06e76706c7
A new variable "haproxy_stick_table" is added which allows a custom stick-table to be supplied that is used as the default stick-table for all haproxy back-ends. In addition, the variable service.haproxy_stick_table can be defined for each service to allow a unique stick-table to be supplied for a particular service. The old default stick-table definition is removed as there was no use case defined for it in this role before. An example is added to defaults/main.yml to show how the custom stick-table can be used to rate-limit requests that generate 4xx responses which commonly occur during vulnerability scanning or credential stuffing attacks. There are many other uses for stick-tables, consult the HAProxy documentation for details. Change-Id: I50daba08c10f071157d6450ea2fa97df448f99ec |
||
---|---|---|
.. | ||
.placeholder | ||
cert_per_ip-e473f853dbe4047d.yaml | ||
certbot_ha-83b56aed3f360dba.yaml | ||
custom-stick-tables-1c790fe223bb0d5d.yaml | ||
disable-sslv3-303acdcc6b593180.yaml | ||
haproxy_allowlist-95aa9b911baeacd9.yaml | ||
haproxy_frontend_raw-0811d5d445a66b41.yaml | ||
haproxy_letsencrypt-4a13c7911a20b993.yaml | ||
haproxy_tuning_params_released-45eb40104747561a.yaml | ||
haproxy-backend-arguments-3b1dca299c7a8296.yaml | ||
haproxy-bind-override-9562bab32b964de2.yaml | ||
haproxy-frontend-only-haproxy_raw-d55ad3baa8d006f3.yaml | ||
haproxy-hatop-4d6525a52f93a69e.yaml | ||
haproxy-selinux-all-ports-4094eed48f2bfbca.yaml | ||
implement_tuning_params-e627c774c0d0c9d2.yaml | ||
letsencrypt-ssl-certification-129a80cb88d8e6ff.yaml | ||
non_inventory_hosts-c0fa4c185a01e78b.yaml | ||
package-list-name-changes-a26d94a44c24de2f.yaml | ||
refresh-interval-configuration-option-884d64aa259ecc3c.yaml | ||
remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | ||
stick-table-9ef4bd94a4a000b3.yaml | ||
tls12-only-a22d5f3f8198617f.yaml | ||
tls_variables-91160d4e38085de4.yaml |