Skip to content

haproxy job from cf/230

The HAProxy server can be used to terminate SSL in front of the Routers. Each HAProxy instance should point to multiple Routers.

Github source: 3de108d9 or master branch

Properties

app_ssh

port

External port for SSH access to application instances

Default
2222

cc

allow_app_ssh_access

Allow users to change the value of the app-level allow_ssh attribute

Default
true

ha_proxy

buffer_size_bytes

Buffer size to use for requests, any requests larger than this (large cookies or query strings) will result in a gateway error

Default
16384

disable_http

Disable port 80 traffic

Default
false

dontlognull

Whether to disable logging of requests with no traffic (usually load-balancer TCP checks)

Default
false

enable_stats_socket

Whether to enable a socket that can be used to query errors and status

Default
false

log_to_file

Whether to send logs to a file instead of the default syslog

Default
false

ssl_ciphers

List of SSL Ciphers that are passed to HAProxy

Default
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-CBC-SHA256:ECDHE-RSA-AES256-CBC-SHA384:ECDHE-RSA-AES128-CBC-SHA:ECDHE-RSA-AES256-CBC-SHA:AES128-SHA256:AES128-SHA

ssl_pem

SSL certificate (PEM file)

request_timeout_in_seconds

Server and client timeouts in seconds

Default
900

router

port

Listening port for Router

Default
80

servers

z1

Array of the router IPs acting as the first group of HTTP/TCP backends

Default
[]
z2

Array of the router IPs acting as the second group of HTTP/TCP backends

Default
[]

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/haproxy/ directory (learn more).

  • bin/consul_template_ctl (from consul_template_ctl)
  • bin/haproxy_ctl (from haproxy_ctl)
  • config/cert.pem (from cert.pem.erb)
  • config/haproxy.conf (from haproxy.conf.erb)
  • config/haproxy.ctmpl (from haproxy.ctmpl.erb)
  • config/haproxy_syslog.conf (from haproxy_syslog.conf.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.