Michel Nederlof | 14da709 | 2018-03-12 22:46:36 +0100 | [diff] [blame] | 1 | haproxy: |
| 2 | proxy: |
| 3 | enabled: true |
| 4 | mode: tcp |
| 5 | logging: syslog |
| 6 | max_connections: 1024 |
| 7 | listen: |
| 8 | nova_metadata_api: |
| 9 | binds: |
| 10 | - address: 127.0.0.1 |
| 11 | port: 8775 |
| 12 | format: end |
| 13 | options: |
| 14 | - httpchk |
| 15 | - httpclose |
| 16 | - httplog |
| 17 | rate_limit: |
| 18 | duration: 900s |
| 19 | enabled: true |
| 20 | requests: 125 |
| 21 | track: content |
| 22 | servers: |
| 23 | - host: 127.0.0.1 |
| 24 | name: ctl01 |
| 25 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 26 | port: 8775 |
| 27 | - host: 127.0.0.1 |
| 28 | name: ctl02 |
| 29 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 30 | port: 8775 |
| 31 | - host: 127.0.0.1 |
| 32 | name: ctl03 |
| 33 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 34 | port: 8775 |
| 35 | type: http |
Oleksandr Bryndzii | 57aa7b4 | 2018-12-11 11:48:23 +0000 | [diff] [blame] | 36 | nova_novnc: |
| 37 | binds: |
| 38 | - address: 127.0.0.1 |
| 39 | port: 8776 |
| 40 | format: listen |
| 41 | options: |
| 42 | - httpchk |
| 43 | - httpclose |
| 44 | - httplog |
| 45 | rate_limit: |
| 46 | duration: 5s |
| 47 | enabled: true |
| 48 | requests: 60 |
| 49 | track: connection |
| 50 | servers: |
| 51 | - host: 127.0.0.1 |
| 52 | name: ctl01 |
| 53 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 54 | port: 8776 |
| 55 | - host: 127.0.0.1 |
| 56 | name: ctl02 |
| 57 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 58 | port: 8776 |
| 59 | - host: 127.0.0.1 |
| 60 | name: ctl03 |
| 61 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 62 | port: 8776 |
| 63 | type: http |
Oleksandr Bryndzii | ff29026 | 2019-01-18 13:06:35 +0000 | [diff] [blame^] | 64 | nova_metadata_api2: |
| 65 | binds: |
| 66 | - address: 127.0.0.1 |
| 67 | port: 8777 |
| 68 | format: listen |
| 69 | options: |
| 70 | - httplog |
| 71 | rate_limit: |
| 72 | enabled: true |
| 73 | type: string |
| 74 | len: 36 |
| 75 | size: 12m |
| 76 | duration: 10 |
| 77 | acls: |
| 78 | 101: |
| 79 | enabled: true |
| 80 | value: acl too_many_requests_3 sc0_gpc0_rate() gt 3 |
| 81 | 102: |
| 82 | enabled: true |
| 83 | value: acl mark_seen sc0_inc_gpc0 gt 0 |
| 84 | 110: |
| 85 | enabled: true |
| 86 | value: acl x_instance_id hdr(x-instance-id) -i 4777e8e0-16e8-46ce-a3fe-0a1ad9b3ebdc |
| 87 | 111: |
| 88 | enabled: true |
| 89 | value: acl x_instance_id hdr(x-instance-id) -i ca2395dd-f73f-4d43-8fe7-f7078a0920af |
| 90 | 201: |
| 91 | enabled: true |
| 92 | value: acl too_many_requests_6 sc0_gpc0_rate() gt 6 |
| 93 | 202: |
| 94 | enabled: true |
| 95 | value: acl mark_seen sc0_inc_gpc0 gt 0 |
| 96 | 210: |
| 97 | enabled: true |
| 98 | value: acl x_tenant_id hdr(x-tenant-id) -i 2b76cc56a437404bb8cb6cb20dbb0ea4 |
| 99 | tcp_request: |
| 100 | 001: |
| 101 | enabled: true |
| 102 | value: tcp-request inspect-delay 5s |
| 103 | 101: |
| 104 | enabled: true |
| 105 | value: tcp-request content track-sc0 hdr(x-instance-id) if ! too_many_requests_3 |
| 106 | 201: |
| 107 | enabled: true |
| 108 | value: tcp-request content track-sc0 hdr(x-tenant-id) if ! too_many_requests_6 |
| 109 | use_backend: |
| 110 | 101: |
| 111 | enabled: true |
| 112 | value: use_backend nova_metadata_api2-rate_limit if mark_seen too_many_requests_3 x_instance_id |
| 113 | 201: |
| 114 | enabled: true |
| 115 | value: use_backend nova_metadata_api2-rate_limit if mark_seen too_many_requests_6 x_tenant_id |
| 116 | servers: |
| 117 | - host: 127.0.0.1 |
| 118 | name: ctl01 |
| 119 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 120 | port: 8777 |
| 121 | - host: 127.0.0.1 |
| 122 | name: ctl02 |
| 123 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 124 | port: 8777 |
| 125 | - host: 127.0.0.1 |
| 126 | name: ctl03 |
| 127 | params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3 |
| 128 | port: 8777 |
| 129 | type: http |
| 130 | |
Michel Nederlof | 14da709 | 2018-03-12 22:46:36 +0100 | [diff] [blame] | 131 | # For haproxy/meta/sensu.yml |
| 132 | linux: |
| 133 | network: |
| 134 | fqdn: linux.ci.local |