http代理，前端加其它代理，所以不需要监听443了，ingress里ssl自动重定向要配置为false，否则会报错tcp代理模板
| Code Block |
|---|
|
defaultsglobal
log global
mode http
log option httplog
timeout connect 5000
timeout client 50000
timeout server 50000
timeout http-request 15s
timeout http-keep-alive 15s
frontend monitor-in
bind *:33305
mode http
option httplog
monitor-uri /monitor
frontend k8s-master
bind 0.0.0.0:6443
bind 127.0.0.1:6443
mode tcp
option tcplog
tcp-request inspect-delay 5s
default_backend k8s-master
backend k8s-master
mode tcp
option tcplog
option tcp-check
balance roundrobin
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
server k8s-master001 10.10.51.11:6443 check
server k8s-master002 10.10.51.26:6443 check
server k8s-master003 10.10.51.27:6443 check
listen http-80
bind 0.0.0.0:80
mode http
option forwardfor
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
server ingress-nginx-controller1 10.10.51.130:80 check
server ingress-nginx-controller2 10.10.51.131:80 check
server ingress-nginx-controller3 10.10.51.132:80 check
|
tcp代理
| Code Block |
|---|
|
global
maxconn 2000
ulimit-n 16384
log 127.0.0.1 local0 err
stats timeout 30s
defaults
log global
mode http
option httplog
timeout connect 5000
timeout client 50000
timeout server 50000
timeout http-request 15s
timeout http-keep-alive 15s
frontend monitor-in
bind *:33305
mode http
option httplog
monitor-uri /monitor
frontend k8s-master
127.0.0.1 local0
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
maxconn 10000
daemon
stats socket /var/lib/haproxy/stats
stats timeout 30s
defaults
mode tcp
log global
option tcplog
option dontlognull
option redispatch
retries 3
timeout connect 5s
timeout client 600s
timeout server 600s
timeout http-keep-alive 600s
timeout queue 30s
timeout tunnel 1h
timeout client-fin 60s
timeout server-fin 60s
default-server inter 5s fastinter 1s downinter 500ms rise 3 fall 2
listen d0-test-master-8443
bind 0.0.0.0:64438443
bind 127.0.0.1:6443
mode tcp
option tcplog
tcp-request inspect-delay 5s
default_backend k8s-master
backend k8s-master
mode tcp
option tcplog
option tcp-check
balance roundrobin
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
server k8sd0-test-master001 10192.10168.5131.11111:6443 check
server k8sd0-test-master002 10192.10168.5131.26112:6443 check
server k8sd0-test-master003 10192.10168.5131.27113:6443 check
listen http-80
bind 0.0.0.0:80
mode tcp
option tcplog
tcp-request inspect-delay 5s
server default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
ingress-nginx-controller1 192.168.31.191:80 send-proxy check
server ingress-nginx-controller2 192.168.31.192:80 send-proxy check
server ingress-nginx-controller3 192.168.31.193:80 send-proxy check
listen https-443
bind 0.0.0.0:443
mode tcp
server ingress-nginx-controller1 10192.10168.5131.130:80191:443 send-proxy check
server ingress-nginx-controller2 10192.10168.5131.131:80192:443 send-proxy check
server ingress-nginx-controller3 10192.10168.5131.132:80193:443 send-proxy check
listen httpsnacos-4437848
bind 0.0.0.0:4437848
mode tcp
server option tcplogingress-nginx-controller1 192.168.31.191:7848 check
tcp-request inspect-delay 5s
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
server ingress-nginx-controller2 192.168.31.192:7848 check
server ingress-nginx-controller3 192.168.31.193:7848 check
listen nacos-8848
bind 0.0.0.0:8848
mode tcp
server ingress-nginx-controller1 10192.10168.5131.130191:4438848 check
server ingress-nginx-controller2 10192.10168.5131.131192:4438848 check
server ingress-nginx-controller3 10192.10168.5131.132193:4438848 check |
