¶ Proxmox HAProxy Configuration
Various methods can be used to balance connections from MultiPortal across multiple Proxmox nodes.
This is used primarily for redundancy, so the failure of a single node does not prevent MultiPortal from communicating with the Proxmox cluster.
¶ HAProxy basic configuration
One tested load balancing method is using a Linux-based HAProxy server
Below are high level steps for configuration of HAProxy to sit between MultiPortal and your Proxmox cluster.
¶ Pre-requisites
- All Proxmox nodes configured with an SSL certificate (LetsEncrypt can be used for this)
- A server with Ubuntu or Debian OS installed
¶ Configuration steps
- Install Ubuntu or Debian OS
- Go to https://haproxy.debian.net and fill out the details
- Follow the instructions to install it on your OS
- Using the template config below, modify /etc/haproxy/haproxy.cfg, adjusting the name and IP values for your Proxmox nodes in the bottom section
HAProxy Sample Config File
Example of real configuration
- Restart HAProxy service by running sudo systemctl restart haproxy
- You may now access it via https://haproxyip
- To access the stats https://haproxyip:8404/stats
Note: Using the provided example configuration, HAProxy will operate in SSL passthrough mode, meaning HAProxy does not have it's own SSL certificate and simply passes web requests onto a Proxmox node. As such, it is recommended to use a DNS record to connect to HAProxy, and ensure all nodes have the an SSL certificate installed that matches this hostname, to avoid certificate mismatch issues
For information on how to configure HAProxy with it's own certificate, see https://www.ssldragon.com/how-to/configure-ssl-haproxy