如何通过 HAproxy 访问 Kibana 仪表板

Question

我有一个运行 kibana 服务器，我已将其设置为从本地主机访问。这是一个 linux 服务器，所以我可以这样做：

 links http://localhost:5601

这运行良好。我需要将这个 kibana 服务器放在 HAProxy 后面，它将充当 Kibana 的反向代理。

我的 Haproxy 配置文件 (/etc/haproxy/haproxy.cfg) 看起来像

global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL). This list is from:
        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
        ssl-default-bind-options no-sslv3

defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull

        option  http-keep-alive
        timeout http-keep-alive 5m
        timeout http-request 5s
        timeout connect 300s
        timeout client  300s
        timeout server  300s
        timeout check   300s


        #timeout connect 5000
        #timeout client  50000
        #timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http


listen stats 0.0.0.0:9000       #Listen on all IP's on port 9000

    #This is the virtual URL to access the stats page
    stats uri /haproxy_stats

    #Authentication realm. This can be set to anything. Escape space characters with a backslash.
    stats realm HAProxy\ Statistics

    #The user/pass you want to use. Change this password!
    stats auth admin:passwordhere

    #This allows you to take down and bring up back end servers.
    #This will produce an error on older versions of HAProxy.
    stats admin if TRUE

我应该将什么前端和后端添加到此文件中，我对基于上下文的切换更感兴趣。我正在寻找“http://haproxy_ip/kibana”应该将我重定向到 kibana 网页

Answer 1

请将以下代码添加到/etc/haproxy/haproxy.cfg
现在 http://haproxy_ip/kibana 将打开 kibana 仪表板。

listen  http-port80 *:80
    mode   http
    reqirep ^(accept:\ .*)(http://www.wapforum.org/xhtml,)(.*) "http://www.wapforum.org/xhtml",
    acl acl_kibana path_beg /kibana
    use_backend kibana if acl_kibana

backend kibana
    mode   http
    reqirep ^(accept:\ .*)(http://www.wapforum.org/xhtml,)(.*) "http://www.wapforum.org/xhtml",
    balance roundrobin
    server  kibana **kibana_server_ip**:5601 weight 1 maxconn 512 check

Answer 2

试试这个。

frontend main *:80
  acl url_kibana   path_beg   -i /kibana
  use_backend kibana   if url_kibana

backend kibana
  mode http
  reqrep ^([^\ ]*)\ /kibana[/]?(.*) \ /
  server x.x.x.x:5601

测试 HAProxy 配置：

haproxy -c -V -f /etc/haproxy/haproxy.cfg

重新启动 HAProxy：

systemctl restart haproxy

原始答案和解释位于：

如何通过 HAproxy 访问 Kibana 仪表板

How to access Kibana dashboard via HAproxy

elasticsearch

reverse-proxy

haproxy

kibana-4

devops