WIP: Feature/caddy frontend haproxy (!830) · Merge Requests · nexedi / slapos

Skip to content

Projects
Groups
Snippets
Help

Loading...
Sign in / Register

slapos

Project overview
Repository
Labels
Merge Requests 106
- Merge Requests 106
CI / CD
Analytics
Snippets
- Snippets
Members
- Members

Collapse sidebar

Activity
Graph
Jobs
Commits

nexedi
slapos
Merge Requests
!830

Closed

Opened Oct 07, 2020 by Łukasz Nowak @luke1 of 12 tasks completed1/12 tasks

Report abuse

Report abuse

WIP: Feature/caddy frontend haproxy

Overview 3
Commits 3
Pipelines 54
Changes 13

generate configuration for frontend haproxy like in default-virtualhost.conf.in
implement logging per slave
reimplement [caddy-wrapper]
correctly terminate SSL with SNI in haproxy with ssl_fc_sni and crt-list
- use alpn to select HTTP/2 support per slave
- use ciphers to select ciphers per slave
- use snifilter to limit certificates for given slave
carefully implement path normalization
check for performance and scalabilility
implement apache compatible access_log, expose haproxy as frontend_log
reimplement # Access to server-status Caddy-style
reimplement * {{ not_found_file }}, by using local nginx and exposing the file
reimplement monitor-caddy-server-status-wrapper
provide proper fixes for !830 (comment 137260)
(maybe) merge frontend and backend haproxy into one process

- [ ] generate configuration for frontend haproxy like in `default-virtualhost.conf.in`
 - [ ] implement logging per slave
 - [x] reimplement `[caddy-wrapper]`
 - [ ] correctly [terminate](https://www.haproxy.com/blog/haproxy-ssl-termination/) `SSL` with `SNI` in haproxy with [ssl_fc_sni](https://cbonte.github.io/haproxy-dconv/2.0/configuration.html#7.3.4-ssl_fc_sni) and [crt-list](https://cbonte.github.io/haproxy-dconv/2.0/configuration.html#5.1-crt-list)
   - use [alpn](https://cbonte.github.io/haproxy-dconv/2.0/configuration.html#alpn%20%28Bind%20options%29) to select HTTP/2 support per slave
   - use [ciphers](https://cbonte.github.io/haproxy-dconv/2.0/configuration.html#ciphers%20%28Bind%20options%29) to select ciphers per slave
   - use [snifilter](https://cbonte.github.io/haproxy-dconv/2.0/configuration.html#5.1-crt-list) to limit certificates for given slave 
 - [ ] carefully implement path normalization
 - [ ] check for performance and scalabilility
 - [ ] implement apache compatible access_log, expose haproxy as frontend_log
 - [ ] reimplement `# Access to server-status Caddy-style`
 - [ ] reimplement `* {{ not_found_file }}`, by using local nginx and exposing the file
 - [ ] reimplement `monitor-caddy-server-status-wrapper`
 - [ ] provide proper fixes for https://lab.nexedi.com/nexedi/slapos/merge_requests/830#note_137260
 - [ ] (maybe) merge frontend and backend haproxy into one process

Edited Jul 05, 2021 by Łukasz Nowak

Assignee

Assign to

None

Milestone

None

Assign milestone

Time tracking

0

Labels

None

Assign labels

View project labels

Reference: nexedi/slapos!830

GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7