How to install and configure zimbra proxy HA

-
When you create multi server, and you want to deploy zimbra proxy in DMZ. To use zimbra proxy HA, then you use keepalived use VIP. Many other solution.






Lab environment

How to install and configure zimbra proxy HA

Server Mail Proxy 01

 IP: 192.168.10.10
VIP: 192.168.30.30
DNS Name: proxy01.huuphan.com
zimbra_server_hostname: mail.huuphan.com

Server Mail Proxy 02

 IP: 192.168.20.20
VIP: 192.168.30.30
DNS Name: proxy02.huuphan.com
zimbra_server_hostname: mail.huuphan.com


Step 1: To instal keepalived


#yum update -y
#yum install -y keepalived

Step 2: To configure keepalived 


To refer install and configure keepalived 


Zimbra proxy01 Master Server


global_defs {
  notification_email {
    admin@huuphan.com
  }
  notification_email_from vrrp_proxy01@huuphan.com
    smtp_server mbx.huuphan.com # mbx.huuphan.com mailstore
    smtp_connect_timeout 30
}
vrrp_script chk_nginx_service {
    script "killall -0 nginx"
    interval 3
}
vrrp_instance VI_1 {
    interface eth0
    state MASTER
    virtual_router_id 51
    priority 101
    advert_int 1
    #No Failback
    nopreempt
    #send an alert email
    smtp_alert
    vrrp_unicast_bind 192.168.10.10
    vrrp_unicast_peer 192.168.20.20
    virtual_ipaddress {
           192.168.30.30 dev eth0 label Zimbra_VIP
    }
    authentication {
           auth_type PASS
           auth_pass MY_SECURE_PASSWORD
    }
    track_script {
            chk_nginx_service
    }
}

Zimbra proxy02 Backup Server


global_defs {
  notification_email {
    admin@huuphan.com
  }
  notification_email_from vrrp_proxy02@huuphan.com
    smtp_server mbx.huuphan.com # mbx.huuphan.com mailstore
    smtp_connect_timeout 30
}
vrrp_script chk_nginx_service {
    script "killall -0 nginx"
    interval 3
}
vrrp_instance VI_1 {
    interface eth0
    state BACKUP
    priority 100
    virtual_router_id 51
    advert_int 1
    #No Failback
    nopreempt
    #send an alert email
    smtp_alert
    vrrp_unicast_bind 192.168.20.20
    vrrp_unicast_peer 192.168.10.10
    virtual_ipaddress {
           192.168.30.30
    }
    authentication {
           auth_type PASS
           auth_pass MY_SECURE_PASSWORD
    }
    track_script {
            chk_nginx_service
    }
}

Step 3: To enable service keepalived at system startup

#chkconfig keepalived on
#service keepalived start

Step 4: Testing & Validation zimbra proxy HA

Kill service nginx from zimbra proxy01 master server.
#killall nginx
To check /var/log/messages
#tailf /var/log/messages

Comments

Post a Comment

Popular posts from this blog

zimbra some services are not running [Solve problem]

-
Introduction How to solved zimbra some services are not running. That after, to installed zimbra mail server. The display a some admin console status red in environment multiple server ( zimbra ldap, zimbra mailbox, zimbra mta etc.). Link to below you maybe likes: How to install and configure zimbra multi server.   How to restrict to user sending mail on zimbra 8.6. How to Restrict Sending to Distribution list in zimbra mail. How to change last login time for all accounts in zimbra ldap. How to zimbra reject authenticated sender login mismatch. Error zimbra some services are not running as bellow Step by step guide the solve problem zimbra some services are not running To restart and enable cron service the permanently. service crond restart chkconfig crond on Opening rsyslog.conf file and uncomment the following. vim /etc/rsyslog.conf Uncomment these two lines $modload imupd $UDPServerRun514   To restart and enable rsyslog service the permanently. servic...
Read more

Bash script list all IP addresses connected to Server with Country Information

-
Introduction This script is designed to list all IP addresses connected to your server, retrieve geographical information for each IP using ipinfo.io , and display the results in a clean format. This guide will walk you through the script, explaining each part in detail, and ensuring you understand how to implement and use it effectively. What is Bash? Bash (Bourne Again Shell) is a Unix shell and command language written by Brian Fox for the GNU Project as a free software replacement for the Bourne shell. It has since become the default login shell for most Linux distributions. Bash can execute commands, read and execute commands from a file, and provide constructs for condition testing, looping, and functions. Prerequisites A Linux -based server with administrative privileges. Internet connection for accessing ipinfo.io . Basic knowledge of Bash scripting. List all IP addresses connected to Server us Bash Script Running to bash script list all IP addresses connected to Server ./stu...
Read more

Zimbra Client host rejected Access denied fixed

-
Introduction While using Zimbra , you might encounter the "Client host rejected: Access denied" error, which can disrupt your workflow. This is a common issue that can be resolved easily if you understand the causes and the solutions. This article provides a detailed guide on how to fix this error on Zimbra, helping you quickly resume your work smoothly. Zimbra client host rejected Access denied error log Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: NOQUEUE: reject: CONNECT from unknown[192.168.1.113]: 554 5.7.1 <unknown[192.168.1.113]>: Client host rejected: Access denied; proto=SMTP Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: lost connection after CONNECT from unknown[192.168.1.113] Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: disconnect from unknown[192.168.1.113] Allow the network " 192.168.1.0/24 " of client host for zimbraMtaMyNetworks attribute [zimbra@mail ~]$ zmprov ms `zmhostname` zimbraMtaMyNetworks "127.0.0.0/8 192.1...
Read more