guillaume.emorine/siotp
Archived
2
1
Fork 1
Code Pull Requests Actions Packages Projects Releases 5 Activity

nouveau fichier : bts_annee_2/sisr2/pxe/README.md

Browse Source 
nouveau fichier : bts_annee_2/sisr2/pxe/dhcpd.conf
	nouveau fichier : bts_annee_2/sisr2/pxe/isc-dhcp-server
	nouveau fichier : bts_annee_2/sisr2/pxe/nftables.conf
	nouveau fichier : bts_annee_2/sisr2/seance_04/README.md
	nouveau fichier : bts_annee_2/sisr2/seance_04/lvs/haproxy.cfg
	nouveau fichier : bts_annee_2/sisr2/seance_04/lvs/ipvs.sh
This commit is contained in:
Guillaume Emorine
2024-09-16 17:11:19 +02:00
parent 0830cade8f
commit 111174a31e
7 changed files with 205 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
bts_annee_2/sisr2/seance_04/lvs/haproxy.cfg Normal file
View File

@@ -0,0 +1,44 @@
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin
stats timeout 30s
user haproxy
group haproxy
daemon
# Default SSL material locations
ca-base /etc/ssl/certs
crt-base /etc/ssl/private
# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
defaults
log global
mode http
option httplog
option dontlognull
timeout connect 5000
timeout client 50000
timeout server 50000
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
# conf perso
frontend front_webservers
bind *:80
default_backend backend_webservers
option forwardfor
backend backend_webservers
balance roundrobin
server web1-ge 172.16.1.1:80 check
server web2-ge 172.16.1.2:80 check

5
bts_annee_2/sisr2/seance_04/lvs/ipvs.sh Normal file
View File

@@ -0,0 +1,5 @@
#!/bin/bash
ipvsadm -A -t 192.168.0.150:80 -s rr
ipvsadm -a -t 192.168.0.150:80 -r 172.16.1.1:80 -m
ipvsadm -a -t 192.168.0.150:80 -r 172.16.1.2:80 -m
ipvsadm -L