HAProxyKeystoneMiddlware

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #machine-learning #rust #deep-learning #linux #java #windows #awesome #cli #awesome-list #vue

HAProxyKeystoneMiddlware

(★ 15)

Lua Based Addition for HAProxy (1.6+) that can replace Keystone Middleware and do the heavy lifting.

HAProxyKeystoneMiddlware Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# HAProxyKeystoneMiddlware
Lua Based Addition for HAProxy (1.6+) that can replace Keystone Middleware and do the heavy lifting.

## To Try this out

You will need HAProxy 1.6

You will need to place the json.lua and the ha_proxy_ksa.lua in the working
directory for HAProxy and then configure HAProxy to use the ha_proxy_ksa.lua
file. Obviously this is only working for contrived authentication at the moment
(devstack-y) and you'll need to modifiy the code to auth correctly with your
site.

My Example configuration for HAProxy is as follows with the two lua files in `/etc/haproxy`:

global
        log /dev/log	local0
        log /dev/log	local1 info
        #chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

# Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

# Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL). This list is from:
        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
        ssl-default-bind-options no-sslv3

lua-load ./ha_proxy_ksa.lua

defaults
        log	global
        mode	http
        option	httplog
        option	dontlognull
            timeout connect 5000
            timeout client  50000
            timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http

frontend localnodes
        bind *:80
        mode http
        http-request lua.validate_token
        default_backend nodes

backend nodes
        mode http
        server web01 127.0.0.1:8000

The json.lua is vendored from http://regex.info/blog/lua/json and is licensed under Creative Commons.

HAProxyKeystoneMiddlware

HAProxyKeystoneMiddlware Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

HAProxyKeystoneMiddlware

HAProxyKeystoneMiddlware Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README