Add 'Ansible_DEMO/haproxy.cfg_EXAMPLE'

2022-04-24 14:51:02 +02:00 · 2022-04-24 14:51:02 +02:00 · 6cb6e6c09d
commit 6cb6e6c09d
parent b32d6017a1
1 changed files with 104 additions and 0 deletions
--- a/Ansible_DEMO/haproxy.cfg_EXAMPLE
+++ b/Ansible_DEMO/haproxy.cfg_EXAMPLE
@ -0,0 +1,104 @@
+global
+	log /dev/log   local0
+	log /dev/log   local1 notice
+#	chroot /var/lib/haproxy
+	stats timeout 30s
+	user haproxy
+	group haproxy
+	daemon
+	external-check
+	insecure-fork-wanted
+
+defaults
+	log global
+	option httplog
+	option dontlognull
+	option dontlog-normal
+	timeout client 30s
+	timeout server 30s
+	timeout connect 5s
+#	errorfile 400 /etc/haproxy/errors/400.http
+#	errorfile 403 /etc/haproxy/errors/403.http
+#	errorfile 408 /etc/haproxy/errors/408.http
+#	errorfile 500 /etc/haproxy/errors/500.http
+#	errorfile 502 /etc/haproxy/errors/502.http
+#	errorfile 503 /etc/haproxy/errors/503.http
+#	errorfile 504 /etc/haproxy/errors/504.http
+
+resolvers mydns
+	nameserver dns1 1.1.1.1:53
+	nameserver dns2 8.8.8.8:53
+	resolve_retries 3
+	timeout resolve 1s
+	timeout retry   1s
+	hold other      10s
+	hold refused    10s
+	hold nx         10s
+	hold timeout    10s
+	hold valid      10s
+	hold obsolete   10s
+
+
+##########################################################################################
+#FRONTENDS:
+##########################################################################################
+
+############## HTTP:
+
+frontend ft_http
+	mode http
+	bind *:80       
+	option httplog
+	option forwardfor
+
+	#ACL:
+        acl geobaldemo-YourDomain_http hdr_dom(host) -i geobaldemo.YourDomain.net
+
+	#BACKENDS:
+	use_backend bk_geobaldemo-YourDomain_http if geobaldemo-YourDomain_http
+
+
+############ HTTPS_SNI:
+
+frontend ft_https_sni_global
+	bind *:443
+	mode tcp
+
+	acl geobaldemo-YourDomain_https req.ssl_sni -i geobaldemo.YourDomain.net
+
+	use_backend bk_geobaldemo-YourDomain_https if geobaldemo-YourDomain_https
+
+	tcp-request inspect-delay 2s
+	tcp-request content reject if !geobaldemo-YourDomain_https
+
+
+##########################################################################################
+#BACKENDS:
+##########################################################################################
+
+backend bk_redirect_https
+	mode http
+	redirect scheme https if !{ ssl_fc }
+
+backend bk_geobaldemo-YourDomain_https
+	mode tcp
+	server srv-geobaldemo-YourDomain_https 127.0.0.1:10443 check sni req.ssl_sni 
+
+backend bk_geobaldemo-YourDomain_http
+	mode http
+	server srv-geobaldemo-YourDomain_http 127.0.0.1:8000 check
+
+listen stats
+	bind *:9000
+	mode http
+	stats enable
+	stats uri /stats
+	stats realm HAProxy\ Statistics
+	stats refresh 20s
+	stats show-node
+	stats show-legends
+	stats show-desc HAPROXY
+	stats auth admin:Passw0rd
+	stats admin if TRUE
+
+#Hello!