Nginx Load Balancer Extension

Nginx is a web server with a strong focus on high concurrency, performance and low memory usage.The WSO2 Private PaaS Nginx extension is used to integrate the Nginx load balancer with Private PaaS.

Follow the steps given below to proceed with the installation:

1. Navigate to the Nginx binary distribution, which is in the <PRIVATE_PAAS_SOURCE_HOME>/extensions/load-balancer/nginx-extension/target directory.
2. Extract the apache-stratos-nginx-extension-4.1.0.zip file to a desired location.

3. Open the nginx-extention.sh file, which is in the <apache-stratos-nginx-extension-4.1.0>/bin directory and update the following system properties:

   # Define nginx host private ip address:
   -Dnginx.private.ip=127.0.0.1
   
   # Define the nginx executable file path:
   -Dexecutable.file.path=<nginx-home>/nginx
   
   # Update the nginx.conf file patch
   -Dconf.file.path=/etc/nginx/nginx.conf
   
   #update the certificate for SSL configuration
   -Dnginx.cert.path=/etc/nginx/ssl/server.cert
   
   #update the server key for SSL configuration
   -Dnginx.key.path=/etc/nginx/ssl/server.key
   
   # Update the hostname length, if needed
   -Dnginx.server.names.hash.bucket.size=128
   
   # Enable/disable cep statistics publisher:
   -Dcep.stats.publisher.enabled=false
   
   # If cep statistics publisher is enabled define the following properties:
   -Dthrift.receiver.ip=127.0.0.1
   -Dthrift.receiver.port=7615
   -Dnetwork.partition.id=network-partition-1

   • The Nginx executable file path, which is given as <nginx-home>/nginx must be the Nginx home path.

   • Provide the SSL configurations in order to access the secured transport over Nginx.

     For more information on creating SSL Certificates, see below:

      Creating SSL Certificates

      Create SSL certificates for both the manager and worker nodes using the instructions given below:

     1. Create the Server Key.
        $sudo openssl genrsa -des3 -out server.key 1024
 
     2. Certificate Signing Request.
        $sudo openssl req -new -key server.key -out server.csr


     3. Remove the password.
        $sudo cp server.key server.key.org
$sudo openssl rsa -in server.key.org -out server.key
 
     4. Sign your SSL Certificate.
        $sudo openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

     While creating the keys enter the host name (as.wso2.com or mgt.as.wso2.com) as the common name.

4. Open the jndi.properties file, which is in the <apache-stratos-nginx-extension-4.1.0>/conf directory and update the message broker information as shown below:

   java.naming.provider.url=tcp://localhost:61616

5. Navigate to the <apache-stratos-nginx-extension-4.1.0>/bin directory and run the following command:

   ./nginx-extension.sh