haproxy: T8931: Add timeout.tunnel in default and backend sections

5 files changed, 28 insertions, 0 deletions

diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2
index 79fb5e369..c6729fda4 100644
--- a/data/templates/load-balancing/haproxy.cfg.j2
+++ b/data/templates/load-balancing/haproxy.cfg.j2
@@ -42,6 +42,7 @@ defaults
     timeout connect {{ timeout.connect }}s
     timeout client {{ timeout.client }}s
     timeout server {{ timeout.server }}s
+    timeout tunnel {{ timeout.tunnel }}s
     errorfile 400 /etc/haproxy/errors/400.http
     errorfile 403 /etc/haproxy/errors/403.http
     errorfile 408 /etc/haproxy/errors/408.http
@@ -285,5 +286,8 @@ backend {{ back }}
 {%         if back_config.timeout.server is vyos_defined %}
     timeout server {{ back_config.timeout.server }}s
 {%         endif %}
+{%         if back_config.timeout.tunnel is vyos_defined %}
+    timeout tunnel {{ back_config.timeout.tunnel }}s
+{%         endif %}
 {%     endfor %}
 {% endif %}
diff --git a/interface-definitions/include/haproxy/timeout-tunnel.xml.i b/interface-definitions/include/haproxy/timeout-tunnel.xml.i
new file mode 100644
index 000000000..ea6be1505
--- /dev/null
+++ b/interface-definitions/include/haproxy/timeout-tunnel.xml.i
@@ -0,0 +1,14 @@
+<!-- include start from haproxy/timeout-tunnel.xml.i -->
+<leafNode name="tunnel">
+  <properties>
+    <help>Set the maximum inactivity time on the client and server side for tunnels</help>
+    <valueHelp>
+      <format>u32:1-86400</format>
+      <description>Tunnel timeout in seconds</description>
+    </valueHelp>
+    <constraint>
+      <validator name="numeric" argument="--range 1-86400"/>
+    </constraint>
+  </properties>
+</leafNode>
+<!-- include end -->
diff --git a/interface-definitions/include/haproxy/timeout.xml.i b/interface-definitions/include/haproxy/timeout.xml.i
index a3a5a8a3e..a84e32001 100644
--- a/interface-definitions/include/haproxy/timeout.xml.i
+++ b/interface-definitions/include/haproxy/timeout.xml.i
@@ -7,6 +7,7 @@
     #include <include/haproxy/timeout-check.xml.i>
     #include <include/haproxy/timeout-connect.xml.i>
     #include <include/haproxy/timeout-server.xml.i>
+    #include <include/haproxy/timeout-tunnel.xml.i>
   </children>
 </node>
 <!-- include end -->
diff --git a/interface-definitions/load-balancing_haproxy.xml.in b/interface-definitions/load-balancing_haproxy.xml.in
index f3baf86ca..e9d42ef90 100644
--- a/interface-definitions/load-balancing_haproxy.xml.in
+++ b/interface-definitions/load-balancing_haproxy.xml.in
@@ -399,6 +399,10 @@
               <leafNode name="server">
                 <defaultValue>50</defaultValue>
               </leafNode>
+              #include <include/haproxy/timeout-tunnel.xml.i>
+              <leafNode name="tunnel">
+                <defaultValue>300</defaultValue>
+              </leafNode>
             </children>
           </node>
           #include <include/interface/vrf.xml.i>
diff --git a/smoketest/scripts/cli/test_load-balancing_haproxy.py b/smoketest/scripts/cli/test_load-balancing_haproxy.py
index 9cb031276..7eeee4fde 100755
--- a/smoketest/scripts/cli/test_load-balancing_haproxy.py
+++ b/smoketest/scripts/cli/test_load-balancing_haproxy.py
@@ -619,10 +619,12 @@ class TestLoadBalancingReverseProxy(VyOSUnitTestSHIM.TestCase):
         t_default_client = '50'
         t_default_connect = '10'
         t_default_server ='50'
+        t_default_tunnel ='300'
         t_check = '4'
         t_client = '300'
         t_connect = '12'
         t_server ='120'
+        t_tunnel ='600'
         t_front_client = '600'
 
         self.base_config()
@@ -633,6 +635,7 @@ class TestLoadBalancingReverseProxy(VyOSUnitTestSHIM.TestCase):
             f'timeout connect {t_default_connect}s',
             f'timeout client {t_default_client}s',
             f'timeout server {t_default_server}s',
+            f'timeout tunnel {t_default_tunnel}s'
         )
         # Check default timeout options
         config = read_file(HAPROXY_CONF)
@@ -644,6 +647,7 @@ class TestLoadBalancingReverseProxy(VyOSUnitTestSHIM.TestCase):
         self.cli_set(base_path + ['timeout', 'client', t_client])
         self.cli_set(base_path + ['timeout', 'connect', t_connect])
         self.cli_set(base_path + ['timeout', 'server', t_server])
+        self.cli_set(base_path + ['timeout', 'tunnel', t_tunnel])
         self.cli_set(base_path + ['service', haproxy_service_name, 'timeout', 'client', t_front_client])
 
         self.cli_commit()
@@ -654,6 +658,7 @@ class TestLoadBalancingReverseProxy(VyOSUnitTestSHIM.TestCase):
             f'timeout connect {t_connect}s',
             f'timeout client {t_client}s',
             f'timeout server {t_server}s',
+            f'timeout tunnel {t_tunnel}s',
             f'timeout client {t_front_client}s',
         )