Tutorial - Haproxy Installation on Ubuntu Linux [ Step by Step ]

Would you like to learn how to install Haproxy on Ubuntu Linux?In this tutorial, we are going to show you all the steps required to perform the Haproxy installation on Ubuntu Linux in 5 minutes or less.

• Ubuntu 18.04
• Ubuntu 19.10
• Haproxy 2.0.5

In our example, the Haproxy server will receive HTTP connection on the external IP address and perform the loadbalance between 2 internal web servers.

• Haproxy load balancer external IP address : 200.200.200.200
• Haproxy load balancer internal IP address : 192.168.10.1
• Webserver #01 IP address: 192.168.10.5
• Webserver #02 IP address: 192.168.10.6

Haproxy Related Tutorial:

On this page, we offer quick access to a list of tutorials related to Haproxy linux.

List of Tutorials

Tutorial - HaProxy Installation on Ubuntu Linux

Install the Haproxy service.

Copy to Clipboard

Edit the haproxy.cfg configuration file.

Copy to Clipboard

Here is the haproxy.cfg configuration file, before our configuration.

Copy to Clipboard

global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

# Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
        ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
        ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
        ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets

defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http

Insert the following lines at the end of the haproxy.cfg file.

Copy to Clipboard

Here is the haproxy.cfg configuration file, after our configuration.

Copy to Clipboard

global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

# Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
        ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
        ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
        ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets

defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http

frontend LOADBALANCER-01
    bind  200.200.200.200:80
    mode http
    default_backend WEBSERVERS-01

backend WEBSERVERS-01
        balance roundrobin
        server web1 192.168.100.5:80 check
        server web2 192.168.100.6:80 check
        option httpchk

Use the following command to test configuration file named haproxy.cfg.

Copy to Clipboard

Restart the Haproxy service.

Copy to Clipboard

You have finished the Haproxy configuration on Ubuntu LInux.

Ubuntu - Accessing the HAproxy Web Server

After finishing installation, you need to test your Haproxy configuration.

Open a browser software and enter the external IP address of your Haproxy server.

In our example, the following URL was entered in the Browser:

• http://200.200.200.200

One of the internal webserver should answer your request.

In our example, we created a basic HTML page named test.hml to identify which server is answering the HTTP request.

When a user try to access http://200.200.200.200/test.html, the first server shows:

When a user try to access http://200.200.200.200/test.html, the second server shows:

You have finished the Haproxy installation on Ubuntu LInux.