ืืืื ืขืจ ืคืื ืื ืืืืคึผื ืืึทืกืงืก ืืืขื ืื ืื ืืจืืืก-ืืืึธื Zimbra OSE ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืืื ืืขืืขืจืืง ืืึทืกืข ืืึทืืึทื ืกืื ื. ืืื ืึทืืืฉืึทื ืฆื ืื ืคืึทืงื ืึทื ืขืก ืื ืงืจืืกืื ืื ืฉืืื ืืึธืืขืจืึทื ืฅ ืคืื ืื ืืื ืกื, ืึธื ืืึทืกืข ืืึทืืึทื ืกืื ื ืขืก ืืื ืืืืืขืืืขื ืฆื ืขื ืฉืืจ ืื ืืขืืืข ืจืืกืคึผืึทื ืกืืืื ืึทืก ืคืื ืื ืืื ืกื ืคึฟืึทืจ ืึทืืข ื ืืฆืขืจืก. ืืื ืกืืจ ืฆื ืกืึธืืืืข ืืขื ืคึผืจืึธืืืขื, ืืึทืกืข ืืึทืืึทื ืกืขืจื ืืขื ืขื ืืขื ืืฆื - ืืืืืืืืืจื ืืื ืืึทืื ืืืึทืจื ืกืึทืืืฉืึทื ื ืืืึธืก ืจืืืืกืืจืืืืื ืจืืงืืืขืก ืฆืืืืฉื ืกืขืจืืืขืจืก. ืฆืืืืฉื ืืื ืขืก ืืขื ืขื ืืึทื ืฅ ืคึผืจืืืืืืื ืึธื ืขืก, ืืื RoundRobin, ืืืึธืก ืคืฉืื ืกืขื ืื ืืขืืขืจ ืกืึทืืกืึทืงืืืึทื ื ืืขืื ืฆื ืืขืจ ืืืืึทืืขืจ ืกืขืจืืืขืจ ืืื ืืขืจ ืจืฉืืื, ืืื ืขืก ืืขื ืขื ืืืื ืืขืจ ืึทืืืึทื ืกืืจืืข ืึธื ืขืก, ืืืฉื HAProxy, ืืืึธืก ืืื ืืืืืืื ืืขื ืืฆื ืืื ืืืื ืืึทืกืข ืงืึทืืคึผืืืืื ื ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ. ื ืืืขืจ ืคืื ืืึทืืืึทืืืง ืึทืืืืึทื ืืืืืฉืื. ืืึธืืืจ ื ืขืืขื ืึท ืงืืง ืืื ืืืจ ืงืขื ืขื ืืึทืื ืื HAProxy ืืึทืกืข ืืึทืืึทื ืกืขืจ ืืื Zimbra OSE ืึทืจืืขื ืฆืืืึทืืขื.
ืึทืืื, ืืืื ืื ืืขืจืืื ืขื ืคืื ืื ืึทืจืืขื, ืืืจ ืืึทืงืืืขื ืื Zimbra OSE ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ, ืืืึธืก ืืื ืฆืืืื Zimbra Proxy, ืฆืืืื LDAP ืืื LDAP ืจืขืคึผืืืงืข ืกืขืจืืืขืจืก, ืคืืจ ืคึผืึธืกื ืกืืึธืจืืืืฉ ืืื 1000 ืืืืืืึทืงืกืื ืืขืืขืจ ืืื ืืจืื MTAs. ืืขืืขืื ืึทื ืืืจ ืืึทื ืืืขื ืืื ืึท ืคึผืึธืกื ืกืขืจืืืขืจ, ืขืก ืืืขื ืืึทืงืืืขื ืืจืื ืืืืคึผืก ืคืื ืคืึทืจืงืขืจ ืืืึธืก ืืึทืจืคึฟื ืืึทืืึทื ืกืื ื: ืืืืคึผ ืคึฟืึทืจ ืืึทืื ืืึธืืืื ื ืื ืืืขื ืงืืืขื ื, ืืื ืืขืืื ื ืืื POP ืืื SMTP ืคึฟืึทืจ ืฉืืงื E- ืืจืืื. ืืื ืืขื ืคืึทื, ืืืืคึผ ืคืึทืจืงืขืจ ืืืขื ืืืื ืฆื Zimbra ืคึผืจืึทืงืกื ืกืขืจืืืขืจืก ืืื IP ืึทืืจืขืกืขืก 192.168.0.57 ืืื 192.168.0.58, ืืื SMTP ืคืึทืจืงืขืจ ืืืขื ืืืื ืฆื MTA ืกืขืจืืืขืจืก ืืื IP ืึทืืจืขืกืขืก 192.168.0.77 ืืื 192.168.0.78.
ืืื ืฉืืื ืืขืจืืื ื, ืฆื ืขื ืฉืืจ ืึทื ืจืืงืืืขืก ืืขื ืขื ืืืืึทื ืื ืคืื ืื ืืขืจืืขืืืืื ืฆืืืืฉื ืื ืกืขืจืืืขืจืก, ืืืจ ืืืขืื ื ืืฆื ืื HAProxy ืืึทืกืข ืืึทืืึทื ืกืขืจ, ืืืึธืก ืืืขื ืืืืคื ืืืืฃ ืื Zimbra ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืื ืืจืขืกืก ื ืึธืืข ืืื Ubuntu 18.04. ืื ืกืืึธืืื ื ืืึทืคึผืจืึธืงืกื ืืืืฃ ืืขื ืึธืคึผืขืจืืืืื ื ืกืืกืืขื ืืื ืืืจืืืขืงืึธืื ืืื ืืขื ืืึทืคึฟืขื sudo apt-get install haproxy. ื ืึธื ืืขื ืืืจ ืืึทืจืคึฟื ืืื ืืขืจ ืืขืงืข /etc/default/haproxy ืืืืฉื ืคึผืึทืจืึทืืขืืขืจ ENABLED=0 ืืืืฃ ENABLED=1. ืืืฆื, ืืื ืกืืจ ืฆื ืืึทืื ืืืืขืจ ืึทื ืืึทืคึผืจืึธืงืกื ืึทืจืืขื, ื ืึธืจ ืึทืจืืึทื ืื ืืึทืคึฟืขื ืืื ืกื ืืึทืคึผืจืึธืืงืกื. ืืืื ืื ืกืขืจืืืืก ืืื ืคืืืกื ืืืง, ืืึธืก ืืืขื ืืืื ืงืืึธืจ ืคึฟืื ืืขืจ ืจืขืืืืืึทื ืคืื ืื ืืึทืคึฟืขื.
ืืืื ืขืจ ืคืื ืื ืืืืคึผื ืืืกืึทืืืืึทื ืืืืืฉืื ืคืื HAProxy ืืื ืึทื ืืืจื ืคืขืืืงืืึทื ืขืก ืงืขื ื ืืฉื ืืืขืจืฉืืงื ืื IP ืึทืืจืขืก ืคืื ืื ืงืึทื ืขืงืืื ื ืงืืืขื ื, ืืื ืจืืคึผืืืืกื ืขืก ืืื ืืืื ืืืืืขื ืข. ืืึธืก ืงืขื ืคืืจื ืฆื ืกืืืืึทืืืึธื ืก ืืื ืืืืืื ืืขืฉืืงื ืืืจื ืึทืืึทืงืขืจื ืงืขื ืขื ื ืื ืืืื ืืืืขื ืึทืคืืื ืืืจื IP ืึทืืจืขืก ืฆื ืืืืื ืขืก ืฆื ืื ืืืึทืงืืืกื. ืึธืืขืจ, ืืขื ืึทืจืืืกืืขืื ืงืขื ืขื ืืืื ืกืึทืืืื. ืฆื ืืึธื ืืึธืก ืืืจ ืืึทืจืคึฟื ืฆื ืจืขืืึทืืืจื ืื ืืขืงืข /opt/zimbra/common/conf/master.cf.in ืืืืฃ ืกืขืจืืืขืจืก ืืื Postfix ืืื ืืืืื ืื ืคืืืืขื ืืข ืฉืืจืืช ืฆื ืขืก:
26 inet n - n - 1 postscreen
-o postscreen_upstream_proxy_protocol=haproxy
466 inet n - n - - smtpd
%%uncomment SERVICE:opendkim%% -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=
-o smtpd_data_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
-o syslog_name=postfix/smtps
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_upstream_proxy_protocol=haproxy
%%uncomment LOCAL:postjournal_enabled%% -o smtpd_proxy_filter=[%%zimbraLocalBindAddress%%]:10027
%%uncomment LOCAL:postjournal_enabled%% -o smtpd_proxy_options=speed_adjust
588 inet n - n - - smtpd
%%uncomment SERVICE:opendkim%% -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
-o smtpd_etrn_restrictions=reject
-o smtpd_sasl_auth_enable=%%zimbraMtaSaslAuthEnable%%
-o smtpd_tls_security_level=%%zimbraMtaTlsSecurityLevel%%
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_data_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
-o syslog_name=postfix/submission
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_upstream_proxy_protocol=haproxy
%%uncomment LOCAL:postjournal_enabled%% -o smtpd_proxy_filter=[%%zimbraLocalBindAddress%%]:10027
%%uncomment LOCAL:postjournal_enabled%% -o smtpd_proxy_options=speed_adjustืจืขืื ืฆื ืืขื, ืืืจ ืืืขืื ืขืคึฟืขื ืขื ืคึผืึธืจืฅ 26, 466 ืืื 588, ืืืึธืก ืืืขื ืืึทืงืืืขื ืื ืงืึทืืื ื ืคืึทืจืงืขืจ ืคึฟืื HAProxy. ื ืึธื ืื ืืขืจืืืขืืืขื ืืขืงืขืก, ืืืจ ืืึธื ืจืืกืืึทืจื ืคึผืึธืกืืคืืงืก ืืืืฃ ืึทืืข ืกืขืจืืืขืจืก ื ืืฆื ืื zmmtactl ืจืืกืืึทืจื ืืึทืคึฟืขื.
ื ืึธื ืืขื, ืืึธืื ืืื ืื ืึธื ืืืืื ืืึทืฉืืขืืืงื HAProxy. ืฆื ืืึธื ืืึธืก, ืขืจืฉืืขืจ ืืึทืื ืึท ืืึทืงืึทืคึผ ืงืึธืคึผืืข ืคืื โโืื ืกืขืืืื ืืก ืืขืงืข cp /etc/haproxy/haproxy.cfg /etc/haproxy/haproxy.cfg.bak. ืืขืจื ืึธื ืขืคึฟืขื ืขื ืื ืืงืืจ ืืขืงืข ืืื ืึท ืืขืงืกื ืจืขืืึทืงืืึธืจ /etc/haproxy/haproxy.cfg ืืื ืึธื ืืืื ืึทืืื ื ืื ื ืืืืืง ืกืขืืืื ืืก ืฆื ืขืก ืฉืจืื ืืืจื ืฉืจืื. ืืขืจ ืขืจืฉืืขืจ ืืืึธืง ืืืขื ืืืื ืึทืืื ื ืึท ืกืขืจืืืขืจ ืืืึธืก ื ืขืื ืืึธืืก, ืืึทืฉืืขืืืงื ืื ืืึทืงืกืืืื ืขืจืืืืื ื ืืืขืจ ืคืื ืกืืืืึทืืืืื ืืึทืก ืงืึทื ืขืงืฉืึทื ื, ืืื ืกืคึผืขืฆืืคืืฆืืจื ืื ื ืึธืืขื ืืื ืืจืืคึผืข ืคืื โโืื ืืึทื ืืฆืขืจ ืฆื ืืืึธืก ืื ืขืงืกืึทืงืืืืื ื ืคึผืจืึธืฆืขืก ืืืขื ืืขืืขืจื.
global
user daemon
group daemon
daemon
log 127.0.0.1 daemon
maxconn 5000
chroot /var/lib/haproxyืืขืจ ืฆืืคืขืจ ืคืื 5000 ืกืืืืึทืืืืื ืืึทืก ืงืึทื ืขืงืฉืึทื ื ืืื ืืจืืืก ืคึฟืึทืจ ืึท ืกืืื. ืืื ื ืืืจ ืืึธืื 4000 ืืืืืืึทืงืกืื ืืื ืืื ืืืขืจ ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ, ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืืจืึทืืื ืื ืืขืืืขืืงืืื ืึทื ืืื ืืืขืื ืึทืืข ืึทืงืกืขืก ืืืืขืจ ืึทืจืืขื E- ืืจืืื ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื. ืืื ืืขืจืฆื, ืขืก ืืื ื ืืืืืง ืฆื ืืึธืื ืึท ืงืืืื ืจืขืืขืจืื ืืืื ืืืืขืจ ื ืืืขืจ ืื ืงืจืืกืื.
ืืืฆื ืืึธืื ืืื ืื ืืืืื ืึท ืืืึธืง ืืื ืคืขืืืงืืึทื ืกืขืืืื ืืก:
defaults
timeout client 1m
log global
mode tcp
timeout server 1m
timeout connect 5sืืขืจ ืืืึธืง ืฉืืขืื ืื ืืึทืงืกืืืื ืืืืืึทืื ืคึฟืึทืจ ืื ืงืืืขื ื ืืื ืกืขืจืืืขืจ ืฆื ืคืึทืจืืึทืื ืื ืงืฉืจ ืืืขื ืขืก ืืงืกืคึผืืืขืจื, ืืื ืืืื ืฉืืขืื ืื ืึทืคึผืขืจืืืืื ื ืืึธืืข ืคืื โโโโHAProxy. ืืื ืืื ืืืขืจ ืคืึทื, ืื ืืึทืกืข ืืึทืืึทื ืกืขืจ ืึทืคึผืขืจืืืฅ ืืื ืืงืคึผ ืืึธืืข, ืืึธืก ืืื, ืขืก ืคืฉืื ืืจืึทื ืกืืืื ืืงืคึผ ืคึผืึทืงืืฅ ืึธื ืึทื ืึทืืืืืื ื ืืืืขืจ ืืื ืืึทืื.
ืืืืึทืืขืจ ืืืจ ืืืขืื ืืืืื ืึผืืืื ืคึฟืึทืจ ืงืึทื ืขืงืฉืึทื ื ืืืืฃ ืคืึทืจืฉืืื ืคึผืึธืจืฅ. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืื ืคึผืึธืจื 25 ืืื ืืขื ืืฆื ืคึฟืึทืจ SMTP ืงืึทื ืขืงืฉืึทื ื ืืื ืคึผืึธืกื, ืขืก ืืื ืืื ืขื ืฆื ืคืึธืจืืืก ืงืึทื ืขืงืฉืึทื ื ืฆื ืื MTAs ืื ืืืฆื ืืื ืืื ืืืขืจ ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ. ืืืื ืื ืคึฟืึทืจืืื ืืื ื ืืื ืืืืฃ ืคึผืึธืจื 80, ืืึธืก ืืื ืึท http ืืขืื ืืืึธืก ืืึทืจืฃ ืืืื ืคืึธืจืืืขืจืืื ืฆื Zimbra Proxy.
ืืขืจืฉื ืคึฟืึทืจ ืคึผืึธืจื 25:
frontend smtp-25
bind *:27
default_backend backend-smtp-25
backend backend-smtp-25
server mta1 192.168.0.77:26 send-proxy
server mta2 192.168.0.78:26 send-proxyืืขืจืฉื ืคึฟืึทืจ ืคึผืึธืจื 465:
frontend smtp-465
bind *:467
default_backend backend-smtp-465
backend backend-smtp-465
server mta1 192.168.0.77:466 send-proxy
server mta2 192.168.0.78:466 send-proxyืืขืจืฉื ืคึฟืึทืจ ืคึผืึธืจื 587:
frontend smtp-587
bind *:589
default_backend backend-smtp-587
backend backend-smtp-587
server mail1 192.168.0.77:588 send-proxy
server mail2 192.168.0.78:588 send-proxyืืขืจืฉื ืคึฟืึทืจ ืคึผืึธืจื 80:
frontend http-80
bind *:80
default_backend http-80
backend http-80
mode tcp
server zproxy1 192.168.0.57:80 check
server zproxy2 192.168.0.58:80 checkืืขืจืฉื ืคึฟืึทืจ ืคึผืึธืจื 443:
frontend https
bind *:443
default_backend https-443
backend https-443
mode tcp
server zproxy1 192.168.0.57:80 check
server zproxy2 192.168.0.58:80 checkืืืืข ืืึธื ืึทื ืืื ืื ืึผืืืื ืคึฟืึทืจ ืคืึธืจืืืขืจืืื ื ืืงืคึผ ืคึผืึทืงืืฅ ืฆื ืื MTA, ืืขืื ืืืืขืจ ืึทืืจืขืกืขืก ืืื ืึท ืคึผืึทืจืึทืืขืืขืจ. ืฉืืงื-ืคึผืจืึธืงืกื. ืืึธืก ืืื ื ืืืืืง ืึทืืื ืึทื ืืื ืืืื ืืื ืื ืขื ืืขืจืื ืืขื ืืืึธืก ืืืจ ืืึธืื ืืขืืืื ืคืจืืขืจ ืืื ืื ืคึผืึธืกืืคืืงืก ืกืขืืืื ืืก, ืืขืจ ืึธืจืืืื ืขื IP ืึทืืจืขืก ืคืื ืืืื ืกืขื ืืขืจ ืืื ืืขืฉืืงื ืฆืืืืืขื ืืื ืืงืคึผ ืคึผืึทืงืืฅ.
ืืืฆื ืึทื ืึทืืข ืื ื ืืืืืง ืขื ืืขืจืื ืืขื ืืขื ืขื ืืขืืืื ืืื HAProxy, ืืืจ ืงืขื ืขื ืจืืกืืึทืจื ืื ืืื ืกื ืืื ืืขื ืืึทืคึฟืขื ืืื ืกื ืืึทืคึผืจืึธืืงืกื ืจืืกืืึทืจื ืืื ืึธื ืืืืื ื ืืฆื ืขืก.
ืคึฟืึทืจ ืึทืืข ืคึฟืจืืื ืฉืืึทืืืช ืฆื Zextras Suite, ืืืจ ืงืขื ื ืงืึธื ืืึทืงื Zextras ืคืืจืฉืืืืขืจ Ekaterina Triandafilidi ืืืจื E- ืืจืืื [ืืืืขืื ืืืฉืืฆื]
ืืงืืจ: www.habr.com