
\n server hehe 192.168.0.20:3306 check inter 3s fall 3 rise 5 weight 1 <\/p>\n\u5173\u952e\u53c2\u6570\u89e3\u91ca：<\/p>\n
- \n
- mode tcp：\u56db\u5c42\u8d1f\u8f7d\u6838\u5fc3，HAProxy \u4ec5\u8f6c\u53d1 TCP \u6570\u636e\u5305，\u4e0d\u89e3\u6790\u5e94\u7528\u5c42（\u5982 SQL）；<\/li>\n
- balance roundrobin：\u8f6e\u8be2\u7b97\u6cd5，\u8bf7\u6c42\u4f1a\u4f9d\u6b21\u5206\u53d1\u5230 192.168.0.10 \u548c 20；<\/li>\n
- check inter 3s：\u6bcf 3 \u79d2\u68c0\u6d4b\u540e\u7aef\u670d\u52a1\u5668\u5065\u5eb7\u72b6\u6001；<\/li>\n
- fall 3：\u8fde\u7eed 3 \u6b21\u68c0\u6d4b\u5931\u8d25，\u6807\u8bb0\u670d\u52a1\u5668\u4e0d\u53ef\u7528；<\/li>\n
- rise 5：\u8fde\u7eed 5 \u6b21\u68c0\u6d4b\u6210\u529f，\u6062\u590d\u670d\u52a1\u5668\u4e3a\u53ef\u7528\u72b6\u6001；<\/li>\n
- weight 1：\u6743\u91cd（\u9ed8\u8ba4 1，\u6570\u503c\u8d8a\u9ad8\u88ab\u5206\u914d\u8bf7\u6c42\u8d8a\u591a）\u3002<\/li>\n<\/ul>\n
2. \u91cd\u542f HAProxy \u5e76\u9a8c\u8bc1\u7aef\u53e3<\/p>\n
\u8f93\u51fa\u4e2d0.0.0.0:6663 LISTEN\u8868\u793a\u914d\u7f6e\u751f\u6548，HAProxy \u5df2\u76d1\u542c 6663 \u7aef\u53e3\u3002<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service<\/p>\n
#\u68c0\u6d4b\u7aef\u53e3
\n[root@haproxy ~]# netstat -antlupe | grep haproxy
\ntcp 0 0 0.0.0.0:6663 0.0.0.0:* LISTEN 0 44430 2136\/haproxy
\ntcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 0 44429 2136\/haproxy
\ntcp 0 0 0.0.0.0:4321 0.0.0.0:* LISTEN 0 44431 2136\/haproxy <\/p>\n3. \u8d1f\u8f7d\u5747\u8861\u6548\u679c\u6d4b\u8bd5<\/p>\n
\u5ba2\u6237\u7aef\u8fdc\u7a0b\u8fde\u63a5 HAProxy \u7684 6663 \u7aef\u53e3（\u800c\u975e\u76f4\u63a5\u8fde\u6570\u636e\u5e93 3306）<\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 7
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 20 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 8
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 10 |
\n+————-+
\n1 row in set (0.00 sec) <\/p>\n\u6d4b\u8bd5\u7ed3\u679c：<\/p>\n
- \n
- \n
\u7b2c\u4e00\u6b21\u67e5\u8be2\u8fd4\u56deserver_id=20（\u8fde\u63a5\u5230 192.168.0.20）；<\/p>\n<\/li>\n
- \n
\u7b2c\u4e8c\u6b21\u67e5\u8be2\u8fd4\u56deserver_id=10（\u8fde\u63a5\u5230 192.168.0.10）；\u7ed3\u8bba：\u8f6e\u8be2\u7b97\u6cd5\u751f\u6548，\u8bf7\u6c42\u88ab\u4f9d\u6b21\u5206\u53d1\u5230\u4e24\u4e2a\u6570\u636e\u5e93\u8282\u70b9\u3002<\/p>\n<\/li>\n<\/ul>\n
1.3.3\u00a0\u6a21\u5757 3：backup \u53c2\u6570（\u5907\u4efd\u8282\u70b9）\u9a8c\u8bc1<\/h5>\n
1. \u914d\u7f6e\u4fee\u6539（\u6dfb\u52a0 backup \u53c2\u6570）<\/p>\n
backup \u53c2\u6570\u4f5c\u7528：<\/p>\n
- \n
- \n
\u6807\u8bb0\u8be5\u8282\u70b9\u4e3a \u201c\u5907\u4efd\u8282\u70b9\u201d，\u4ec5\u5f53\u6240\u6709\u975e\u5907\u4efd\u8282\u70b9（haha）\u4e0d\u53ef\u7528\u65f6，\u624d\u4f1a\u8f6c\u53d1\u8bf7\u6c42\u5230\u5907\u4efd\u8282\u70b9（hehe）；<\/p>\n<\/li>\n
- \n
\u6b63\u5e38\u60c5\u51b5\u4e0b，\u6240\u6709\u8bf7\u6c42\u90fd\u4f1a\u5206\u53d1\u5230\u975e\u5907\u4efd\u8282\u70b9（192.168.0.10）\u3002<\/p>\n<\/li>\n<\/ul>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten mariadbcluster
\n bind *:6663
\n mode tcp
\n balance roundrobin
\n server haha 192.168.0.10:3306 check inter 3s fall 3 rise 5 weight 1
\n server hehe 192.168.0.20:3306 check inter 3s fall 3 rise 5 weight 1 backup<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
2. \u6b63\u5e38\u573a\u666f\u6d4b\u8bd5<\/p>\n
\u591a\u6b21\u8fde\u63a5 HAProxy \u7684 6663 \u7aef\u53e3，\u6267\u884cSELECT @@server_id;，\u7ed3\u679c\u5747\u4e3a10（\u4ec5\u8bbf\u95ee\u4e3b\u8282\u70b9 192.168.0.10），\u9a8c\u8bc1\u5907\u4efd\u8282\u70b9\u672a\u88ab\u4f7f\u7528\u3002<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 10 |
\n+————-+
\n1 row in set (0.00 sec)<\/p>\nMariaDB [(none)]> quit
\nBye<\/p>\n[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 10 |
\n+————-+
\n1 row in set (0.00 sec) <\/p>\n3. \u6545\u969c\u8f6c\u79fb\u6d4b\u8bd5<\/p>\n
\u6b65\u9aa4 1：\u5173\u95ed\u4e3b\u8282\u70b9\u6570\u636e\u5e93<\/p>\n
#\u5173\u95ed10\u7684mariadb\u5e76\u7b49\u5f851\u5206\u949f
\n[root@webserver1 ~]# systemctl stop mariadb<\/p>\n\u6b65\u9aa4 2：\u7acb\u5373\u6d4b\u8bd5\u8fde\u63a5（\u77ed\u6682\u5931\u8d25）<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 1 "Operation not permitted" #\u6807\u8bc6haproxy \u6ca1\u6709\u5b8c\u6210\u6545\u969c\u8f6c\u6362，\u9700\u8981\u7b49\u5f85 <\/p>\n\u539f\u56e0：HAProxy \u7684\u5065\u5eb7\u68c0\u67e5\u9700\u8981\u65f6\u95f4（inter 3s，fall 3 \u2192 \u7ea6 9 \u79d2），\u5c1a\u672a\u68c0\u6d4b\u5230\u4e3b\u8282\u70b9\u6545\u969c，\u4ecd\u5c1d\u8bd5\u8f6c\u53d1\u5230 10 \u8282\u70b9，\u56e0\u6b64\u62a5\u9519\u3002<\/p>\n
\u6b65\u9aa4 3：\u7b49\u5f85\u540e\u91cd\u8bd5（\u6545\u969c\u5207\u6362\u6210\u529f）<\/p>\n
\u7b49\u5f85\u5065\u5eb7\u68c0\u67e5\u5468\u671f\u540e\u518d\u6b21\u8fde\u63a5，\u6267\u884cSELECT @@server_id;，\u7ed3\u679c\u4e3a20（\u8bf7\u6c42\u8f6c\u53d1\u5230\u5907\u4efd\u8282\u70b9 192.168.0.20），\u9a8c\u8bc1\u6545\u969c\u8f6c\u79fb\u751f\u6548\u3002<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 11
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 20 |
\n+————-+
\n1 row in set (0.00 sec) <\/p>\n4. \u6545\u969c\u6062\u590d\u6d4b\u8bd5<\/p>\n
\u5728192.168.0.10\u8282\u70b9\u91cd\u542fmariadb<\/p>\n
#\u8fd8\u539f\u6545\u969c\u4e3b\u673a\u7b49\u5f85\u7247\u523b
\n[root@webserver1 ~]# systemctl start mariadb <\/p>\n\u7b49\u5f85\u5065\u5eb7\u68c0\u67e5\u5b8c\u6210\u540e，\u518d\u6b21\u8fde\u63a5 HAProxy，server_id\u6062\u590d\u4e3a10，\u9a8c\u8bc1\u4e3b\u8282\u70b9\u6062\u590d\u540e\u8bf7\u6c42\u91cd\u65b0\u5207\u56de\u3002<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 mysql -ulee -plee -h172.25.254.100 -P 6663
\nWelcome to the MariaDB monitor. Commands end with ; or \\\\g.
\nYour MariaDB connection id is 4
\nServer version: 10.5.27-MariaDB MariaDB Server<\/p>\nCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n
Type 'help;' or '\\\\h' for help. Type '\\\\c' to clear the current input statement.<\/p>\n
MariaDB [(none)]> SELECT @@server_id;
\n+————-+
\n| @@server_id |
\n+————-+
\n| 10 |
\n+————-+
\n1 row in set (0.00 sec) <\/p>\n1.3.4 \u6838\u5fc3\u603b\u7ed3<\/h5>\n
- \n
\u56db\u5c42\u8d1f\u8f7d\u6838\u5fc3：HAProxy \u901a\u8fc7 TCP \u5c42\u8f6c\u53d1，\u9002\u914d\u6570\u636e\u5e93\u7b49\u57fa\u4e8e TCP \u7684\u670d\u52a1，\u4e0d\u611f\u77e5\u5e94\u7528\u5c42\u5185\u5bb9；<\/p>\n<\/li>\n
- \n
\u8f6e\u8be2\u7b97\u6cd5：\u9ed8\u8ba4\u5747\u5300\u5206\u53d1\u8bf7\u6c42，\u9002\u5408\u8282\u70b9\u6027\u80fd\u76f8\u8fd1\u7684\u96c6\u7fa4；<\/p>\n<\/li>\n
- \n
backup \u53c2\u6570：\u5b9e\u73b0 \u201c\u4e3b\u5907\u6a21\u5f0f\u201d，\u63d0\u5347\u670d\u52a1\u53ef\u7528\u6027；<\/p>\n<\/li>\n
- \n
\u5065\u5eb7\u68c0\u67e5：check inter\/fall\/rise\u53c2\u6570\u63a7\u5236\u6545\u969c\u68c0\u6d4b\u548c\u6062\u590d\u7684\u7075\u654f\u5ea6，\u9700\u6839\u636e\u4e1a\u52a1\u8c03\u6574（\u5982\u7f29\u77ed inter \u52a0\u5feb\u68c0\u6d4b，\u4f46\u589e\u52a0\u5f00\u9500）；<\/p>\n<\/li>\n
- \n
\u7aef\u53e3\u8bbe\u8ba1：HAProxy \u76d1\u542c 6663 \u7aef\u53e3，\u907f\u514d\u4e0e\u6570\u636e\u5e93\u9ed8\u8ba4 3306 \u7aef\u53e3\u51b2\u7a81，\u540c\u65f6\u5b9e\u73b0 \u201c\u7edf\u4e00\u5165\u53e3\u201d（\u5ba2\u6237\u7aef\u53ea\u9700\u8fde HAProxy，\u65e0\u9700\u611f\u77e5\u540e\u7aef\u8282\u70b9）\u3002<\/p>\n<\/li>\n
2.\u00a0HAProxy \u4e03\u5c42\u4ee3\u7406<\/h3>\n
2.1 \u4ec0\u4e48\u662f HAProxy \u4e03\u5c42\u4ee3\u7406？<\/h4>\n
\u201c\u4e03\u5c42\u201d \u6307\u7684\u662fTCP\/IP \u534f\u8bae\u6808\u7684\u5e94\u7528\u5c42（\u7b2c\u4e03\u5c42）<\/span>，\u6700\u5178\u578b\u7684\u5c31\u662f HTTP\/HTTPS \u534f\u8bae\u3002<\/p>\n
HAProxy \u4e03\u5c42\u4ee3\u7406，\u7b80\u5355\u8bf4\u5c31\u662f：HAProxy \u4e0d\u4ec5\u4f1a\u8bc6\u522b\u8bf7\u6c42\u7684 IP + \u7aef\u53e3，\u8fd8\u4f1a\u6df1\u5ea6\u89e3\u6790\u5e94\u7528\u5c42\u7684\u5185\u5bb9（\u6bd4\u5982 HTTP \u8bf7\u6c42\u5934\u3001URL\u3001Cookie\u3001\u57df\u540d），\u518d\u6839\u636e\u8fd9\u4e9b\u5185\u5bb9\u505a\u66f4\u667a\u80fd\u7684\u8f6c\u53d1 \/ \u5904\u7406<\/span>\u3002<\/span><\/p>\n
\u7ee7\u7eed\u7528\u5feb\u9012\u7684\u6bd4\u55bb：<\/p>\n
- \n
- \n
\u4e03\u5c42\u4ee3\u7406 = \u667a\u80fd\u5206\u62e3\u5458：\u4e0d\u4ec5\u770b\u6536\u4ef6\u5730\u5740（IP + \u7aef\u53e3），\u8fd8\u4f1a\u6253\u5f00\u5305\u88f9\u770b\u8be6\u60c5（\u6bd4\u5982\u662f \u201c\u7535\u5546\u8ba2\u5355\u201d \u8fd8\u662f \u201c\u7269\u6d41\u5355\u636e\u201d），\u518d\u7cbe\u51c6\u9001\u5230\u5bf9\u5e94\u8d27\u67b6；<\/p>\n<\/li>\n
- \n
\u5bf9\u6bd4\u56db\u5c42\u8d1f\u8f7d：\u53ea\u770b\u5730\u5740，\u4e0d\u7ba1\u5305\u88f9\u5185\u5bb9，\u7eaf\u8f6c\u53d1\u3002<\/p>\n<\/li>\n<\/ul>\n
2.2\u00a0\u5de5\u4f5c\u539f\u7406<\/h4>\n
\u6bd4\u56db\u5c42\u591a\u4e86 \u201c\u89e3\u6790 + \u51b3\u7b56\u201d \u73af\u8282<\/p>\n
- \n
\u5efa\u7acb\u8fde\u63a5：\u5ba2\u6237\u7aef\u548c HAProxy \u5efa\u7acb TCP \u8fde\u63a5（\u4e09\u6b21\u63e1\u624b）；<\/p>\n<\/li>\n
- \n
\u63a5\u6536\u5e76\u89e3\u6790\u8bf7\u6c42：HAProxy \u63a5\u6536\u5ba2\u6237\u7aef\u7684 HTTP \u8bf7\u6c42，\u89e3\u6790\u5176\u4e2d\u7684\u57df\u540d（Host）\u3001URL \u8def\u5f84\u3001Cookie\u3001\u8bf7\u6c42\u5934（User-Agent\/Referer） \u7b49\u5185\u5bb9；<\/p>\n<\/li>\n
- \n
\u667a\u80fd\u8def\u7531\u51b3\u7b56：\u6839\u636e\u9884\u8bbe\u89c4\u5219（\u6bd4\u5982 \u201c\/api\/\u201d \u8def\u5f84\u8f6c\u53d1\u5230 API \u670d\u52a1\u5668，\u201c\/static\/\u201d \u8f6c\u53d1\u5230\u9759\u6001\u8d44\u6e90\u670d\u52a1\u5668），\u9009\u62e9\u5bf9\u5e94\u7684\u540e\u7aef\u670d\u52a1\u5668\u6c60；<\/p>\n<\/li>\n
- \n
\u8f6c\u53d1\u8bf7\u6c42 + \u5904\u7406\u54cd\u5e94：\u628a\u89e3\u6790\u540e\u7684\u8bf7\u6c42\u8f6c\u53d1\u7ed9\u9009\u4e2d\u7684\u540e\u7aef\u8282\u70b9，\u8fd8\u80fd\u4fee\u6539\u8bf7\u6c42 \/ \u54cd\u5e94\u5934（\u6bd4\u5982\u6dfb\u52a0 X-Forwarded-For \u8bb0\u5f55\u771f\u5b9e IP），\u518d\u628a\u540e\u7aef\u54cd\u5e94\u56de\u4f20\u7ed9\u5ba2\u6237\u7aef；<\/p>\n<\/li>\n
- \n
\u7ef4\u6301\u8fde\u63a5：\u53ef\u590d\u7528\u8fde\u63a5（\u6bd4\u5982\u957f\u8fde\u63a5），\u63d0\u5347\u6574\u4f53\u6027\u80fd\u3002<\/p>\n<\/li>\n
\u6838\u5fc3\u7279\u70b9：\u66f4\u667a\u80fd\u3001\u66f4\u7075\u6d3b，\u4f46\u6027\u80fd\u7565\u4f4e\u4e8e\u56db\u5c42<\/span>（\u56e0\u4e3a\u591a\u4e86\u89e3\u6790\u6b65\u9aa4）\u3002<\/p>\n
2.3\u00a0HAProxy \u4e03\u5c42\u4ee3\u7406\u7684\u6838\u5fc3\u7279\u70b9（\u5bf9\u6bd4\u56db\u5c42）<\/h4>\n
\n
\u7279\u6027\u4e03\u5c42\u4ee3\u7406（HTTP\/HTTPS）\u56db\u5c42\u8d1f\u8f7d（TCP\/UDP）<\/tr>\n \n\n \u89e3\u6790\u6df1\u5ea6<\/td>\n \u89e3\u6790 HTTP \u8bf7\u6c42\u5934\u3001URL\u3001Cookie \u7b49<\/td>\n \u4ec5\u89e3\u6790 IP + \u7aef\u53e3<\/td>\n<\/tr>\n \n \u8f6c\u53d1\u89c4\u5219<\/td>\n \u53ef\u6309\u57df\u540d\u3001URL\u3001Cookie \u7b49\u8f6c\u53d1<\/td>\n \u4ec5\u6309 IP + \u7aef\u53e3 \/ \u7b97\u6cd5\u8f6c\u53d1<\/td>\n<\/tr>\n \n \u529f\u80fd\u6269\u5c55<\/td>\n \u652f\u6301 URL \u91cd\u5199\u3001\u8bf7\u6c42\u5934\u4fee\u6539\u3001\u4f1a\u8bdd\u4fdd\u6301\u3001HTTPS \u7ec8\u6b62<\/td>\n \u65e0（\u7eaf\u8f6c\u53d1）<\/td>\n<\/tr>\n \n \u6027\u80fd<\/td>\n \u7a0d\u4f4e（\u89e3\u6790\u5f00\u9500）<\/td>\n \u6781\u9ad8（\u7eaf\u8f6c\u53d1）<\/td>\n<\/tr>\n \n \u9002\u7528\u573a\u666f<\/td>\n Web \u670d\u52a1（HTTP\/HTTPS）<\/td>\n \u6570\u636e\u5e93\u3001Redis\u3001SSH \u7b49 TCP \u670d\u52a1<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n 3. HAProxy \u8c03\u5ea6\u7b97\u6cd5\u5b9e\u9a8c<\/h3>\n
3.1\u9759\u6001\u7b97\u6cd5（\u6743\u91cd\u56fa\u5b9a，\u4e0d\u652f\u6301\u70ed\u66f4\u65b0）<\/h4>\n
1.\u00a0static-rr（\u9759\u6001\u8f6e\u8be2）<\/h5>\n
\u914d\u7f6e：\u6307\u5b9abalance static-rr，\u4e3a\u540e\u7aef\u670d\u52a1\u5668\u8bbe\u7f6e\u6743\u91cd（\u5982 haha \u6743\u91cd 2\u3001hehe \u6743\u91cd 1）\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance static-rr
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6d4b\u8bd5\u7ed3\u679c：\u8bf7\u6c42\u6309\u6743\u91cd\u6bd4\u4f8b\u5206\u914d，haha（192.168.0.10）\u63a5\u6536\u8bf7\u6c42\u6570\u7ea6\u4e3a hehe（192.168.0.20）\u7684 2 \u500d\u3002<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10 <\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0f9058c.png\")
<\/p>\n\u68c0\u6d4b\u662f\u5426\u652f\u6301\u70ed\u66f4\u65b0<\/p>\n
[root@haproxy ~]# echo "get weight webcluster\/haha" | socat stdio \/var\/lib\/haproxy\/stats
\n2 (initial 2)<\/p>\n[root@haproxy ~]# echo "set weight webcluster\/haha 1 " | socat stdio \/var\/lib\/haproxy\/stats
\nBackend is using a static LB algorithm and only accepts weights '0%' and '100%' <\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0faa47b.png\")
<\/p>\n\u7279\u6027：\u4e0d\u652f\u6301\u70ed\u66f4\u65b0\u6743\u91cd（\u4ec5\u5141\u8bb8\u8bbe\u7f6e 0%\/100%），\u6743\u91cd\u4fee\u6539\u9700\u91cd\u542f\u670d\u52a1\u3002<\/p>\n
2. first（\u4f18\u5148\u5206\u914d）<\/h5>\n
\u914d\u7f6e：\u6307\u5b9abalance first，\u53ef\u8bbe\u7f6emaxconn（\u6700\u5927\u8fde\u63a5\u6570）\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance first
\n server haha 192.168.0.10:80 maxconn 1 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
#\u6d4b\u8bd5：\u5728\u4e00\u4e2ashell\u4e2d\u6267\u884c\u6301\u7eed\u8bbf\u95ee<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 while true; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\n…. ….. <\/p>\n#\u5728\u5176\u4ed6\u8bbe\u7acb\u4e86\u4e2d\u5efa\u7acb\u6301\u7eed\u8bbf\u95ee\u5e76\u89c2\u5bdf<\/p>\n
Administrator.DESKTOP-VJ307M3] \u27a4 while true; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10#\u6b64\u5904\u51fa\u73b010\u4fe1\u606f
\nwebserver2 – 192.168.0.20 <\/p>\n3.2 \u52a8\u6001\u7b97\u6cd5（\u6743\u91cd\u652f\u6301\u70ed\u66f4\u65b0，\u5b9e\u65f6\u8c03\u6574）<\/h4>\n
1.\u00a0roundrobin（\u52a8\u6001\u8f6e\u8be2）<\/h5>\n
\u914d\u7f6e：\u6307\u5b9abalance roundrobin，\u652f\u6301\u6743\u91cd\u914d\u7f6e\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance roundrobin
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service
\n#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10 <\/p>\n\u52a8\u6001\u6743\u91cd\u66f4\u65b0<\/p>\n
[root@haproxy ~]# echo "get weight webcluster\/haha" | socat stdio \/var\/lib\/haproxy\/stats
\n2 (initial 2)<\/p>\n[root@haproxy ~]# echo "set weight webcluster\/haha 1 " | socat stdio \/var\/lib\/haproxy\/stats
\n[root@haproxy ~]# echo "get weight webcluster\/haha" | socat stdio \/var\/lib\/haproxy\/stats
\n1 (initial 2) <\/p>\n\u6d4b\u8bd5\u7ed3\u679c：\u9ed8\u8ba4\u6309\u6743\u91cd\u6bd4\u4f8b\u5206\u914d\u8bf7\u6c42（haha:hehe=2:1）；\u70ed\u66f4\u65b0\u6743\u91cd\u540e（haha \u6743\u91cd\u6539\u4e3a 1），\u8bf7\u6c42\u6309 1:1 \u6bd4\u4f8b\u5206\u914d\u3002<\/p>\n
#\u6548\u679c<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10 <\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0fcb30e.png\")
<\/p>\n\u7279\u6027：\u652f\u6301\u901a\u8fc7socat\u547d\u4ee4\u5b9e\u65f6\u4fee\u6539\u6743\u91cd，\u65e0\u9700\u91cd\u542f\u670d\u52a1\u3002<\/p>\n
2.\u00a0leastconn（\u6700\u5c11\u8fde\u63a5\u6570）<\/h5>\n
\u914d\u7f6e：\u6307\u5b9abalance leastconn，\u57fa\u4e8e\u540e\u7aef\u670d\u52a1\u5668\u5f53\u524d\u8fde\u63a5\u6570\u5206\u914d\u8bf7\u6c42\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance leastconn
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20 <\/p>\n\u6d4b\u8bd5\u7ed3\u679c：\u8bf7\u6c42\u5728\u4e24\u53f0\u670d\u52a1\u5668\u95f4\u5747\u5300\u5206\u914d（haha \u4e0e hehe \u4ea4\u66ff\u63a5\u6536\u8bf7\u6c42），\u4f18\u5148\u8f6c\u53d1\u81f3\u8fde\u63a5\u6570\u6700\u5c11\u7684\u670d\u52a1\u5668\u3002<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143247-69a1ab0feba1c.png\")
<\/p>\n3.3 \u6df7\u5408\u7b97\u6cd5（\u57fa\u4e8e\u54c8\u5e0c \/ \u7279\u5f81\u503c\u5206\u914d，\u4fdd\u8bc1\u4f1a\u8bdd\u7c98\u6027）<\/h4>\n
1.\u00a0source（\u57fa\u4e8e\u5ba2\u6237\u7aef IP）<\/h5>\n
\u914d\u7f6e：\u9ed8\u8ba4balance source\u4e3a\u9759\u6001\u54c8\u5e0c；\u589e\u52a0hash-type consistent\u4e3a\u52a8\u6001\u4e00\u81f4\u6027\u54c8\u5e0c\u3002<\/p>\n
#\u9ed8\u8ba4\u9759\u6001\u7b97\u6cd5<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance source
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6d4b\u8bd5\u7ed3\u679c：\u540c\u4e00\u5ba2\u6237\u7aef IP \u7684\u6240\u6709\u8bf7\u6c42\u59cb\u7ec8\u8f6c\u53d1\u81f3\u540c\u4e00\u53f0\u670d\u52a1\u5668，\u4fdd\u8bc1\u4f1a\u8bdd\u7c98\u6027\u3002<\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20 <\/p>\n#source\u52a8\u6001\u7b97\u6cd5<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance source
\n hash-type consistent
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service
\n#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20 <\/p>\n2.\u00a0uri<\/span>（\u57fa\u4e8e\u8bf7\u6c42 URI）<\/h5>\n
#\u4e3b\u5907\u5b9e\u9a8c\u73af\u5883
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index1.html
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index2.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index1.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index2.html <\/p>\n\u914d\u7f6e：\u6307\u5b9abalance uri + hash-type consistent\u3002<\/p>\n
#\u8bbe\u5b9auri\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance uri
\n hash-type consistent
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6d4b\u8bd5\u7ed3\u679c：\u76f8\u540c URI（\u5982 \/index.html\u3001\/index2.html）\u7684\u8bf7\u6c42\u56fa\u5b9a\u8f6c\u53d1\u81f3\u540c\u4e00\u53f0\u670d\u52a1\u5668（\/index.html\u2192haha，\/index2.html\u2192hehe）\u3002<\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100\/index.html; done
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-25 14:51.59] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100\/index2.html; done
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20
\nRS2 – 172.168.0.20 <\/p>\n3.\u00a0url_param（\u57fa\u4e8e URL \u53c2\u6570）<\/h5>\n
#\u4e3b\u5907\u5b9e\u9a8c\u73af\u5883
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index1.html
\n[root@webserver1 ~]# echo RS1 – 192.168.0.10 > \/var\/www\/html\/index2.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index1.html
\n[root@webserver2 ~]# echo RS2 – 192.168.0.20 > \/var\/www\/html\/index2.html <\/p>\n\u914d\u7f6e：\u6307\u5b9abalance url_param [\u53c2\u6570\u540d] + hash-type consistent（\u5982\u53c2\u6570 name）\u3002<\/p>\n
#\u8bbe\u5b9aurl_param\u7b97\u6cd5
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance url_param name
\n hash-type consistent
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6d4b\u8bd5\u7ed3\u679c：\u76f8\u540c URL \u53c2\u6570\u503c（\u5982 name=lee\u2192hehe，name=redhat\u2192haha）\u7684\u8bf7\u6c42\u56fa\u5b9a\u8f6c\u53d1\u81f3\u540c\u4e00\u53f0\u670d\u52a1\u5668\u3002<\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100\/index.html?name=lee; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20<\/p>\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100\/index.html?name=redhat; done
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10
\nwebserver1 – 192.168.0.10 <\/p>\n4.\u00a0hdr（\u57fa\u4e8e HTTP \u8bf7\u6c42\u5934）<\/h5>\n
\u914d\u7f6e：\u6307\u5b9abalance hdr(User-Agent) + hash-type consistent（\u57fa\u4e8e User-Agent \u5934）\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n balance hdr（User-Agent）
\n hash-type consistent
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6d4b\u8bd5\u7ed3\u679c：\u76f8\u540c User-Agent \u503c（\u5982 lee\u2192hehe，timing\u2192haha）\u7684\u8bf7\u6c42\u56fa\u5b9a\u8f6c\u53d1\u81f3\u540c\u4e00\u53f0\u670d\u52a1\u5668\u3002<\/p>\n
#\u6d4b\u8bd5：
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl -A "lee" 172.25.254.100
\nwebserver2 – 192.168.0.20
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-25 15:00.53] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl -A "lee" 172.25.254.100
\nwebserver2 – 192.168.0.20
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-25 15:00.54] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl -A "timinglee" 172.25.254.100
\nwebserver2 – 192.168.0.20
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-25 15:01.00] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl -A "timing" 172.25.254.100
\nwebserver1 – 192.168.0.10 <\/p>\n\u6838\u5fc3\u7ed3\u8bba<\/p>\n
- \n
\u9759\u6001\u7b97\u6cd5（static-rr\u3001first）\u9002\u7528\u4e8e\u6743\u91cd\u56fa\u5b9a\u3001\u65e0\u9700\u52a8\u6001\u8c03\u6574\u7684\u573a\u666f，\u914d\u7f6e\u7b80\u5355\u4f46\u7075\u6d3b\u6027\u4f4e；<\/p>\n<\/li>\n
- \n
\u52a8\u6001\u7b97\u6cd5（roundrobin\u3001leastconn）\u9002\u7528\u4e8e\u9700\u5b9e\u65f6\u8c03\u6574\u6743\u91cd\u3001\u5747\u8861\u8fde\u63a5\u6570\u7684\u573a\u666f，\u7075\u6d3b\u6027\u9ad8；<\/p>\n<\/li>\n
- \n
\u6df7\u5408\u7b97\u6cd5（source\/uri\/url_param\/hdr）\u9002\u7528\u4e8e\u9700\u8981\u4f1a\u8bdd\u7c98\u6027\u7684\u573a\u666f，\u901a\u8fc7\u54c8\u5e0c\u7279\u5f81\u4fdd\u8bc1\u540c\u4e00\u5ba2\u6237\u7aef \/ \u8bf7\u6c42\u7279\u5f81\u7684\u8bf7\u6c42\u8f6c\u53d1\u81f3\u56fa\u5b9a\u670d\u52a1\u5668\u3002<\/p>\n<\/li>\n
\u4e94\u3001\u5b89\u5168\u3001\u4f1a\u8bdd\u4e0e\u9ad8\u53ef\u7528<\/h2>\n
1.\u00a0HAProxy ACL \u8bbf\u95ee\u63a7\u5236<\/h3>\n
1.1\u00a0\u4ec0\u4e48\u662f HAProxy ACL？<\/h4>\n
HAProxy ACL \u672c\u8d28\u662f\u4e00\u7ec4 \u201c\u5339\u914d\u89c4\u5219\u201d<\/span> \u2014\u2014 \u901a\u8fc7\u5b9a\u4e49 ACL \u89c4\u5219，\u5339\u914d\u5ba2\u6237\u7aef\u8bf7\u6c42\u7684\u7279\u5f81（\u6bd4\u5982\u57df\u540d\u3001URL\u3001IP\u3001\u8bf7\u6c42\u5934\u3001Cookie \u7b49），\u518d\u6839\u636e \u201c\u5339\u914d\u7ed3\u679c\u201d \u6267\u884c\u5bf9\u5e94\u7684\u52a8\u4f5c（\u6bd4\u5982\u8f6c\u53d1\u5230\u6307\u5b9a\u540e\u7aef\u3001\u62d2\u7edd\u8bbf\u95ee\u3001\u91cd\u5b9a\u5411\u7b49）\u3002<\/p>\n
\u7b80\u5355\u6bd4\u55bb：<\/p>\n
- \n
- \n
ACL = \u673a\u573a\u5b89\u68c0\u7684 \u201c\u7b5b\u67e5\u89c4\u5219\u201d：\u6bd4\u5982 \u201c\u643a\u5e26\u6db2\u4f53\u7684\u65c5\u5ba2\u2192\u8d70\u6db2\u4f53\u68c0\u67e5\u901a\u9053\u201d\u201cVIP \u65c5\u5ba2\u2192\u8d70\u8d35\u5bbe\u901a\u9053\u201d\u201c\u9ed1\u540d\u5355\u65c5\u5ba2\u2192\u7981\u6b62\u767b\u673a\u201d；<\/p>\n<\/li>\n
- \n
\u52a8\u4f5c = \u89c4\u5219\u5339\u914d\u540e\u7684\u5904\u7406\u65b9\u5f0f：\u8f6c\u53d1\u3001\u62d2\u7edd\u3001\u91cd\u5b9a\u5411\u7b49\u3002<\/p>\n<\/li>\n<\/ul>\n
ACL \u662f HAProxy \u4e03\u5c42\u4ee3\u7406\u7684\u7075\u9b42，\u6ca1\u6709 ACL，\u4e03\u5c42\u4ee3\u7406\u5c31\u53ea\u80fd\u505a\u7b80\u5355\u7684\u8f6e\u8be2\u8f6c\u53d1，\u6709\u4e86 ACL \u624d\u80fd\u5b9e\u73b0 \u201c\u667a\u80fd\u5206\u6d41\u3001\u5b89\u5168\u7ba1\u63a7\u201d\u3002<\/p>\n
1.2\u00a0ACL \u7684\u6838\u5fc3\u4f5c\u7528<\/h4>\n
- \n
- \n
\u667a\u80fd\u8def\u7531：\u6309\u57df\u540d\u3001URL\u3001\u8bf7\u6c42\u5934\u7b49\u5206\u53d1\u8bf7\u6c42（\u6bd4\u5982www.xxx.com\u2192Web \u670d\u52a1\u5668，api.xxx.com\u2192API \u670d\u52a1\u5668）；<\/p>\n<\/li>\n
- \n
\u8bbf\u95ee\u63a7\u5236：\u9ed1\u767d\u540d\u5355（\u6bd4\u5982\u7981\u6b62\u7279\u5b9a IP \u8bbf\u95ee\u3001\u53ea\u5141\u8bb8\u5185\u7f51 IP \u8bbf\u95ee）；<\/p>\n<\/li>\n
- \n
\u5b89\u5168\u9632\u62a4：\u62e6\u622a\u6076\u610f\u8bf7\u6c42（\u6bd4\u5982\u7981\u6b62\u8bbf\u95ee \/admin \u8def\u5f84\u7684\u975e\u6cd5 IP\u3001\u62e6\u622a\u722c\u866b UA）；<\/p>\n<\/li>\n
- \n
\u6d41\u91cf\u8fc7\u6ee4：\u533a\u5206\u52a8\u9759\u8bf7\u6c42（\u6bd4\u5982.jpg\/.css\u2192\u9759\u6001\u670d\u52a1\u5668，\/api\u2192\u52a8\u6001\u670d\u52a1\u5668）；<\/p>\n<\/li>\n
- \n
\u6761\u4ef6\u89e6\u53d1：\u6bd4\u5982 \u201cHTTPS \u8bf7\u6c42\u2192\u5141\u8bb8\u8bbf\u95ee，HTTP \u8bf7\u6c42\u2192\u5f3a\u5236\u8df3\u8f6c HTTPS\u201d\u3002<\/p>\n<\/li>\n<\/ul>\n
1.3\u00a0\u5b9e\u9a8c\u51c6\u5907<\/h4>\n
1.\u00a0\u672c\u5730\u57df\u540d\u89e3\u6790\u914d\u7f6e：<\/h5>\n
- \n
- \n
Windows：\u901a\u8fc7\u4fee\u6539 hosts \u6587\u4ef6\u914d\u7f6e\u57df\u540d\u4e0e IP \u6620\u5c04；<\/p>\n<\/li>\n
- \n
Linux：\u7f16\u8f91\/etc\/hosts，\u5c06\u591a\u4e2a\u57df\u540d（\u5982www.timinglee.org\u3001bbs.timinglee.org\u3001www.lee.com\u7b49）\u6307\u5411 172.25.254.100，\u5e76\u901a\u8fc7 ping \u6d4b\u8bd5\u89e3\u6790\u6709\u6548\u6027\u3002<\/p>\n<\/li>\n<\/ul>\n
\u627e\u5230\u8fd9\u4e2a\u6587\u4ef6，\u4ee5\u7ba1\u7406\u5458\u8eab\u4efd\u8fd0\u884c<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143248-69a1ab101532a.png\")
<\/p>\n2.\u00a0Haproxy \u57fa\u7840\u914d\u7f6e<\/h5>\n
\u7f16\u5199\/etc\/haproxy\/haproxy.cfg，\u5b9a\u4e49\u524d\u7aefwebcluster（\u7ed1\u5b9a 80 \u7aef\u53e3\u3001http \u6a21\u5f0f），\u4ee5\u53ca\u4e24\u4e2a\u540e\u7aef\u670d\u52a1\u5668\u7ec4webserver-80-web1（\u6307\u5411 192.168.0.10:80）\u3001webserver-80-web2（\u6307\u5411 192.168.0.20:80），\u91cd\u542f haproxy \u670d\u52a1\u751f\u6548\u3002<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n bind *:80
\n mode http
\n use_backend webserver-80-web1<\/p>\nbackend webserver-80-web1
\n server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\nbackend webserver-80-web2
\n server web2 192.168.0.20:80 check inter 3s fall 3 rise 5<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
1.2\u00a0\u6838\u5fc3 ACL \u89c4\u5219\u5b9e\u64cd<\/h4>\n
1.\u00a0\u57df\u540d\u540e\u7f00\u5339\u914d<\/h5>\n
acl test hdr_end(host) -i .com，\u5339\u914d\u540e\u8f6c\u53d1\u81f3 web1，\u5426\u5219\u8f6c\u53d1\u81f3 web2<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n bind *:80
\n mode http<\/p>\nacl test hdr_end(host) -i .com#acl\u5217\u8868<\/p>\n
use_backend webserver-80-web1 if test#acl\u5217\u8868\u8bbf\u95ee\u5339\u914d
\n default_backend webserver-80-web2#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\nbackend webserver-80-web1
\n server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\nbackend webserver-80-web2
\n server web2 192.168.0.20:80 check inter 3s fall 3 rise 5 <\/p>\n\u6548\u679c\u8bf4\u660e：.com \u7ed3\u5c3e\u57df\u540d（\u5982www.lee.com）\u8bbf\u95ee web1，\u5176\u4ed6（\u5982www.lee.org）\u8bbf\u95ee web2<\/p>\n
[2026-01-26 15:50.45] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl www.lee.com
\nwebserver1 – 192.168.0.10
\n \u2714
\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[2026-01-26 15:50.45] ~
\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl www.lee.org
\nwebserver2 – 192.168.0.20 <\/p>\n2.\u00a0\u57df\u540d\u524d\u7f00\u5339\u914d<\/h5>\n
acl head hdr_beg(host) -i bbs.，\u5339\u914d\u540e\u8f6c\u53d1\u81f3 web1<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n bind *:80
\n mode http<\/p>\nacl head hdr_beg(host) -i bbs.<\/p>\n
use_backend webserver-80-web1 if head
\n default_backend webserver-80-web2<\/p>\nbackend webserver-80-web1
\n server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\nbackend webserver-80-web2
\n server web2 192.168.0.20:80 check inter 3s fall 3 rise 5 <\/p>\n\u6548\u679c\u8bf4\u660e：bbs \u5f00\u5934\u57df\u540d（\u5982bbs.timinglee.org）\u4f18\u5148\u8f6c\u53d1\u81f3 web1<\/p>\n
3.\u00a0\u8bf7\u6c42\u8def\u5f84\u5339\u914d<\/h5>\n
acl pathdir base_dir -i \/lee，\u5339\u914d\u540e\u8f6c\u53d1\u81f3 web1<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nfrontend webcluster
\n bind *:80
\n mode http<\/p>\nacl pathdir base_dir -i \/lee<\/p>\n
use_backend webserver-80-web1 if pathdir
\n default_backend webserver-80-web2#acl\u5217\u8868\u8bbf\u95ee\u4e0d\u5339\u914d<\/p>\nbackend webserver-80-web1
\n server web1 192.168.0.10:80 check inter 3s fall 3 rise 5<\/p>\nbackend webserver-80-web2
\n server web2 192.168.0.20:80 check inter 3s fall 3 rise 5 <\/p>\n\u6548\u679c\u8bf4\u660e：\u8bbf\u95ee \/lee \u8def\u5f84（\u5982 172.25.254.100\/lee\/）\u8f6c\u53d1\u81f3 web1，\u5176\u4ed6\u8def\u5f84\u8f6c\u53d1\u81f3 web2<\/p>\n
4.\u00a0\u6765\u6e90 IP（\u9ed1\u540d\u5355）<\/h5>\n
acl invalid_src src 172.25.254.1，http-request deny if invalid_src <\/p>\n
\u62d2\u7edd 172.25.254.1 \u7684\u6240\u6709\u8bf7\u6c42，\u8fd4\u56de 403 Forbidden<\/p>\n
5.\u00a0\u6765\u6e90 IP（\u767d\u540d\u5355）<\/h5>\n
http-request deny if ! invalid_src <\/p>\n
\u4ec5\u5141\u8bb8 172.25.254.1 \u8bbf\u95ee，\u5176\u4ed6 IP \u5747\u88ab\u62d2\u7edd<\/p>\n
ACL \u4f7f\u7528\u7684\u5173\u952e\u6ce8\u610f\u4e8b\u9879<\/p>\n
- \n
\u89c4\u5219\u4f18\u5148\u7ea7：HAProxy \u6309 \u201c\u914d\u7f6e\u987a\u5e8f\u201d \u5339\u914d ACL，\u5148\u5b9a\u4e49\u7684\u89c4\u5219\u5148\u751f\u6548（\u6bd4\u5982\u5148\u5339\u914d IP \u9ed1\u540d\u5355，\u518d\u5339\u914d\u57df\u540d\u5206\u6d41）；<\/p>\n<\/li>\n
- \n
\u5927\u5c0f\u5199\u654f\u611f：\u9ed8\u8ba4\u5339\u914d\u533a\u5206\u5927\u5c0f\u5199，\u52a0-i\u53c2\u6570\u53ef\u5ffd\u7565（\u5982hdr(host) -i www.xxx.com）；<\/p>\n<\/li>\n
- \n
\u6027\u80fd\u4f18\u5316：ACL \u89c4\u5219\u8d8a\u591a，\u5339\u914d\u8017\u65f6\u8d8a\u957f，\u5efa\u8bae\u5c06 \u201c\u9ad8\u9891\u5339\u914d\u7684\u89c4\u5219（\u5982 IP \u9ed1\u767d\u540d\u5355）\u201d \u653e\u5728\u524d\u9762；<\/p>\n<\/li>\n
- \n
\u6d4b\u8bd5\u9a8c\u8bc1：\u914d\u7f6e\u540e\u7528curl\u6d4b\u8bd5（\u5982curl -H "Host: bbs.timinglee.org" http:\/\/172.25.254.100），\u9a8c\u8bc1\u89c4\u5219\u662f\u5426\u751f\u6548；<\/p>\n<\/li>\n
- \n
\u65e5\u5fd7\u8f85\u52a9：\u5f00\u542foption httplog，\u901a\u8fc7\u65e5\u5fd7\u67e5\u770b ACL \u5339\u914d\u7ed3\u679c，\u4fbf\u4e8e\u6392\u9519\u3002<\/p>\n<\/li>\n
2.\u00a0HAProxy \u57fa\u4e8e Cookie \u7684\u4f1a\u8bdd\u4fdd\u6301<\/h3>\n
HAProxy \u57fa\u4e8e Cookie \u7684\u4f1a\u8bdd\u4fdd\u6301\u673a\u5236，\u6838\u5fc3\u662f\u901a\u8fc7\u5411\u5ba2\u6237\u7aef\u6d4f\u89c8\u5668\u690d\u5165 Cookie，\u8ba9\u540c\u4e00\u6d4f\u89c8\u5668<\/span>\u59cb\u7ec8\u8bf7\u6c42\u540e\u7aef\u540c\u4e00\u53f0\u670d\u52a1\u5668，\u800c\u540c\u4e00\u4e3b\u673a\u7684\u4e0d\u540c\u6d4f\u89c8\u5668\u5219\u53ef\u8def\u7531\u5230\u4e0d\u540c\u670d\u52a1\u5668，\u76f8\u6bd4\u4ec5\u57fa\u4e8e\u6e90 IP（source \u7b97\u6cd5）\u7684\u4f1a\u8bdd\u4fdd\u6301\u66f4\u7cbe\u7ec6\u5316\u3002<\/p>\n
2.1\u00a0\u6838\u5fc3\u914d\u7f6e<\/h4>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80 # \u76d1\u542c\u6240\u6709\u7f51\u5361\u768480\u7aef\u53e3
\n balance roundrobin # \u57fa\u7840\u8d1f\u8f7d\u5747\u8861\u7b97\u6cd5\u4e3a\u8f6e\u8be2（Cookie \u4f1a\u8986\u76d6\u6b64\u7b97\u6cd5\u7684\u9ed8\u8ba4\u8f6e\u8be2\u903b\u8f91）
\n hash-type consistent # \u4e00\u81f4\u6027\u54c8\u5e0c（\u4f18\u5316\u540e\u7aef\u670d\u52a1\u5668\u589e\u51cf\u65f6\u7684\u4f1a\u8bdd\u7a33\u5b9a\u6027）
\n cookie WEBCOOKIE insert nocache indirect
\n # \u540e\u7aef\u670d\u52a1\u5668\u914d\u7f6e，\u6bcf\u4e2a\u670d\u52a1\u5668\u7ed1\u5b9a\u552f\u4e00 Cookie \u6807\u8bc6
\n server haha 192.168.0.10:80 cookie web1 check inter 3s fall 3 rise 5 weight 2
\n server hehe 192.168.0.20:80 cookie web2 check inter 3s fall 3 rise 5 weight 1<\/p>\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
1.\u00a0cookie \u6307\u4ee4（\u6838\u5fc3）<\/p>\n
- \n
- \n
WEBCOOKIE：\u81ea\u5b9a\u4e49 Cookie \u540d\u79f0，\u7528\u4e8e\u6807\u8bc6\u4f1a\u8bdd\u7ed1\u5b9a\u7684\u540e\u7aef\u670d\u52a1\u5668；<\/p>\n<\/li>\n
- \n
insert：HAProxy \u81ea\u52a8\u5411\u5ba2\u6237\u7aef\u54cd\u5e94\u5934\u63d2\u5165\u8be5 Cookie；<\/p>\n<\/li>\n
- \n
nocache：\u544a\u77e5\u5ba2\u6237\u7aef \/ \u4ee3\u7406\u4e0d\u8981\u7f13\u5b58\u8be5 Cookie，\u786e\u4fdd\u6bcf\u6b21\u8bf7\u6c42\u90fd\u643a\u5e26\u6700\u65b0\u503c；<\/p>\n<\/li>\n
- \n
indirect：\u4ec5\u5f53\u5ba2\u6237\u7aef\u8bf7\u6c42\u4e2d\u65e0\u8be5 Cookie \u65f6，HAProxy \u624d\u63d2\u5165，\u907f\u514d\u8986\u76d6\u5ba2\u6237\u7aef\u5df2\u6709\u903b\u8f91\u3002<\/p>\n<\/li>\n<\/ul>\n
2.\u00a0server \u6307\u4ee4\u7684 cookie \u53c2\u6570<\/p>\n
\u4e3a\u6bcf\u4e2a\u540e\u7aef\u670d\u52a1\u5668\u6307\u5b9a\u552f\u4e00\u6807\u8bc6（\u5982 web1\u3001web2），HAProxy \u4f1a\u5c06\u8be5\u6807\u8bc6\u5199\u5165\u5ba2\u6237\u7aef Cookie，\u540e\u7eed\u5ba2\u6237\u7aef\u8bf7\u6c42\u643a\u5e26\u6b64 Cookie \u65f6，HAProxy \u4f1a\u8def\u7531\u5230\u5bf9\u5e94\u670d\u52a1\u5668\u3002<\/p>\n
2.2 \u7279\u6027\u4e0e\u6548\u679c<\/h4>\n
- \n
- \n
\u7cbe\u7ec6\u5316\u4f1a\u8bdd\u4fdd\u6301：\u540c\u4e00\u5ba2\u6237\u7aef\u4e3b\u673a\u7684\u4e0d\u540c\u6d4f\u89c8\u5668（\u5982 Firefox\u3001Edge）\u4f1a\u56e0 Cookie \u72ec\u7acb，\u88ab\u8def\u7531\u5230\u4e0d\u540c\u540e\u7aef\u670d\u52a1\u5668；<\/p>\n<\/li>\n
- \n
\u540c\u4e00\u6d4f\u89c8\u5668\u4f1a\u8bdd\u7a33\u5b9a：\u53ea\u8981 Cookie \u6709\u6548，\u540c\u4e00\u6d4f\u89c8\u5668\u7684\u6240\u6709\u8bf7\u6c42\u90fd\u4f1a\u56fa\u5b9a\u5230\u67d0\u4e00\u53f0\u540e\u7aef\u670d\u52a1\u5668；<\/p>\n<\/li>\n
- \n
\u517c\u5bb9\u57fa\u7840\u8d1f\u8f7d\u5747\u8861：\u672a\u643a\u5e26 Cookie \u7684\u9996\u6b21\u8bf7\u6c42，\u4ecd\u6309 roundrobin \u8f6e\u8be2\u5206\u914d，\u5206\u914d\u540e\u690d\u5165 Cookie \u5b9e\u73b0\u540e\u7eed\u7ed1\u5b9a；<\/p>\n<\/li>\n
- \n
\u53ef\u914d\u7f6e\u5065\u5eb7\u68c0\u67e5：check inter 3s fall 3 rise 5 \u5b9a\u4e49\u4e86\u670d\u52a1\u5668\u5065\u5eb7\u68c0\u67e5\u89c4\u5219（\u6bcf 3 \u79d2\u68c0\u67e5，\u8fde\u7eed 3 \u6b21\u5931\u8d25\u6807\u8bb0\u4e3a\u4e0d\u53ef\u7528，\u8fde\u7eed 5 \u6b21\u6210\u529f\u6062\u590d），\u7ed3\u5408 weight \u53ef\u8c03\u6574\u670d\u52a1\u5668\u6743\u91cd\u3002<\/p>\n<\/li>\n<\/ul>\n
2.3 \u751f\u6548\u6d41\u7a0b<\/h4>\n
- \n
\u5ba2\u6237\u7aef\u9996\u6b21\u8bf7\u6c42（\u65e0 Cookie）：HAProxy \u6309\u8f6e\u8be2\u7b97\u6cd5\u5206\u914d\u540e\u7aef\u670d\u52a1\u5668，\u540c\u65f6\u5728\u54cd\u5e94\u5934\u63d2\u5165\u5305\u542b\u670d\u52a1\u5668\u6807\u8bc6\u7684 Cookie；<\/p>\n<\/li>\n
- \n
\u5ba2\u6237\u7aef\u540e\u7eed\u8bf7\u6c42：\u643a\u5e26\u8be5 Cookie \u8bbf\u95ee，HAProxy \u89e3\u6790 Cookie \u4e2d\u7684\u670d\u52a1\u5668\u6807\u8bc6，\u76f4\u63a5\u8def\u7531\u5230\u5bf9\u5e94\u540e\u7aef\u670d\u52a1\u5668；<\/p>\n<\/li>\n
- \n
\u670d\u52a1\u5668\u6545\u969c\u65f6：HAProxy \u4f1a\u6839\u636e\u5065\u5eb7\u68c0\u67e5\u7ed3\u679c，\u5c06\u8bf7\u6c42\u91cd\u65b0\u5206\u914d\u5230\u53ef\u7528\u670d\u52a1\u5668，\u5e76\u66f4\u65b0\u5ba2\u6237\u7aef Cookie\u3002<\/p>\n<\/li>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143248-69a1ab1039e4d.png\")
<\/p>\n3.\u00a0HAProxy \u5168\u7ad9\u52a0\u5bc6<\/h3>\n
HAProxy \u5168\u7ad9\u52a0\u5bc6\u6838\u5fc3\u662f\u5c06 HTTP \u6d41\u91cf\u5f3a\u5236\u91cd\u5b9a\u5411\u81f3 HTTPS<\/span>，\u5e76\u901a\u8fc7 SSL\/TLS \u8bc1\u4e66\u5b9e\u73b0 HTTPS \u52a0\u5bc6\u4f20\u8f93，\u6574\u4f53\u5206\u4e3a\u300c\u8bc1\u4e66\u5236\u4f5c\u300d\u548c\u300c\u914d\u7f6e\u5168\u7ad9\u52a0\u5bc6\u300d\u4e24\u5927\u6b65\u9aa4\u3002<\/p>\n
3.1\u00a0\u5236\u4f5c SSL\/TLS \u8bc1\u4e66<\/h4>\n
1. \u521b\u5efa\u8bc1\u4e66\u5b58\u653e\u76ee\u5f55<\/p>\n
[root@haproxy ~]# mkdir \/etc\/haproxy\/certs\/ <\/p>\n
2.\u00a0\u751f\u6210 RSA \u79c1\u94a5\u548c\u81ea\u7b7e\u540d\u8bc1\u4e66（\u6709\u6548\u671f 365 \u5929）<\/p>\n
[root@haproxy ~]# openssl req -newkey rsa:2048 -nodes -sha256 -keyout \/etc\/haproxy\/certs\/timinglee.org.key -x509 -days 365 -out \/etc\/haproxy\/certs\/timinglee.org.crt<\/p>\n
You are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter '.', the field will be left blank.
\n—–
\nCountry Name (2 letter code) [XX]:CN
\nState or Province Name (full name) []:Shaanxi
\nLocality Name (eg, city) [Default City]:Xi'an
\nOrganization Name (eg, company) [Default Company Ltd]:timinglee
\nOrganizational Unit Name (eg, section) []:linux
\nCommon Name (eg, your name or your server's hostname) []:www.timinglee.org
\nEmail Address []:admin@timinglee.org <\/p>\n\u6267\u884c\u540e\u9700\u586b\u5199\u8bc1\u4e66\u4fe1\u606f（Distinguished Name），\u5173\u952e\u5b57\u6bb5\u8bf4\u660e：<\/p>\n
- \n
- \n
Country Name：\u56fd\u5bb6\u4ee3\u7801（\u5982 CN）<\/p>\n<\/li>\n
- \n
Common Name：\u670d\u52a1\u5668\u57df\u540d \/ \u4e3b\u673a\u540d（\u5982 www.timinglee.org，\u9700\u4e0e\u8bbf\u95ee\u57df\u540d\u4e00\u81f4）<\/p>\n<\/li>\n<\/ul>\n
3.\u00a0\u5408\u5e76\u79c1\u94a5\u548c\u8bc1\u4e66\u4e3a PEM \u683c\u5f0f<\/p>\n
[root@haproxy ~]# cat \/etc\/haproxy\/certs\/timinglee.org.{key,crt} > \/etc\/haproxy\/certs\/timinglee.pem <\/p>\n
3.2\u00a0\u914d\u7f6e HAProxy \u5b9e\u73b0\u5168\u7ad9\u52a0\u5bc6<\/h4>\n
\u4fee\u6539 HAProxy \u4e3b\u914d\u7f6e\u6587\u4ef6 \/etc\/haproxy\/haproxy.cfg，\u901a\u8fc7\u300cHTTP \u91cd\u5b9a\u5411\u300d+\u300cHTTPS \u76d1\u542c\u300d\u5b9e\u73b0\u5168\u7ad9\u52a0\u5bc6：<\/p>\n
1. \u914d\u7f6e HTTP \u524d\u7aef（80 \u7aef\u53e3）：\u5f3a\u5236\u5c06\u6240\u6709 HTTP \u8bf7\u6c42\u91cd\u5b9a\u5411\u81f3 HTTPS：<\/p>\n
frontend webcluster-http
\n bind *:80
\n redirect scheme https if ! { ssl_fc } # \u975e HTTPS \u8bf7\u6c42\u91cd\u5b9a\u5411\u5230 HTTPS <\/p>\n2.\u00a0\u914d\u7f6e HTTPS \u76d1\u542c（443 \u7aef\u53e3）：\u52a0\u8f7d\u8bc1\u4e66\u5e76\u8f6c\u53d1\u6d41\u91cf\u81f3\u540e\u7aef\u670d\u52a1\u5668：<\/p>\n
listen webcluster-https
\n bind *:443 ssl crt \/etc\/haproxy\/certs\/timinglee.pem # \u7ed1\u5b9a 443 \u7aef\u53e3\u5e76\u52a0\u8f7d PEM \u8bc1\u4e66
\n mode http # HTTP \u6a21\u5f0f（\u53ef\u89e3\u6790 HTTP \u5934）
\n balance roundrobin # \u8d1f\u8f7d\u5747\u8861\u7b97\u6cd5（\u8f6e\u8be2）
\n # \u540e\u7aef\u670d\u52a1\u5668\u914d\u7f6e（\u5065\u5eb7\u68c0\u67e5 + \u6743\u91cd）
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 1
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1 <\/p>\n3.\u00a0\u91cd\u542f HAProxy \u4f7f\u914d\u7f6e\u751f\u6548：<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
3.3\u00a0\u9a8c\u8bc1\u6548\u679c<\/h4>\n
\u901a\u8fc7 curl \u6d4b\u8bd5 HTTP \u91cd\u5b9a\u5411\u548c HTTPS \u8bbf\u95ee<\/p>\n
curl -v -k -L http:\/\/172.25.254.100 <\/p>\n
\u5173\u952e\u9a8c\u8bc1\u70b9：<\/p>\n
- \n
HTTP \u8bf7\u6c42\u8fd4\u56de 302 Found，location \u5b57\u6bb5\u6307\u5411 https:\/\/172.25.254.100\/（\u91cd\u5b9a\u5411\u751f\u6548）；<\/p>\n<\/li>\n
- \n
HTTPS \u8fde\u63a5\u6210\u529f\u5efa\u7acb，SSL \u534f\u8bae\u4e3a TLSv1.2，\u8bc1\u4e66\u4fe1\u606f\u4e0e\u751f\u6210\u65f6\u4e00\u81f4；<\/p>\n<\/li>\n
- \n
\u6700\u7ec8\u8fd4\u56de\u540e\u7aef\u670d\u52a1\u5668\u7684\u54cd\u5e94\u5185\u5bb9（\u5982 webserver2 – 192.168.0.20），\u8bf4\u660e\u6d41\u91cf\u8f6c\u53d1\u6b63\u5e38\u3002<\/p>\n<\/li>\n
\u6838\u5fc3\u8981\u70b9\u603b\u7ed3<\/p>\n
- \n
\u300c\u5f3a\u5236\u91cd\u5b9a\u5411\u300d：\u901a\u8fc7 redirect scheme https \u786e\u4fdd\u6240\u6709 HTTP \u6d41\u91cf\u81ea\u52a8\u8f6c\u4e3a HTTPS，\u5b9e\u73b0 \u201c\u5168\u7ad9\u52a0\u5bc6\u201d；<\/p>\n<\/li>\n
- \n
\u300c\u8bc1\u4e66\u52a0\u8f7d\u300d：HAProxy \u9700\u5c06\u79c1\u94a5\u548c\u8bc1\u4e66\u5408\u5e76\u4e3a PEM \u683c\u5f0f，\u7ed1\u5b9a 443 \u7aef\u53e3\u5e76\u542f\u7528 ssl \u9009\u9879；<\/p>\n<\/li>\n
- \n
\u300c\u517c\u5bb9\u6027\u300d：\u652f\u6301 TLSv1.2 \u53ca\u4ee5\u4e0a\u534f\u8bae，\u53ef\u914d\u7f6e cipher \u5957\u4ef6\u589e\u5f3a\u5b89\u5168\u6027；<\/p>\n<\/li>\n
- \n
\u300c\u8d1f\u8f7d\u5747\u8861\u300d：HTTPS \u89e3\u5bc6\u540e\u4ecd\u53ef\u57fa\u4e8e HTTP \u5c42\u505a\u8d1f\u8f7d\u5747\u8861\u548c\u5065\u5eb7\u68c0\u67e5，\u4e0d\u5f71\u54cd\u540e\u7aef\u670d\u52a1\u5668\u7684 HTTP \u670d\u52a1\u90e8\u7f72\u3002<\/p>\n<\/li>\n
\n4.\u00a0IP \u900f\u4f20<\/h3>\n
HAProxy \u7684 IP \u900f\u4f20\u4e3b\u8981\u5206\u4e3a\u4e03\u5c42（HTTP）IP \u900f\u4f20<\/span>\u548c\u56db\u5c42（TCP）IP \u900f\u4f20<\/span>\u4e24\u79cd\u573a\u666f，\u6838\u5fc3\u76ee\u7684\u662f\u8ba9\u540e\u7aef\u771f\u5b9e\u670d\u52a1\u5668（RS）\u80fd\u83b7\u53d6\u5230\u5ba2\u6237\u7aef\u7684\u771f\u5b9e IP，\u800c\u975e HAProxy \u7684 IP \u5730\u5740\u3002<\/p>\n
4.1 \u4e03\u5c42（HTTP）IP \u900f\u4f20<\/h4>\n
\u57fa\u4e8e HTTP \u534f\u8bae\u5c42\u5b9e\u73b0，\u4f9d\u8d56X-Forwarded-For\u8bf7\u6c42\u5934\u4f20\u9012\u5ba2\u6237\u7aef\u771f\u5b9e IP，\u9002\u7528\u4e8e HTTP\/HTTPS \u4e1a\u52a1\u573a\u666f\u3002<\/p>\n
1.\u00a0\u6838\u5fc3\u914d\u7f6e（HAProxy \u4fa7）<\/p>\n
\u4fee\u6539 HAProxy \u4e3b\u914d\u7f6e\u6587\u4ef6\/etc\/haproxy\/haproxy.cfg，\u5728defaults\u6bb5\u5f00\u542f\u900f\u4f20\u529f\u80fd：<\/p>\n
defaults
\n mode http # \u660e\u786e\u4e3a\u4e03\u5c42HTTP\u6a21\u5f0f
\n option forwardfor except 127.0.0.0\/8 # \u5f00\u542fIP\u900f\u4f20，\u6392\u9664\u672c\u5730\u56de\u73af\u5730\u5740
\n # \u5176\u4ed6\u57fa\u7840\u914d\u7f6e（\u65e5\u5fd7\u3001\u8d85\u65f6\u3001\u8fde\u63a5\u6570\u7b49）\u4fdd\u6301\u9ed8\u8ba4\u6216\u6309\u9700\u8c03\u6574 <\/p>\n2.\u00a0\u540e\u7aef\u670d\u52a1\u5668（RS）\u914d\u7f6e<\/p>\n
[root@webserver2 ~]# vim \/etc\/httpd\/conf\/httpd.conf
\n201 LogFormat "%h %l %u %t \\\\"%r\\\\" %>s %b \\\\"%{X-Forwarded-For}i\\\\" \\\\"%{Referer}i\\\\" \\\\"%{User-Agent}i \\\\"" combined <\/p>\n- \n
- \n
%{X-Forwarded-For}i：\u8868\u793a\u63d0\u53d6 HTTP \u8bf7\u6c42\u5934\u4e2dX-Forwarded-For\u7684\u503c（\u5373\u5ba2\u6237\u7aef\u771f\u5b9e IP）；<\/p>\n<\/li>\n
- \n
\u672a\u914d\u7f6e\u524d，Apache \u65e5\u5fd7\u4e2d\u4ec5\u663e\u793a HAProxy \u7684 IP（\u5982 192.168.0.100）；\u914d\u7f6e\u540e\u53ef\u770b\u5230\u5ba2\u6237\u7aef\u771f\u5b9e IP（\u5982 172.25.254.1）\u3002<\/p>\n<\/li>\n<\/ul>\n
3. \u6548\u679c\u9a8c\u8bc1<\/p>\n
\u5ba2\u6237\u7aef\u591a\u6b21\u8bbf\u95ee HAProxy \u5730\u5740\u540e，\u540e\u7aef Apache \u65e5\u5fd7\u4f1a\u8bb0\u5f55\u5ba2\u6237\u7aef\u771f\u5b9e IP：<\/p>\n
[root@webserver2 ~]# cat \/etc\/httpd\/logs\/access_log
\n192.168.0.100 – – [26\/Jan\/2026:10:10:29 +0800] "GET \/ HTTP\/1.1" 200 26 "172.25.254.1" "-" "curl\/7.65.0"
\n192.168.0.100 – – [26\/Jan\/2026:10:10:30 +0800] "GET \/ HTTP\/1.1" 200 26 "172.25.254.1" "-" "curl\/7.65.0"
\n192.168.0.100 – – [26\/Jan\/2026:10:10:30 +0800] "GET \/ HTTP\/1.1" 200 26 "172.25.254.1" "-" "curl\/7.65.0"<\/p>\n4.2\u00a0\u56db\u5c42（TCP）IP \u900f\u4f20<\/h4>\n
\u57fa\u4e8e TCP \u534f\u8bae\u5c42\u5b9e\u73b0，\u4f9d\u8d56Proxy Protocol（\u4ee3\u7406\u534f\u8bae）\u4f20\u9012\u5ba2\u6237\u7aef\u771f\u5b9e IP，\u9002\u7528\u4e8e\u975e HTTP \u7c7b TCP \u4e1a\u52a1（\u5982 MySQL\u3001Redis\u3001Nginx \u56db\u5c42\u6a21\u5f0f\u7b49）\u3002<\/p>\n
1. \u524d\u7f6e\u73af\u5883\u51c6\u5907<\/p>\n
\u5148\u5c06\u540e\u7aef RS \u7684 Apache \u66ff\u6362\u4e3a Nginx<\/p>\n
# \u505c\u6b62Apache，\u5b89\u88c5\u5e76\u542f\u52a8Nginx
\nsystemctl disable –now httpd
\ndnf install nginx -y
\necho "RS1 – 192.168.0.10" > \/usr\/share\/nginx\/html\/index.html # \u540e\u7aef1
\necho "RS2 – 192.168.0.20" > \/usr\/share\/nginx\/html\/index.html # \u540e\u7aef2
\nsystemctl enable –now nginx <\/p>\n2. \u540e\u7aef Nginx \u5f00\u542f Proxy Protocol<\/p>\n
\u4fee\u6539 Nginx \u914d\u7f6e\u6587\u4ef6\/etc\/nginx\/nginx.conf，\u8ba9\u76d1\u542c\u7aef\u53e3\u542f\u7528 Proxy Protocol：<\/p>\n
[root@webserver1 ~]# vim \/etc\/nginx\/nginx.conf
\nserver {
\n listen 80 proxy_protocol; # \u5f00\u542f\u56db\u5c42Proxy Protocol
\n listen [::]:80;
\n server_name _;
\n root \/usr\/share\/nginx\/html;
\n # \u5176\u4ed6\u57fa\u7840\u914d\u7f6e（\u9519\u8bef\u9875\u3001\u9ed8\u8ba4\u914d\u7f6e\u7b49）
\n}
\n# \u91cd\u542fNginx
\n[root@webserver2 ~]# systemctl restart nginx <\/p>\n\u4ec5\u5f00\u542f\u6b64\u914d\u7f6e\u540e，\u76f4\u63a5\u8bbf\u95ee\u4f1a\u62a5 502 \u9519\u8bef（\u56e0 HAProxy \u5c1a\u672a\u9002\u914d\u56db\u5c42\u900f\u4f20），\u9700\u7ee7\u7eed\u914d\u7f6e HAProxy\u3002<\/p>\n
3. HAProxy \u56db\u5c42\u900f\u4f20\u914d\u7f6e<\/p>\n
\u4fee\u6539 HAProxy \u914d\u7f6e\u6587\u4ef6，\u5207\u6362\u4e3a TCP \u6a21\u5f0f\u5e76\u542f\u7528send-proxy：<\/p>\n
#\u8bbe\u5b9ahaproxy\u8bbf\u95ee4\u5c42
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n mode tcp#\u5207\u6362\u4e3a\u56db\u5c42TCP\u6a21\u5f0f
\n balance roundrobin
\n # \u7ed9\u540e\u7aef\u670d\u52a1\u5668\u6dfb\u52a0send-proxy\u53c2\u6570，\u4f20\u9012Proxy Protocol\u4fe1\u606f
\n server haha 192.168.0.10:80 send-proxy check inter 3s fall 3 rise 5 weight 1
\n server hehe 192.168.0.20:80 send-proxy check inter 3s fall 3 rise 5 weight 1<\/p>\n# \u91cd\u542fHAProxy\u751f\u6548
\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n- \n
- \n
mode tcp：HAProxy \u5de5\u4f5c\u5728\u56db\u5c42 TCP \u6a21\u5f0f；<\/p>\n<\/li>\n
- \n
send-proxy：HAProxy \u5411\u540e\u7aef Nginx \u53d1\u9001 Proxy Protocol \u534f\u8bae\u5305，\u5305\u542b\u5ba2\u6237\u7aef\u771f\u5b9e IP\u3002<\/p>\n<\/li>\n<\/ul>\n
4. \u540e\u7aef Nginx \u91c7\u96c6\u771f\u5b9e IP<\/p>\n
\u4fee\u6539 Nginx \u65e5\u5fd7\u683c\u5f0f，\u63d0\u53d6$proxy_protocol_addr（Proxy Protocol \u4f20\u9012\u7684\u5ba2\u6237\u7aef IP）：<\/p>\n
#\u8bbe\u7f6e4\u5c42ip\u900f\u4f20
\n[root@webserver1&2 ~]# vim \/etc\/nginx\/nginx.conf<\/p>\nlog_format main '$remote_addr – $remote_user [$time_local] "$request" '
\n '"$proxy_protocol_addr"'#\u91c7\u96c6\u56db\u5c42\u900f\u4f20\u7684\u5ba2\u6237\u7aef\u771f\u5b9eIP
\n '$status $body_bytes_sent "$http_referer" '
\n '"$http_user_agent" "$http_x_forwarded_for"';<\/p>\n# \u91cd\u542fNginx
\n[root@webserver1&2 ~]# systemctl restart nginx.service <\/p>\n5. \u6548\u679c\u9a8c\u8bc1<\/p>\n
\u5ba2\u6237\u7aef\u8bbf\u95ee HAProxy \u5730\u5740\u540e，\u540e\u7aef Nginx \u65e5\u5fd7\u53ef\u770b\u5230\u5ba2\u6237\u7aef\u771f\u5b9e IP：<\/p>\n
[root@webserver1 ~]# cat \/var\/log\/nginx\/access.log
\n192.168.0.100 – – [26\/Jan\/2026:10:52:40 +0800] "GET \/ HTTP\/1.1" "172.25.254.1"200 19 "-" "curl\/7.65.0" "-"
\n192.168.0.100 – – [26\/Jan\/2026:10:53:49 +0800] "GET \/ HTTP\/1.1" "172.25.254.1"200 19 "-" "curl\/7.65.0" "-"
\n192.168.0.100 – – [26\/Jan\/2026:10:53:50 +0800] "GET \/ HTTP\/1.1" "172.25.254.1"200 19 "-" "curl\/7.65.0" "-"
\n192.168.0.100 – – [26\/Jan\/2026:10:53:50 +0800] "GET \/ HTTP\/1.1" "172.25.254.1"200 19 "-" "curl\/7.65.0" "-" <\/p>\n4.3 \u6838\u5fc3\u533a\u522b\u603b\u7ed3<\/h4>\n
\n
\u7ef4\u5ea6\u4e03\u5c42 IP \u900f\u4f20（HTTP）\u56db\u5c42 IP \u900f\u4f20（TCP）<\/tr>\n \n\n \u4f9d\u8d56\u534f\u8bae<\/td>\n HTTP \u534f\u8bae（X-Forwarded-For\u5934）<\/td>\n Proxy Protocol（TCP \u5c42\u534f\u8bae）<\/td>\n<\/tr>\n \n HAProxy \u6a21\u5f0f<\/td>\n mode http<\/td>\n mode tcp<\/td>\n<\/tr>\n \n \u6838\u5fc3\u914d\u7f6e<\/td>\n option forwardfor<\/td>\n \u540e\u7aef\u670d\u52a1\u5668\u914d\u7f6esend-proxy<\/td>\n<\/tr>\n \n \u540e\u7aef\u91c7\u96c6\u5b57\u6bb5<\/td>\n X-Forwarded-For\u8bf7\u6c42\u5934<\/td>\n $proxy_protocol_addr（Proxy Protocol \u5730\u5740）<\/td>\n<\/tr>\n \n \u9002\u7528\u573a\u666f<\/td>\n HTTP\/HTTPS \u4e1a\u52a1<\/td>\n \u6240\u6709 TCP \u5c42\u4e1a\u52a1（\u5982 Nginx\u3001MySQL\u3001Redis）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \u5173\u952e\u6ce8\u610f\u4e8b\u9879<\/p>\n
- \n
\u4e03\u5c42\u900f\u4f20\u4ec5\u9002\u7528\u4e8e HTTP\/HTTPS，\u56db\u5c42\u900f\u4f20\u662f\u901a\u7528\u7684 TCP \u5c42\u65b9\u6848，\u9002\u7528\u8303\u56f4\u66f4\u5e7f；<\/p>\n<\/li>\n
- \n
\u540e\u7aef\u670d\u52a1\u5668\u5fc5\u987b\u9002\u914d\u5bf9\u5e94\u7684\u900f\u4f20\u65b9\u5f0f（\u5982 Apache\/Nginx \u914d\u7f6e\u65e5\u5fd7\u91c7\u96c6\u5b57\u6bb5\u3001\u5f00\u542f Proxy Protocol），\u5426\u5219\u65e0\u6cd5\u83b7\u53d6\u771f\u5b9e IP；<\/p>\n<\/li>\n
- \n
send-proxy\u548cproxy_protocol\u9700\u6210\u5bf9\u914d\u7f6e（HAProxy \u4fa7 send-proxy + \u540e\u7aef\u4fa7 proxy_protocol），\u5426\u5219\u4f1a\u51fa\u73b0 502 \u7b49\u9519\u8bef\u3002<\/p>\n<\/li>\n
\n\u516d\u3001\u00a0\u8fd0\u7ef4\u4e0e\u6269\u5c55<\/h2>\n
1.\u00a0HAProxy \u72b6\u6001\u9875\u76d1\u63a7<\/h3>\n
HAProxy \u72b6\u6001\u9875（stats page）\u662f\u7528\u4e8e\u76d1\u63a7 HAProxy \u8fd0\u884c\u72b6\u6001\u7684\u91cd\u8981\u529f\u80fd，\u53ef\u76f4\u89c2\u67e5\u770b\u540e\u7aef\u8282\u70b9\u5065\u5eb7\u72b6\u6001\u3001\u6d41\u91cf\u8f6c\u53d1\u3001\u8fde\u63a5\u6570\u7b49\u6838\u5fc3\u6307\u6807\u3002<\/p>\n
1.1\u00a0\u57fa\u7840\u914d\u7f6e\u6b65\u9aa4<\/h4>\n
1.\u00a0\u7f16\u8f91 HAProxy \u4e3b\u914d\u7f6e\u6587\u4ef6<\/p>\n
\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u4e3a \/etc\/haproxy\/haproxy.cfg，\u901a\u8fc7 listen \u5757\u5b9a\u4e49\u72b6\u6001\u9875\u76d1\u542c\u89c4\u5219：<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten stats # \u5b9a\u4e49stats\u76d1\u542c\u5757\u540d\u79f0
\n mode http # \u72b6\u6001\u9875\u57fa\u4e8eHTTP\u534f\u8bae
\n bind 0.0.0.0:4321 # \u76d1\u542c\u6240\u6709\u7f51\u5361\u76844321\u7aef\u53e3（\u53ef\u81ea\u5b9a\u4e49\u7aef\u53e3）
\n stats enable # \u542f\u7528\u72b6\u6001\u9875\u529f\u80fd
\n log global # \u7ee7\u627f\u5168\u5c40\u65e5\u5fd7\u914d\u7f6e
\n stats uri \/status # \u8bbf\u95ee\u72b6\u6001\u9875\u7684URI\u8def\u5f84（\u793a\u4f8b：http:\/\/IP:4321\/status）
\n stats auth lee:lee # \u72b6\u6001\u9875\u8bbf\u95ee\u8ba4\u8bc1（\u8d26\u53f7：lee，\u5bc6\u7801：lee） <\/p>\n2. \u91cd\u542f HAProxy \u670d\u52a1\u4f7f\u914d\u7f6e\u751f\u6548<\/p>\n
systemctl restart haproxy.service <\/p>\n
3. \u767b\u9646\u6d4b\u8bd5<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143248-69a1ab10a890d.png\")
<\/p>\n1.2\u00a0\u529f\u80fd\u6269\u5c55：\u5f00\u542f\u81ea\u52a8\u5237\u65b0<\/h4>\n
\u9ed8\u8ba4\u72b6\u6001\u9875\u9700\u624b\u52a8\u5237\u65b0，\u53ef\u914d\u7f6e\u81ea\u52a8\u5237\u65b0\u95f4\u9694（\u5355\u4f4d：\u79d2），\u5b9e\u65f6\u76d1\u63a7\u8282\u70b9\u72b6\u6001：<\/p>\n
1. \u4fee\u6539\u914d\u7f6e\u6587\u4ef6，\u65b0\u589e stats refresh \u9879：<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten stats
\n mode http
\n bind 0.0.0.0:4321
\n stats enable
\n log global
\n stats refresh 1 # \u914d\u7f6e1\u79d2\u81ea\u52a8\u5237\u65b0（\u53ef\u81ea\u5b9a\u4e49\u95f4\u9694）
\n stats uri \/status
\n stats auth lee:lee <\/p>\n2.\u00a0\u91cd\u542f\u670d\u52a1<\/p>\n
systemctl restart haproxy.service <\/p>\n
3.\u00a0\u72b6\u6001\u76d1\u63a7\u573a\u666f<\/p>\n
- \n
- \n
\u5b9e\u65f6\u67e5\u770b\u540e\u7aef\u8282\u70b9\u5728\u7ebf \/ \u79bb\u7ebf\u72b6\u6001；<\/p>\n<\/li>\n
- \n
\u6a21\u62df\u8bbe\u5907\u4e0b\u7ebf\u65f6，\u72b6\u6001\u9875\u4f1a\u81ea\u52a8\u5237\u65b0\u5e76\u5c55\u793a\u8282\u70b9\u5f02\u5e38\u72b6\u6001（\u7ed3\u5408\u81ea\u52a8\u5237\u65b0\u914d\u7f6e）\u3002<\/p>\n<\/li>\n<\/ul>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143248-69a1ab10db8e5.png\")
<\/p>\n\u6838\u5fc3\u4f5c\u7528<\/p>\n
- \n
- \n
\u53ef\u89c6\u5316\u76d1\u63a7 HAProxy \u8fd0\u884c\u72b6\u6001\u3001\u540e\u7aef\u670d\u52a1\u5668\u5065\u5eb7\u5ea6；<\/p>\n<\/li>\n
- \n
\u5feb\u901f\u5b9a\u4f4d\u8282\u70b9\u6545\u969c，\u8f85\u52a9\u8fd0\u7ef4\u6392\u969c；<\/p>\n<\/li>\n
- \n
\u652f\u6301\u81ea\u5b9a\u4e49\u5237\u65b0\u9891\u7387，\u6ee1\u8db3\u5b9e\u65f6\u76d1\u63a7\u9700\u6c42\u3002<\/p>\n<\/li>\n<\/ul>\n
2.\u00a0Socat \u70ed\u66f4\u65b0\u5de5\u5177<\/h3>\n
Socat \u672c\u8eab\u662f\u4e00\u6b3e\u591a\u529f\u80fd\u7684\u7f51\u7edc\u5de5\u5177，\u800c\u7ed3\u5408 HAProxy \u573a\u666f\u7684 \u201cSocat \u70ed\u66f4\u65b0\u5de5\u5177\u201d，\u6838\u5fc3\u662f\u5229\u7528 Socat \u4e0e HAProxy \u7684 stats socket \u4ea4\u4e92，\u5b9e\u73b0 HAProxy \u914d\u7f6e \/ \u8282\u70b9\u6743\u91cd\u7684\u70ed\u66f4\u65b0（\u5373\u4e0d\u505c\u6b62 HAProxy \u670d\u52a1\u7684\u524d\u63d0\u4e0b\u5b8c\u6210\u914d\u7f6e\u8c03\u6574），\u907f\u514d\u670d\u52a1\u4e2d\u65ad\u3002<\/p>\n
2.1\u00a0\u6838\u5fc3\u5e94\u7528\u573a\u666f<\/h4>\n
\u57fa\u4e8e\u6587\u6863\u4e2d\u7684\u5b9e\u64cd，\u5176\u6838\u5fc3\u4f5c\u7528\u662f\u5bf9 HAProxy \u540e\u7aef\u8282\u70b9\u8fdb\u884c\u6743\u91cd\u8c03\u6574<\/span>（\u70ed\u66f4\u65b0），\u65e0\u9700\u91cd\u542f HAProxy \u670d\u52a1，\u4fdd\u8bc1\u4e1a\u52a1\u8fde\u7eed\u6027\u3002<\/p>\n
2.2\u00a0\u57fa\u7840\u4f7f\u7528\u524d\u63d0<\/h4>\n
1.\u00a0\u5b89\u88c5 Socat<\/p>\n
[root@haproxy ~]# dnf install socat -y
\n[root@haproxy ~]# socat -h #\u9a8c\u8bc1\u5b89\u88c5\u6210\u529f <\/p>\n2.\u00a0HAProxy \u914d\u7f6e\u51c6\u5907<\/p>\n
HAProxy \u9700\u5f00\u542f stats socket（\u7edf\u8ba1\u5957\u63a5\u5b57），\u5e76\u8d4b\u4e88\u8db3\u591f\u6743\u9650（\u5426\u5219\u65e0\u6cd5\u4fee\u6539\u914d\u7f6e）：<\/p>\n
- \n
- \u7f16\u8f91 HAProxy \u914d\u7f6e\u6587\u4ef6 \/etc\/haproxy\/haproxy.cfg，\u6dfb\u52a0 \/ \u4fee\u6539 stats socket \u914d\u7f6e<\/li>\n<\/ul>\n
#\u5bf9socket\u8fdb\u884c\u6388\u6743
\n[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nstats socket \/var\/lib\/haproxy\/stats mode 600 level admin <\/p>\n- \n
- \u6e05\u7406\u65e7\u7684 stats \u6587\u4ef6\u5e76\u91cd\u542f HAProxy \u4f7f\u914d\u7f6e\u751f\u6548：<\/li>\n<\/ul>\n
[root@haproxy ~]# rm -rf \/var\/lib\/haproxy\/*
\n[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n\u751f\u6548\u540e\u4f1a\u751f\u6210\u6743\u9650\u4e3a srw——- \u7684 \/var\/lib\/haproxy\/stats \u5957\u63a5\u5b57\u6587\u4ef6，\u4f5c\u4e3a Socat \u4e0e HAProxy \u4ea4\u4e92\u7684\u901a\u9053\u3002<\/p>\n
2.3\u00a0\u6838\u5fc3\u64cd\u4f5c（\u4e0e HAProxy \u4ea4\u4e92）<\/h4>\n
\u901a\u8fc7 Socat \u5411 HAProxy \u7684 stats socket \u53d1\u9001\u6307\u4ee4，\u5b9e\u73b0 \u201c\u67e5\u770b\u4fe1\u606f\u201d \u548c \u201c\u4fee\u6539\u914d\u7f6e\u201d \u4e24\u7c7b\u6838\u5fc3\u64cd\u4f5c：<\/p>\n
1.\u00a0\u67e5\u770b HAProxy \u540e\u7aef\u8282\u70b9\u4fe1\u606f<\/p>\n
- \n
- \n
\u67e5\u770b\u6240\u6709\u540e\u7aef\u670d\u52a1\u5668\u72b6\u6001（\u5305\u542b\u8282\u70b9 ID\u3001\u5730\u5740\u3001\u6743\u91cd\u3001\u8fd0\u884c\u72b6\u6001\u7b49）：<\/p>\n<\/li>\n<\/ul>\n
#\u6267\u884c\u6743\u91cd\u66f4\u6539
\n[root@haproxy ~]# echo "show servers state" | socat stdio \/var\/lib\/haproxy\/stats<\/p>\n- \n
- \n
\u67e5\u770b\u6307\u5b9a\u540e\u7aef\u8282\u70b9\u7684\u6743\u91cd：<\/p>\n<\/li>\n<\/ul>\n
[root@haproxy ~]# echo "get weight webcluster\/hehe" | socat stdio \/var\/lib\/haproxy\/stats
\n1 (initial 1) <\/p>\n2. \u70ed\u66f4\u65b0（\u4fee\u6539）HAProxy \u8282\u70b9\u6743\u91cd<\/p>\n
\u00a0\u00a0\u00a0\u00a0\u76f4\u63a5\u4fee\u6539\u6743\u91cd（\u65e0\u6743\u9650\u65f6\u4f1a\u62a5\u9519）：<\/p>\n
# \u683c\u5f0f：echo "set weight \u540e\u7aef\u96c6\u7fa4\u540d\/\u8282\u70b9\u540d \u65b0\u6743\u91cd" | socat stdio \/var\/lib\/haproxy\/stats
\n[root@haproxy ~]# echo "set weight webcluster\/hehe 4 " | socat stdio \/var\/lib\/haproxy\/stats <\/p>\n- \n
- \n
\u82e5\u63d0\u793a Permission denied：\u9700\u68c0\u67e5 HAProxy \u7684 stats socket \u914d\u7f6e\u662f\u5426\u5305\u542b level admin（\u7ba1\u7406\u5458\u6743\u9650），\u5e76\u91cd\u542f HAProxy\u3002<\/p>\n<\/li>\n
- \n
\u4fee\u6539\u540e\u53ef\u518d\u6b21\u6267\u884c get weight \u6307\u4ee4\u9a8c\u8bc1\u6743\u91cd\u662f\u5426\u751f\u6548\u3002<\/p>\n<\/li>\n<\/ul>\n
2.4\u00a0\u6548\u679c\u9a8c\u8bc1<\/h4>\n
\u4fee\u6539\u8282\u70b9\u6743\u91cd\u540e，\u53ef\u901a\u8fc7\u591a\u6b21\u8bbf\u95ee HAProxy \u524d\u7aef\u5730\u5740，\u9a8c\u8bc1\u6d41\u91cf\u5206\u53d1\u6bd4\u4f8b\u662f\u5426\u7b26\u5408\u6743\u91cd\u914d\u7f6e：<\/p>\n
#\u6d4b\u8bd5
\n[Administrator.DESKTOP-VJ307M3] \u27a4 for i in {1..10}; do curl 172.25.254.100; done
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20
\nwebserver1 – 192.168.0.10
\nwebserver2 – 192.168.0.20
\nwebserver2 – 192.168.0.20 <\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143249-69a1ab1150f39.png\")
<\/p>\n\u6838\u5fc3\u4ef7\u503c<\/p>\n
- \n
\u65e0\u505c\u673a\u66f4\u65b0：\u8c03\u6574 HAProxy \u540e\u7aef\u8282\u70b9\u6743\u91cd\u65f6，\u65e0\u9700\u91cd\u542f HAProxy \u670d\u52a1，\u907f\u514d\u4e1a\u52a1\u4e2d\u65ad；<\/p>\n<\/li>\n
- \n
\u7075\u6d3b\u8c03\u4f18：\u53ef\u6839\u636e\u670d\u52a1\u5668\u8d1f\u8f7d\u3001\u4e1a\u52a1\u9700\u6c42\u52a8\u6001\u8c03\u6574\u8282\u70b9\u6743\u91cd，\u4f18\u5316\u6d41\u91cf\u5206\u53d1；<\/p>\n<\/li>\n
- \n
\u8f7b\u91cf\u4ea4\u4e92：\u501f\u52a9 Socat \u5de5\u5177\u5b9e\u73b0\u4e0e HAProxy \u5957\u63a5\u5b57\u7684\u7b80\u5355\u4ea4\u4e92，\u64cd\u4f5c\u6210\u672c\u4f4e\u3002<\/p>\n<\/li>\n
3.\u00a0\u81ea\u5b9a\u4e49 HAProxy \u9519\u8bef\u754c\u9762<\/h3>\n
HAProxy \u63d0\u4f9b\u4e86\u591a\u79cd\u81ea\u5b9a\u4e49\u9519\u8bef\u754c\u9762\u7684\u65b9\u5f0f，\u6838\u5fc3\u7528\u4e8e\u540e\u7aef\u670d\u52a1\u4e0d\u53ef\u7528\u65f6，\u66ff\u6362\u9ed8\u8ba4\u7684\u9519\u8bef\u63d0\u793a，\u63d0\u5347\u7528\u6237\u4f53\u9a8c\u6216\u5b9e\u73b0\u7279\u5b9a\u7684\u6545\u969c\u5f15\u5bfc\u903b\u8f91，\u4e3b\u8981\u5305\u542bsorryserver（\u5907\u7528\u670d\u52a1\u5668）\u3001\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6587\u4ef6\u3001\u91cd\u5b9a\u5411\u5230\u6307\u5b9a\u7f51\u7ad9<\/span> \u4e09\u79cd\u573a\u666f\u3002<\/p>\n
3.1\u00a0\u57fa\u7840\u65b9\u6848：sorryserver（\u5907\u7528\u670d\u52a1\u5668）<\/h4>\n
\u5f53\u6b63\u5e38\u4e1a\u52a1\u540e\u7aef\u670d\u52a1\u5668\u5168\u90e8\u5b95\u673a\u65f6，\u5c06\u8bf7\u6c42\u5b9a\u5411\u5230\u9884\u5148\u914d\u7f6e\u7684\u5907\u7528\u670d\u52a1\u5668（sorryserver），\u662f\u6545\u969c\u65f6\u7684 \u201c\u515c\u5e95\u8bbf\u95ee\u8282\u70b9\u201d，\u800c\u975e\u76f4\u63a5\u8fd4\u56de\u9519\u8bef\u9875\u9762\u3002<\/p>\n
\u3010\u914d\u7f6e\u6b65\u9aa4\u3011<\/p>\n
1. \u90e8\u7f72\u5907\u7528\u670d\u52a1\u5668（\u53ef\u590d\u7528 HAProxy \u4e3b\u673a）：\u5b89\u88c5 Web \u670d\u52a1（\u5982 Apache），\u4fee\u6539\u76d1\u542c\u7aef\u53e3（\u793a\u4f8b\u4e3a 8080），\u5e76\u914d\u7f6e\u81ea\u5b9a\u4e49\u63d0\u793a\u5185\u5bb9；<\/p>\n
#\u5728\u65b0\u4e3b\u673a\u4e2d\u5b89\u88c5apache（\u53ef\u4ee5\u7528haproxy\u4e3b\u673a\u4ee3\u66ff）
\n[root@haproxy ~]# dnf install httpd -y
\n[root@haproxy ~]# vim \/etc\/httpd\/conf\/httpd.conf
\n47 Listen 8080
\n[root@haproxy ~]# systemctl enable –now httpd
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/httpd.service \u2192 \/usr\/lib\/systemd\/system\/httpd.service.<\/p>\n[root@haproxy ~]# echo "\u674e\u54e5\u5728，\u6ca1\u610f\u5916" > \/var\/www\/html\/index.html <\/p>\n
2. \u4fee\u6539 HAProxy \u914d\u7f6e\u6587\u4ef6（\/etc\/haproxy\/haproxy.cfg），\u5728\u540e\u7aef\u96c6\u7fa4\u4e2d\u6dfb\u52a0 backup \u6807\u8bc6\u7684\u5907\u7528\u670d\u52a1\u5668：<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\nlisten webcluster
\n bind *:80
\n mode http
\n balance roundrobin
\n server haha 192.168.0.10:80 check inter 3s fall 3 rise 5 weight 1
\n server hehe 192.168.0.20:80 check inter 3s fall 3 rise 5 weight 1
\n server wuwu 192.168.0.100:8080 backup#sorryserver <\/p>\n3.\u00a0\u91cd\u542f HAProxy \u751f\u6548，\u5f53\u6240\u6709\u4e1a\u52a1\u670d\u52a1\u5668\u5b95\u673a\u65f6，\u8bf7\u6c42\u4f1a\u88ab\u8f6c\u53d1\u5230\u5907\u7528\u670d\u52a1\u5668\u3002<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
4. \u6d4b\u8bd5<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\nwebserver1 – 192.168.0.10<\/p>\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\nwebserver2 – 192.168.0.20<\/p>\n#\u5173\u95ed\u4e24\u53f0\u6b63\u5e38\u7684\u4e1a\u52a1\u4e3b\u673a
\n[root@webserver1+2 ~]# systemctl stop httpd<\/p>\n[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\n\u674e\u54e5\u5728，\u6ca1\u610f\u5916 <\/p>\n3.2\u00a0\u6838\u5fc3\u65b9\u6848：\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6587\u4ef6<\/h4>\n
\u5f53\u5305\u62ec\u5907\u7528\u670d\u52a1\u5668\u5728\u5185\u7684\u6240\u6709\u540e\u7aef\u670d\u52a1\u90fd\u5b95\u673a<\/span>\u65f6，HAProxy \u4f1a\u8fd4\u56de\u9ed8\u8ba4\u9519\u8bef\u9875\u9762（\u5982 503），\u53ef\u901a\u8fc7\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6587\u4ef6\u66ff\u6362\u9ed8\u8ba4\u5185\u5bb9\u3002<\/p>\n
\u3010\u914d\u7f6e\u6b65\u9aa4\u3011<\/p>\n
1. \u521b\u5efa\u9519\u8bef\u9875\u9762\u5b58\u653e\u76ee\u5f55，\u5e76\u7f16\u5199\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6587\u4ef6（\u9700\u9075\u5faa HTTP \u683c\u5f0f）：<\/p>\n
[root@haproxy ~]# mkdir \/errorpage\/html\/ -p
\n[root@haproxy ~]# vim \/errorpage\/html\/503.http
\nHTTP\/1.0 503 Service Unavailable
\nCache-Control: no-cache
\nConnection: close
\nContent-Type: text\/html;charset=UTF-8<\/p>\n<html><body><h1>\u4ec0\u4e48\u52a8\u7269\u751f\u6c14\u6700\u5b89\u9759<\/h1>
\n\u5927\u7329\u7329！！
\n<\/body><\/html> <\/p>\n2.\u00a0\u4fee\u6539 HAProxy \u7684defaults\u6bb5，\u6dfb\u52a0errorfile\u6307\u4ee4\u5173\u8054\u9519\u8bef\u7801\u4e0e\u81ea\u5b9a\u4e49\u6587\u4ef6：<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfg
\ndefaults
\n mode http
\n # \u5176\u4ed6\u9ed8\u8ba4\u914d\u7f6e（\u65e5\u5fd7\u3001\u8d85\u65f6\u3001\u8fde\u63a5\u6570\u7b49）
\n errorfile 503 \/errorpage\/html\/503.http # 503\u9519\u8bef\u5173\u8054\u81ea\u5b9a\u4e49\u6587\u4ef6 <\/p>\n3. \u91cd\u542f HAProxy，\u5f53\u89e6\u53d1 503 \u9519\u8bef\u65f6，\u4f1a\u8fd4\u56de\u81ea\u5b9a\u4e49\u7684\u9875\u9762\u5185\u5bb9\u3002<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
4. \u6d4b\u8bd5<\/p>\n
[Administrator.DESKTOP-VJ307M3] \u27a4 curl 172.25.254.100
\n<html><body><h1>\u4ec0\u4e48\u52a8\u7269\u751f\u6c14\u6700\u5b89\u9759<\/h1>
\n\u5927\u7329\u7329！！
\n<\/body><\/html> <\/p>\n3.3\u00a0\u6269\u5c55\u65b9\u6848：\u91cd\u5b9a\u5411\u9519\u8bef\u5230\u6307\u5b9a\u7f51\u7ad9<\/h4>\n
\u9664\u4e86\u8fd4\u56de\u672c\u5730\u81ea\u5b9a\u4e49\u9875\u9762，\u8fd8\u53ef\u5c06\u9519\u8bef\u8bf7\u6c42\u76f4\u63a5\u91cd\u5b9a\u5411\u5230\u5916\u90e8\u6307\u5b9a\u7f51\u7ad9（\u5982\u767e\u5ea6）\u3002<\/p>\n
\u3010\u914d\u7f6e\u6b65\u9aa4\u3011<\/p>\n
1. \u4fee\u6539 HAProxy \u7684defaults\u6bb5，\u5c06errorfile\u66ff\u6362\u4e3aerrorloc，\u6307\u5b9a\u91cd\u5b9a\u5411\u7684 URL：<\/p>\n
[root@haproxy ~]# vim \/etc\/haproxy\/haproxy.cfgdefaults
\n mode http
\n # \u5176\u4ed6\u9ed8\u8ba4\u914d\u7f6e
\n errorloc 503 http:\/\/www.baidu.com # 503\u9519\u8bef\u91cd\u5b9a\u5411\u5230\u767e\u5ea6 <\/p>\n2.\u00a0\u91cd\u542f HAProxy，\u5f53\u89e6\u53d1 503 \u9519\u8bef\u65f6，\u6d4f\u89c8\u5668\u4f1a\u76f4\u63a5\u8df3\u8f6c\u5230\u914d\u7f6e\u7684\u5916\u90e8\u7f51\u7ad9\u3002<\/p>\n
[root@haproxy ~]# systemctl restart haproxy.service <\/p>\n
\u6838\u5fc3\u8bf4\u660e<\/p>\n
- \n
\u4f18\u5148\u7ea7：sorryserver > \u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762 \/ \u91cd\u5b9a\u5411，\u4ec5\u5f53\u5907\u7528\u670d\u52a1\u5668\u4e5f\u4e0d\u53ef\u7528\u65f6，\u624d\u4f1a\u89e6\u53d1\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6216\u91cd\u5b9a\u5411；<\/p>\n<\/li>\n
- \n
\u9519\u8bef\u7801：HAProxy \u652f\u6301\u4e3a\u4e0d\u540c\u9519\u8bef\u7801（\u5982 403\u3001500\u3001503 \u7b49）\u914d\u7f6e\u4e0d\u540c\u7684\u81ea\u5b9a\u4e49\u903b\u8f91；<\/p>\n<\/li>\n
- \n
\u683c\u5f0f\u8981\u6c42：\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\u6587\u4ef6（.http）\u5fc5\u987b\u5305\u542b\u5b8c\u6574\u7684 HTTP \u54cd\u5e94\u5934（\u5982HTTP\/1.0 503 Service Unavailable），\u5426\u5219\u4f1a\u5bfc\u81f4 HAProxy \u89e3\u6790\u5931\u8d25\u3002<\/p>\n<\/li>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e00\u3001HAProxy \u662f\u4ec0\u4e48？\u4e3a\u4ec0\u4e48\u8981\u5b66\u5b83？
\nHAProxy \u9ad8\u6027\u80fd\u3001\u5f00\u6e90\u7684\u8d1f\u8f7d\u5747\u8861 \u53cd\u5411\u4ee3\u7406\u8f6f\u4ef6
\n1. HAProxy \u662f\u4ec0\u4e48？
\n\u4e3b\u8981\u7528\u6765：
\n\u628a\u7528\u6237\u8bf7\u6c42\u5747\u5300\u5206\u7ed9\u591a\u53f0\u670d\u52a1\u5668\u505a\u6d41\u91cf\u5165\u53e3\u3001\u7f51\u5173\u3001\u9ad8\u53ef\u7528\u652f\u6301 HTTP\/HTTPS\/TCP \u7b49，\u6027\u80fd\u6781\u5f3a\u3001\u5f88\u7a33\u5b9a \u7b80\u5355\u7406\u89e3：\u4f60\u6709 10 \u53f0 Web \u670d\u52a1\u5668，\u7528\u6237\u4e0d\u77e5\u9053\u4e5f\u4e0d\u7528\u7ba1\u8fde\u54ea\u53f0，\u5168\u90fd\u5148\u8fde HAProxy࿰<\/p>\n","protected":false},"author":2,"featured_media":78652,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2204,258,44],"topic":[],"class_list":["post-78665","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-haproxy","tag-258","tag-44"],"yoast_head":"\n\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/78665.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u4e00\u3001HAProxy \u662f\u4ec0\u4e48？\u4e3a\u4ec0\u4e48\u8981\u5b66\u5b83？ HAProxy \u9ad8\u6027\u80fd\u3001\u5f00\u6e90\u7684\u8d1f\u8f7d\u5747\u8861 \u53cd\u5411\u4ee3\u7406\u8f6f\u4ef6 1. HAProxy \u662f\u4ec0\u4e48？ \u4e3b\u8981\u7528\u6765： \u628a\u7528\u6237\u8bf7\u6c42\u5747\u5300\u5206\u7ed9\u591a\u53f0\u670d\u52a1\u5668\u505a\u6d41\u91cf\u5165\u53e3\u3001\u7f51\u5173\u3001\u9ad8\u53ef\u7528\u652f\u6301 HTTP\/HTTPS\/TCP \u7b49，\u6027\u80fd\u6781\u5f3a\u3001\u5f88\u7a33\u5b9a \u7b80\u5355\u7406\u89e3：\u4f60\u6709 10 \u53f0 Web \u670d\u52a1\u5668，\u7528\u6237\u4e0d\u77e5\u9053\u4e5f\u4e0d\u7528\u7ba1\u8fde\u54ea\u53f0，\u5168\u90fd\u5148\u8fde HAProxy࿰\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/78665.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-27T14:32:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143246-69a1ab0eecc0e.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"28 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/78665.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/78665.html\",\"name\":\"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-02-27T14:32:50+00:00\",\"dateModified\":\"2026-02-27T14:32:50+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/78665.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/78665.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/78665.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/78665.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u4e00\u3001HAProxy \u662f\u4ec0\u4e48？\u4e3a\u4ec0\u4e48\u8981\u5b66\u5b83？ HAProxy \u9ad8\u6027\u80fd\u3001\u5f00\u6e90\u7684\u8d1f\u8f7d\u5747\u8861 \u53cd\u5411\u4ee3\u7406\u8f6f\u4ef6 1. HAProxy \u662f\u4ec0\u4e48？ \u4e3b\u8981\u7528\u6765： \u628a\u7528\u6237\u8bf7\u6c42\u5747\u5300\u5206\u7ed9\u591a\u53f0\u670d\u52a1\u5668\u505a\u6d41\u91cf\u5165\u53e3\u3001\u7f51\u5173\u3001\u9ad8\u53ef\u7528\u652f\u6301 HTTP\/HTTPS\/TCP \u7b49，\u6027\u80fd\u6781\u5f3a\u3001\u5f88\u7a33\u5b9a \u7b80\u5355\u7406\u89e3：\u4f60\u6709 10 \u53f0 Web \u670d\u52a1\u5668，\u7528\u6237\u4e0d\u77e5\u9053\u4e5f\u4e0d\u7528\u7ba1\u8fde\u54ea\u53f0，\u5168\u90fd\u5148\u8fde HAProxy࿰","og_url":"https:\/\/www.wsisp.com\/helps\/78665.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-02-27T14:32:50+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260227143246-69a1ab0eecc0e.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"28 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/78665.html","url":"https:\/\/www.wsisp.com\/helps\/78665.html","name":"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-02-27T14:32:50+00:00","dateModified":"2026-02-27T14:32:50+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/78665.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/78665.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/78665.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4ece\u5165\u95e8\u5230\u5b9e\u6218\uff1aHAProxy \u8d1f\u8f7d\u5747\u8861\u4e0e\u4ee3\u7406\u5168\u89e3\u6790"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/78665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=78665"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/78665\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/78652"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=78665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=78665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=78665"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=78665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} - \n
- \n
- \n
- \n
- \u6e05\u7406\u65e7\u7684 stats \u6587\u4ef6\u5e76\u91cd\u542f HAProxy \u4f7f\u914d\u7f6e\u751f\u6548：<\/li>\n<\/ul>\n
- \u7f16\u8f91 HAProxy \u914d\u7f6e\u6587\u4ef6 \/etc\/haproxy\/haproxy.cfg，\u6dfb\u52a0 \/ \u4fee\u6539 stats socket \u914d\u7f6e<\/li>\n<\/ul>\n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- \u6d41\u91cf\u5206\u53d1<\/span><\/li>\n
- \u505a\u6d41\u91cf\u5165\u53e3\u3001\u7f51\u5173\u3001\u9ad8\u53ef\u7528<\/span><\/li>\n