haproxy

Ansible role to manage HAproxy.

HAproxy configuration in haproxy.cfg is based on variables related to separated sections:

• global in haproxy_globals
• defaults in haproxy_defaults
• stats in haproxy_stats
• listens/frontends/backends in haproxy_binds

Each configuration variable entry is transformed to haproxy.cfg setting, according to the following rules:

• string value to single config space separated entry

  bind: "*.443"`

  becomes

  bind *.443
  

• list to multiple config entries with the same key

  option:
    - "dontlognull"
    - "http-server-close"
    - "redispatch"

  becomes

  option dontlognull
  option http-server-close
  option redispatc
  

Special transform is applied to haproxy_binds.

• servers is list of backend servers (fqdns or ip addresses)
• names is list of backend servers names, replaced by servers if not defined
  for consistency it should have the same number of items as servers however it is not mandatory
• settings is list of options appended to each backend server definition

haproxy_binds:
  - listen: web
    backends:
      - servers:
          - server1.example.com
          - server2.example.com
        names:
          - backend1
        port: 80
        settings:
          - "check"
          - "inter 2s"
          - "rise 2"
          - "fall 3"
      - servers:
          - 192.168.0.10
        names:
          - backup
        port: 80
        settings:
          - "check"
          - "inter 2s"
          - "rise 2"
          - "fall 3"
          - "backup"

becomes

#---------------------------------------------------------------------
# web
#---------------------------------------------------------------------
listen web
  server backend1 server1.example.com:80 check inter 2s rise 2 fall 3
  server server2.example.com server2.example.com:80 check inter 2s rise 2 fall 3
  server backup 192.168.0.10:80 check inter 2s rise 2 fall 3 backup

Separate frontends and backends can also be defined.

haproxy_binds:
  - frontend: "frontend-1"
    bind: "*:443"
    mode: "tcp"
    balance: "roundrobin"
    default_backend: "backend-0"

  - frontend: "frontend-2"
    bind: "*:8443"
    mode: "tcp"
    balance: "roundrobin"
    default_backend: "backend-0"

  - backend: "backend-0"
    backends:
      - servers:
          - server1.example.com
          - server2.example.com
        port: 443
        settings:
          - "check inter 1s"

becomes

#---------------------------------------------------------------------
# frontend-1
#---------------------------------------------------------------------
frontend frontend-1
  bind *:443
  mode tcp
  balance roundrobin
  default_backend backend-0

#---------------------------------------------------------------------
# frontend-2
#---------------------------------------------------------------------
frontend frontend-2
  bind *:8443
  mode tcp
  balance roundrobin
  default_backend backend-0

#---------------------------------------------------------------------
# backend-0
#---------------------------------------------------------------------
backend backend-0
  server server1.example.com server1.example.com:443 check inter 1s
  server server1.example.com server2.example.com:443 check inter 1s

Requirements

• ansible.builtin
• ansible.posix
• community.general

Role Variables

• defaults

  • main.yaml

    haproxy_name: ""        # name presented in HAproxy stats
    haproxy_firewalld: []   # firewalld settings

  • globals.yaml - global section in haproxy.cfg

  • defaults.yaml - defaults section in haproxy.cfg

  • stats.yaml - stats section in haproxy.cfg

  • binds.yaml - listen and/or frontend/backend sections in haproxy.cfg

    haproxy_binds: []       # list of load balanced binds
      - listen: ""          # bind name, i.e. http
        bind: ""            # bind port, i.e. *:80
        mode: ""            # bind mode, i.e. http
        balance: ""         # bind balance, i.e. roundrobin, first
        backends: []        # list of backends definitions
          - servers: []     # list of backend servers
            names: []       # list of backend server names (see description)
            port: ""        # port of backend servers, i.e. 80
            settings: []    # list of backend servers options, i.e check
    
      - frontend: ""        # frontend name, i.e. https
        bind: ""            # bind port, i.e. *:443
        mode: ""            # bind mode, i.e. http
        balance: ""         # bind balance, i.e. roundrobin, first
        default_backend: "" # name of default backend
        backends: []        # list of backends definitions
          - servers: []     # list of backend servers
            names: []       # list of backend server names (see description)
            port: ""        # port of backend servers, i.e. 443
            settings: []    # list of backend servers options, i.e check

• vars

  haproxy_pkgs: []            # list of HAproxy software packages
  haproxy_config: {}          # HAproxy config files attributes
  haproxy_service: ""         # systemd (or equivalent) service name

Dependencies

• service
  • software

Tags

• haproxy.config
• haproxy.selinux
  • haproxy.selinux.sebool
  • haproxy.selinux.seport

Examples

• requirements.yaml

  - name: haproxy
    src: https://github.com/mario-slowinski/haproxy

• playbook.yaml

  - hosts: servers
    gather_facts: true
    roles:
      - role: haproxy

• testing, test_dir must exist and end with /

  ansible-playbook -e test_dir=/tmp/ playbook.yaml

License

GPL-3.0

Author Information

mario.slowinski@gmail.com