openstack-ansible-haproxy_s.../templates
Jonathan Rosser 06e76706c7 Allow customisation of stick-tables for each service.
A new variable "haproxy_stick_table" is added which allows a custom
stick-table to be supplied that is used as the default stick-table
for all haproxy back-ends.

In addition, the variable service.haproxy_stick_table can be defined
for each service to allow a unique stick-table to be supplied for
a particular service.

The old default stick-table definition is removed as there was no
use case defined for it in this role before. An example is added
to defaults/main.yml to show how the custom stick-table can be used
to rate-limit requests that generate 4xx responses which commonly
occur during vulnerability scanning or credential stuffing attacks.
There are many other uses for stick-tables, consult the HAProxy
documentation for details.

Change-Id: I50daba08c10f071157d6450ea2fa97df448f99ec
2022-07-11 14:54:01 +00:00
..
haproxy.cfg.j2 Don't restrict haproxy tunable options 2022-06-20 08:27:40 +02:00
letsencrypt_pre_hook_certbot_distro.j2 Use a certbot pre-hook to ensure haproxy backend is up before renewal 2020-05-07 13:15:54 +00:00
letsencrypt_renew_certbot_auto.j2 Fix haproxy Let's Encrypt SSL path 2021-10-05 15:08:40 +01:00
letsencrypt_renew_certbot_distro.j2 Fix haproxy Let's Encrypt SSL path 2021-10-05 15:08:40 +01:00
service-redirect.j2 Add functionality to accept both HTTP and HTTPS during upgrade 2022-02-18 14:40:14 +00:00
service.j2 Allow customisation of stick-tables for each service. 2022-07-11 14:54:01 +00:00