mirror of
https://github.com/coolsnowwolf/luci.git
synced 2025-05-02 14:42:43 +08:00
f54e3ac988
Haproxy still did not work after haproxy-tcp upgarde to v2.6.6. `[haproxy.main()] FD limit (1024) too low for maxconn=2048/maxsock=4123. Please raise 'ulimit-n' to 4123 or more to avoid any trouble.` Need to comment the `ulimit-n` and `maxconn`.
134 lines
5.1 KiB
Bash
Executable File
134 lines
5.1 KiB
Bash
Executable File
#!/bin/sh /etc/rc.common
|
||
|
||
CFG_FILE=/etc/haproxy.cfg
|
||
stop(){
|
||
logger -t alex stopping haproxy
|
||
echo "stopping haproxy"
|
||
/etc/init.d/haproxy disable
|
||
/etc/init.d/haproxy stop
|
||
[ -f /etc/haproxy_backup ] && {
|
||
cp /etc/haproxy_backup /etc/init.d/haproxy
|
||
}
|
||
iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
|
||
iptables -t nat -F HAPROXY &> /dev/null
|
||
sleep 1
|
||
iptables -t nat -X HAPROXY &> /dev/null
|
||
}
|
||
start(){
|
||
echo "starting haproxy"
|
||
logger -t restarting haproxy
|
||
echo global > $CFG_FILE
|
||
cat >> $CFG_FILE <<EOF
|
||
log 127.0.0.1 local0 #[日志输出配置，所有日志都记录在本机，通过local0输出]
|
||
log 127.0.0.1 local1 notice #定义haproxy 日志级别[error warringinfo debug]
|
||
daemon #以后台形式运行harpoxy
|
||
#nbproc 1 #设置进程数量
|
||
pidfile /var/run/haproxy.pid
|
||
#ulimit-n 1024 #ulimit 的数量限制
|
||
#maxconn 2048 #默认最大连接数,需考虑ulimit-n限制
|
||
#chroot /usr/local/haproxy
|
||
defaults
|
||
log global
|
||
mode tcp #默认的模式mode { tcp|http|health }，tcp是4层，http是7层，health只会返回OK
|
||
retries 3 #两次连接失败就认为是服务器不可用，也可以通过后面设置
|
||
option abortonclose #当服务器负载很高的时候，自动结束掉当前队列处理比较久的链接
|
||
option redispatch
|
||
maxconn 1024 #默认的最大连接数
|
||
timeout connect 5000ms #连接超时
|
||
timeout client 30000ms #客户端超时
|
||
timeout server 30000ms #服务器超时
|
||
balance roundrobin #设置默认负载均衡方式，轮询方式
|
||
#balance source #设置默认负载均衡方式，类似于nginx的ip_hash
|
||
#balnace leastconn #设置默认负载均衡方式，最小连接数
|
||
listen admin_stats
|
||
bind 0.0.0.0:1111 #节点统计页面的访问端口
|
||
mode http #http的7层模式
|
||
option httplog #采用http日志格式
|
||
maxconn 10 #节点统计页面默认的最大连接数
|
||
stats refresh 30s #节点统计页面自动刷新时间
|
||
stats uri /haproxy #节点统计页面url
|
||
stats realm Haproxy #统计页面密码框上提示文本
|
||
stats auth admin:root #设置监控页面的用户和密码:admin,可以设置多个用户名
|
||
stats admin if TRUE #设置手工启动/禁用，后端服务器(haproxy-1.4.9以后版本)
|
||
resolvers mydns
|
||
nameserver dns1 114.114.114.114:53
|
||
nameserver dns2 223.5.5.5:53
|
||
|
||
frontend ss-in
|
||
bind 127.0.0.1:2222
|
||
default_backend ss-out
|
||
backend ss-out
|
||
mode tcp
|
||
balance roundrobin
|
||
option tcplog
|
||
EOF
|
||
local COUNTER=0
|
||
#添加主服务器
|
||
iptables -t nat -X HAPROXY
|
||
iptables -t nat -N HAPROXY
|
||
iptables -t nat -F HAPROXY
|
||
|
||
while true
|
||
do
|
||
local server_ip=`uci get haproxy.@main_server[$COUNTER].server_ip 2>/dev/null`
|
||
local server_name=`uci get haproxy.@main_server[$COUNTER].server_name 2>/dev/null`
|
||
local server_port=`uci get haproxy.@main_server[$COUNTER].server_port 2>/dev/null`
|
||
local server_weight=`uci get haproxy.@main_server[$COUNTER].server_weight 2>/dev/null`
|
||
local validate=`uci get haproxy.@main_server[$COUNTER].validate 2>/dev/null`
|
||
if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ] || [ -z "$server_weight" ]; then
|
||
echo break
|
||
break
|
||
fi
|
||
echo the main server $COUNTER $server_ip $server_name $server_port $server_weight
|
||
[ "$validate" = 1 ] && {
|
||
echo server $server_name $server_ip:$server_port weight $server_weight maxconn 1024 check resolvers mydns inter 1500 rise 3 fall 3 >> $CFG_FILE
|
||
}
|
||
iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
|
||
COUNTER=$(($COUNTER+1))
|
||
done
|
||
COUNTER=0
|
||
#添加备用服务器
|
||
while true
|
||
do
|
||
local server_ip=`uci get haproxy.@backup_server[$COUNTER].server_ip 2>/dev/null`
|
||
local server_name=`uci get haproxy.@backup_server[$COUNTER].server_name 2>/dev/null`
|
||
local server_port=`uci get haproxy.@backup_server[$COUNTER].server_port 2>/dev/null`
|
||
local validate=`uci get haproxy.@backup_server[$COUNTER].validate 2>/dev/null`
|
||
if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ]; then
|
||
echo break
|
||
break
|
||
fi
|
||
echo the backup server $COUNTER $server_ip $server_name $server_port
|
||
[ "$validate" = 1 ] && {
|
||
echo server $server_name $server_ip:$server_port weight 10 check resolvers mydns backup inter 1500 rise 3 fall 3 >> $CFG_FILE
|
||
}
|
||
iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
|
||
COUNTER=$(($COUNTER+1))
|
||
done
|
||
iptables -t nat -I OUTPUT -j HAPROXY
|
||
/etc/init.d/haproxy enable
|
||
/etc/init.d/haproxy restart
|
||
cp /etc/init.d/haproxy /etc/haproxy_backup
|
||
cp /etc/haproxy_start /etc/init.d/haproxy
|
||
}
|
||
|
||
restart(){
|
||
echo luci for haproxy
|
||
sleep 1s
|
||
local vt_enabled=`uci get haproxy.@arguments[0].enabled 2>/dev/null`
|
||
logger -t haproxy is initializing enabled is $vt_enabled
|
||
echo $vt_enabled
|
||
if [ "$vt_enabled" = 1 ]; then
|
||
[ -f /etc/haproxy_backup ] && {
|
||
cp /etc/haproxy_backup /etc/init.d/haproxy
|
||
}
|
||
iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
|
||
iptables -t nat -F HAPROXY &> /dev/null
|
||
sleep 1
|
||
iptables -t nat -X HAPROXY &> /dev/null
|
||
start;
|
||
else
|
||
stop;
|
||
fi
|
||
}
|