haproxy代理ftp

vsftpd配置如下：

anonymous_enable=YES
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
allow_writeable_chroot=YES
listen=YES    #修改为监听ipv4，ipv6不支持pasv_address
listen_ipv6=NO  #修改为监听ipv4，ipv6不支持pasv_address
pam_service_name=vsftpd
userlist_enable=YES
userlist_file=/etc/vsftpd/user_list
userlist_deny=NO
pasv_enable=YES
pasv_min_port=50000
pasv_max_port=50010
pasv_address=10.0.17.115  #此为ha vip
tcp_wrappers=YES

haproxy配置如下：

frontend f_ftp_21
    mode tcp
    bind *:21
    option tcplog
    default_backend b_ftp_21
    log 127.0.0.1 local1 info

frontend f_ftp_passive
      mode tcp
      bind *:50000-50010      # 与 FTP 服务器配置的被动端口范围一致。如果ha服务提示其中某个端口绑定失败，则将*改为实际用的vip
      default_backend b_ftp_passive

backend b_ftp_21
    mode tcp
    server ftp01 10.0.17.2:21 check inter 4000 rise 2 fall 3 
    server ftp02 10.0.17.3:21 check inter 4000 rise 2 fall 3 backup   #配置为主备模式

backend b_ftp_passive
    mode tcp
    server ftp01 10.0.17.2 check port 21 inter 4000 rise 2 fall 3 
    server ftp02 10.0.17.3 check port 21 inter 4000 rise 2 fall 3 backup   #配置为主备模式