haproxy

Documentation

Index

• Constants
• Variables
• func GetMapPath(name string) string
• type Certificates
  • func NewCertificates(caDir, ftDir, bdDir string) *Certificates
  • func (c *Certificates) Clean()
  • func (c *Certificates) FrontendCertsEnabled() bool
  • func (c *Certificates) HandleTLSSecret(k8s store.K8s, secretCtx SecretCtx) (certPath string, updated bool, err error)
  • func (c *Certificates) Refresh() (reload bool)
• type Maps
  • func NewMapFiles(path string) *Maps
  • func (m Maps) AppendRow(name string, row string)
  • func (m Maps) Clean()
  • func (m Maps) Exists(name string) bool
  • func (m Maps) Refresh(client api.HAProxyClient) (reload bool)
• type Rule
• type RuleID
• type RuleStatus
• type RuleType
• type Rules
  • func NewRules() *Rules
  • func (r Rules) AddRule(rule Rule, ingressName string, frontends ...string) error
  • func (r Rules) Clean(frontends ...string)
  • func (r Rules) DeleteFrontend(frontend string)
  • func (r Rules) GetIngressRuleIDs(ingress string) (ruleIDs []RuleID)
  • func (r Rules) Refresh(client api.HAProxyClient) (reload bool)
• type SecretCtx
• type SecretType

Constants

const (
	MAP_SNI         = "sni"
	MAP_HOST        = "host"
	MAP_PATH_EXACT  = "path-exact"
	MAP_PATH_PREFIX = "path-prefix"
)

Variables

var ErrCertNotFound = errors.New("notFound")

var HTTPACLVar = "txn.path_match"

HTTPACLVar used to match against RuleID in haproxy http frontend

var TCPACLVar = "txn.sni_match"

TCPACLVar used to match against RuleID in haproxy ssl frontend

Functions

func GetMapPath

func GetMapPath(name string) string

Types

type Certificates

type Certificates struct {
	// contains filtered or unexported fields
}

func NewCertificates

func NewCertificates(caDir, ftDir, bdDir string) *Certificates

func (*Certificates) Clean

func (c *Certificates) Clean()

func (*Certificates) FrontendCertsEnabled

func (c *Certificates) FrontendCertsEnabled() bool

func (*Certificates) HandleTLSSecret

func (c *Certificates) HandleTLSSecret(k8s store.K8s, secretCtx SecretCtx) (certPath string, updated bool, err error)

func (*Certificates) Refresh

func (c *Certificates) Refresh() (reload bool)

Refresh removes unused certs from HAProxyCertDir

type Maps

type Maps map[string]*mapFile

func NewMapFiles

func NewMapFiles(path string) *Maps

func (Maps) AppendRow

func (m Maps) AppendRow(name string, row string)

AppendRow appends row to mapFile

func (Maps) Clean

func (m Maps) Clean()

func (Maps) Exists

func (m Maps) Exists(name string) bool

func (Maps) Refresh

func (m Maps) Refresh(client api.HAProxyClient) (reload bool)

type Rule

type Rule interface {
	Create(client api.HAProxyClient, frontend *models.Frontend, ingressACL string) error
	GetType() RuleType
}

type RuleID

type RuleID string

RuleID uniquely identify a HAProxy Rule

type RuleStatus

type RuleStatus int

RuleStatus describing Rule creation

const (
	// exclusive states
	CREATED   RuleStatus = 0
	TO_CREATE RuleStatus = 1
	TO_DELETE RuleStatus = 2
	// non exclusive states
	INGRESS RuleStatus = 4
)

nolint: golint,stylecheck

type RuleType

type RuleType int

Order matters ! Rules will be evaluated by HAProxy in the defined order.

const (
	REQ_ACCEPT_CONTENT RuleType = iota
	REQ_INSPECT_DELAY
	REQ_PROXY_PROTOCOL
	REQ_SET_VAR
	REQ_SET_SRC
	REQ_DENY
	REQ_TRACK
	REQ_AUTH
	REQ_RATELIMIT
	REQ_CAPTURE
	REQ_REQUEST_REDIRECT
	REQ_FORWARDED_PROTO
	REQ_SET_HEADER
	REQ_SET_HOST
	REQ_PATH_REWRITE
	RES_SET_HEADER
)

nolint: golint,stylecheck

type Rules

type Rules struct {
	// contains filtered or unexported fields
}

func NewRules

func NewRules() *Rules

func (Rules) AddRule

func (r Rules) AddRule(rule Rule, ingressName string, frontends ...string) error

func (Rules) Clean

func (r Rules) Clean(frontends ...string)

func (Rules) DeleteFrontend

func (r Rules) DeleteFrontend(frontend string)

func (Rules) GetIngressRuleIDs

func (r Rules) GetIngressRuleIDs(ingress string) (ruleIDs []RuleID)

func (Rules) Refresh

func (r Rules) Refresh(client api.HAProxyClient) (reload bool)

type SecretCtx

type SecretCtx struct {
	DefaultNS  string
	SecretPath string
	SecretType SecretType
}

type SecretType

type SecretType int

const (
	NONE_CERT SecretType = iota
	FT_CERT
	FT_DEFAULT_CERT
	BD_CERT
	CA_CERT
)