HAProxy Load Balancer

OSS

HAProxy L4/L7 load balancer on systemd (distro package). Renders a hardened haproxy.cfg with health checks, a protected stats page and optional TLS termination. Enable keepalived to publish a VRRP virtual IP across 2+ nodes for HA.

by opensible ✓· ⬇ 0 installs· Security & Secrets· v1.0.0· template haproxy-lb

#haproxy #load-balancer #keepalived #ha #systemd

Use in the OpenSible console

Open Infrastructure → Stack Hub Blueprints, switch the source to Cloud hub, then pick HAProxy Load Balancer and press Use.

Default variables

defaults.json

{
  "mode": "http",
  "become": true,
  "maxconn": 20000,
  "backends": [
    {
      "ip": "",
      "name": "app-1",
      "ssh_port": 8080,
      "ssh_user": ""
    },
    {
      "ip": "",
      "name": "app-2",
      "ssh_port": 8080,
      "ssh_user": ""
    }
  ],
  "vrrp_vip": "",
  "stats_uri": "/stats",
  "cluster_id": "opensible-haproxy",
  "stats_port": 8404,
  "stats_user": "admin",
  "tls_enabled": false,
  "extra_global": "",
  "backend_check": true,
  "frontend_bind": "0.0.0.0",
  "frontend_port": 80,
  "open_firewall": true,
  "stats_enabled": true,
  "tls_bind_port": 443,
  "tls_cert_path": "/etc/haproxy/certs/site.pem",
  "vrrp_password": "",
  "extra_defaults": "",
  "stats_password": "",
  "timeout_client": "30s",
  "timeout_server": "30s",
  "vrrp_interface": "eth0",
  "vrrp_router_id": 51,
  "http_check_path": "/",
  "timeout_connect": "5s",
  "balance_algorithm": "roundrobin",
  "tls_redirect_http": true,
  "keepalived_enabled": false
}

Versions (1)

v1.0.0playbook.yml