| Michel Nederlof | 14da709 | 2018-03-12 22:46:36 +0100 | [diff] [blame] | 1 | haproxy: |
| 2 | proxy: |
| 3 | enabled: true |
| Michel Nederlof | 14da709 | 2018-03-12 22:46:36 +0100 | [diff] [blame] | 4 | listen: |
| 5 | nova_metadata_api: |
| 6 | binds: |
| 7 | - address: 127.0.0.1 |
| 8 | port: 8775 |
| 9 | format: end |
| 10 | options: |
| 11 | - httpchk |
| 12 | - httpclose |
| 13 | - httplog |
| 14 | rate_limit: |
| 15 | duration: 900s |
| 16 | enabled: true |
| 17 | requests: 125 |
| 18 | track: content |
| 19 | servers: |
| 20 | - host: 127.0.0.1 |
| 21 | name: ctl01 |
| 22 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 23 | port: 8775 |
| 24 | - host: 127.0.0.1 |
| 25 | name: ctl02 |
| 26 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 27 | port: 8775 |
| 28 | - host: 127.0.0.1 |
| 29 | name: ctl03 |
| 30 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 31 | port: 8775 |
| 32 | type: http |
| Oleksandr Bryndzii | 57aa7b4 | 2018-12-11 11:48:23 +0000 | [diff] [blame] | 33 | nova_novnc: |
| 34 | binds: |
| 35 | - address: 127.0.0.1 |
| 36 | port: 8776 |
| 37 | format: listen |
| 38 | options: |
| 39 | - httpchk |
| 40 | - httpclose |
| 41 | - httplog |
| 42 | rate_limit: |
| 43 | duration: 5s |
| 44 | enabled: true |
| 45 | requests: 60 |
| 46 | track: connection |
| 47 | servers: |
| 48 | - host: 127.0.0.1 |
| 49 | name: ctl01 |
| 50 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 51 | port: 8776 |
| 52 | - host: 127.0.0.1 |
| 53 | name: ctl02 |
| 54 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 55 | port: 8776 |
| 56 | - host: 127.0.0.1 |
| 57 | name: ctl03 |
| 58 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 59 | port: 8776 |
| 60 | type: http |
| Oleksandr Bryndzii | 96da46a | 2019-01-18 13:06:35 +0000 | [diff] [blame] | 61 | nova_metadata_api2: |
| 62 | binds: |
| 63 | - address: 127.0.0.1 |
| 64 | port: 8777 |
| 65 | format: listen |
| 66 | options: |
| 67 | - httplog |
| 68 | rate_limit: |
| 69 | enabled: true |
| 70 | type: string |
| 71 | len: 36 |
| 72 | size: 12m |
| 73 | duration: 10 |
| 74 | acls: |
| 75 | 101: |
| 76 | enabled: true |
| 77 | value: acl too_many_requests_3 sc0_gpc0_rate() gt 3 |
| 78 | 102: |
| 79 | enabled: true |
| 80 | value: acl mark_seen sc0_inc_gpc0 gt 0 |
| 81 | 110: |
| 82 | enabled: true |
| 83 | value: acl x_instance_id hdr(x-instance-id) -i 4777e8e0-16e8-46ce-a3fe-0a1ad9b3ebdc |
| 84 | 111: |
| 85 | enabled: true |
| 86 | value: acl x_instance_id hdr(x-instance-id) -i ca2395dd-f73f-4d43-8fe7-f7078a0920af |
| 87 | 201: |
| 88 | enabled: true |
| 89 | value: acl too_many_requests_6 sc0_gpc0_rate() gt 6 |
| 90 | 202: |
| 91 | enabled: true |
| 92 | value: acl mark_seen sc0_inc_gpc0 gt 0 |
| 93 | 210: |
| 94 | enabled: true |
| 95 | value: acl x_tenant_id hdr(x-tenant-id) -i 2b76cc56a437404bb8cb6cb20dbb0ea4 |
| 96 | tcp_request: |
| 97 | 001: |
| 98 | enabled: true |
| 99 | value: tcp-request inspect-delay 5s |
| 100 | 101: |
| 101 | enabled: true |
| 102 | value: tcp-request content track-sc0 hdr(x-instance-id) if ! too_many_requests_3 |
| 103 | 201: |
| 104 | enabled: true |
| 105 | value: tcp-request content track-sc0 hdr(x-tenant-id) if ! too_many_requests_6 |
| 106 | use_backend: |
| 107 | 101: |
| 108 | enabled: true |
| 109 | value: use_backend nova_metadata_api2-rate_limit if mark_seen too_many_requests_3 x_instance_id |
| 110 | 201: |
| 111 | enabled: true |
| 112 | value: use_backend nova_metadata_api2-rate_limit if mark_seen too_many_requests_6 x_tenant_id |
| 113 | servers: |
| 114 | - host: 127.0.0.1 |
| 115 | name: ctl01 |
| 116 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 117 | port: 8777 |
| 118 | - host: 127.0.0.1 |
| 119 | name: ctl02 |
| 120 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 121 | port: 8777 |
| 122 | - host: 127.0.0.1 |
| 123 | name: ctl03 |
| 124 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 125 | port: 8777 |
| 126 | type: http |
| 127 | |
| Michel Nederlof | 14da709 | 2018-03-12 22:46:36 +0100 | [diff] [blame] | 128 | # For haproxy/meta/sensu.yml |
| 129 | linux: |
| 130 | network: |
| 131 | fqdn: linux.ci.local |