Skip to content

Commit 91cd4c4

Browse files
telpelttelpelt
committed
Adding haproxy and profile for lnxocp05, lnxocp07 and lnxocp08
1 parent f8a81da commit 91cd4c4

File tree

6 files changed

+579
-0
lines changed

6 files changed

+579
-0
lines changed

‎libvirt/haproxy/haproxy_lnxocp05.cfg‎

Lines changed: 170 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,170 @@
1+
#---------------------------------------------------------------------
2+
# Configuration for CI environment.
3+
#---------------------------------------------------------------------
4+
5+
#---------------------------------------------------------------------
6+
# Global settings
7+
#---------------------------------------------------------------------
8+
global
9+
log 127.0.0.1:514 local2 info
10+
chroot /var/lib/haproxy
11+
pidfile /var/run/haproxy.pid
12+
maxconn 4000
13+
user haproxy
14+
group haproxy
15+
daemon
16+
17+
# turn on stats unix socket
18+
stats socket /var/lib/haproxy/stats
19+
20+
# utilize system-wide crypto-policies
21+
ssl-default-bind-ciphers PROFILE=SYSTEM
22+
ssl-default-server-ciphers PROFILE=SYSTEM
23+
24+
#---------------------------------------------------------------------
25+
# common defaults that all the 'listen' and 'backend' sections will
26+
# use if not designated in their block
27+
#---------------------------------------------------------------------
28+
defaults
29+
mode http
30+
log global
31+
option httplog
32+
option http-server-close
33+
34+
option redispatch
35+
retries 3
36+
timeout http-request 10s
37+
timeout queue 1m
38+
timeout connect 10s
39+
timeout client 1m
40+
timeout server 1m
41+
timeout http-keep-alive 10s
42+
timeout check 10s
43+
maxconn 3000
44+
45+
#---------------------------------------------------------------------
46+
# API frontend which proxys to the created master nodes
47+
#---------------------------------------------------------------------
48+
frontend api-all
49+
mode tcp
50+
option tcplog
51+
52+
bind *:6443
53+
54+
tcp-request inspect-delay 5s
55+
tcp-request content accept if { req_ssl_hello_type 1 }
56+
57+
acl 00-api req_ssl_sni -m end .libvirt-s390x-4-0
58+
use_backend masters-00 if 00-api
59+
60+
acl 00-api-ci req_ssl_sni -m end .libvirt-s390x-4-0.ci
61+
use_backend masters-00 if 00-api-ci
62+
63+
acl 01-api req_ssl_sni -m end .libvirt-s390x-4-1
64+
use_backend masters-01 if 01-api
65+
66+
acl 01-api-ci req_ssl_sni -m end .libvirt-s390x-4-1.ci
67+
use_backend masters-01 if 01-api-ci
68+
69+
#---------------------------------------------------------------------
70+
# HTTP frontend which proxys to the created worker nodes
71+
#---------------------------------------------------------------------
72+
frontend http-all
73+
bind *:80
74+
75+
option forwardfor except 127.0.0.0/8
76+
77+
acl 00-http hdr(host) -m end .libvirt-s390x-4-0
78+
use_backend http-workers-00 if 00-http
79+
80+
acl 00-http-ci hdr(host) -m end .libvirt-s390x-4-0.ci
81+
use_backend http-workers-00 if 00-http-ci
82+
83+
acl 01-http hdr(host) -m end .libvirt-s390x-4-1
84+
use_backend http-workers-01 if 01-http
85+
86+
acl 01-http-ci hdr(host) -m end .libvirt-s390x-4-1.ci
87+
use_backend http-workers-01 if 01-http-ci
88+
89+
#---------------------------------------------------------------------
90+
# HTTPS frontend which proxys to the created worker nodes
91+
#---------------------------------------------------------------------
92+
frontend https-all
93+
mode tcp
94+
option tcplog
95+
96+
bind *:443
97+
98+
tcp-request inspect-delay 5s
99+
tcp-request content accept if { req_ssl_hello_type 1 }
100+
101+
acl 00-https req_ssl_sni -m end .libvirt-s390x-4-0
102+
use_backend https-workers-00 if 00-https
103+
104+
acl 00-https-ci req_ssl_sni -m end .libvirt-s390x-4-0.ci
105+
use_backend https-workers-00 if 00-https-ci
106+
107+
acl 01-https req_ssl_sni -m end .libvirt-s390x-4-1
108+
use_backend https-workers-01 if 01-https
109+
110+
acl 01-https-ci req_ssl_sni -m end .libvirt-s390x-4-1.ci
111+
use_backend https-workers-01 if 01-https-ci
112+
113+
#---------------------------------------------------------------------
114+
# Master node backends for serving API traffic
115+
#---------------------------------------------------------------------
116+
backend masters-00
117+
mode tcp
118+
balance roundrobin
119+
server bootstrap 192.168.126.10:6443 check
120+
server master1 192.168.126.11:6443 check
121+
server master2 192.168.126.12:6443 check
122+
server master3 192.168.126.13:6443 check
123+
backend masters-01
124+
mode tcp
125+
balance roundrobin
126+
server bootstrap 192.168.1.10:6443 check
127+
server master1 192.168.1.11:6443 check
128+
server master2 192.168.1.12:6443 check
129+
server master3 192.168.1.13:6443 check
130+
131+
#---------------------------------------------------------------------
132+
# Worker node backends for serving HTTP service endpoints
133+
#---------------------------------------------------------------------
134+
backend http-workers-00
135+
option forwardfor except 127.0.0.0/8
136+
balance roundrobin
137+
server master1 192.168.126.11:80 check
138+
server master2 192.168.126.12:80 check
139+
server master3 192.168.126.13:80 check
140+
server worker1 192.168.126.51:80 check
141+
server worker2 192.168.126.52:80 check
142+
backend http-workers-01
143+
option forwardfor except 127.0.0.0/8
144+
balance roundrobin
145+
server master1 192.168.1.11:80 check
146+
server master2 192.168.1.12:80 check
147+
server master3 192.168.1.13:80 check
148+
server worker1 192.168.1.51:80 check
149+
server worker2 192.168.1.52:80 check
150+
151+
#---------------------------------------------------------------------
152+
# Worker node backends for serving HTTPS service endpoints
153+
#---------------------------------------------------------------------
154+
backend https-workers-00
155+
mode tcp
156+
balance roundrobin
157+
server master1 192.168.126.11:443 check
158+
server master2 192.168.126.12:443 check
159+
server master3 192.168.126.13:443 check
160+
server worker1 192.168.126.51:443 check
161+
server worker2 192.168.126.52:443 check
162+
backend https-workers-01
163+
mode tcp
164+
balance roundrobin
165+
server master1 192.168.1.11:443 check
166+
server master2 192.168.1.12:443 check
167+
server master3 192.168.1.13:443 check
168+
server worker1 192.168.1.51:443 check
169+
server worker2 192.168.1.52:443 check
170+

‎libvirt/haproxy/haproxy_lnxocp07.cfg‎

Lines changed: 170 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,170 @@
1+
#---------------------------------------------------------------------
2+
# Configuration for CI environment.
3+
#---------------------------------------------------------------------
4+
5+
#---------------------------------------------------------------------
6+
# Global settings
7+
#---------------------------------------------------------------------
8+
global
9+
log 127.0.0.1:514 local2 info
10+
chroot /var/lib/haproxy
11+
pidfile /var/run/haproxy.pid
12+
maxconn 4000
13+
user haproxy
14+
group haproxy
15+
daemon
16+
17+
# turn on stats unix socket
18+
stats socket /var/lib/haproxy/stats
19+
20+
# utilize system-wide crypto-policies
21+
ssl-default-bind-ciphers PROFILE=SYSTEM
22+
ssl-default-server-ciphers PROFILE=SYSTEM
23+
24+
#---------------------------------------------------------------------
25+
# common defaults that all the 'listen' and 'backend' sections will
26+
# use if not designated in their block
27+
#---------------------------------------------------------------------
28+
defaults
29+
mode http
30+
log global
31+
option httplog
32+
option http-server-close
33+
34+
option redispatch
35+
retries 3
36+
timeout http-request 10s
37+
timeout queue 1m
38+
timeout connect 10s
39+
timeout client 1m
40+
timeout server 1m
41+
timeout http-keep-alive 10s
42+
timeout check 10s
43+
maxconn 3000
44+
45+
#---------------------------------------------------------------------
46+
# API frontend which proxys to the created master nodes
47+
#---------------------------------------------------------------------
48+
frontend api-all
49+
mode tcp
50+
option tcplog
51+
52+
bind *:6443
53+
54+
tcp-request inspect-delay 5s
55+
tcp-request content accept if { req_ssl_hello_type 1 }
56+
57+
acl 00-api req_ssl_sni -m end .libvirt-s390x-5-0
58+
use_backend masters-00 if 00-api
59+
60+
acl 00-api-ci req_ssl_sni -m end .libvirt-s390x-5-0.ci
61+
use_backend masters-00 if 00-api-ci
62+
63+
acl 01-api req_ssl_sni -m end .libvirt-s390x-5-1
64+
use_backend masters-01 if 01-api
65+
66+
acl 01-api-ci req_ssl_sni -m end .libvirt-s390x-5-1.ci
67+
use_backend masters-01 if 01-api-ci
68+
69+
#---------------------------------------------------------------------
70+
# HTTP frontend which proxys to the created worker nodes
71+
#---------------------------------------------------------------------
72+
frontend http-all
73+
bind *:80
74+
75+
option forwardfor except 127.0.0.0/8
76+
77+
acl 00-http hdr(host) -m end .libvirt-s390x-5-0
78+
use_backend http-workers-00 if 00-http
79+
80+
acl 00-http-ci hdr(host) -m end .libvirt-s390x-5-0.ci
81+
use_backend http-workers-00 if 00-http-ci
82+
83+
acl 01-http hdr(host) -m end .libvirt-s390x-5-1
84+
use_backend http-workers-01 if 01-http
85+
86+
acl 01-http-ci hdr(host) -m end .libvirt-s390x-5-1.ci
87+
use_backend http-workers-01 if 01-http-ci
88+
89+
#---------------------------------------------------------------------
90+
# HTTPS frontend which proxys to the created worker nodes
91+
#---------------------------------------------------------------------
92+
frontend https-all
93+
mode tcp
94+
option tcplog
95+
96+
bind *:443
97+
98+
tcp-request inspect-delay 5s
99+
tcp-request content accept if { req_ssl_hello_type 1 }
100+
101+
acl 00-https req_ssl_sni -m end .libvirt-s390x-5-0
102+
use_backend https-workers-00 if 00-https
103+
104+
acl 00-https-ci req_ssl_sni -m end .libvirt-s390x-5-0.ci
105+
use_backend https-workers-00 if 00-https-ci
106+
107+
acl 01-https req_ssl_sni -m end .libvirt-s390x-5-1
108+
use_backend https-workers-01 if 01-https
109+
110+
acl 01-https-ci req_ssl_sni -m end .libvirt-s390x-5-1.ci
111+
use_backend https-workers-01 if 01-https-ci
112+
113+
#---------------------------------------------------------------------
114+
# Master node backends for serving API traffic
115+
#---------------------------------------------------------------------
116+
backend masters-00
117+
mode tcp
118+
balance roundrobin
119+
server bootstrap 192.168.126.10:6443 check
120+
server master1 192.168.126.11:6443 check
121+
server master2 192.168.126.12:6443 check
122+
server master3 192.168.126.13:6443 check
123+
backend masters-01
124+
mode tcp
125+
balance roundrobin
126+
server bootstrap 192.168.1.10:6443 check
127+
server master1 192.168.1.11:6443 check
128+
server master2 192.168.1.12:6443 check
129+
server master3 192.168.1.13:6443 check
130+
131+
#---------------------------------------------------------------------
132+
# Worker node backends for serving HTTP service endpoints
133+
#---------------------------------------------------------------------
134+
backend http-workers-00
135+
option forwardfor except 127.0.0.0/8
136+
balance roundrobin
137+
server master1 192.168.126.11:80 check
138+
server master2 192.168.126.12:80 check
139+
server master3 192.168.126.13:80 check
140+
server worker1 192.168.126.51:80 check
141+
server worker2 192.168.126.52:80 check
142+
backend http-workers-01
143+
option forwardfor except 127.0.0.0/8
144+
balance roundrobin
145+
server master1 192.168.1.11:80 check
146+
server master2 192.168.1.12:80 check
147+
server master3 192.168.1.13:80 check
148+
server worker1 192.168.1.51:80 check
149+
server worker2 192.168.1.52:80 check
150+
151+
#---------------------------------------------------------------------
152+
# Worker node backends for serving HTTPS service endpoints
153+
#---------------------------------------------------------------------
154+
backend https-workers-00
155+
mode tcp
156+
balance roundrobin
157+
server master1 192.168.126.11:443 check
158+
server master2 192.168.126.12:443 check
159+
server master3 192.168.126.13:443 check
160+
server worker1 192.168.126.51:443 check
161+
server worker2 192.168.126.52:443 check
162+
backend https-workers-01
163+
mode tcp
164+
balance roundrobin
165+
server master1 192.168.1.11:443 check
166+
server master2 192.168.1.12:443 check
167+
server master3 192.168.1.13:443 check
168+
server worker1 192.168.1.51:443 check
169+
server worker2 192.168.1.52:443 check
170+

0 commit comments

Comments
 (0)