Denys Parchenko x-cray

I hereby claim:

To claim this, I am signing this object:

Example use is to share a VPN connection to a device that doesn't support VPN, like watching Netflix on a smart TV.

Ad-hoc configuration

First, connect to VPN on OSX host and enable packets forwarding between network interfaces:

$ sudo sysctl -w net.inet.ip.forwarding=1

	global
	log /dev/log local0
	log /dev/log local1 notice
	chroot /var/lib/haproxy
	user haproxy
	group haproxy
	daemon
	maxconn {% raw %}{{key "service/haproxy/maxconn"}}{% endraw %}

	# Default SSL material locations

	{% raw %}

	{{range $service := services}}{{range $tag := $service.Tags}}
	{{$servicePort := $service.Name \| regexReplaceAll "^[\\w-]+?(\\d)$" "$1"}}{{$tagPort := $tag \| regexReplaceAll "^[\\w-]+?(\\d)$" "$1"}}
	{{if or (not $servicePort) (eq $servicePort $tagPort)}}
	{{if $tag \| regexMatch "internal-listen-http-\\d+"}}
	##
	# Production internal http frontend for {{$service.Name}}
	##

	{% macro hosts(environment, domain_prefix='') -%}
	# {{ environment }} hosts
	acl host_{{ environment }}:test-server hdr_dom(host) -i -m str {{ domain_prefix }}mesos-test.domain.com
	{%- endmacro %}

	{% macro bind(service, environment) -%}
	use_backend cluster_{{ environment }}:{{ service }} if host_{{ environment }}:{{ service }}
	{%- endmacro %}

	frontend external_https_in

	frontend internal_http_in:marathon
	bind :18080
	use_backend cluster:marathon

	frontend internal_http_in:chronos
	bind :14400
	use_backend cluster:chronos

	listen internal_http_in:consul
	bind :18500

	{% macro backends(environment) -%}

	##
	# {{ environment }} backends
	##
	{{ '{{' }}$environment := "{{ environment }}"{{ '}}' }}
	backend cluster_{{ environment }}:test-server
	option forwardfor
	option httpchk GET /healthcheck
	balance roundrobin{% raw %}{{range $i, $s := service (print $environment ".test-server")}}