From 2d8b2822d6abc50149a0a692908734fe1e2ecc44 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Tue, 26 Mar 2019 17:02:45 -0400 Subject: [PATCH] New haproxy-config file --- ee/ucp/interlock/config/haproxy-config.md | 29 +++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 ee/ucp/interlock/config/haproxy-config.md diff --git a/ee/ucp/interlock/config/haproxy-config.md b/ee/ucp/interlock/config/haproxy-config.md new file mode 100644 index 0000000000..53b8887299 --- /dev/null +++ b/ee/ucp/interlock/config/haproxy-config.md @@ -0,0 +1,29 @@ +--- +title: HAProxy configuration +description: Learn how to configure an HAProxy extension +keywords: routing, proxy +--- + +# Configuring an HAProxy extension +The following configuration options are available: + +| Option | Type | Description | +| --- | --- | --- | +| `PidPath` | string | path to the pid file for the proxy service | +| `MaxConnections` | int | maximum number of connections for proxy service | +| `ConnectTimeout` | int | timeout in seconds for clients to connect | +| `ClientTimeout` | int | timeout in seconds for the service to send a request to the proxied upstream | +| `ServerTimeout` | int | timeout in seconds for the service to read a response from the proxied upstream | +| `AdminUser` | string | username to be used with authenticated access to the proxy service | +| `AdminPass` | string | password to be used with authenticated access to the proxy service | +| `SSLOpts` | string | options to be passed when configuring SSL | +| `SSLDefaultDHParam` | int | size of DH parameters | +| `SSLVerify` | string | SSL client verification | +| `SSLCiphers` | string | SSL ciphers to use for the proxy service | +| `SSLProtocols` | string | enable the specified TLS protocols | +| `GlobalOptions` | []string | list of options that are included in the global configuration | +| `DefaultOptions` | []string | list of options that are included in the default configuration | + +# Notes + +When using SSL termination, the certificate and key must be combined into a single certificate (i.e. `cat cert.pem key.pem > combined.pem`). The HAProxy extension only uses the certificate label to configure SSL.