Home / user-496559

Chang Zhao's questions

Martin Hope
Chang Zhao
Asked: 2021-08-30 05:50:50 +0800 CST
  • 0

I have haproxy server running on linode port 80 that redirects traffic to on premise haproxy port 8082

 ---  linode node,
 |
VPN
 |
 --- onpremise haproxy node

and I have another node on premise that is not on the vpn for security reason.

I want to redirect traffic from linode:80 to on_premise via haproxy:8082

is it possible ?

I have been thinking to use (on linode)

redirect location http://10.8.0.3:8082/octopus 302 if { path_beg /octopus }

then on, on premise node (sees nodes on 10.8... as well as 192.168...) I have usual acl setup:

acl host_octopus_pix path_beg -i /octopus

use_backend octopus_pix if host_octopus_pix

backend octopus_pix
   server octopus 192.168.1.11:80

the octopus app is running on port 80 on 192.168.1.11

haproxy
Martin Hope
Chang Zhao
Asked: 2020-09-10 14:19:34 +0800 CST
  • 2

This is my consul.service file.

[Unit]
Description="HashiCorp Consul - A service mesh solution"
Documentation=https://www.consul.io/
Requires=network-online.target
After=network-online.target

[Service]
Type=simple
User=consul
Group=consul
LimitNOFILE=1024
ExecStart=/usr/bin/consul agent  -config-dir=/etc/consul.d/
ExecReload=/bin/kill --signal HUP $MAINPID
KillMode=process
Restart=on-failure
RestartSec=5
KillSignal=SIGINT

[Install]
WantedBy=multi-user.target

I did sudo chown -R consul:consul /etc/consul.d/ because I created a consul user as well.

and this is my /etc/config.d directory:

$ tree /etc/consul.d/
/etc/consul.d/
├── bootstrap
│   └── config.json
├── client
└── server
    └── config.json

this is the server config. cat /etc/consul.d/server/config.json

{
    "bootstrap": false,
    "server": true,
    "datacenter": "lon",
    "advertise_addr": "192.168.0.16",
    "client_addr": "0.0.0.0",
    "bind_addr": "{{GetInterfaceIP \"eth0\"}}",
    "data_dir": "/var/consul/",
    "log_level": "INFO",
    "enable_syslog": true,
    "retry_join": ["192.168.0.16"]
}

cat /etc/consul.d/bootstrap/config.json

{
    "bootstrap": true,
    "server": true,
    "datacenter": "lon",
    "advertise_addr": "192.168.0.16",
    "client_addr": "0.0.0.0",
    "bind_addr": "{{GetInterfaceIP \"eth0\"}}",
    "data_dir": "/var/consul/",
    "log_level": "INFO",
    "enable_syslog": true,
    "retry_join": ["192.168.0.16"]
}

And I have validated the consul config for server and bootstrap configurations.

consul validate  /etc/consul.d/server/config.json 
Configuration is valid!

but I keep getting error saying:

 consul[21711]: ==> Multiple private IPv4 addresses found. Please configure one with 'bind' and/or 'advertise'.

I tried this command too

~/go/bin$ ./sockaddr eval GetPrivateIP
192.168.0.16

what am I missing ?

ubuntu-18.04 systemd-service consul
Martin Hope
Chang Zhao
Asked: 2018-11-21 22:52:23 +0800 CST
  • 1

I have setup https on apache configuration of my website.conf as 

<VirtualHost *:5061>
    <Directory/var/www/website.com>
    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
    <Directory>
    ServerName website.com
    ServerAlias website

    SSLEngine on
    SSLCertificateKeyFile /etc/certs/website.key
    SSLCertificateFile /etc/certs/website.crt
    SSLCertificateChainFile /etc/certs/website.bundle
<virtualHost>

and the above being hosted on 5061 port are REST API services I want anyone attempting to reach the ServerName over http should be redirected to https without the port change .

is this possible ?

apache-2.2