confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

acl template works

Browse Source
This commit is contained in:
Arne Teuke
2018-12-30 17:12:36 +01:00
parent ae0fbb70ba
commit dacd2936e0
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@@ -1,6 +1,6 @@
|Repo Name| version | Build Status| |Repo Name| version | Build Status|
|---|---|---|---| |---|---|---|---|
|`cd_haproxy`| 1.0.1.0 | [![Build Status](https://pipelines.confdroid.com/buildStatus/icon?job=cd_haproxy)](https://pipelines.confdroid.com/job/cd_haproxy/)| |`cd_haproxy`| 1.0.2.0 | [![Build Status](https://pipelines.confdroid.com/buildStatus/icon?job=cd_haproxy)](https://pipelines.confdroid.com/job/cd_haproxy/)|
### Synopsis ### Synopsis
`HA Proxy` is a very powerful and popular open source load balanacer to balance incoming requests between multiple instances of web-, application- or database servers etc. `HA Proxy` is a very powerful and popular open source load balanacer to balance incoming requests between multiple instances of web-, application- or database servers etc.
@@ -91,12 +91,15 @@ In order to create proxy instances, you will need an external class, which addre
``` ```
cd_haproxy::server::proxy { 'testing': cd_haproxy::server::proxy { 'testing':
frontend_name => 'test01-frontend', frontend_name => 'test01-frontend',
acl_rule => 'test01-acl', frontend_mode => 'http',
`acl_rule` => ['too_fast fe_sess_rate ge 10',
'network_allowed src 0.0.0.0/0'],
backend_name => 'test01-backend', backend_name => 'test01-backend',
} }
``` ```
This allows the puppet module to create the sections in the configuration file as required. The haproxy service will be restarted after the changes in the configuration file are made. This allows the puppet module to create the sections in the configuration file as required. The haproxy service will be restarted after the changes in the configuration file are made.
Multiple ACLs need to be added as array, and will create one line each.
### SELINUX ### SELINUX
All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.

3
manifests/server/proxy_test.pp
View File

@@ -27,7 +27,8 @@ class cd_haproxy::server::proxy_test (
cd_haproxy::server::proxy { 'testing': cd_haproxy::server::proxy { 'testing':
frontend_name => 'test01-frontend', frontend_name => 'test01-frontend',
frontend_mode => 'http', frontend_mode => 'http',
acl_rule => ['too_fast fe_sess_rate ge 10','network_allowed src 0.0.0.0/0'], acl_rule => ['too_fast fe_sess_rate ge 10',
'network_allowed src 0.0.0.0/0'],
backend_name => 'test01-backend', backend_name => 'test01-backend',
} }
} }