aasmith/haproxy

aasmith/docker-haproxy

镜像概述和主要用途

该Docker镜像包含HAProxy，且针对更新、更快的库（带JIT的PCRE、SLZ、OpenSSL）进行编译。尽可能使用静态链接的现代库，同时尽量贴近官方Docker镜像。可在需要时替换镜像名称使用。

核心功能和特性

Lua支持

自HAProxy 1.6起，Lua支持可用，无需重新编译或C语言知识即可添加额外功能。

PCRE

启用PCRE JIT编译以加快正则表达式解析速度。PCRE性能项目提供了更多基准测试等信息。编译尽可能接近debian包，但排除C++支持和动态链接。

Stateless Zip (SLZ)

由HAProxy维护者创建的SLZ是一种流压缩器，可生成gzip兼容输出。它内存占用更低，无字典持久性，运行速度约为zlib的3倍。Stateless Zip项目提供背景、基准测试等信息。

Prometheus

从2.0.5版本开始，默认编译Prometheus导出器功能。

可用版本

完整的Docker标签列表可查看https://github.com/aasmith/docker-haproxy/tags%E6%88%96https://hub.docker.com/r/aasmith/haproxy/tags%E6%8F%90%E4%BE%9B%E7%9A%84%E6%A0%87%E7%AD%BE%E3%80%82

使用方法

从命令行显示HAProxy版本

docker run -it --rm aasmith/haproxy:2.3.2 haproxy -vv

Dockerfile示例

Dockerfile
FROM aasmith/haproxy
COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg

固定版本使用

FROM aasmith/haproxy:2.3 # 保持在2.3系列的最新版本

FROM aasmith/haproxy:2.3.2 # 精确使用2.3.2版本

编译详情

haproxy -vv输出：

HA-Proxy version 2.4-dev17-bfd19d6 2021/04/23 - [***]
Status: development branch - not safe for use in production.
Known bugs: https://github.com/haproxy/haproxy/issues?q=is:issue+is:open
Running on: Linux 5.10.25-linuxkit #1 SMP Tue Mar 23 09:27:39 UTC 2021 x86_64
Build options :
  TARGET  = linux-glibc
  CPU     = generic
  CC      = cc
  CFLAGS  = -m64 -march=x86-64 -O2 -g -Wall -Wextra -Wdeclaration-after-statement -fwrapv -Wno-unused-label -Wno-sign-compare -Wno-unused-parameter -Wno-clobbered -Wno-missing-field-initializers -Wno-cast-function-type -Wtype-limits -Wshift-negative-value -Wshift-overflow=2 -Wduplicated-cond -Wnull-dereference
  OPTIONS = USE_PCRE2_JIT=1 USE_STATIC_PCRE2=1 USE_OPENSSL=1 USE_LUA=1 USE_SLZ=1 USE_PROMEX=1
  DEBUG   = 

Feature list : +EPOLL -KQUEUE +NETFILTER -PCRE -PCRE_JIT -PCRE2 +PCRE2_JIT +POLL -PRIVATE_CACHE +THREAD -PTHREAD_PSHARED +BACKTRACE -STATIC_PCRE +STATIC_PCRE2 +TPROXY +LINUX_TPROXY +LINUX_SPLICE +LIBCRYPT +CRYPT_H +GETADDRINFO +OPENSSL +LUA +FUTEX +ACCEPT4 -CLOSEFROM -ZLIB +SLZ +CPU_AFFINITY +TFO +NS +DL +RT -DEVICEATLAS -51DEGREES -WURFL -SYSTEMD -OBSOLETE_LINKER +PRCTL +THREAD_DUMP -EVPORTS -OT -QUIC +PROMEX

Default settings :
  bufsize = ***, maxrewrite = 1024, maxpollevents = 200

Built with multi-threading support (MAX_THREADS=64, default=4).
Built with OpenSSL version : OpenSSL 1.1.1k  25 Mar 2021
Running on OpenSSL version : OpenSSL 1.1.1k  25 Mar 2021
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
Built with Lua version : Lua 5.4.2
Built with the Prometheus exporter as a service
Built with network namespace support.
Built with libslz for stateless compression.
Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
Built with PCRE2 version : 10.36 2020-12-04
PCRE2 library supports JIT : yes
Encrypted password support via crypt(3): yes
Built with gcc compiler version 8.3.0

Available polling systems :
      epoll : pref=300,  test result OK
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 3 (3 usable), will use epoll.

Available multiplexer protocols :
(protocols marked as <default> cannot be specified using 'proto' keyword)
              h2 : mode=HTTP       side=FE|BE     mux=H2       flags=HTX|CLEAN_ABRT|HOL_RISK|NO_UPG
            fcgi : mode=HTTP       side=BE        mux=FCGI     flags=HTX|HOL_RISK|NO_UPG
       <default> : mode=HTTP       side=FE|BE     mux=H1       flags=HTX
              h1 : mode=HTTP       side=FE|BE     mux=H1       flags=HTX|NO_UPG
       <default> : mode=TCP        side=FE|BE     mux=PASS     flags=
            none : mode=TCP        side=FE|BE     mux=PASS     flags=NO_UPG

Available services : prometheus-exporter
Available filters :
	[SPOE] spoe
	[CACHE] cache
	[FCGI] fcgi-app
	[COMP] compression
	[TRACE] trace