问题描述
haproxy服务无法启动
问题原因
由于未关闭selinux 导致无法关联端口,导致haproxy服务失败
操作方案
排查配置文件无问题
末尾添加配置
~]# tail /etc/haproxy/haproxy.cfg
server app2 127.0.0.1:5002 check
server app3 127.0.0.1:5003 check
server app4 127.0.0.1:5004 check
listen k8s-6443
bind 172.31.7.188:6443
mode tcp
server 172.31.7.101 172.31.7.101:6443 check inter 2s fall 3 rise 5
server 172.31.7.102 172.31.7.102:6443 check inter 2s fall 3 rise 5
server 172.31.7.103 172.31.7.103:6443 check inter 2s fall 3 rise 5
[root@k8s-ha1 ~]#
检查状态
systemctl status haproxy.service
查看messages日志确认失败原因
~]# less /var/log/messages
Jan 23 23:13:18 k8s-ha1 systemd: Unit haproxy.service entered failed state.
Jan 23 23:13:18 k8s-ha1 systemd: haproxy.service failed.
Jan 23 23:18:53 k8s-ha1 systemd: Started HAProxy Load Balancer.
Jan 23 23:18:53 k8s-ha1 haproxy-systemd-wrapper: [WARNING] 022/231853 (4316) : parsing [/etc/haproxy/haproxy.cfg:45] : 'option httplog' not usable with proxy 'k8s-6443' (needs 'mode http'). Falling back to 'option tcplog'.
Jan 23 23:18:53 k8s-ha1 haproxy-systemd-wrapper: [WARNING] 022/231853 (4316) : config : 'option forwardfor' ignored for proxy 'k8s-6443' as it requires HTTP mode.
Jan 23 23:18:53 k8s-ha1 haproxy-systemd-wrapper: [ALERT] 022/231853 (4316) : Starting proxy k8s-6443: cannot bind socket [172.31.7.188:6443]
Jan 23 23:18:53 k8s-ha1 systemd: haproxy.service: main process exited, code=exited, status=1/FAILURE
Jan 23 23:18:53 k8s-ha1 haproxy-systemd-wrapper: haproxy-systemd-wrapper: exit, haproxy RC=1
Jan 23 23:18:53 k8s-ha1 systemd: Unit haproxy.service entered failed state.
Jan 23 23:18:53 k8s-ha1 systemd: haproxy.service failed.
Jan 23 23:19:00 k8s-ha1 kernel: e1000: eth0 NIC Link is Down
Jan 23 23:19:00 k8s-ha1 Keepalived_vrrp[3032]: Kernel is reporting: interface eth0 DOWN
Jan 23 23:19:00 k8s-ha1 Keepalived_vrrp[3032]: VRRP_Instance(VI_1) Entering FAULT STATE
Jan 23 23:19:00 k8s-ha1 Keepalived_vrrp[3032]: VRRP_Instance(VI_1) removing protocol VIPs.
Jan 23 23:19:00 k8s-ha1 Keepalived_vrrp[3032]: VRRP_Instance(VI_1) Now in FAULT state
Jan 23 23:19:04 k8s-ha1 kernel: e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
检查未关闭selinux
~]# setenforce 0