Hello.
first thank for your work, and sorry for my bad English.
In my work (an hospital) we are trying to pass all the connection to SSL.
We have:
| [VM 1]|
|[balanced A (haproxy + keepalived)]| |server 1 [VM 3]|
| |-----|
|[balanced B (haproxy + keepalived)]| |server 2 [VM 2]|
| [VM 4]|
All the machine have OEL., server have weblogic (some very similar to
tomcat form Oracle)
VM are java virtual machine.
We have DR (direct rounting response) implemented, in order to reduce
traffic in the net.
Arequest from the net to port 443 are balancer to server 1 port 8881 or
8883 or server 2 port 8882 or 8884
In order to implemented SSL and don't loss DR we use NSI protocol in the
Balanced and install other Haproxy in server to make SSL termination,
thus a request from the net to port 443 are balanced to
server 1 port 1443 or 3443 or server 2 port 2443 or 4443 and in the
server 1 haproxy make termination of SSL and have 2 listen one bind to
port 1443 sending it to 127.0.0.1 8881, other bind to port 3443 and
sending it to 127.0.0.1:8883.
All this go fine, but balanced A don't know state of virtual machine but
state of haproxy in server, due this if we stop VM1 and we see state in
balanced A we see VM is OK, that is because Balanced A see then state of
haproxy in server 1 not VM1 status.
So my question:
In this scenarios:
|S1 [VM 1]|
|Hap------ |
|[balA (haproxy)]| | [VM 3]|
| keepalived |-----
|[balB (haproxy)]| |S2 2 [VM 2]|
|Hap------
| [VM 4]|
How I can pass state of VM to haproxy in balanced A and B?.
Thank in advanced.
---
*Antonio Trujillo Carmona*
*Técnico de redes y sistemas.*
*Subdirección de Tecnologías de la Información y Comunicaciones*
Servicio Andaluz de Salud. Consejería de Salud de la Junta de Andalucía
[email protected]_
