# subscription-manager register

# subscription-manager repos --enable=rhel-7-server-rpms

# yum update -y

# firewall-cmd --zone=public --add-port 80/tcp --permanent
# firewall-cmd --reload

# firewall-cmd --zone=public --add-port 443/tcp --permanent
# firewall-cmd --reload

# yum install -y keepalived

# vim /etc/keepalived/keepalived.conf

vrrp_script chk_haproxy {
  script "killall -0 haproxy" # check the haproxy process
  interval 2 # every 2 seconds
  weight 2 # add 2 points if OK
}

vrrp_instance VI_1 {
  interface eth0 # interface to monitor
  state MASTER # MASTER on haproxy, BACKUP on haproxy2
  virtual_router_id 51
  priority 101 # 101 on haproxy, 100 on haproxy2
  virtual_ipaddress {
    192.168.0.100 # virtual ip address
  }
  track_script {
    chk_haproxy
  }
}

# systemctl enable keepalived
# systemctl start keepalived

# yum install haproxy

# vim /etc/firewalld/services/haproxy-http.xml

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTP</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="80"/>
</service>

# cd /etc/firewalld/services
# restorecon haproxy-http.xml
# chmod 640 haproxy-http.xml

# vim /etc/firewalld/services/haproxy-https.xml

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>HAProxy-HTTPS</short>
<description>HAProxy load-balancer</description>
<port protocol="tcp" port="443"/>
</service>

# cd /etc/firewalld/services
# restorecon haproxy-https.xml
# chmod 640 haproxy-https.xml

# cat example.com.crt example.com.key > example.com.pem
# cp example.com.pem /etc/ssl/private/

# vim /etc/haproxy/haproxy.cfg

frontend http_web *:80
    mode http
    default_backend rgw

frontend rgw­-https
  bind <insert vip ipv4>:443 ssl crt /etc/ssl/private/example.com.pem
  default_backend rgw

backend rgw
    balance roundrobin
    mode http
    server  rgw1 10.0.0.71:80 check
    server  rgw2 10.0.0.80:80 check

# systemctl enable haproxy
# systemctl start haproxy