https://wiki.tetrain.com/index.php?action=history&feed=atom&title=JIL_india_HA_proxy
JIL india HA proxy - Revision history
2026-07-27T11:10:38Z
Revision history for this page on the wiki
MediaWiki 1.43.9
https://wiki.tetrain.com/index.php?title=JIL_india_HA_proxy&diff=4299&oldid=prev
Admin: Auto-created from uploaded PDF text extraction
2026-07-26T16:27:09Z
<p>Auto-created from uploaded PDF text extraction</p>
<p><b>New page</b></p><div>''Auto-generated from the uploaded PDF [[:File:JIL_india_HA_proxy.pdf|JIL_india_HA_proxy.pdf]]. This is an extracted-text rendering for searchability; see the original PDF for exact formatting, diagrams, tables, and images.''<br />
<br />
<pre><br />
<nowiki><br />
HA proxy Installation and configuration<br />
<br />
172.16.118.213 mta1.jalindia.co.in<br />
172.16.118.214 mta2.jalindia.co.in<br />
172.16.118.211 haproxy1.jalindia.co.in<br />
172.16.118.212 haproxy2.jalindia.co.in<br />
172.16.118.232 Virtual IP<br />
<br />
<br />
Reference Doc -<br />
https://wiki.zimbra.com/wiki/Zimbra_Proxy_HA<br />
<br />
Configure Local repo<br />
<br />
Add below entry in /etc/hosts<br />
172.16.118.213 mta1.jalindia.co.in<br />
172.16.118.214 mta2.jalindia.co.in<br />
172.16.118.211 haproxy1.jalindia.co.in<br />
172.16.118.212 haproxy2.jalindia.co.in<br />
<br />
<br />
Install HA proxy package<br />
1.yum install haproxy<br />
Install keepalived package<br />
1.yum install keepalived<br />
<br />
<br />
Move existing haproxy file to .bkp<br />
<br />
1.mv /etc/haproxy/haproxy.conf<br />
/etc/haproxy/haproxy.conf.bkp<br />
Create new file<br />
1.vi /etc/haproxy/haproxy.conf<br />
Add below configuration<br />
global<br />
<br />
log /dev/log local0<br />
log /dev/log local1 notice<br />
chroot /var/lib/haproxy<br />
stats socket /run/admin.sock mode 660 level admin<br />
stats timeout 30s<br />
user haproxy<br />
group haproxy<br />
daemon<br />
tune.ssl.default-dh-param 2048<br />
<br />
defaults<br />
log global<br />
mode http<br />
option httplog<br />
option dontlognull<br />
option http-server-close<br />
option forwardfor<br />
timeout connect 5000ms<br />
timeout client 50000ms<br />
timeout server 50000ms<br />
<br />
frontend https-in<br />
bind *:443 ssl crt /etc/haproxy/certs/bundle.pem<br />
default_backend nginx-backend<br />
<br />
backend nginx-backend<br />
balance roundrobin<br />
http-request add-header X-Forwarded-Proto https<br />
http-request add-header X-Forwarded-Port 443<br />
option forwardfor<br />
http-response add-header Cache-Control no-cache<br />
cookie SERVER_USED insert indirect nocache<br />
server nginx1 172.16.118.213:443 check ssl verify none<br />
server nginx2 172.16.118.214:443 check ssl verify none<br />
<br />
frontend smtp<br />
bind *:25<br />
mode tcp<br />
log global<br />
option tcplog<br />
default_backend bk_smtp<br />
<br />
backend bk_smtp<br />
mode tcp<br />
log global<br />
balance leastconn<br />
option tcplog<br />
server mta1 172.16.118.213:25 check port 25<br />
server mta2 172.16.118.214:25 check port 25<br />
<br />
frontend submission<br />
bind *:587<br />
mode tcp<br />
default_backend bk_submission<br />
<br />
backend bk_submission<br />
mode tcp<br />
server submit1 172.16.118.213:587 check port 587<br />
server submit2 172.16.118.214:587 check port 587<br />
<br />
frontend imap<br />
bind *:143<br />
mode tcp<br />
default_backend bk_imap<br />
<br />
backend bk_imap<br />
mode tcp<br />
balance leastconn<br />
server imap1 172.16.118.213:143 check port 143<br />
server imap2 172.16.118.214:143 check port 143<br />
<br />
frontend pop3<br />
bind *:110<br />
mode tcp<br />
default_backend bk_pop3s<br />
<br />
backend bk_pop3s<br />
mode tcp<br />
balance leastconn<br />
stick store-request src<br />
stick-table type ip size 200k expire 30m<br />
server pop3s1 172.16.118.213:995 check port 995<br />
server pop3s2 172.16.118.214:995 check port 995<br />
<br />
<br />
mv existing keepalived configuration file to .bkp<br />
1.mv /etc/keepalived/keepalived.conf<br />
/etc/keepalived/keepalived.conf.bkp<br />
<br />
Create new conf file<br />
1.vi /etc/keepalived/keepalived.conf<br />
Add below configuration<br />
<br />
Change 10.1.100.7 to our virtual IP 172.16.118.232<br />
<br />
Generate certificates via openssl command<br />
<br />
and change ssl file path in haproxy configuration file<br />
<br />
Restart service<br />
systemctl restart keepalived haproxy<br />
systemctl status keepalived haproxy<br />
<br />
—-------------------------------------------------------------------------------------<br />
</nowiki><br />
</pre></div>
Admin