https://raymii.org/s/tags/loadbalancer.xml RSS feed for tag loadbalancer on Raymii.org https://raymii.org/s/snippets/haproxy_restrict_specific_urls_to_specific_ip_addresses.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/haproxy_restrict_specific_urls_to_specific_ip_addresses.html This snippet shows you how to use haproxy to restrict certain URLs to certain IP addresses. For example, to make sure your admin interface can only be accessed from your company IP address. It also includes an example to prompt for a password if the visitor is from a different network. Sun, 04 Mar 2018 00:00:00 GMT Sun, 04 Mar 2018 00:00:00 GMT https://raymii.org/s/tutorials/Ansible_access_other_groups_group_vars.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/Ansible_access_other_groups_group_vars.html This guide shows you how to access group variables for a group the current host is not a member of. In Ansible you can access other host variables using `hostvars['hostname']` but not group variables. The way described here is workable, but do I consider it a dirty hack. So why did I need this? I have a setup where ssl is offloaded by haproxy servers, but the virtual hosts and ssl configuration are defined in Apache servers. The loadbalancers and appservers are two different hostgroups, the ssl settings are in the appserver group_vars, which the hosts in the loadbalancer group need to access. The best way to do this is change the haproxy playbooks and configuration and define the certificates there, but in this specific case that wasn't a workable solution. Editing two yaml files (one for the appservers and one for the loadbalancers) was not an option in this situation. Fri, 27 Jan 2017 00:00:00 GMT Fri, 27 Jan 2017 00:00:00 GMT https://raymii.org/s/tutorials/haproxy_intercept_all_cookies_and_set_secure_attribute.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/haproxy_intercept_all_cookies_and_set_secure_attribute.html This snippet shows you how to use haproxy to set the secure attribute on cookies. You might have a backend application which is not able to set the secure attribute on cookies or for which haproxy does the ssl offloading. This simple frontend rspirep sets the secure attribute for all cookies. Sat, 01 Feb 2014 00:00:00 GMT Sat, 01 Feb 2014 00:00:00 GMT https://raymii.org/s/tutorials/haproxy_client_side_ssl_certificates.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/haproxy_client_side_ssl_certificates.html This tutorial shows you how to configure haproxy and client side ssl certificates. It features a few comprehensive examples. Wed, 18 Dec 2013 00:00:00 GMT Wed, 18 Dec 2013 00:00:00 GMT https://raymii.org/s/snippets/haproxy_set_specific_ssl_ciphers.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/haproxy_set_specific_ssl_ciphers.html This snippet shows you how to set specific ciphers for haproxy when using an ssl frontend. Thu, 12 Dec 2013 00:00:00 GMT Thu, 12 Dec 2013 00:00:00 GMT https://raymii.org/s/snippets/haproxy_add_strict_transport_security_or_any_other_http_header.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/haproxy_add_strict_transport_security_or_any_other_http_header.html This snippet shows you how to add a header to a haproxy response, for example, the HSTS header (http strict transport security). Wed, 11 Dec 2013 00:00:00 GMT Wed, 11 Dec 2013 00:00:00 GMT https://raymii.org/s/snippets/haproxy_ssl_backends.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/haproxy_ssl_backends.html This snippet shows you how to configure an ssl backend on haproxy 1.5 or higher. Tue, 10 Dec 2013 00:00:00 GMT Tue, 10 Dec 2013 00:00:00 GMT https://raymii.org/s/snippets/haproxy_redirect_to_ssl_or_any_other_website.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/haproxy_redirect_to_ssl_or_any_other_website.html This snippet shows you how to use haproxy to redirect http traffic to https or any other website Mon, 09 Dec 2013 00:00:00 GMT Mon, 09 Dec 2013 00:00:00 GMT