haproxytechblog

global
  stats socket /var/run/haproxy/api.sock  user haproxy  group haproxy  mode 660  level admin  expose-fd listeners

haproxytechblog

$ sudo docker network create --driver=bridge mynetwork

haproxytechblog

defaults
  mode http
  timeout client 10s
  timeout connect 5s
  timeout server 10s 
  timeout http-request 10s

frontend myfrontend
  bind 127.0.0.1:80

haproxytechblog

apiVersion: operator.tigera.io/v1
kind: Installation
metadata:
 name: default
spec:
 # Configures Calico networking.
 calicoNetwork:
   bgp: Enabled
    
   # Note: The ipPools section cannot be modified post-install.

haproxytechblog

datacenter = "dc1"
server = true
data_dir = "/var/lib/consul/"
bind_addr = "192.168.50.21"
client_addr = "192.168.50.21"
bootstrap = true
bootstrap_expect = 1

ui_config {
    enabled = true

haproxytechblog

tcp-request content reject unless { req.payload(0,0),mqtt_is_valid }

haproxytechblog

$ sudo dataplaneapi \
   --host 127.0.0.1 \
   --port 5555 \
   --haproxy-bin /usr/sbin/haproxy \
   --config-file /etc/haproxy/haproxy.cfg  \
   --reload-delay 5 \
   --reload-cmd "service haproxy reload" \
   --restart-cmd "service haproxy restart" \
   --userlist haproxy-dataplaneapi \
   --transaction-dir /tmp/haproxy

haproxytechblog

backend-config-snippet: |
  http-request deny if !{ src 127.0.0.1 10.0.0.0/8 1.2.3.4/24 }

haproxytechblog

$ helm repo add prometheus-community \
    https://prometheus-community.github.io/helm-charts
$ helm repo update
$ helm install prometheus prometheus-community/prometheus

haproxytechblog

$ helm repo add hashicorp https://helm.releases.hashicorp.com
$ helm repo update
$ helm install consul hashicorp/consul \
   --set global.name=consul \
   --set connect=true \
   --set server.replicas=1 \
   --set server.bootstrapExpect=1 \
   --version 0.31.1