代码之家  ›  专栏  ›  技术社区  ›  Saltimbanquier

单倍外部检查错误代码255

  •  1
  • Saltimbanquier  · 技术社区  · 8 年前

    我对Haproxy很陌生,我对外部检查有一种奇怪的行为。。

    这是我的配置文件:

    global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon
    
        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private
    
        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL). This list is from:
        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
        ssl-default-bind-options no-sslv3
        external-check
    
    defaults
        log    global
        mode    http
        option    httplog
        option    dontlognull
            timeout connect 5000
            timeout client  50000
            timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http
    
    backend web-backend
        balance roundrobin
        option external-check
        external-check path "/usr/bin:/bin:/tmp"
        external-check command /bin/true
        server web1 127.0.0.1:80 check
        server web2 127.0.0.1:81 check
    
    frontend http
        bind *:82
        mode http
    
        default_backend web-backend
    

    然而我得到了503分,在我的日志中我得到了这个:

    ...: Server web-backend/web1 is DOWN, reason: External check error, code: 255, check duration: 5ms. 1 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
    ...: Server web-backend/web1 is DOWN, reason: External check error, code: 255, check duration: 5ms. 1 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
    ...: Server web-backend/web2 is DOWN, reason: External check error, code: 255, check duration: 1ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
    ...: Server web-backend/web2 is DOWN, reason: External check error, code: 255, check duration: 1ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
    ...: backend web-backend has no server available!
    ...: backend web-backend has no server available!
    

    check/bin/true怎么会失败并返回255?

    我正在运行最新的稳定版本(1.6.5)

    谢谢

    编辑 我在Debian8上,我用了这个: https://haproxy.debian.net/ 安装最新版本(1.6.5)

    1 回复  |  直到 8 年前
        1
  •  2
  •   Saltimbanquier    8 年前

    原来我用的是一个空监狱!所以监狱里没有二进制文件可以执行(chroot/var/lib/haproxy)。