Skip to content

Commit 035493f

Browse files
werledwerled
committed
HAproxy on lnxocp10 proxies for two clusters
1 parent 19d1d7f commit 035493f

File tree

1 file changed

+105
-32
lines changed

1 file changed

+105
-32
lines changed

‎libvirt/haproxy/haproxy_lnxocp10.cfg‎

Lines changed: 105 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@ defaults
2929
mode tcp
3030
log global
3131
option dontlognull
32-
option forwardfor except 127.0.0.0/8
3332
option redispatch
3433
retries 3
3534
timeout http-request 10s
@@ -42,34 +41,108 @@ defaults
4241
maxconn 3000
4342

4443
#---------------------------------------------------------------------
45-
# ocpzx.yellowzone
46-
#---------------------------------------------------------------------
47-
listen api-server-6443
48-
bind 172.16.41.20:6443
49-
server bootstrap 172.16.41.22:6443 check inter 1s backup
50-
server master0 172.16.41.23:6443 check inter 1s
51-
server master1 172.16.41.24:6443 check inter 1s
52-
server master2 172.16.41.25:6443 check inter 1s
53-
54-
listen machine-config-server-22623
55-
bind 172.16.41.20:22623
56-
server bootstrap 172.16.41.22:22623 check inter 1s backup
57-
server master0 172.16.41.23:22623 check inter 1s
58-
server master1 172.16.41.24:22623 check inter 1s
59-
server master2 172.16.41.25:22623 check inter 1s
60-
61-
listen ingress-router-443
62-
bind 172.16.41.20:443
63-
balance source
64-
server worker0 172.16.41.26:443 check inter 1s
65-
server worker1 172.16.41.27:443 check inter 1s
66-
server worker2 172.16.41.28:443 check inter 1s
67-
server worker3 172.16.41.29:443 check inter 1s
68-
69-
listen ingress-router-80
70-
bind 172.16.41.20:80
71-
balance source
72-
server worker0 172.16.41.26:80 check inter 1s
73-
server worker1 172.16.41.27:80 check inter 1s
74-
server worker2 172.16.41.28:80 check inter 1s
75-
server worker3 172.16.41.29:80 check inter 1s
44+
# API frontend which proxys to the created master nodes
45+
#---------------------------------------------------------------------
46+
frontend api-all
47+
mode tcp
48+
option tcplog
49+
bind *:6443
50+
51+
tcp-request inspect-delay 5s
52+
tcp-request content accept if { req_ssl_hello_type 1 }
53+
54+
acl 00-api req_ssl_sni -m end .libvirt-s390x-amd64-0-0.ci
55+
use_backend masters-00 if 00-api
56+
57+
acl 01-api req_ssl_sni -m end .libvirt-amd64-s390x-0-1.ci
58+
use_backend masters-01 if 01-api
59+
60+
#---------------------------------------------------------------------
61+
# HTTP frontend which proxys to the created worker nodes
62+
#---------------------------------------------------------------------
63+
frontend http-all
64+
mode http
65+
bind *:80
66+
option forwardfor except 127.0.0.0/8
67+
68+
acl 00-http hdr(host) -m end .libvirt-s390x-amd64-0-0.ci
69+
use_backend http-workers-00 if 00-http
70+
71+
acl 01-http hdr(host) -m end .libvirt-amd64-s390x-0-1.ci
72+
use_backend http-workers-01 if 01-http
73+
74+
#---------------------------------------------------------------------
75+
# HTTPS frontend which proxys to the created worker nodes
76+
#---------------------------------------------------------------------
77+
frontend https-all
78+
mode tcp
79+
option tcplog
80+
bind *:443
81+
82+
tcp-request inspect-delay 5s
83+
tcp-request content accept if { req_ssl_hello_type 1 }
84+
85+
acl 00-https req_ssl_sni -m end .libvirt-s390x-amd64-0-0.ci
86+
use_backend https-workers-00 if 00-https
87+
88+
acl 01-https req_ssl_sni -m end .libvirt-amd64-s390x-0-1.ci
89+
use_backend https-workers-01 if 01-https
90+
91+
#---------------------------------------------------------------------
92+
# Master node backends for serving API traffic
93+
#---------------------------------------------------------------------
94+
backend masters-00
95+
mode tcp
96+
balance source
97+
server bootstrap 172.16.41.22:6443 check
98+
server master0 172.16.41.23:6443 check
99+
server master1 172.16.41.24:6443 check
100+
server master2 172.16.41.25:6443 check
101+
102+
backend masters-01
103+
mode tcp
104+
balance source
105+
server bootstrap 172.16.41.30:6443 check
106+
server master0 172.16.41.31:6443 check
107+
server master1 172.16.41.32:6443 check
108+
server master2 172.16.41.33:6443 check
109+
110+
#---------------------------------------------------------------------
111+
# Worker node backends for serving HTTP service endpoints
112+
#---------------------------------------------------------------------
113+
backend http-workers-00
114+
mode http
115+
option forwardfor except 127.0.0.0/8
116+
balance source
117+
server worker0 172.16.41.26:80 check
118+
server worker1 172.16.41.27:80 check
119+
server worker2 172.16.41.28:80 check
120+
server worker3 172.16.41.29:80 check
121+
122+
backend http-workers-01
123+
mode http
124+
option forwardfor except 127.0.0.0/8
125+
balance source
126+
server worker0 172.16.41.34:80 check
127+
server worker1 172.16.41.35:80 check
128+
server worker2 172.16.41.36:80 check
129+
server worker3 172.16.41.37:80 check
130+
131+
#---------------------------------------------------------------------
132+
# Worker node backends for serving HTTP service endpoints
133+
#---------------------------------------------------------------------
134+
backend https-workers-00
135+
mode tcp
136+
balance source
137+
server worker0 172.16.41.26:443 check
138+
server worker1 172.16.41.27:443 check
139+
server worker2 172.16.41.28:443 check
140+
server worker3 172.16.41.29:443 check
141+
142+
backend https-workers-01
143+
mode tcp
144+
balance source
145+
server worker0 172.16.41.34:443 check
146+
server worker1 172.16.41.35:443 check
147+
server worker2 172.16.41.36:443 check
148+
server worker3 172.16.41.37:443 check

0 commit comments

Comments
 (0)