Add 'Ansible_DEMO/haproxy.cfg_EXAMPLE'
This commit is contained in:
parent
b32d6017a1
commit
6cb6e6c09d
1 changed files with 104 additions and 0 deletions
104
Ansible_DEMO/haproxy.cfg_EXAMPLE
Normal file
104
Ansible_DEMO/haproxy.cfg_EXAMPLE
Normal file
|
@ -0,0 +1,104 @@
|
||||||
|
global
|
||||||
|
log /dev/log local0
|
||||||
|
log /dev/log local1 notice
|
||||||
|
# chroot /var/lib/haproxy
|
||||||
|
stats timeout 30s
|
||||||
|
user haproxy
|
||||||
|
group haproxy
|
||||||
|
daemon
|
||||||
|
external-check
|
||||||
|
insecure-fork-wanted
|
||||||
|
|
||||||
|
defaults
|
||||||
|
log global
|
||||||
|
option httplog
|
||||||
|
option dontlognull
|
||||||
|
option dontlog-normal
|
||||||
|
timeout client 30s
|
||||||
|
timeout server 30s
|
||||||
|
timeout connect 5s
|
||||||
|
# errorfile 400 /etc/haproxy/errors/400.http
|
||||||
|
# errorfile 403 /etc/haproxy/errors/403.http
|
||||||
|
# errorfile 408 /etc/haproxy/errors/408.http
|
||||||
|
# errorfile 500 /etc/haproxy/errors/500.http
|
||||||
|
# errorfile 502 /etc/haproxy/errors/502.http
|
||||||
|
# errorfile 503 /etc/haproxy/errors/503.http
|
||||||
|
# errorfile 504 /etc/haproxy/errors/504.http
|
||||||
|
|
||||||
|
resolvers mydns
|
||||||
|
nameserver dns1 1.1.1.1:53
|
||||||
|
nameserver dns2 8.8.8.8:53
|
||||||
|
resolve_retries 3
|
||||||
|
timeout resolve 1s
|
||||||
|
timeout retry 1s
|
||||||
|
hold other 10s
|
||||||
|
hold refused 10s
|
||||||
|
hold nx 10s
|
||||||
|
hold timeout 10s
|
||||||
|
hold valid 10s
|
||||||
|
hold obsolete 10s
|
||||||
|
|
||||||
|
|
||||||
|
##########################################################################################
|
||||||
|
#FRONTENDS:
|
||||||
|
##########################################################################################
|
||||||
|
|
||||||
|
############## HTTP:
|
||||||
|
|
||||||
|
frontend ft_http
|
||||||
|
mode http
|
||||||
|
bind *:80
|
||||||
|
option httplog
|
||||||
|
option forwardfor
|
||||||
|
|
||||||
|
#ACL:
|
||||||
|
acl geobaldemo-YourDomain_http hdr_dom(host) -i geobaldemo.YourDomain.net
|
||||||
|
|
||||||
|
#BACKENDS:
|
||||||
|
use_backend bk_geobaldemo-YourDomain_http if geobaldemo-YourDomain_http
|
||||||
|
|
||||||
|
|
||||||
|
############ HTTPS_SNI:
|
||||||
|
|
||||||
|
frontend ft_https_sni_global
|
||||||
|
bind *:443
|
||||||
|
mode tcp
|
||||||
|
|
||||||
|
acl geobaldemo-YourDomain_https req.ssl_sni -i geobaldemo.YourDomain.net
|
||||||
|
|
||||||
|
use_backend bk_geobaldemo-YourDomain_https if geobaldemo-YourDomain_https
|
||||||
|
|
||||||
|
tcp-request inspect-delay 2s
|
||||||
|
tcp-request content reject if !geobaldemo-YourDomain_https
|
||||||
|
|
||||||
|
|
||||||
|
##########################################################################################
|
||||||
|
#BACKENDS:
|
||||||
|
##########################################################################################
|
||||||
|
|
||||||
|
backend bk_redirect_https
|
||||||
|
mode http
|
||||||
|
redirect scheme https if !{ ssl_fc }
|
||||||
|
|
||||||
|
backend bk_geobaldemo-YourDomain_https
|
||||||
|
mode tcp
|
||||||
|
server srv-geobaldemo-YourDomain_https 127.0.0.1:10443 check sni req.ssl_sni
|
||||||
|
|
||||||
|
backend bk_geobaldemo-YourDomain_http
|
||||||
|
mode http
|
||||||
|
server srv-geobaldemo-YourDomain_http 127.0.0.1:8000 check
|
||||||
|
|
||||||
|
listen stats
|
||||||
|
bind *:9000
|
||||||
|
mode http
|
||||||
|
stats enable
|
||||||
|
stats uri /stats
|
||||||
|
stats realm HAProxy\ Statistics
|
||||||
|
stats refresh 20s
|
||||||
|
stats show-node
|
||||||
|
stats show-legends
|
||||||
|
stats show-desc HAPROXY
|
||||||
|
stats auth admin:Passw0rd
|
||||||
|
stats admin if TRUE
|
||||||
|
|
||||||
|
#Hello!
|
Loading…
Reference in a new issue