From ff1636643bcd8b11b8538f998e7ba1188e9d3964 Mon Sep 17 00:00:00 2001 From: Windom WU Date: Tue, 23 Apr 2024 14:39:02 +0800 Subject: T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy config (cherry picked from commit 984c386d11ead8371b7ac381e6c0921473e557ed) --- data/templates/load-balancing/haproxy.cfg.j2 | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'data') diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2 index dd93afba5..e8622ba7b 100644 --- a/data/templates/load-balancing/haproxy.cfg.j2 +++ b/data/templates/load-balancing/haproxy.cfg.j2 @@ -69,6 +69,18 @@ frontend {{ front }} {% endif %} {% if front_config.mode is vyos_defined %} mode {{ front_config.mode }} +{% if front_config.tcp_request.inspect_delay is vyos_defined %} + tcp-request inspect-delay {{ front_config.tcp_request.inspect_delay }} +{% endif %} +{# add tcp-request related directive if ssl is configed #} +{% if front_config.mode is vyos_defined('tcp') and front_config.rule is vyos_defined %} +{% for rule, rule_config in front_config.rule.items() %} +{% if rule_config.ssl is vyos_defined %} + tcp-request content accept if { req_ssl_hello_type 1 } +{% break %} +{% endif %} +{% endfor %} +{% endif %} {% endif %} {% if front_config.rule is vyos_defined %} {% for rule, rule_config in front_config.rule.items() %} -- cgit v1.2.3