Configure HAProxy for HA Setup

Install HAProxy by executing the command:

sudo apt install haproxy

Edit the HAProxy config file by updating the Operator console's IP address.

/etc/haproxy/haproxy.cfg

#---------------------------------------------------------------------
# Proxys to the webserver backend port 443
#---------------------------------------------------------------------
frontend stats
    mode http
    bind *:80
    stats enable
    stats uri /stats
    stats refresh 10s
    stats admin if LOCALHOST
 
frontend https
        bind :443
        mode tcp
        option tcplog
        # Wait for a client hello for at most 5 seconds
        tcp-request inspect-delay 5s
        tcp-request content accept if { req_ssl_hello_type 1 }
        use_backend controller_ssl if { req_ssl_sni -m end .acme.com }<customer-domain>
        #default_backend static
 
frontend ops_https
        bind :9443
        mode tcp
        option tcplog
        # Wait for a client hello for at most 5 seconds
        tcp-request inspect-delay 5s
        tcp-request content accept if { req_ssl_hello_type 1 }
        use_backend opsui_ssl if { req_ssl_sni -i ops-ui.prisma-sd-wan.com }
 
backend controller_ssl
        mode tcp
        balance roundrobin
        timeout connect 5000
        timeout check 5000
        timeout server 30000
        server controller_ssl_server1 192.100.10.1:443 check
        server controller_ssl_server2 192.100.10.4:443 check backup
        server controller_ssl_server3 192.100.10.5:443 check backup
 
backend opsui_ssl
        mode tcp
        balance roundrobin
        timeout connect 5000
        timeout check 5000
        timeout server 30000
        server ops_ssl_server1 192.100.10.1:9443 check
        server ops_ssl_server2 192.100.10.4:9443 check backup
        server ops_ssl_server3 192.100.10.5:9443 check backup