summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-04-23 17:53:56 +0200
committerGitHub <noreply@github.com>2024-04-23 17:53:56 +0200
commit50dd92275a20aa940984730535a53952f6bc7b54 (patch)
treeb5bbf4acb5a91436290de43e13756e95f2906547 /data
parent48461a9693568b1ca7ca4422130504cceed4ea28 (diff)
parentff1636643bcd8b11b8538f998e7ba1188e9d3964 (diff)
downloadvyos-1x-50dd92275a20aa940984730535a53952f6bc7b54.tar.gz
vyos-1x-50dd92275a20aa940984730535a53952f6bc7b54.zip
Merge pull request #3352 from vyos/mergify/bp/sagitta/pr-3342
T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy config (backport #3342)
Diffstat (limited to 'data')
-rw-r--r--data/templates/load-balancing/haproxy.cfg.j212
1 files changed, 12 insertions, 0 deletions
diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2
index dd93afba5..e8622ba7b 100644
--- a/data/templates/load-balancing/haproxy.cfg.j2
+++ b/data/templates/load-balancing/haproxy.cfg.j2
@@ -69,6 +69,18 @@ frontend {{ front }}
{% endif %}
{% if front_config.mode is vyos_defined %}
mode {{ front_config.mode }}
+{% if front_config.tcp_request.inspect_delay is vyos_defined %}
+ tcp-request inspect-delay {{ front_config.tcp_request.inspect_delay }}
+{% endif %}
+{# add tcp-request related directive if ssl is configed #}
+{% if front_config.mode is vyos_defined('tcp') and front_config.rule is vyos_defined %}
+{% for rule, rule_config in front_config.rule.items() %}
+{% if rule_config.ssl is vyos_defined %}
+ tcp-request content accept if { req_ssl_hello_type 1 }
+{% break %}
+{% endif %}
+{% endfor %}
+{% endif %}
{% endif %}
{% if front_config.rule is vyos_defined %}
{% for rule, rule_config in front_config.rule.items() %}