Monday, June 23, 2014

Fronting WSO2 AS worker/manager cluster with Nginx

This Blog describes how to configure Nginx as a load balancer with WSO2 Application Server cluster

Nginx 1.4.1
WSO2 Application Server 5.2.1

Setup WSO2 AS Cluster




This cluster consist of 3 WSO2 Application Server instances, as 3 worker nodes and 1 manager node, where 1 node work as both worker and manager. Nginx performs load balancing with this cluster by distributing incoming requests to the worker nodes via HTTP/S on port 80/443.

All admin requests can be sent to the manager node directly via HTTPs on port 9444 or through the Nginx via 443 port depending on how we configure the manager node.
Click here to see how to setup WSO2 Application Server cluster


Setup Nginx load balancer



* Install Nginx


$sudo apt-get install nginx


* Locate the http{} block of the /etc/nginx/nginx.conf file and add the following


# load balancing among the worker nodes - HTTP
upstream wso2.as.com {
            server as.wso2.com:9764;
          server as.wso2.com:9765;
          server as.wso2.com:9766;
}

server {
          listen 80;
          server_name as.wso2.com;
          location / {
                      proxy_pass http://wso2.as.com;
          }
}

# load balancing among the worker nodes - HTTPS
# To configure load balancing for HTTPS instead of HTTP, just use “https” as the protocol.
upstream ssl.wso2.as.com {
          server as.wso2.com:9444;
          server as.wso2.com:9445;
          server as.wso2.com:9446;
}

server {
          listen 443;
          server_name as.wso2.com;
          ssl on;
          ssl_certificate /etc/nginx/ssl/server.crt;
          ssl_certificate_key /etc/nginx/ssl/server.key;
          location / {
                      proxy_pass https://ssl.wso2.as.com;
          }
}

# access the management console via HTTPS
server {
          listen 443;
          server_name mgt.as.wso2.com;
          ssl on;
          ssl_certificate /etc/nginx/ssl/server.crt;
          ssl_certificate_key /etc/nginx/ssl/server.key;
          location /carbon {
              proxy_pass https://mgt.as.wso2.com:9444;
          }
}


* Mapping the host names to the IP
Update the “/etc/hosts” file


<IP-of-worker>    as.wso2.com
<IP-of-manager>    mgt.as.wso2.com


* Restart the Nginx


$sudo /etc/init.d/nginx restart

No comments: