diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-04-23 17:53:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-23 17:53:56 +0200 |
| commit | 50dd92275a20aa940984730535a53952f6bc7b54 (patch) | |
| tree | b5bbf4acb5a91436290de43e13756e95f2906547 /data/templates | |
| parent | 48461a9693568b1ca7ca4422130504cceed4ea28 (diff) | |
| parent | ff1636643bcd8b11b8538f998e7ba1188e9d3964 (diff) | |
| download | vyos-1x-50dd92275a20aa940984730535a53952f6bc7b54.tar.gz vyos-1x-50dd92275a20aa940984730535a53952f6bc7b54.zip | |
Merge pull request #3352 from vyos/mergify/bp/sagitta/pr-3342
T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy config (backport #3342)
Diffstat (limited to 'data/templates')
| -rw-r--r-- | data/templates/load-balancing/haproxy.cfg.j2 | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2 index dd93afba5..e8622ba7b 100644 --- a/data/templates/load-balancing/haproxy.cfg.j2 +++ b/data/templates/load-balancing/haproxy.cfg.j2 @@ -69,6 +69,18 @@ frontend {{ front }} {% endif %} {% if front_config.mode is vyos_defined %} mode {{ front_config.mode }} +{% if front_config.tcp_request.inspect_delay is vyos_defined %} + tcp-request inspect-delay {{ front_config.tcp_request.inspect_delay }} +{% endif %} +{# add tcp-request related directive if ssl is configed #} +{% if front_config.mode is vyos_defined('tcp') and front_config.rule is vyos_defined %} +{% for rule, rule_config in front_config.rule.items() %} +{% if rule_config.ssl is vyos_defined %} + tcp-request content accept if { req_ssl_hello_type 1 } +{% break %} +{% endif %} +{% endfor %} +{% endif %} {% endif %} {% if front_config.rule is vyos_defined %} {% for rule, rule_config in front_config.rule.items() %} |