haproxy Docker 镜像 - 轩辕镜像

Quick reference

• Maintained by:
  the Docker Community

• Where to get help:
  the Docker Community Slack, Server Fault, Unix & Linux, or Stack Overflow

Supported tags and respective Dockerfile links

• 3.4-dev2, 3.4-dev, 3.4-dev2-trixie, 3.4-dev-trixie

• 3.4-dev2-alpine, 3.4-dev-alpine, 3.4-dev2-alpine3.23, 3.4-dev-alpine3.23

• 3.3.1, 3.3, latest, 3.3.1-trixie, 3.3-trixie, trixie

• 3.3.1-alpine, 3.3-alpine, alpine, 3.3.1-alpine3.23, 3.3-alpine3.23, alpine3.23

• 3.2.10, 3.2, lts, 3.2.10-trixie, 3.2-trixie, lts-trixie

• 3.2.10-alpine, 3.2-alpine, lts-alpine, 3.2.10-alpine3.23, 3.2-alpine3.23, lts-alpine3.23

• 3.1.12, 3.1, 3.1.12-trixie, 3.1-trixie

• 3.1.12-alpine, 3.1-alpine, 3.1.12-alpine3.23, 3.1-alpine3.23

• 3.0.14, 3.0, 3.0.14-trixie, 3.0-trixie

• 3.0.14-alpine, 3.0-alpine, 3.0.14-alpine3.23, 3.0-alpine3.23

• 2.8.18, 2.8, 2.8.18-trixie, 2.8-trixie

• 2.8.18-alpine, 2.8-alpine, 2.8.18-alpine3.23, 2.8-alpine3.23

• 2.6.23, 2.6, 2.6.23-trixie, 2.6-trixie

• 2.6.23-alpine, 2.6-alpine, 2.6.23-alpine3.23, 2.6-alpine3.23

• 2.4.30, 2.4, 2.4.30-trixie, 2.4-trixie

• 2.4.30-alpine, 2.4-alpine, 2.4.30-alpine3.23, 2.4-alpine3.23

Quick reference (cont.)

• Where to file issues:
  [***]

• Supported architectures: (more info)
  amd64, arm32v5, arm32v6, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x

• Published image artifact details:
  repo-info repo's repos/haproxy/ directory (history)
  (image metadata, transfer size, etc)

• Image updates:
  official-images repo's library/haproxy label
  official-images repo's library/haproxy file (history)

• Source of this description:
  docs repo's haproxy/ directory (history)

What is HAProxy?

HAProxy is a free, open source high availability solution, providing load balancing and proxying for TCP and HTTP-based applications by spreading requests across multiple servers. It is written in C and has a reputation for being fast and efficient (in terms of processor and memory usage).

***.org/wiki/HAProxy

!logo

How to use this image

Since no two users of HAProxy are likely to configure it exactly alike, this image does not come with any default configuration.

Please refer to upstream's excellent (and comprehensive) documentation on the subject of configuring HAProxy for your needs.

It is also worth checking out the examples/ directory from upstream.

Create a Dockerfile

dockerfile
FROM haproxy:2.3
COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg

Build the container

console
$ docker build -t my-haproxy .

Test the configuration file

console
$ docker run -it --rm --name haproxy-syntax-check my-haproxy haproxy -c -f /usr/local/etc/haproxy/haproxy.cfg

Run the container

console
$ docker run -d --name my-running-haproxy --sysctl net.ipv4.ip_unprivileged_port_start=0 my-haproxy

You will need a kernel at version 4.11 or newer to use --sysctl net.ipv4.ip_unprivileged_port_start=0 , you may need to publish the ports your HAProxy is listening on to the host by specifying the -p option, for example -p 8080:80 to publish port 8080 from the container host to port 80 in the container. Make sure the port you're using is free.

Note: the 2.4+ versions of the container will run as USER haproxy by default (hence the --sysctl net.ipv4.ip_unprivileged_port_start=0 above), but older versions still default to root for compatibility reasons; use --user haproxy (or any other UID) if you want to run as non-root in older versions.

Directly via bind mount

console
$ docker run -d --name my-running-haproxy -v /path/to/etc/haproxy:/usr/local/etc/haproxy:ro --sysctl net.ipv4.ip_unprivileged_port_start=0 haproxy:2.3

Note that your host's /path/to/etc/haproxy folder should be populated with a file named haproxy.cfg. If this configuration file refers to any other files within that folder then you should ensure that they also exist (e.g. template files such as 400.http, 404.http, and so forth). However, many minimal configurations do not require any supporting files.

Reloading config

If you used a bind mount for the config and have edited your haproxy.cfg file, you can use HAProxy's graceful reload feature by sending a SIGHUP to the container:

console
$ docker kill -s HUP my-running-haproxy

The entrypoint script in the image checks for running the command haproxy and replaces it with haproxy-systemd-wrapper from HAProxy upstream which takes care of signal handling to do the graceful reload. Under the hood this uses the -sf option of haproxy so "there are two small windows of a few milliseconds each where it is possible that a few connection failures will be noticed during high loads" (see Stopping and restarting HAProxy).

Image Variants

The haproxy images come in many flavors, each designed for a specific use case.

haproxy:<version>

This is the defacto image. If you are unsure about what your needs are, you probably want to use this one. It is designed to be used both as a throw away container (mount your source code and start the container to start your app), as well as the base to build other images off of.

Some of these tags may have names like trixie in them. These are the suite code names for releases of Debian and indicate which release the image is based on. If your image needs to install any additional packages beyond what comes with the image, you'll likely want to specify one of these explicitly to minimize breakage when there are new releases of Debian.

haproxy:<version>-alpine

This image is based on the popular Alpine Linux project, available in the alpine official image. Alpine Linux is much smaller than most distribution base images (~5MB), and thus leads to much slimmer images in general.

This variant is useful when final image size being as small as possible is your primary concern. The main caveat to note is that it does use musl libc instead of glibc and friends, so software will often run into issues depending on the depth of their libc requirements/assumptions. See this Hacker News comment thread for more discussion of the issues that might arise and some pro/con comparisons of using Alpine-based images.

To minimize image size, it's uncommon for additional related tools (such as git or bash) to be included in Alpine-based images. Using this image as a base, add the things you need in your own Dockerfile (see the alpine image description for examples of how to install packages if you are unfamiliar).

License

View license information for the software contained in this image.

As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained).

Some additional license information which was able to be auto-detected might be found in the repo-info repository's haproxy/ directory.

As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.