Harpoxy-报文修改
在http模式下,基于实际需求修改客户端的请求报文与响应报文,通过reqadd和reqdel在请求报文添加删除字段,通过rspadd与rspidel在响应报文中添加与删除字段。
注意:此功能的以下相关指令在2.1版本中已经取消
2.1版本以上用下面指令http-request和http-response代替
#在向前端客户端转发的响应报文尾部添加指定首部
rspadd <string> [{if | unless} <cond>]
示例: rspadd X-Via:\ HAPorxy
rspadd Server:\ wanginx
#从向前端客户端转发的响应报文中删除匹配正则表达式的首部
rspdel <search> [{if | unless} <cond>]
rspidel <search> [{if | unless} <cond>] #忽略大小写
示例:
rspidel ^server:.* #从响应报文删除server信息
rspidel X-Powered-By:.* #从响应报文删除X-Powered-By信息,一般此首部字段保存php版本信息
例子:
frontend zjol
bind 192.168.80.110:82
mode http
use_backend zjol_node
backend zjol_node
mode http
option forwardfor
rspadd X-Via:\ HAPorxy
rspidel ^server:.*
server web2 192.168.80.120:80 weight 1 check inter 3000 fall 3 rise 5
[root@localhost7e ~]# curl -I 192.168.80.110:82
HTTP/1.1 200 OK
server: nginx/1.20.1
date: Mon, 25 Jul 2022 02:12:21 GMT
content-type: text/html
content-length: 15
last-modified: Fri, 22 Jul 2022 08:50:22 GMT
etag: "62da64ce-f"
accept-ranges: bytes
[root@localhost7e ~]#
[root@localhost7e ~]#
[root@localhost7e ~]# curl -I 192.168.80.110:82
HTTP/1.1 200 OK
date: Mon, 25 Jul 2022 02:22:02 GMT
content-type: text/html
content-length: 15
last-modified: Fri, 22 Jul 2022 08:50:22 GMT
etag: "62da64ce-f"
accept-ranges: bytes
x-via: HAPorxy
#在向后端服务器转发的请求报文尾部添加指定首部
reqadd <string> [{if | unless} <cond>]
示例:reqadd X-Via:\ HAPorxy
#在向后端服务器转发的请求报文中删除匹配正则表达式的首部
reqdel <search> [{if | unless} <cond>]
reqidel <search> [{if | unless} <cond>] #忽略大小写
示例:reqidel user-agent
范例:
#添加向后端报务器发起的请求报文首部
vim haproxy.cfg
frontend main *:80
default_backend websrvs
reqidel user-agent
reqadd testheader:\ haporxyserver 加此行,只有一个个空格,并需要转义,类似自定义日志格式
#在后端httpd服务器
vim /etc/httpd/conf/httpd.conf
LogFormat "%{testheader}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
#使用nginx日志测试失败,只能通过浏览器的(F12)调试模式看到.(nginx模块 proxy_set_header field value也有这样问题。)
例:
frontend zjol
bind 192.168.80.110:82
mode http
use_backend zjol_node
backend zjol_node
mode http
option forwardfor
reqadd testheader:\ haporxyserver #apache日志格式 可以接收自定义的变量
#reqadd testheader:\ "$server_protocol" 传递不了nginx.
reqidel user-agent
server web2 192.168.80.120:80 weight 1 check inter 3000 fall 3 rise 5
后端nginx日志查看(reqidel user-agent说明)
tail -f /var/log/nginx/access.log
192.168.80.110 - - [25/Jul/2022:14:32:08 +0800] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" "192.168.80.1"
tail -f /var/log/nginx/access.log
192.168.80.110 - - [25/Jul/2022:14:33:06 +0800] "GET / HTTP/1.1" 304 0 "-" "-" "192.168.80.1"
2.1版本以上用下面指令http-request和http-response代替
http-request add-header <name> <fmt> [ { if | unless } <condition> ]
http-request del-header <name> [ { if | unless } <condition> ]
示例:http-request add-header X-Haproxy-Current-Date %T
http-response add-header <name> <fmt> [ { if | unless } <condition> ]
http-response del-header <name>
#示例:http-response del-header Server
范例:
listen web_port
bind 10.0.0.7:80
http-request add-header X-Haproxy-Current-Date %T
http-response del-header server
mode http
log global
option httpchk
http-check expect status 200
server web1 10.0.0.17:80 check inter 3000 fall 2 rise 5
server web2 10.0.0.27:80 check inter 3000 fall 2 rise 5
#查看后端服务器日志
tail –f /var/log/httpd/acesss_log
10.0.0.7 - - [05/Apr/2020:20:13:48 +0800] "GET / HTTP/1.1" 200 10 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) l
ibcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2" "05/Apr/2020:12:13:48 +0000"

浙公网安备 33010602011771号