{"id":89711,"date":"2020-07-25T13:42:31","date_gmt":"2020-07-25T11:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/ustanavlivaem-balansirovshhik-nagruzki-haproxy-na-centos"},"modified":"2020-07-25T13:42:31","modified_gmt":"2020-07-25T11:42:31","slug":"ustanavlivaem-balansirovshhik-nagruzki-haproxy-na-centos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ustanavlivaem-balansirovshhik-nagruzki-haproxy-na-centos","title":{"rendered":"Instalimi i balancuesit t\u00eb ngarkes\u00ebs HAProxy n\u00eb CentOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrkthimi i artikullit \u00ebsht\u00eb p\u00ebrgatitur n\u00eb prag t\u00eb fillimit t\u00eb kursit \u00abAdministrator Linux. Virtualizimi dhe klasterizimi\u00bb<\/a><\/noindex><\/em><\/strong><\/p>\n

\"Instalimi<\/p>\n

<\/p>\n

Balancimi i ngarkes\u00ebs \u00ebsht\u00eb nj\u00eb zgjidhje e zakonshme p\u00ebr shkall\u00ebzimin horizontal t\u00eb aplikacioneve web n\u00eb disa hoste, duke ofruar p\u00ebr p\u00ebrdoruesit nj\u00eb pik\u00eb t\u00eb vetme aksesi n\u00eb sh\u00ebrbim. HAProxy<\/a><\/noindex> \u00ebsht\u00eb nj\u00eb nga programet m\u00eb t\u00eb njohura p\u00ebr balancimin e ngarkes\u00ebs me kod burimor t\u00eb hapur, e cila gjithashtu siguron disponueshm\u00ebri t\u00eb lart\u00eb dhe funksionalitet t\u00eb proksimit.<\/p>\n

<\/p>\n

HAProxy p\u00ebrpiqet t\u00eb optimizoj\u00eb p\u00ebrdorimin e burimeve, t\u00eb maksimizoj\u00eb kapacitetin e kalimit, t\u00eb minimizoj\u00eb koh\u00ebn e p\u00ebrgjigjes dhe t\u00eb shmang\u00eb mbingarkes\u00ebn e secilit burim t\u00eb ve\u00e7ant\u00eb. Ajo mund t\u00eb instalohet n\u00eb shum\u00eb distribucione Linux, si CentOS 8, mbi t\u00eb cilin do t\u00eb fokusohemi n\u00eb k\u00ebt\u00eb udh\u00ebzues, si dhe n\u00eb sistemet Debian 8<\/a><\/noindex> dhe Ubuntu 16<\/a><\/noindex>.<\/a><\/noindex><\/p>\n

<\/p>\n

\"Instalimi<\/p>\n

<\/p>\n

HAProxy \u00ebsht\u00eb ve\u00e7an\u00ebrisht i p\u00ebrshtatsh\u00ebm p\u00ebr faqet e internetit me trafik shum\u00eb t\u00eb lart\u00eb dhe shpesh p\u00ebrdoret p\u00ebr t\u00eb rritur q\u00ebndrueshm\u00ebrin\u00eb dhe performanc\u00ebn e konfigurimeve t\u00eb sh\u00ebrbimeve t\u00eb internetit me \u0441\u0435\u0440\u0432\u0435\u0440\u00eb t\u00eb shumt\u00eb. N\u00eb k\u00ebt\u00eb guid\u00eb jepen hapat p\u00ebr t\u00eb konfiguruar HAProxy si nj\u00eb balancues ngarkese n\u00eb nj\u00eb host cloud CentOS 8, i cili m\u00eb pas drejton trafikun n\u00eb server\u00ebt tuaj t\u00eb internetit.<\/p>\n

<\/p>\n

Si nj\u00eb kush thelb\u00ebsor p\u00ebr arritjen e rezultateve optimale, ju duhet t\u00eb keni t\u00eb pakt\u00ebn dy server\u00eb t\u00eb internetit dhe nj\u00eb server p\u00ebr balancimin e ngarkes\u00ebs. Sh\u00ebrbimi themelor i internetit, si nginx ose httpd, duhet t\u00eb jet\u00eb i instaluar n\u00eb server\u00ebt e internetit n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb verifikohet balancimi i ngarkes\u00ebs mes tyre.<\/p>\n

<\/p>\n

Instalimi i HAProxy n\u00eb CentOS 8<\/h2>\n

<\/p>\n

P\u00ebr shkak se HAProxy \u00ebsht\u00eb nj\u00eb aplikacion me burim t\u00eb hapur n\u00eb zhvillim t\u00eb shpejt\u00eb, distribuimi q\u00eb keni n\u00eb repo standarde t\u00eb CentOS mund t\u00eb mos jet\u00eb versioni m\u00eb i fundit. P\u00ebr t\u00eb kontrolluar versionin aktual, ekzekutoni komand\u00ebn e m\u00ebposhtme:<\/p>\n

<\/p>\n

sudo yum info haproxy<\/code><\/pre>\n
<\/p>\n
HAProxy ofron tre versione t\u00eb q\u00ebndrueshme p\u00ebr zgjedhje: dy versionet m\u00eb t\u00eb fundit t\u00eb mb\u00ebshtetura dhe nj\u00eb t\u00eb tret\u00eb, m\u00eb t\u00eb vjet\u00ebr, q\u00eb akoma merr azhurnime kritike. Ju gjithmon\u00eb mund t\u00eb kontrolloni versionin m\u00eb t\u00eb fundit t\u00eb q\u00ebndruesh\u00ebm, t\u00eb sh\u00ebnuar n\u00eb faqen e HAProxy, dhe m\u00eb pas t\u00eb vendosni se me cilin version d\u00ebshironi t\u00eb punoni.<\/p>\n
<\/p>\n
N\u00eb k\u00ebt\u00eb udh\u00ebzues do t\u00eb instalojm\u00eb versionin m\u00eb t\u00eb fundit t\u00eb q\u00ebndruesh\u00ebm 2.0, i cili ende nuk ishte i disponuesh\u00ebm n\u00eb depozitat standarde n\u00eb momentin e hartimit t\u00eb udh\u00ebzuesit. Ju do t\u00eb duhet ta instaloni at\u00eb nga burimi. Por s\u00eb pari, kontrolloni n\u00ebse keni p\u00ebrmbushur kushtet e nevojshme p\u00ebr t\u00eb shkarkuar dhe kompjatuar programin.<\/p>\n
<\/p>\n
sudo yum install gcc pcre-devel tar make -y<\/code><\/pre>\n
<\/p>\n
Shkarkoni kodin burimor me komand\u00ebn m\u00eb posht\u00eb. Mund t\u00eb kontrolloni n\u00ebse nj\u00eb version m\u00eb i ri \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb faqen e shkarkimit t\u00eb HAProxy.<\/a><\/noindex>.<\/p>\n
<\/p>\n
wget http:\/\/www.haproxy.org\/download\/2.0\/src\/haproxy-2.0.7.tar.gz -O ~\/haproxy.tar.gz<\/code><\/pre>\n
<\/p>\n
Pasi t\u00eb p\u00ebrfundoj\u00eb shkarkimi, shkarkoni skedar\u00ebt me komand\u00ebn m\u00eb posht\u00eb:<\/p>\n
<\/p>\n
tar xzvf ~\/haproxy.tar.gz -C ~\/<\/code><\/pre>\n
<\/p>\n
Shkoni n\u00eb katalogun e shkarkuar me kodin burimor:<\/p>\n
<\/p>\n
cd ~\/haproxy-2.0.7<\/code><\/pre>\n
<\/p>\n
Pastaj kompilo programin p\u00ebr sistemin tuaj:<\/p>\n
<\/p>\n
make TARGET=linux-glibc<\/code><\/pre>\n
<\/p>\n
Dhe, n\u00eb fund, instaloni vet\u00eb HAProxy:<\/p>\n
<\/p>\n
sudo make install<\/code><\/pre>\n
<\/p>\n
Tani HAProxy \u00ebsht\u00eb instaluar, por p\u00ebr funksionimin e saj k\u00ebrkohen disa manovra t\u00eb tjera. T\u00eb vazhdojm\u00eb me konfigurimin e softuerit dhe sh\u00ebrbimeve m\u00eb posht\u00eb.<\/p>\n
<\/p>\n
Konfigurimi i HAProxy p\u00ebr serverin tuaj<\/h2>\n
<\/p>\n
Tani shtoni katalog\u00ebt e m\u00ebposht\u00ebm dhe skedarin e statistikave p\u00ebr regjistrimet e HAProxy:<\/p>\n
<\/p>\n
sudo mkdir -p \/etc\/haproxy\nsudo mkdir -p \/var\/lib\/haproxy \nsudo touch \/var\/lib\/haproxy\/stats<\/code><\/pre>\n
<\/p>\n
Krijoni nj\u00eb lidhje simbolike p\u00ebr skedar\u00ebt binar\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb ekzekutoni komandat HAProxy si p\u00ebrdorues i zakonsh\u00ebm:<\/p>\n
<\/p>\n
sudo ln -s \/usr\/local\/sbin\/haproxy \/usr\/sbin\/haproxy<\/code><\/pre>\n
<\/p>\n
N\u00ebse d\u00ebshironi t\u00eb shtoni proxy server n\u00eb sistem si sh\u00ebrbim, kopjoni skedarin haproxy.init nga shembujt n\u00eb katalogun tuaj \/etc\/init.d. Rregulloni t\u00eb drejtat e skedarit p\u00ebr t\u00eb siguruar q\u00eb skripti ekzekutohet, pastaj ngarkoni p\u00ebrs\u00ebri demonin systemd:<\/p>\n
<\/p>\n
sudo cp ~\/haproxy-2.0.7\/examples\/haproxy.init \/etc\/init.d\/haproxy\nsudo chmod 755 \/etc\/init.d\/haproxy\nsudo systemctl daemon-reload<\/code><\/pre>\n
<\/p>\n
Ju gjithashtu duhet t\u00eb lejoni sh\u00ebrbimin t\u00eb ngarkohet automatikisht gjat\u00eb nisjes s\u00eb sistemit:<\/p>\n
<\/p>\n
sudo chkconfig haproxy on<\/code><\/pre>\n
<\/p>\n
P\u00ebr leht\u00ebsin\u00eb e p\u00ebrdoruesit, gjithashtu rekomandohet t\u00eb shtoni nj\u00eb p\u00ebrdorues t\u00eb ri p\u00ebr t\u00eb ekzekutuar HAProxy:<\/p>\n
<\/p>\n
sudo useradd -r haproxy<\/code><\/pre>\n
<\/p>\n
Pas k\u00ebsaj, mund t\u00eb kontrolloni edhe nj\u00eb her\u00eb numrin e versionit t\u00eb instaluar me komand\u00ebn e m\u00ebposhtme:<\/p>\n
<\/p>\n
haproxy -v\nHA-Proxy version 2.0.7 2019\/09\/27 - https:\/\/haproxy.org\/<\/code><\/pre>\n
<\/p>\n
N\u00eb rastin ton\u00eb, versioni duhet t\u00eb jet\u00eb 2.0.7, si\u00e7 tregohet n\u00eb shembullin e daljes m\u00eb sip\u00ebr.<\/p>\n
<\/p>\n
M\u00eb n\u00eb fund, firewalli n\u00eb CentOS 8 p\u00ebr default \u00ebsht\u00eb mjaft restriktiv p\u00ebr k\u00ebt\u00eb projekt. P\u00ebrdorni komandat e m\u00ebposhtme p\u00ebr t\u00eb lejuar sh\u00ebrbimet e nevojshme dhe p\u00ebr t\u00eb riaktivizuar firewall-in:<\/p>\n
<\/p>\n
sudo firewall-cmd --permanent --zone=public --add-service=http\nsudo firewall-cmd --permanent --zone=public --add-port=8181\/tcp\nsudo firewall-cmd --reload<\/code><\/pre>\n
<\/p>\n
Konfigurimi i balancuesit t\u00eb ngarkes\u00ebs<\/h2>\n
<\/p>\n
Konfigurimi i HAProxy \u00ebsht\u00eb nj\u00eb proces mjaft i thjesht\u00eb. N\u00eb thelb, gjith\u00e7ka q\u00eb duhet t\u00eb b\u00ebni \u00ebsht\u00eb t\u00eb informoni HAProxy p\u00ebr cilat lidhje duhet t\u00eb d\u00ebgjoj\u00eb dhe ku duhet t'i ridrejtoj\u00eb ato.<\/p>\n
<\/p>\n
Kjo b\u00ebhet duke krijuar nj\u00eb skedar konfigurimi \/etc\/haproxy\/haproxy.cfg me parametrat p\u00ebrcaktues. Mund t\u00eb lexoni p\u00ebr opsionet e konfigurimit t\u00eb HAProxy n\u00eb faqen e dokumentacionit<\/a><\/noindex>, n\u00ebse d\u00ebshironi t\u00eb m\u00ebsoni m\u00eb shum\u00eb rreth k\u00ebsaj.<\/p>\n
<\/p>\n
Balancimi i ngarkes\u00ebs n\u00eb nivel transporti (layer 4)<\/h2>\n
<\/p>\n
Le t\u00eb fillojm\u00eb me konfigurimin bazik. Krijoni nj\u00eb skedar t\u00eb ri konfigurimi, p\u00ebr shembull, duke p\u00ebrdorur vi<\/strong> me komand\u00ebn m\u00eb posht\u00eb:<\/p>\n
<\/p>\n
sudo vi \/etc\/haproxy\/haproxy.cfg<\/code><\/pre>\n
<\/p>\n
Shtoni n\u00eb skedar segmentet e m\u00ebposhtme. Z\u00ebvend\u00ebsoni server_name<\/strong> me at\u00eb q\u00eb duhet t\u00eb thirren serverat tuaj n\u00eb faqen e statistikave, nd\u00ebrsa private_ip<\/strong> \u2014 adresa IP private t\u00eb server\u00ebve n\u00eb t\u00eb cilat d\u00ebshironi t\u00eb drejtoni trafikun web. Mund t\u00eb kontrolloni adresat IP private n\u00eb panelin e menaxhimit UpCloud<\/a><\/noindex> dhe n\u00eb sked\u00ebn Rrjeti privat<\/em> n\u00eb menyn\u00eb Rrjeti\n   regjistro log \/dev\/log local0\n   regjistro log \/dev\/log local1 notice\n   chroot \/var\/lib\/haproxy\n   stats timeout 30s\n   p\u00ebrdorues haproxy\n   grup haproxy\n   daemon\n\ndefaults\n   log global\n   mode http\n   opsion httplog\n   opsion dontlognull\n   timeout connect 5000\n   timeout client 50000\n   timeout server 50000\n\nfrontend http_front\n   bind *:80\n   stats uri \/haproxy?stats\n   default_backend http_back\n\nbackend http_back\n   balance roundrobin\n   server server_name1 private_ip1:80 check\n   server server_name2 private_ip2:80 check<\/em>.<\/p>\n
<\/p>\n
global\n   log \/dev\/log local0\n   log \/dev\/log local1 notice\n   chroot \/var\/lib\/haproxy\n   stats timeout 30s\n   user haproxy\n   group haproxy\n   daemon\n\ndefaults\n   log global\n   mode http\n   option httplog\n   option dontlognull\n   timeout connect 5000\n   timeout client 50000\n   timeout server 50000\n\nfrontend http_front\n   bind *:80\n   stats uri \/haproxy?stats\n   default_backend http_back\n\nbackend http_back\n   balance roundrobin\n   server server_name1 private_ip1:80 check\n   server server_name2 private_ip2:80 check<\/code><\/pre>\n
<\/p>\n
Kjo p\u00ebrcakton nj\u00eb balancues ngarkese t\u00eb nivelit transportues (layer 4) me emrin e jasht\u00ebm http_front, i cili d\u00ebgjon n\u00eb portin 80 dhe m\u00eb pas drejton trafikun n\u00eb backend-in e paracaktuar me emrin http_back. T\u00eb gjitha statistik\u00ebt \/haproxy?stats lidhin faqen e statistikave n\u00eb adres\u00ebn e caktuar.<\/p>\n
<\/p>\n
Algoritmet e ndryshme t\u00eb balancimit t\u00eb ngarkes\u00ebs.<\/h2>\n
<\/p>\n
Specifikimi i server\u00ebve n\u00eb seksionin e backend-it u lejon HAProxy t\u00eb p\u00ebrdor\u00eb k\u00ebto server\u00eb p\u00ebr balancimin e ngarkes\u00ebs sipas algoritmit t\u00eb rrethqarkullimit kur \u00ebsht\u00eb e mundur.<\/p>\n
<\/p>\n
Algoritmet e balancimit p\u00ebrdoren p\u00ebr t\u00eb p\u00ebrcaktuar se n\u00eb cilin server n\u00eb prapavij\u00eb do t\u00eb d\u00ebrgohet \u00e7do lidhje. K\u00ebtu jan\u00eb disa nga opsionet e dobishme:<\/p>\n
<\/p>\n