Skip to content

Commit b66e6b0

Browse files
werledwerled
committed
HAproxy on lnxocp10 proxies for two clusters
1 parent 19d1d7f commit b66e6b0

File tree

1 file changed

+144
-32
lines changed

1 file changed

+144
-32
lines changed

‎libvirt/haproxy/haproxy_lnxocp10.cfg‎

Lines changed: 144 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@ defaults
2929
mode tcp
3030
log global
3131
option dontlognull
32-
option forwardfor except 127.0.0.0/8
3332
option redispatch
3433
retries 3
3534
timeout http-request 10s
@@ -42,34 +41,147 @@ defaults
4241
maxconn 3000
4342

4443
#---------------------------------------------------------------------
45-
# ocpzx.yellowzone
46-
#---------------------------------------------------------------------
47-
listen api-server-6443
48-
bind 172.16.41.20:6443
49-
server bootstrap 172.16.41.22:6443 check inter 1s backup
50-
server master0 172.16.41.23:6443 check inter 1s
51-
server master1 172.16.41.24:6443 check inter 1s
52-
server master2 172.16.41.25:6443 check inter 1s
53-
54-
listen machine-config-server-22623
55-
bind 172.16.41.20:22623
56-
server bootstrap 172.16.41.22:22623 check inter 1s backup
57-
server master0 172.16.41.23:22623 check inter 1s
58-
server master1 172.16.41.24:22623 check inter 1s
59-
server master2 172.16.41.25:22623 check inter 1s
60-
61-
listen ingress-router-443
62-
bind 172.16.41.20:443
63-
balance source
64-
server worker0 172.16.41.26:443 check inter 1s
65-
server worker1 172.16.41.27:443 check inter 1s
66-
server worker2 172.16.41.28:443 check inter 1s
67-
server worker3 172.16.41.29:443 check inter 1s
68-
69-
listen ingress-router-80
70-
bind 172.16.41.20:80
71-
balance source
72-
server worker0 172.16.41.26:80 check inter 1s
73-
server worker1 172.16.41.27:80 check inter 1s
74-
server worker2 172.16.41.28:80 check inter 1s
75-
server worker3 172.16.41.29:80 check inter 1s
44+
# API frontend which proxys to the created bootstrap and
45+
# master nodes
46+
#---------------------------------------------------------------------
47+
frontend api-all
48+
mode tcp
49+
option tcplog
50+
bind *:6443
51+
52+
tcp-request inspect-delay 5s
53+
tcp-request content accept if { req_ssl_hello_type 1 }
54+
55+
acl 00-api req_ssl_sni -m end .libvirt-s390x-amd64-0-0.ci
56+
use_backend masters-00 if 00-api
57+
58+
acl 01-api req_ssl_sni -m end .libvirt-amd64-s390x-0-1.ci
59+
use_backend masters-01 if 01-api
60+
61+
#---------------------------------------------------------------------
62+
# Machine config frontend which proxys to the created
63+
# bootstrap and master nodes
64+
#---------------------------------------------------------------------
65+
frontend machine-config
66+
mode tcp
67+
option tcplog
68+
bind *:22623
69+
70+
tcp-request inspect-delay 5s
71+
tcp-request content accept if { req_ssl_hello_type 1 }
72+
73+
acl 00-api req_ssl_sni -m end .libvirt-s390x-amd64-0-0.ci
74+
use_backend masters-22623-00 if 00-api
75+
76+
acl 01-api req_ssl_sni -m end .libvirt-amd64-s390x-0-1.ci
77+
use_backend masters-22623-01 if 01-api
78+
79+
#---------------------------------------------------------------------
80+
# HTTP frontend which proxys to the created worker nodes
81+
#---------------------------------------------------------------------
82+
frontend http-all
83+
mode http
84+
bind *:80
85+
option forwardfor except 127.0.0.0/8
86+
87+
acl 00-http hdr(host) -m end .libvirt-s390x-amd64-0-0.ci
88+
use_backend http-workers-00 if 00-http
89+
90+
acl 01-http hdr(host) -m end .libvirt-amd64-s390x-0-1.ci
91+
use_backend http-workers-01 if 01-http
92+
93+
#---------------------------------------------------------------------
94+
# HTTPS frontend which proxys to the created worker nodes
95+
#---------------------------------------------------------------------
96+
frontend https-all
97+
mode tcp
98+
option tcplog
99+
bind *:443
100+
101+
tcp-request inspect-delay 5s
102+
tcp-request content accept if { req_ssl_hello_type 1 }
103+
104+
acl 00-https req_ssl_sni -m end .libvirt-s390x-amd64-0-0.ci
105+
use_backend https-workers-00 if 00-https
106+
107+
acl 01-https req_ssl_sni -m end .libvirt-amd64-s390x-0-1.ci
108+
use_backend https-workers-01 if 01-https
109+
110+
#---------------------------------------------------------------------
111+
# Master node and bootstrap backends for serving API traffic
112+
#---------------------------------------------------------------------
113+
backend masters-00
114+
mode tcp
115+
balance source
116+
server bootstrap 172.16.41.22:6443 check
117+
server master0 172.16.41.23:6443 check
118+
server master1 172.16.41.24:6443 check
119+
server master2 172.16.41.25:6443 check
120+
121+
backend masters-01
122+
mode tcp
123+
balance source
124+
server bootstrap 172.16.41.30:6443 check
125+
server master0 172.16.41.31:6443 check
126+
server master1 172.16.41.32:6443 check
127+
server master2 172.16.41.33:6443 check
128+
129+
#---------------------------------------------------------------------
130+
# Master node and bootstrap backends for serving internal
131+
# API traffic (port 22623)
132+
#---------------------------------------------------------------------
133+
backend masters-22623-00
134+
mode tcp
135+
balance source
136+
server bootstrap 172.16.41.22:22623 check
137+
server master0 172.16.41.23:22623 check
138+
server master1 172.16.41.24:22623 check
139+
server master2 172.16.41.25:22623 check
140+
141+
backend masters-22623-01
142+
mode tcp
143+
balance source
144+
server bootstrap 172.16.41.30:22623 check
145+
server master0 172.16.41.31:22623 check
146+
server master1 172.16.41.32:22623 check
147+
server master2 172.16.41.33:22623 check
148+
149+
#---------------------------------------------------------------------
150+
# Worker node backends for serving HTTP service endpoints
151+
#---------------------------------------------------------------------
152+
backend http-workers-00
153+
mode http
154+
option forwardfor except 127.0.0.0/8
155+
balance source
156+
server worker0 172.16.41.26:80 check
157+
server worker1 172.16.41.27:80 check
158+
server worker2 172.16.41.28:80 check
159+
server worker3 172.16.41.29:80 check
160+
161+
backend http-workers-01
162+
mode http
163+
option forwardfor except 127.0.0.0/8
164+
balance source
165+
server worker0 172.16.41.34:80 check
166+
server worker1 172.16.41.35:80 check
167+
server worker2 172.16.41.36:80 check
168+
server worker3 172.16.41.37:80 check
169+
170+
#---------------------------------------------------------------------
171+
# Worker node backends for serving HTTPS service endpoints
172+
#---------------------------------------------------------------------
173+
backend https-workers-00
174+
mode tcp
175+
balance source
176+
server worker0 172.16.41.26:443 check
177+
server worker1 172.16.41.27:443 check
178+
server worker2 172.16.41.28:443 check
179+
server worker3 172.16.41.29:443 check
180+
181+
backend https-workers-01
182+
mode tcp
183+
balance source
184+
server worker0 172.16.41.34:443 check
185+
server worker1 172.16.41.35:443 check
186+
server worker2 172.16.41.36:443 check
187+
server worker3 172.16.41.37:443 check

0 commit comments

Comments
 (0)