DCO-SOGs/6 SIEMs/Splunk/6.2loadbalancer.md

Create Ubuntu VM for where IP will be directed to

sudo apt install haproxy

sudo vi /etc/haproxy/haproxy.cfg

bottom of file

#--------------------
# Custom Input
#--------------------

frontend loadbalancer
 bind 10.2.25.69:8000 #change IP
 mode http
 default_backend searchheads #this will connect to below

backend searchheads
 balance roundrobin
 cookie server insert indirect nocache
 server searchhead1 10.2.25.73:8000 check cookie searchhead1 #change IP
 server searchhead2 10.2.25.74:8000 check cookie searchhead2 #change IP
 server searchhead3 10.2.25.75:8000 check cookie searchhead3 #change IP

systemctl restart haproxy