daacams.blogg.se

Squid proxy server iso
Squid proxy server iso







squid proxy server iso

# pcs cluster start -all //starting cluster on all servers # pcs cluster setup -name squid_clu node1 node2 //setup cluster with clustername squid_clu # pcs cluster auth node1 node2 //execute this on only one node to check the authentication of haclusterġ1) Setup the cluster with the name squid_clu Any node is fine.ġ0) Starting the cluster configuration on single node # systemctl enable pcsd //adding as startup serviceįrom step 10 to 17, run on single node. # systemctl start pcsd //start the pcsd service Pass: xxxxxxx //create hacluster password must be same on both nodesĩ) Start the pacemaker service and set it to start at booting this username created during the pacemaker and corosync installation # systemctl enable squid //start the squid service after every boot (you must run this on both nodes)Ĩ) Configure the password for hacluster user. # systemctl start squid //start the squid service (you must run this on both nodes) # Allows the squid port and IP on which service runs in this server. # yum install -y squid //to install the squid proxy # yum install net-tools -y //network tools (otherwise squid HA resource agent doesn't start )ĥ) Configure the node names in hosts file because pacemaker and corosync will use node names onlyĦ) Installing Squid Proxy and updating config file # systemctl stop firewalld // stop firewall serviceĤ) After that install net-tools package, it is very important for squid proxy HA, as default CentOS 7 do not come with netstat command but squid ocf:heartbeatagent:Squid will use the netstat command to check the squid service on both nodes # systemctl disable firewalld //disable firewall

squid proxy server iso

Note: if you experience any issues with firewall simply disable it using Steps 1 to 9 to be run on all cluster servers - node1, node2ġ) Install the corosync, pacemaker and pcsģ) Add required firewall rules to permit all required connections.įirewall-cmd -permanent -zone=internal -change-interface=ifcfg-ens160 //change the nic in to public to internal zoneįirewall-cmd -zone=internal -add-service=ssh -permanentįirewall-cmd -zone=internal -add-service=http -permanentįirewall-cmd -zone=internal -add-service=https -permanentįirewall-cmd -zone=internal -add-port=3126/tcp -permanentįirewall-cmd -zone=internal -add-port=3127/tcp -permanentįirewall-cmd -zone=internal -add-port=3128/tcp -permanentįirewall-cmd -zone=internal -add-port=5404/udp -permanentįirewall-cmd -zone=internal -add-port=5405/udp -permanent My setup is on CentOS 7.4 minimal install Get two servers with similar OS and configs. You can use this for other cluster setups like Httpd also. Set up a squid proxy server in clustered environment using pacemaker, corosync and PCS.









Squid proxy server iso