2021-04-27 00:26:18 +02:00
|
|
|
global
|
|
|
|
maxconn 32768
|
|
|
|
user haproxy
|
|
|
|
group haproxy
|
|
|
|
daemon
|
|
|
|
tune.bufsize 32768
|
|
|
|
tune.ssl.default-dh-param 2048
|
|
|
|
ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
|
|
|
|
ssl-default-bind-options prefer-client-ciphers no-tls-tickets
|
|
|
|
ssl-default-bind-options ssl-min-ver TLSv1.2
|
|
|
|
ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
|
|
|
|
ssl-default-server-options no-tls-tickets
|
|
|
|
|
|
|
|
defaults
|
|
|
|
log global
|
|
|
|
mode http
|
|
|
|
option log-health-checks
|
|
|
|
option log-separate-errors
|
|
|
|
option dontlog-normal
|
|
|
|
option dontlognull
|
|
|
|
option httplog
|
|
|
|
option socket-stats
|
|
|
|
retries 3
|
|
|
|
option redispatch
|
|
|
|
maxconn 10000
|
|
|
|
timeout connect 5s
|
|
|
|
timeout client 50s
|
|
|
|
timeout server 450s
|
|
|
|
timeout tunnel 3600s
|
|
|
|
timeout http-keep-alive 1s
|
|
|
|
timeout http-request 15s
|
|
|
|
timeout queue 30s
|
|
|
|
timeout tarpit 60s
|
|
|
|
default-server inter 3s rise 2 fall 3
|
|
|
|
|
|
|
|
listen stats
|
|
|
|
bind 0.0.0.0:9090
|
|
|
|
stats enable
|
|
|
|
stats uri /
|
|
|
|
stats refresh 5s
|
|
|
|
|
2021-04-27 11:49:06 +02:00
|
|
|
frontend birb
|
2021-04-27 00:26:18 +02:00
|
|
|
bind 0.0.0.0:80
|
|
|
|
mode http
|
2021-04-27 11:49:06 +02:00
|
|
|
use_backend birb
|
2021-04-27 00:26:18 +02:00
|
|
|
|
2021-04-27 11:49:06 +02:00
|
|
|
backend birb
|
2021-04-27 00:26:18 +02:00
|
|
|
balance leastconn
|
|
|
|
mode http
|
|
|
|
http-request set-header Host "birb.k8s.kmlabz.com"
|
|
|
|
compression algo gzip
|
2021-04-27 11:49:06 +02:00
|
|
|
server cloud lb-1.kmlabz.com:443 check ssl verify none
|
|
|
|
|
|
|
|
frontend ursim
|
|
|
|
bind 0.0.0.0:81
|
|
|
|
mode http
|
|
|
|
use_backend ursim
|
|
|
|
|
|
|
|
backend ursim
|
|
|
|
balance leastconn
|
|
|
|
mode http
|
|
|
|
http-request set-header Host "ursim.k8s.kmlabz.com"
|
|
|
|
compression algo gzip
|
|
|
|
server cloud lb-1.kmlabz.com:443 check ssl verify none
|
2021-04-27 00:26:18 +02:00
|
|
|
|
|
|
|
listen mqtt
|
|
|
|
bind *:1883
|
|
|
|
mode tcp
|
|
|
|
option clitcpka
|
|
|
|
timeout client 3h
|
|
|
|
timeout server 3h
|
|
|
|
option tcplog
|
|
|
|
balance leastconn
|
2021-04-27 11:49:06 +02:00
|
|
|
server worker1 lb-1.kmlabz.com:8883 check ssl verify none
|