六月学习之Haproxy ACL实践(基于域名调度)

2、ACL场景实践

2.1、ACL案例-基于域名调度

根据用户请求不同的域名，调度到不同的后端集群
用户请求www.qingchen.com调度到172.16.1.7:80,172.16.1.8:80
用户请求blog.qingchen.com调度到172.16.1.7:8080,172.16.1.8:8080

2.1.1、配置后端节点

#www站点定义(所有web节点配置一致)
cat /etc/nginx/conf.d/www.qingchen.com.conf
server {
    listen 80;
    server_name www.qingchen.com;
    root /www
    location / {
        index index.html
    }
}
echo "www.qingchen.com-->web1" > /www/index.html

#blog站点定义(所有web节点配置一致)
cat /etc/nginx/conf.d/blog.qingchen.com.conf
server {
    listen 8080;
    server_name blog.qingchen.com;
    root /blog
    location / {
        index index.html
    }
}
echo "blog.qingchen.com-->web1" > /blog/index.html

2.1.2、配置Haproxy

frontend web
    bind *:80
    mode http
    
    # acl规则
    acl www_site hdr(host) -i www.qingchen.net
    acl blog_site hdr(host) -i blog.qingchen.net
    
    # 调用
    use_backend www_cluster if www_site
    use_backend blog_cluster if blog_site 
    default_backend www_cluster

backend www_cluster
    balance roundrobin
    option httpchk HEAD / HTTP/1.1\r\nHost:\ www.qingchen.net
    server 172.16.1.7 172.16.1.7:80 check port 8080 inter 3s rise 2 fall 3
    server 172.16.1.8 172.16.1.8:80 check port 8080 inter 3s rise 2 fall 3

backend blog_cluster
    balance roundrobin
    option httpchk HEAD / HTTP/1.1\r\nHost:\ blog.qingchen.net
    server 172.16.1.7 172.16.1.7:8080 check port 8080 inter 3s rise 2 fall 3
    server 172.16.1.8 172.16.1.8:8080 check port 8080 inter 3s rise 2 fall 3

2.1.3、客户端测试

curl -HHost:www.qingchen.net http://10.0.0.5
curl -HHost:blog.qingchen.net http://10.0.0.5