{"id":1818,"date":"2020-11-16T17:39:09","date_gmt":"2020-11-16T17:39:09","guid":{"rendered":"https:\/\/linuxways.net\/?p=1818"},"modified":"2020-11-18T16:56:18","modified_gmt":"2020-11-18T16:56:18","slug":"how-to-install-and-configure-haproxy-load-balancer-in-linux","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/ubuntu\/how-to-install-and-configure-haproxy-load-balancer-in-linux\/","title":{"rendered":"How to install and configure HAproxy on Ubuntu 20.04 LTS"},"content":{"rendered":"

HAproxy is an open-source and lightweight package that offers high availability and load balancing for TCP and HTTP based programs. It distributes the load among the web and application servers. HAproxy is available for nearly all Linux distributions. It is a widely used load balancer that is popular for its efficiency, reliability, and low memory and CPU footprint. In this post, we will explain how to install and configure HAproxy on a Ubuntu system.<\/p>\n

We have setup three machines. We will install HAproxy on one server and the Apache web servers on two servers. Our HAproxy server will then act as a load balancer and will distribute the load among Apache web servers.<\/p>\n

Note:<\/strong> The procedure and commands mentioned in this post has been tested on Ubuntu 20.04 LTS (Focal Fossa).<\/strong> The same procedure is also valid for Debian and Mint distributions.<\/p>\n

Network Details<\/h2>\n

We will be using three Ubuntu servers; all on the same network. The details of our servers are as follows:<\/p>\n

    \n
  1. \n
    Hostname: HAproxy, IP address: 192.168.72.157 (Frontend server)<\/pre>\n<\/li>\n
  2. \n
    Hostname: web-server1, IP address: 192.168.72.158 (Backend servers)<\/pre>\n<\/li>\n
  3. \n
    Hostname: web-server2, IP address: 192.168.72.159 (Backend servers)<\/pre>\n<\/li>\n<\/ol>\n
    Note:<\/strong> You must have sudo privileges on all the servers.<\/p>\n
    We will configure one machine as a load balancer and the other two as web servers. The HAproxy server will be our front-end server that will receive the requests from the users and forward them to the two web servers. The web servers will be our Backend servers that will receive those forwarded requests.<\/p>\n
    This is how our setup looks like:<\/p>\n
    <\/p>\n
    Setting up web servers-Backend servers<\/h2>\n
    In this section, we will setup two web servers (web-server1<\/strong> and web-server2<\/strong>) as our backend servers.<\/p>\n
    On web-server1(192.168.72.158)<\/h3>\n
    Perform the below steps in your web server. Make sure to replace the hostnames and IP addresses with the relevant IP addresses and hostnames of your web servers.<\/p>\n
    1. Configure hosts file<\/h4>\n
    On web-server1, <\/strong>edit the \/etc\/hosts<\/strong> file:<\/p>\n
    $ sudo nano \/etc\/hosts<\/pre>\n
    Then add the hostname entry for HAproxy <\/strong>server as follows:<\/p>\n
    hostname-of-HAproxy IP-address-of-HAproxy

    In our scenario, it would be:

    HAproxy 192.168.72.157<\/pre>\n
    2. Setup Apache webserver<\/h3>\n
    Now install Apache web server using the below command in Terminal. You can also visit our post on How to install the Apache web server on Linux<\/a>.<\/strong><\/p>\n
    $ sudo apt install apache2<\/pre>\n
    Then enable and start the Apache service using the below commands in Terminal:<\/p>\n
    $ sudo systemctl enable apache2<\/pre>\n
    $ sudo systemctl start apache2<\/pre>\n
    Create an index file for web-server1<\/strong> using the below command in Terminal:<\/p>\n
    $ echo \"<H1>Hello! This is webserver1: 192.168.72.158 <\/H1>\" | sudo tee \/var\/www\/html\/index.html<\/pre>\n
    If a firewall is running on your system, you will need to allow Apache traffic through it:<\/p>\n
    $ sudo ufw allow 80\/tcp<\/pre>\n
    Then reload the firewall configurations:<\/p>\n
    $ ufw reload<\/pre>\n
    Now try accessing the site in your web browser by typing http:\/\/<\/strong> followed by either the IP address or the hostname of your web server.<\/p>\n
    http:\/\/ hostname-or-IP-address<\/pre>\n
    <\/p>\n
    Alternatively, you can also use the curl command to test the webpage.<\/p>\n
    $ curl <hostname-or-IP-address><\/pre>\n
    On web server-2 192.168.72.159)<\/h3>\n
    Perform the below steps in your second web server. Make sure to replace the hostnames and IP addresses with the relevant IP addresses and hostnames of your web servers.<\/p>\n
    1. Configure hosts file<\/h4>\n
    In web-server2<\/strong>, edit the \/etc\/hosts<\/strong> file:<\/p>\n
    $ sudo nano \/etc\/hosts<\/pre>\n
    Then add the hostname entry for HAproxy <\/strong>server as follows:<\/p>\n
    HAproxy 192.168.72.157<\/pre>\n
    2. Install Apache webserver<\/h4>\n
    Now install Apache web server using the below command in Terminal.<\/p>\n
    $ sudo apt install apache2<\/pre>\n
    Then enable and start the Apache service using the below commands in Terminal:<\/p>\n
    $ sudo systemctl enable apache2

    $ sudo systemctl start apache2<\/pre>\n
    Create an index file for web-server2 using the below command in Terminal:<\/p>\n
    $ echo \"<H1>Hello! This is webserver2: 192.168.72.159 <\/H1>\" | sudo tee \/var\/www\/html\/index.html<\/pre>\n
    Allow Apache in the firewall:<\/p>\n
    $ sudo ufw allow 80\/tcp<\/pre>\n
    and then reload firewall configurations:<\/p>\n
    $ ufw reload<\/pre>\n
    Now try accessing the site in your web browser by typing http:\/\/<\/strong> followed by either the IP address or the hostname.<\/p>\n
    http:\/\/ hostname-or-IP-address<\/pre>\n
    <\/p>\n
    Alternatively, you can use the curl command to test the webpage.<\/p>\n
    $ curl <hostname-or-IP-address><\/pre>\n
    Now our Apache web servers are ready.<\/p>\n
    Setting up HAproxy load balancer-Frontend server<\/h2>\n
    In this section, we will set up an HAproxy load balancer for our web servers<\/strong>. This HAproxy server will act as a frontend server and accepts incoming requests from clients.<\/p>\n
    On the HAproxy <\/strong>server (192.168.72.157<\/strong>), perform the below steps to setup load balancer.<\/p>\n
    1. Configure hosts file<\/h3>\n
    Edit the \/etc\/hosts<\/strong> file using the below command in Terminal:<\/p>\n
    $ sudo nano \/etc\/hosts<\/pre>\n
    Add the following hostname entries for both Apache<\/strong> web servers along with its own hostname:<\/strong><\/p>\n
    192.168.72.157 HAproxy

    192.168.72.158 web-server1

    192.168.72.159 web-server2<\/pre>\n
    <\/strong><\/p>\n
    Now save and close the \/etc\/hosts<\/strong> file.<\/p>\n
    Installing HAproxy load balancer<\/h3>\n
    Now in this step, we will be installing the HAproxy on one of our Ubuntu server (192.168.72.157). To do so, update apt using the following command in Terminal:<\/p>\n
    $ sudo apt-get update<\/pre>\n
    Then update packages using the below command:<\/p>\n
    $ sudo apt-get upgrade<\/pre>\n
    Now install HAproxy using the following command in Terminal:<\/p>\n
    $ sudo sudo apt install haproxy<\/pre>\n
    <\/p>\n
    Once the installation of the HAproxy server is finished, you can confirm it using the below command in Terminal:<\/p>\n
    $ haproxy -v<\/pre>\n
    It will show you the installed version of HAproxy on your system which verifies that the HAproxy has been successfully installed.<\/p>\n
    <\/p>\n
    Configuring HAproxy as a load balancer<\/h3>\n
    In the following section, we will configure HAproxy as a load balancer. To do so, edit the \/etc\/haproxy\/haproxy.cfg<\/strong> file:<\/p>\n
    $ sudo nano \/etc\/haproxy\/haproxy.cfg<\/strong><\/pre>\n
    Append the following lines in the haproxy.cfg file replacing the IP addresses with your own IP addresses.<\/strong><\/p>\n
    The <\/span>frontend web-frontend<\/strong> in the above configuration lines tells HAproxy to listen to incoming requests on port <\/span>80<\/strong> of <\/span>192.168.72.157<\/strong> and then forward them to backend servers configured under the <\/span>backend<\/strong> web-backend<\/strong>. While configuring, replace the IP addresses with the relevant IP addresses of your web servers.<\/span><\/p>\n
    <\/p>\n
    Configuring HAproxy Monitoring<\/h3>\n
    With HAproxy monitoring, you can view a lot of information including server status, data transferred, uptime, session rate, etc. To configure HAproxy monitoring, append the following lines in the configuration file located at \/etc\/haproxy\/haproxy.cfg<\/strong>:<\/p>\n
    listen stats

    bind 192.168.72.157:8080\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 
    \u00a0\u00a0\u00a0 mode http 
    \u00a0\u00a0\u00a0 option forwardfor 
    \u00a0\u00a0\u00a0 option httpclose 
    \u00a0\u00a0\u00a0 stats enable 
    \u00a0\u00a0\u00a0 stats show-legends 
    \u00a0\u00a0\u00a0 stats refresh 5s 
    \u00a0\u00a0\u00a0 stats uri \/stats \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 
    \u00a0\u00a0\u00a0 stats realm Haproxy\\ Statistics 
     \u00a0\u00a0 stats auth kbuzdar:kbuzdar\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 #Login User and Password for the monitoring 
    \u00a0\u00a0\u00a0 stats admin if TRUE 
    \u00a0\u00a0\u00a0 default_backend web-backend<\/pre>\n
    The above configuration enables the HAproxy \u201cstats<\/strong>\u201d page using the stats<\/strong> directive and secures it with http<\/strong> basic authentication using the username and password defined by the stats auth <\/strong>directive.<\/p>\n
    <\/p>\n
    Once you are done with the configurations, save and close the haproxy.cfg file.<\/strong><\/p>\n
    Now verify the configuration file using the below command in Terminal:<\/strong><\/p>\n
    $ h<\/strong>aproxy -c -f \/etc\/haproxy\/haproxy.cfg<\/pre>\n
    The following output shows that the configurations are correct.<\/p>\n
    <\/p>\n
    Now to apply the configurations, restart the HAproxy service:<\/p>\n
    $ sudo systemctl restart haproxy.service<\/pre>\n
    It will stop and then start the HAproxy service.<\/p>\n
    To check the status of the HAproxy service, the command would be:<\/p>\n
    $ sudo systemctl status haproxy.service<\/pre>\n
    The active (running) <\/strong>status in the following output shows that the HAproxy server is enabled and running fine.<\/p>\n
    <\/p>\n
    Here are some other commands for managing the HAproxy server:<\/p>\n
    In order to start the HAproxy server, the command would be:<\/p>\n
    $ sudo systemctl start haproxy.service<\/pre>\n
    In order to stop the HAproxy server, the command would be:<\/p>\n
    $ sudo systemctl stop haproxy.service<\/pre>\n
    In case you want to temporarily disable the HAproxy server, the command would be:<\/p>\n
    $ sudo systemctl disable haproxy.service<\/pre>\n
    To re-enable the HAproxy server, the command would be:<\/p>\n
    $ sudo systemctl enable haproxy.service<\/pre>\n
    Test HAproxy<\/h3>\n
    Before testing the HAproxy setup, make sure you have connectivity to web servers. From your HAproxy server, ping both web servers either by their IP addresses or hostnames.<\/p>\n
    $ ping hostname-or-ip-address<\/pre>\n
    The following output shows that the HAproxy server can reach both web servers.<\/p>\n
    <\/p>\n
    Test HA Proxy using a web browser<\/h3>\n
    Now in your HAproxy server, open any web browser and type http:\/\/<\/strong> followed by the HAproxy server IP address which in our case is 192.168.72.157.<\/p>\n
    http:\/\/192.168.72.157<\/pre>\n
    The HAproxy server will alternatively send the request to both web servers in a round-robin method. You can test this by reloading the webpage a few times.<\/p>\n
    This is the response we received when we visited the http:\/\/192.168.72.157<\/a> for the first time: <\/p>\n
    This is the response we received when we reloaded the webpage: <\/p>\n
    You can also use the hostname in place of the HAproxy server IP address.<\/p>\n
    <\/p>\n
    Test HA Proxy using curl<\/h3>\n
    You can also use the curl command in Linux to test the HAproxy setup. Open the Terminal and type curl<\/strong> followed by the IP address or the hostname of the HAproxy server.<\/p>\n
    $ curl 192.168.72.157

    or

    $ curl HAproxy<\/pre>\n
    Run the curl command a few times and you will see the response alternating between both web servers.<\/p>\n
    Instead of running the commands several times, you can also run the following one-line script to test the HAproxy server:<\/p>\n
    $ while true; do curl 192.168.72.157; sleep 1; done<\/pre>\n
    <\/p>\n
    Testing HAproxy Monitoring<\/h3>\n
    To access the HAproxy monitoring page, type http:\/\/<\/strong> followed by the IP address\/hostname of HAproxy server and port 8080\/stats:<\/p>\n
    http:\/\/192.168.72.157:8080\/stats<\/a>

    or

    http:\/\/HAproxy:8080\/stats<\/a><\/pre>\n
    The following authentication box will appear. Enter the username<\/strong> and password<\/strong> you have configured earlier in the configurations and then press OK<\/strong>.<\/p>\n
    <\/p>\n
    This is the statistics report for our HAproxy server.<\/p>\n
    <\/p>\n
    There you have the installation and configuration of HAproxy load balancer on the Linux system. We have just discussed the basic setup and configuration of HAproxy as a load balancer for Apache web servers. We also looked at some commands for managing the HAproxy server. In the end, we tested the load balancing through the browser and the curl command. For more information, visit HAproxy official documentation<\/a><\/p>\n\n\n
    <\/p>","protected":false},"excerpt":{"rendered":"
    HAproxy is an open-source and lightweight package that offers high availability and load balancing for TCP and HTTP based programs. It distributes the load among the web and…<\/p>","protected":false},"author":4,"featured_media":1839,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5,2],"tags":[52,78],"class_list":["post-1818","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-debian","category-mint","category-ubuntu","tag-apache-web-server","tag-haproxy-load-balancer"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/1818","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=1818"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/1818\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/1839"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=1818"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=1818"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=1818"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}