247 lines
8.4 KiB
Ruby
247 lines
8.4 KiB
Ruby
#
|
|
# Cookbook Name:: haproxy
|
|
# Default:: default
|
|
#
|
|
# Copyright 2010, Opscode, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
# node['haproxy']['backend'] to deside where service backend sources come from
|
|
# if 'prefeed', all services' backend info will be choosen from attribute
|
|
# 'node_mapping'; 'prefeed' is suitable for stable and independent services
|
|
# if 'autofeed', services' backend info will automaticly learn backend info
|
|
# from its chef server.
|
|
default['haproxy']['log']['facilities'] = 'local4'
|
|
default['haproxy']['log']['file'] = '/var/log/haproxy.log'
|
|
default['haproxy']['choose_backend'] = 'autofeed'
|
|
default['haproxy']['enable_default_http'] = true
|
|
default['haproxy']['incoming_address'] = "0.0.0.0"
|
|
default['haproxy']['incoming_port'] = 80
|
|
default['haproxy']['members'] = [{
|
|
"hostname" => "localhost",
|
|
"ipaddress" => "127.0.0.1",
|
|
"port" => 4000,
|
|
"ssl_port" => 4000
|
|
},
|
|
{
|
|
"hostname" => "localhost",
|
|
"ipaddress" => "127.0.0.1",
|
|
"port" => 4001,
|
|
"ssl_port" => 4001
|
|
}]
|
|
default['haproxy']['member_port'] = 8080
|
|
default['haproxy']['member_weight'] = 1
|
|
default['haproxy']['app_server_role'] = "os-compute-conductor"
|
|
default['haproxy']['balance_algorithm'] = "source"
|
|
default['haproxy']['enable_ssl'] = false
|
|
default['haproxy']['ssl_incoming_address'] = "0.0.0.0"
|
|
default['haproxy']['ssl_incoming_port'] = 443
|
|
default['haproxy']['ssl_member_port'] = 8443
|
|
default['haproxy']['httpchk'] = nil
|
|
default['haproxy']['ssl_httpchk'] = nil
|
|
default['haproxy']['enable_admin'] = false
|
|
default['haproxy']['admin']['address_bind'] = "127.0.0.1"
|
|
default['haproxy']['admin']['port'] = 22002
|
|
default['haproxy']['enable_stats_socket'] = false
|
|
default['haproxy']['stats_socket_path'] = "/var/run/haproxy.sock"
|
|
default['haproxy']['stats_socket_user'] = node['haproxy']['user']
|
|
default['haproxy']['stats_socket_group'] = node['haproxy']['group']
|
|
default['haproxy']['pid_file'] = "/var/run/haproxy.pid"
|
|
|
|
default['haproxy']['defaults_options'] = ["tcpka", "httpchk", "tcplog", "httplog", "forceclose", "redispatch"]
|
|
default['haproxy']['x_forwarded_for'] = false
|
|
default['haproxy']['defaults_timeouts']['connect'] = "30s"
|
|
default['haproxy']['defaults_timeouts']['check'] = "30s"
|
|
#default['haproxy']['defaults_timeouts']['queue'] = "100s"
|
|
default['haproxy']['defaults_timeouts']['client'] = "300s"
|
|
default['haproxy']['defaults_timeouts']['server'] = "300s"
|
|
default['haproxy']['tune']['bufsize'] = 1000000
|
|
default['haproxy']['tune']['maxrewrite'] = 1024
|
|
|
|
default['haproxy']['cookie'] = nil
|
|
|
|
default['haproxy']['user'] = "haproxy"
|
|
default['haproxy']['group'] = "haproxy"
|
|
|
|
default['haproxy']['global_max_connections'] = 8192
|
|
default['haproxy']['member_max_connections'] = 20000
|
|
default['haproxy']['frontend_max_connections'] = 4096
|
|
default['haproxy']['frontend_ssl_max_connections'] = 4096
|
|
|
|
default['haproxy']['install_method'] = 'package'
|
|
default['haproxy']['conf_dir'] = '/etc/haproxy'
|
|
|
|
default['haproxy']['source']['version'] = '1.4.22'
|
|
default['haproxy']['source']['url'] = 'http://haproxy.1wt.eu/download/1.4/src/haproxy-1.4.22.tar.gz'
|
|
default['haproxy']['source']['checksum'] = 'ba221b3eaa4d71233230b156c3000f5c2bd4dace94d9266235517fe42f917fc6'
|
|
default['haproxy']['source']['prefix'] = '/usr/local'
|
|
default['haproxy']['source']['target_os'] = 'generic'
|
|
default['haproxy']['source']['target_cpu'] = ''
|
|
default['haproxy']['source']['target_arch'] = ''
|
|
default['haproxy']['source']['use_pcre'] = false
|
|
default['haproxy']['source']['use_openssl'] = false
|
|
default['haproxy']['source']['use_zlib'] = false
|
|
|
|
default['haproxy']['enabled_services'] = [
|
|
"dashboard_http",
|
|
"dashboard_https",
|
|
"glance_api",
|
|
"glance_registry_cluster",
|
|
"keystone_admin",
|
|
"keystone_public_internal",
|
|
"nova_compute_api",
|
|
"nova_metadata_api",
|
|
"novncproxy",
|
|
"cinder_api",
|
|
"neutron_api"
|
|
]
|
|
|
|
default['haproxy']['roles'] = {
|
|
"os-identity" => [
|
|
"keystone_admin",
|
|
"keystone_public_internal"
|
|
],
|
|
"os-dashboard" => [
|
|
"dashboard_http",
|
|
"dashboard_https"
|
|
],
|
|
"os-compute-controller" => [
|
|
"nova_compute_api",
|
|
"nova_metadata_api",
|
|
"novncproxy"
|
|
],
|
|
"os-block-storage-controller" => [
|
|
"cinder_api"
|
|
],
|
|
"os-network-server" => [
|
|
"neutron_api"
|
|
],
|
|
"os-image" => [
|
|
"glance_api",
|
|
"glance_registry_cluster"
|
|
]
|
|
}
|
|
|
|
default['haproxy']['listeners'] = {
|
|
'listen' => {},
|
|
'frontend' => {},
|
|
'backend' => {}
|
|
}
|
|
|
|
default['haproxy']['services'] = {
|
|
"dashboard_http" => {
|
|
"role" => "os-dashboard",
|
|
"frontend_port" => "80",
|
|
"backend_port" => "80",
|
|
"options" => [ "capture cookie vgnvisitor= len 32", \
|
|
"cookie SERVERID insert indirect nocache", \
|
|
"mode http", \
|
|
"balance source", \
|
|
"option forwardfor", \
|
|
"option httpchk OPTIONS / HTTP/1.1", \
|
|
"http-check expect status 400", \
|
|
"option http-server-close", \
|
|
"rspidel ^Set-cookie:\\ IP="
|
|
# "appsession csrftoken len 42 timeout 1h"
|
|
]
|
|
},
|
|
"dashboard_https" => {
|
|
"role" => "os-dashboard",
|
|
"frontend_port" => "443",
|
|
"backend_port" => "443",
|
|
"balance" => "source",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog"]
|
|
},
|
|
"glance_api" => {
|
|
"role" => "os-image-api",
|
|
"frontend_port" => "9292",
|
|
"backend_port" => "9292",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn" ]
|
|
},
|
|
"glance_registry_cluster" => {
|
|
"role" => "os-image-registry",
|
|
"frontend_port" => "9191",
|
|
"backend_port" => "9191",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn", "http-check expect status 401" ]
|
|
},
|
|
"keystone_admin" => {
|
|
"role" => "os-identity",
|
|
"frontend_port" => "35357",
|
|
"backend_port" => "35357",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn" ]
|
|
},
|
|
"keystone_public_internal" => {
|
|
"role" => "os-identity",
|
|
"frontend_port" => "5000",
|
|
"backend_port" => "5000",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn" ]
|
|
},
|
|
"nova_ec2_api" => {
|
|
"role" => "os-compute-api",
|
|
"frontend_port" => "8773",
|
|
"backend_port" => "8773",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog"]
|
|
},
|
|
"nova_compute_api" => {
|
|
"role" => "os-compute-api",
|
|
"frontend_port" => "8774",
|
|
"backend_port" => "8774",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn"]
|
|
},
|
|
"novncproxy" => {
|
|
"role" => "os-compute-vncproxy",
|
|
"frontend_port" => "6080",
|
|
"backend_port" => "6080",
|
|
"balance" => "leastconn",
|
|
#"balance" => "source",
|
|
"options" => [ "option tcpka", "option http-server-close", "option tcplog", "balance leastconn"]
|
|
},
|
|
"nova_metadata_api" => {
|
|
"role" => "os-compute-api-metadata",
|
|
"frontend_port" => "8775",
|
|
"backend_port" => "8775",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn"]
|
|
},
|
|
"cinder_api" => {
|
|
"role" => "os-block-storage-api",
|
|
"frontend_port" => "8776",
|
|
"backend_port" => "8776",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn"]
|
|
},
|
|
"ceilometer_api" => {
|
|
"role" => "os-compute-single-controller",
|
|
"frontend_port" => "8777",
|
|
"backend_port" => "8777",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog"]
|
|
},
|
|
"spice" => {
|
|
"role" => "os-compute-single-controller",
|
|
"frontend_port" => "6082",
|
|
"backend_port" => "6082",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog"]
|
|
},
|
|
"neutron_api" => {
|
|
"role" => "os-network-server",
|
|
"frontend_port" => "9696",
|
|
"backend_port" => "9696",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog", "balance leastconn"]
|
|
},
|
|
"swift_proxy" => {
|
|
"role" => "os-compute-single-controller",
|
|
"frontend_port" => "8080",
|
|
"backend_port" => "8080",
|
|
"options" => [ "option tcpka", "option httpchk", "option tcplog"]
|
|
}
|
|
}
|