d69df1515f
Mysql-proxy turns out too unreliable and unstable for use in production. The packaged version on Ubuntu suffers from a critical DOS by using telnet. This patch switches from mysql-proxy to simpleproxy, which is just a tcp proxy to forward incoming port 3306 connections to the subunit2sql db. Change-Id: Iffea64aea46cc34969bbaa970e5d91bd0cc05232
41 lines
1.1 KiB
Puppet
41 lines
1.1 KiB
Puppet
# Copyright 2014 Hewlett-Packard Development Company, L.P.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# == Class: mysql_proxy::server
|
|
#
|
|
class mysql_proxy::server (
|
|
$db_host,
|
|
$db_port='3306',
|
|
) {
|
|
|
|
file { '/etc/mysql-proxy/mysql-proxy.conf':
|
|
ensure => absent,
|
|
}
|
|
|
|
file { "/etc/init.d/simpleproxy-mysql":
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0555',
|
|
content => template('mysql_proxy/simpleproxy-mysql.init.erb'),
|
|
require => Package['simpleproxy']
|
|
}
|
|
|
|
service{ 'simpleproxy-mysql':
|
|
enable => true,
|
|
hasrestart => true,
|
|
require => File["/etc/init.d/simpleproxy-mysql"],
|
|
}
|
|
}
|