summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-04-23 09:29:28 +0200
committerGitHub <noreply@github.com>2024-04-23 09:29:28 +0200
commitf3c36e2d1cb7f853854c97d4d156e8604c4d4309 (patch)
tree3039ebccec433e408d3f03d05223af0152f0de19 /data
parenteab0adcbf30734045cf04c140d30efae1abdf194 (diff)
parent984c386d11ead8371b7ac381e6c0921473e557ed (diff)
downloadvyos-1x-f3c36e2d1cb7f853854c97d4d156e8604c4d4309.tar.gz
vyos-1x-f3c36e2d1cb7f853854c97d4d156e8604c4d4309.zip
Merge pull request #3342 from fsdrw08/current
T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy config
Diffstat (limited to 'data')
-rw-r--r--data/templates/load-balancing/haproxy.cfg.j212
1 files changed, 12 insertions, 0 deletions
diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2
index dd93afba5..e8622ba7b 100644
--- a/data/templates/load-balancing/haproxy.cfg.j2
+++ b/data/templates/load-balancing/haproxy.cfg.j2
@@ -69,6 +69,18 @@ frontend {{ front }}
{% endif %}
{% if front_config.mode is vyos_defined %}
mode {{ front_config.mode }}
+{% if front_config.tcp_request.inspect_delay is vyos_defined %}
+ tcp-request inspect-delay {{ front_config.tcp_request.inspect_delay }}
+{% endif %}
+{# add tcp-request related directive if ssl is configed #}
+{% if front_config.mode is vyos_defined('tcp') and front_config.rule is vyos_defined %}
+{% for rule, rule_config in front_config.rule.items() %}
+{% if rule_config.ssl is vyos_defined %}
+ tcp-request content accept if { req_ssl_hello_type 1 }
+{% break %}
+{% endif %}
+{% endfor %}
+{% endif %}
{% endif %}
{% if front_config.rule is vyos_defined %}
{% for rule, rule_config in front_config.rule.items() %}