Implementation of grayscale publishing with haproxy

haproxy To achieve gray Publishing

scene ： be based on header The head of the depart Grayscale publishing of field information

global                                                       #  Setting of global parameters 
    log         127.0.0.1 local2                      # log grammar ：log <address_1>[max_level_1] #  Global log configuration , Use log keyword ,
                                                                      Specify the use of 127.0.0.1
                                                                      Upper syslog In service local0 Log devices , The logging level is info Log 
    chroot      /usr/local/haproxy                 # Change the current working directory 
    pidfile     /var/run/haproxy.pid          # The current process id file 
    maxconn     4000                                # maximum connection 
    user        haproxy                                # Users 
    group       haproxy                                # Subordinate to the group 
    nbproc 8
	cpu-map 1 0
	cpu-map 2 1
	cpu-map 3 2
	cpu-map 4 3
	cpu-map 5 4
	cpu-map 6 5
	cpu-map 7 6
	cpu-map 8 7
    daemon                                               # Run as a daemons haproxy
    stats socket /var/lib/haproxy/stats

   defaults
    mode                    http                        # Default mode mode { tcp|http|health },tcp yes 4 layer ,http yes 7 layer ,health Will only return OK
    log                     global                    # Apply global log configuration 
    option                  httplog                  #  Enable logging HTTP request , Default haproxy Logging is not logging HTTP Request log                                                               
    option                  dontlognull          #  Enable this , Empty connections will not be logged . An empty connection is a load balancer upstream                                                                     Or monitoring system to detect the    Whether the service is available or not , You need to connect regularly or get some 
                                                                   A fixed component or page , Or detect whether the scanning port is monitored   Actions such as listening or opening are called empty connections ;
                                                                   The official document says , If there is no other load balancer upstream of the service , Suggest   Do not use 
                                                                    This parameter , Because malicious scanning or other actions on the Internet will not be recorded 
    option http-server-close                   # Close after each request http passageway 
    option forwardfor       except 127.0.0.0/8   # If the application on the server wants to record the IP Address ,  Need to be in HAProxy
                                                                             On   Configure this option ,   such   HAProxy Will put the client IP The message is sent to the server , stay HTTP
                                                                             Add in request "X-Forwarded-For" word   paragraph .   Enable   X-Forwarded-For, stay requests
                                                                             The head is inserted into the client IP Sent to the back end server, Make the back end server a   Get the real of the client IP. 
    option                  redispatch                      #  When using the cookie when ,haproxy The back-end server that will send its request to serverID Insert into 
                                                                            cookie in , In order to make sure   The session SESSION persistence ; And then , If the back-end server goes down 
                                                                             了 ,  But on the client side cookie Will not refresh   Of , If this parameter is set , Will send the customer's request 
                                                                             Force direction to another back end server On , To ensure the normal service .
    retries                 3                             #  Defines the number of failed reconnections to the backend server , If the number of connection failures exceeds this value, the corresponding backend 
                                                                   Server marked as unavailable 
    timeout http-request    10s             #http Request timeout 
    timeout queue           1m                 # The timeout of a request in the queue 
    timeout connect         10s                # Connection timeout 
    timeout client          1m                   # Client timeout 
    timeout server          1m                   # Server side timeout 
    timeout http-keep-alive 10s           # Set up http-keep-alive Timeout for 
    timeout check           10s                 # Detection timeout 
    maxconn                 3000                 # The maximum number of connections available per process 

    listen status
	   bind 0.0.0.0:1080
	   mode http
	   log global
	   stats refresh 30s
	   stts uri /admin?stats
	   
	   stats realm Private lands
	   stats auth admin:[email protected]
	   stats hide-version
	   
	frontend http_443_in
       bind *:443 ssl crt /etc/haproxy/cert.pem
       mode http

    #-----------#
    #acl list
        acl pipeline hdr_reg(host) -i ^(www.test.com)(:443)?$
	 
	#acl gray user config 
	    acl test_user_tag hdr_reg(x-user-name) -i ^(jdtw00000)
	
	#acl gay depart config
	    acl test_depart_tag hdr_reg(depart)  -i ^(ASDFSEWW51235LJL145)$	 

    #userbackend gray user list
        #use_backend backend_pipeline_test if pipeline pipeline_user_tag
   
    #userbackend gray depart list
        #use_backend backend_pipeline_test if pipeline test_depart_tag
    
	#usebackend list
        use_backend backend_pipeline if pipeline
		
	#___________---
	backend backend_pipeline
	    mode http
		balacne roundrobin
		option forwardfor
		option httpchk GET /cd-test/v2/healthcheck
		server test_svr_a01 12.0.2.4:8443 ssl check verify none check inter 5000 rise 2 fall 3
		server test_svr_b01 12.0.2.80:8443 ssl check verify none check inter 5000 rise 2 fall 3
     
	 backend backend_pipeline_test
	    mode http
		balacne roundrobin  # Load balancing algorithm 
		option forwardfor
		option httpchk GET /cd-test/v2/healthcheck
		#server test_test_svr_a01 12.0.2.4:8443 ssl check verify none check inter 5000 rise 2 fall 3
		#server test_test_svr_b01 12.0.2.80:8443 ssl check verify none check inter 5000 rise 2 fall 3