https://wiki.tetrain.com/index.php?action=history&feed=atom&title=BHUTAN_HA_proxy_Installation_and_configuration BHUTAN HA proxy Installation and configuration - Revision history 2026-07-27T10:40:10Z Revision history for this page on the wiki MediaWiki 1.43.9 https://wiki.tetrain.com/index.php?title=BHUTAN_HA_proxy_Installation_and_configuration&diff=4259&oldid=prev Admin: Auto-created from uploaded PDF text extraction 2026-07-26T16:27:08Z <p>Auto-created from uploaded PDF text extraction</p> <p><b>New page</b></p><div>&#039;&#039;Auto-generated from the uploaded PDF [[:File:BHUTAN_HA_proxy_Installation_and_configuration.pdf|BHUTAN_HA_proxy_Installation_and_configuration.pdf]]. This is an extracted-text rendering for searchability; see the original PDF for exact formatting, diagrams, tables, and images.&#039;&#039;<br /> <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;<br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> <br /> BHUTAN TELECOM<br /> <br /> <br /> Last Updated: 20th Jan 2026<br /> <br /> <br /> Prepared By -<br /> <br /> Tetra Information Team<br /> <br /> <br /> CAUTION<br /> <br /> This document is released by Tetra Information Services Pvt. Ltd<br /> <br /> The information contained in this document is confidential, and no<br /> part of this document may be reproduced, stored in a retrieval<br /> system, or transmitted in any form or by any means, electronic,<br /> mechanical, photocopying, recording or otherwise, without the prior<br /> written consent.<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> HA proxy Installation and configuration<br /> <br /> BHUTAN TELECOM<br /> <br /> <br /> SAME STEPS FOR BOTH SERVERS<br /> <br /> 10.10.100.137 mta1.bt.bt<br /> 10.10.100.141 mta2.bt.bt<br /> 10.10.100.132 haproxy1.bt.bt<br /> 10.10.100.133 haproxy2.bt.bt<br /> 10.10.100.132 (202.144.128.132) Public IP<br /> 10.10.100.133 (202.144.128.133) Public IP<br /> <br /> 202.144.128.134 Virtual IP<br /> <br /> <br /> Reference Doc -<br /> https://wiki.zimbra.com/wiki/Zimbra_Proxy_HA<br /> <br /> <br /> Add the below entry in /etc/hosts<br /> <br /> 10.10.100.137 mta1.bt.bt<br /> 10.10.100.141 mta2.bt.bt<br /> 10.10.100.132 haproxy1.bt.bt<br /> 10.10.100.133 haproxy2.bt.bt<br /> <br /> <br /> Install the HA proxy package<br /> 1.​apt install haproxy<br /> <br /> Install the keepalived package<br /> 1.​apt install keepalived<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> <br /> Move the existing haproxy file to .bkp<br /> <br /> 1.​mv /etc/haproxy/haproxy.conf<br /> /etc/haproxy/haproxy.conf.bkp<br /> <br /> <br /> Create new file<br /> 1.​vi /etc/haproxy/haproxy.conf<br /> Add below configuration<br /> <br /> global<br /> log /dev/log local0<br /> log /dev/log local1 notice<br /> chroot /var/lib/haproxy<br /> stats socket /run/admin.sock mode 660 level admin<br /> stats timeout 30s<br /> user haproxy<br /> group haproxy<br /> daemon<br /> tune.ssl.default-dh-param 2048<br /> <br /> ############################<br /> # HTTP DEFAULTS<br /> ############################<br /> defaults http<br /> log global<br /> mode http<br /> option httplog<br /> option dontlognull<br /> option http-server-close<br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> option forwardfor<br /> timeout connect 5s<br /> timeout client 50s<br /> timeout server 50s<br /> <br /> ############################<br /> # TCP DEFAULTS<br /> ############################<br /> defaults tcp<br /> log global<br /> mode tcp<br /> option tcplog<br /> timeout connect 5s<br /> timeout client 1m<br /> timeout server 1m<br /> <br /> ############################<br /> # HTTPS<br /> ############################<br /> frontend https-in<br /> bind *:443 ssl crt /etc/haproxy/certs/bundle.pem<br /> default_backend nginx-backend<br /> <br /> backend nginx-backend<br /> mode http<br /> balance roundrobin<br /> http-request add-header X-Forwarded-Proto https<br /> http-request add-header X-Forwarded-Port 443<br /> cookie SERVER_USED insert indirect nocache<br /> server nginx1 10.10.100.137:443 check ssl verify none<br /> server nginx2 10.10.100.141:443 check ssl verify none<br /> <br /> ############################<br /> # SMTP SUBMISSION<br /> ############################<br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> frontend submission<br /> bind *:587<br /> default_backend bk_submission<br /> <br /> backend bk_submission<br /> balance leastconn<br /> server submit1 10.10.100.137:587 check<br /> server submit2 10.10.100.141:587 check<br /> <br /> ############################<br /> # SMTPS<br /> ############################<br /> frontend smtps<br /> bind *:465<br /> default_backend bk_smtps<br /> <br /> backend bk_smtps<br /> balance leastconn<br /> server smtps1 10.10.100.137:465 check<br /> server smtps2 10.10.100.141:465 check<br /> <br /> ############################<br /> # IMAP<br /> ############################<br /> frontend imap<br /> bind *:143<br /> default_backend bk_imap<br /> <br /> backend bk_imap<br /> balance leastconn<br /> server imap1 10.10.100.137:143 check<br /> server imap2 10.10.100.141:143 check<br /> <br /> ############################<br /> # IMAPS<br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> ############################<br /> frontend imaps<br /> bind *:993<br /> default_backend bk_imaps<br /> <br /> backend bk_imaps<br /> balance leastconn<br /> server imaps1 10.10.100.137:993 check<br /> server imaps2 10.10.100.141:993 check<br /> <br /> ############################<br /> # POP3S<br /> ############################<br /> frontend pop3s<br /> bind *:995<br /> default_backend bk_pop3s<br /> <br /> backend bk_pop3s<br /> balance leastconn<br /> stick-table type ip size 200k expire 30m<br /> stick store-request src<br /> server pop3s1 10.10.100.137:995 check<br /> server pop3s2 10.10.100.141:995 check<br /> <br /> <br /> —-----------------------------------------------------------------<br /> <br /> <br /> mv existing keepalived configuration file to .bkp<br /> 1.​mv /etc/keepalived/keepalived.conf<br /> /etc/keepalived/keepalived.conf.bkp<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> <br /> Create new conf file<br /> 1.​vi /etc/keepalived/keepalived.conf<br /> Add below configuration<br /> <br /> <br /> global_defs {<br /> router_id ha1<br /> enable_script_security<br /> }<br /> <br /> vrrp_script haproxy_healthcheck {<br /> script &quot;/usr/bin/pgrep haproxy&quot;<br /> interval 2<br /> weight -2<br /> fall 2<br /> rise 2<br /> }<br /> <br /> vrrp_instance VI_1 {<br /> state MASTER<br /> interface ens13<br /> virtual_router_id 51<br /> priority 150<br /> advert_int 1<br /> <br /> authentication {<br /> auth_type PASS<br /> auth_pass redhat<br /> }<br /> <br /> virtual_ipaddress {<br /> 202.144.128.134/25<br /> }<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> track_script {<br /> haproxy_healthcheck<br /> }<br /> }<br /> <br /> Import the SSL file and change the path in the HAProxy<br /> configuration file<br /> <br /> Restart service<br /> systemctl restart keepalived haproxy<br /> systemctl status keepalived haproxy<br /> <br /> —-------------------------------------------------------------------------------------<br /> root@haproxy1:~# ip a<br /> 1: lo: &lt;LOOPBACK,UP,LOWER_UP&gt; mtu 65536 qdisc noqueue<br /> state UNKNOWN group default qlen 1000<br /> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<br /> inet 127.0.0.1/8 scope host lo<br /> valid_lft forever preferred_lft forever<br /> 2: ens13: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500<br /> qdisc fq_codel state UP group default qlen 1000<br /> link/ether aa:00:00:54:88:e2 brd ff:ff:ff:ff:ff:ff<br /> altname enp0s13<br /> inet 202.144.128.132/25 brd 202.144.128.255 scope global<br /> ens13<br /> valid_lft forever preferred_lft forever<br /> inet 202.144.128.134/25 scope global secondary ens13<br /> valid_lft forever preferred_lft forever<br /> 3: ens14: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500<br /> qdisc fq_codel state UP group default qlen 1000<br /> link/ether aa:00:00:25:54:5a brd ff:ff:ff:ff:ff:ff<br /> altname enp0s14<br /> inet 10.10.100.132/24 brd 10.10.100.255 scope global ens14<br /> valid_lft forever preferred_lft forever<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> <br /> HAPROXY INSTALLATION BHUTAN<br /> ------------------------------------------------------------------------------------------------------------------------<br /> <br /> <br /> ------------------------------------------------------------------------------------------------------------------------<br /> BHUTAN Tetra Information Services Pvt. Ltd<br /> &lt;/nowiki&gt;<br /> &lt;/pre&gt;</div> Admin