kube2haproxy is a daemon process that automatically configures Keepalived&HAProxy for services deployed on Kubernetes.
- High Availability HAProxy, support ip failover.
- Auto configure Keepalived&HAProxy configuration files based your template. You can provision your own template in production to enable SSL and notifications.
- Efficient Keepalived&HAProxy reload with controlled rate.
- Developed in Golang, deployment on Keepalived&HAProxy instances has no additional dependency.
- Integrates with Prometheus to monitor metrics.
Theory of Operation
Compared with kube-proxy(also noted as distributed proxy), kube2haproxy runs locally on node of central HAProxy cluster and is responsible for HAProxy configuration update and reload. kube2haproxy watches
kube-apiserver for service&endpoints resources change, and reload HAProxy in rate limited manner. To support high availability, we use Keepalived, kube2haproxy is also responsible for Keepalived configuration update and reload. The following diagram demonstrates how this worked in a 2 nodes cluster:
- Step 1: Git clone the kube2haproxy repo:
git clone https://github.com/adohe/kube2haproxy.git
- Step 2: Build with godep:
cd kube2haproxy; godep go build -o kube-haproxy main.go
Key command line options
--address string The IP address to serve on (set to 0.0.0.0 for all interfaces) --alsologtostderr value log to standard error as well as files --device string Network device to bind service IP --haproxy-config-file string Path of config file for haproxy (default "/etc/haproxy/haproxy.cfg") --haproxy-reload-interval duration Controls how often haproxy reload is invoked (default 5s) --haproxy-reload-script string Path of haproxy reload script --haproxy-template-file string Path of haproxy template --keepalived-config-file string Path of config file for keepalived (default "/etc/keepalived/keepalived.conf") --keepalived-reload-interval duration Controls how often keepalived reload is invoked (default 2s) --keepalived-reload-script string Path of keepalived reload script --keepalived-template-file string Path of keepalived config template --kube-api-burst int Burst to use while talking with kubernets apiserver (default 10) --kube-api-qps value QPS to use while talking with kubernetes apiserver (default 5) --kubeconfig string Path to kubeconfig file with authorization information (the master location is set by the master flag).
kube2haproxy is licensed under the Apache License, Version 2.0. See LICENSE for the full license text.