global log stdout format raw local0 info maxconn 2000 tune.ssl.default-dh-param 2048 defaults log global timeout connect 3s timeout client 10s timeout server 10m {% if data["customerrors"] %} errorfile 400 /etc/haproxy/errors-custom/400.http errorfile 403 /etc/haproxy/errors-custom/403.http errorfile 408 /etc/haproxy/errors-custom/408.http errorfile 500 /etc/haproxy/errors-custom/500.http errorfile 502 /etc/haproxy/errors-custom/502.http errorfile 503 /etc/haproxy/errors-custom/503.http errorfile 504 /etc/haproxy/errors-custom/504.http {% endif %} {% if "stats" in data %} frontend stats bind *:{{ data["stats"]["port"] | default(1936) }} mode http stats enable stats hide-version stats realm Haproxy\ Statistics stats uri / stats auth {{ data["stats"]["username"] }}:{{ data["stats"]["password"] }} # acl is_proxystats hdr(host) -i some.host.com # default_backend srv_stats # use_backend srv_stats if is_proxystats default_backend srv_stats backend srv_stats mode http server Local 127.0.0.1:{{ data["stats"]["port"] | default(1936) }} {% endif %} {% for o in data["easymapping"] -%} {% set mode = o["mode"] or "http" %} {% set salt = loop.index %} frontend {{ mode }}_in_{{ o["port"] }}_{{ salt }} {% include "bind.j2" %} {% if mode == "http" %} {% include "frontend-mode-http.j2" %} {% else %} {% include "frontend-mode-tcp.j2" %} {% endif %} {% for k in o["hosts"] -%} {% set host = k.replace(".", "_") + "_{0}_{1}".format(o["port"], salt) %} backend srv_{{ host }} balance roundrobin mode {{ mode }} {% if mode == "http" %} option forwardfor http-request set-header X-Forwarded-Port %[dst_port] http-request add-header X-Forwarded-Proto https if { ssl_fc } {% elif mode == "tcp" %} option tcp-check tcp-check connect{{ " ssl" if o["health-check"] == "ssl" }} {% endif %} server srv {{ o["hosts"][k] }} check weight 1{{ " verify none" if o["health-check"] == "ssl" }} {% endfor %} {% endfor %}