Graylog Cluster and Load Balancing

[gsmith]

Hello && Welcome

There are a few ways to configure load balancers. First is just knowing what it does can be half the battle.

A simple explaination of Load balancers.

The purpose of the load balancer (in this case an HTTP load balancer) is to distribute all incoming requests to our backend web servers. The load balancer hides all our backend servers to the public, and from the outside it looks like a single server doing all the work.

Some firewalls can do this also.
Example:
https://docs.fortinet.com/document/fortigate/6.0.0/Handbook/154107/basic-load-balancing-configuration-example

The link below is just added info.

Graylog cluster setup HA

@syntax to start, I wouldn’t put nginx/apache on every single one of your graylog nodes. That’s a disaster waiting to happen IMHO. You’re better off creating an active/passive LB setup with the load balancers not colocated with Graylog. There are a number of tutorials out there about achieving an active/passive configuration with both of these web servers, so I’d recommend researching those and seeing which one makes the most sense for you to use.

It would be a bad idea to have apache on the same nodes as Graylog/MongoDb. Personally, they should be on separate servers or another device.

As for

@Ginkgo_Balboa

Works fine ! But from what I understand, load balancing is supposed to be transparent, but if I go to http://graylog.my.domain, I can see which node I am redirected to in the search bar…

This might be an added configuration to apache config to hide those nodes it connects to, but I’m not 100% sure. I personally do not see mine. Not sure what search bar are you refering to. Could you explain or maybe a screen shot?