Obviously you need to have a separate VIP for the 10.10.130.30 and 10.10.130.31 and use that as a DGW on the backend servers.
On Thu, Aug 27, 2015 at 9:24 AM, Rich Vigorito <[email protected]> wrote: > βIn regards to setting up the default gateway on the webservers. im > confused on how that would work with having a load balanced haproxy > environment w/ keepalive. > > > Attached is our diagram of haproxy/webserver architecture. When it says > have the default gateway point back to haproyx, is it saying the VIP or the > haproxy box ip? in the case default gateway being that of the vip how would > that work because there are multiple VIP? in the the case of changing > default gateway to haproxy box would would that work in a failover? > > > I wouldnt assume that our setup is unique because im sure most people use > haproxy for more than one website and most have haproxy load balanced w/ > keepalive or pacemaker or something along those lines. > > > Thanks in advance, > > --Rich > ------------------------------ > *From:* Bryan Talbot <[email protected]> > *Sent:* Thursday, August 20, 2015 4:27 PM > *To:* Rich Vigorito > *Cc:* Bryan Talbot; Baptiste; HAProxy > *Subject:* Re: getting transparent proxy to work. > > On Thu, Aug 20, 2015 at 4:05 PM, Rich Vigorito <[email protected]> wrote: > >> Reading this: >> http://blog.haproxy.com/2012/06/05/preserve-source-ip-address-despite-reverse-proxies/β >> about PROXY protocol, what needs to happen for PROXY protocol to be >> recognized by the web server? >> > The webserver needs to support it. There is a (probably incomplete) list > here: http://blog.haproxy.com/haproxy/proxy-protocol/ > > > >> Im assuming the haproxy server already does? >> >> >> Yes, of course. > > -Bryan > > -- Igor Cicimov | DevOps p. +61 (0) 433 078 728 e. [email protected] <http://encompasscorporation.com/> w*.* encompasscorporation.com a. Level 4, 65 York Street, Sydney 2000
