Hi Rich, That's why I wanted to fix your "issue" step by step. I didn't want to add too much complexity from first step.
The question you're asking correpond to the last step. And as Igor mentionned, you should use keepalived to create a VIP which will be used as the default gateway by your web servers. You can simply use any of the VIP handling the web traffic. Baptiste On Thu, Aug 27, 2015 at 4:25 AM, Igor Cicimov < [email protected]> wrote: > Obviously you need to have a separate VIP for the 10.10.130.30 and > 10.10.130.31 and use that as a DGW on the backend servers. > > On Thu, Aug 27, 2015 at 9:24 AM, Rich Vigorito <[email protected]> wrote: > >> βIn regards to setting up the default gateway on the webservers. im >> confused on how that would work with having a load balanced haproxy >> environment w/ keepalive. >> >> >> Attached is our diagram of haproxy/webserver architecture. When it says >> have the default gateway point back to haproyx, is it saying the VIP or the >> haproxy box ip? in the case default gateway being that of the vip how would >> that work because there are multiple VIP? in the the case of changing >> default gateway to haproxy box would would that work in a failover? >> >> >> I wouldnt assume that our setup is unique because im sure most people use >> haproxy for more than one website and most have haproxy load balanced w/ >> keepalive or pacemaker or something along those lines. >> >> >> Thanks in advance, >> >> --Rich >> ------------------------------ >> *From:* Bryan Talbot <[email protected]> >> *Sent:* Thursday, August 20, 2015 4:27 PM >> *To:* Rich Vigorito >> *Cc:* Bryan Talbot; Baptiste; HAProxy >> *Subject:* Re: getting transparent proxy to work. >> >> On Thu, Aug 20, 2015 at 4:05 PM, Rich Vigorito <[email protected]> wrote: >> >>> Reading this: >>> http://blog.haproxy.com/2012/06/05/preserve-source-ip-address-despite-reverse-proxies/β >>> about PROXY protocol, what needs to happen for PROXY protocol to be >>> recognized by the web server? >>> >> The webserver needs to support it. There is a (probably incomplete) list >> here: http://blog.haproxy.com/haproxy/proxy-protocol/ >> >> >> >>> Im assuming the haproxy server already does? >>> >>> >>> Yes, of course. >> >> -Bryan >> >> > > > -- > Igor Cicimov | DevOps > > > p. +61 (0) 433 078 728 > e. [email protected] <http://encompasscorporation.com/> > w*.* encompasscorporation.com > a. Level 4, 65 York Street, Sydney 2000 >
