Load Balancing PHP-FPM with HAProxy and FastCGI

blog20200219-01.sh

$ sudo apt update
$ sudo apt install php-fpm

blog20200219-02.sh

$ php --version
PHP 7.2.24-0ubuntu0.18.04.1 (cli) (built: Oct 28 2019 12:07:07) (NTS)
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies
    with Zend OPcache v7.2.24-0ubuntu0.18.04.1, Copyright (c) 1999-2018, by Zend Technologies

blog20200219-03.sh

$ sudo systemctl status php7.2-fpm.service
php7.2-fpm.service - The PHP 7.2 FastCGI Process Manager
   Loaded: loaded (/lib/systemd/system/php7.2-fpm.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2020-01-07 15:38:28 UTC; 49min ago

blog20200219-04.sh

$ sudo mkdir -p /var/www/myapp

blog20200219-05.php

<?php phpinfo(); ?>

blog20200219-06.sh

$ cd pool.d
$ sudo cp www.conf myapp.conf

blog20200219-07.conf

; Start a new pool named 'www'.
; the variable $pool can be used in any directive and will be replaced by the
; pool name ('www' here)
[myapp]

blog20200219-08.conf

; The address on which to accept FastCGI requests.
listen = /run/php/myapp.sock

blog20200219-09.conf

listen = 127.0.0.1:9000

blog20200219-10.sh

$ sudo systemctl restart php7.2-fpm

blog20200219-11.cfg

global
    log /dev/log    local0
    user haproxy
    group www-data

defaults
    log global
    mode    http
    option  httplog
    option  dontlognull
    timeout connect 5s
    timeout client  50s
    timeout server  50s

frontend myproxy
    bind :80
    default_backend phpservers

backend phpservers
    use-fcgi-app php-fpm
    server server1 /run/php/myapp.sock proto fcgi

fcgi-app php-fpm
    log-stderr global
    docroot /var/www/myapp
    index index.php
    path-info ^(/.+\.php)(/.*)?$

blog20200219-12.cfg

backend phpservers
    use-fcgi-app php-fpm
    server server1 /run/php/myapp.sock proto fcgi

blog20200219-13.cfg

server server1 127.0.0.1:9000 proto fcgi

blog20200219-14.cfg

fcgi-app php-fpm
    log-stderr global
    docroot /var/www/myapp
    index index.php
    path-info ^(/.+\.php)(/.*)?$

blog20200219-15.conf

; Chroot to this directory at the start. This value must be defined as an
; absolute path. When this value is not set, chroot is not used.
chroot = /var/www/myapp

blog20200219-16.cfg

fcgi-app php-fpm
    log-stderr global
    docroot /
    index index.php
    path-info ^(/.+\.php)(/.*)?$

blog20200219-17.cfg

http-request deny if { path_sub -i %0a %0d }

blog20200219-18.conf

SecRule REQUEST_URI "@rx %0(a|d)" "id:1,phase:1,t:lowercase,deny"