Read acl white IP address from file on Haproxy
I was trying to load whitelist in Haproxy acl from file
I was able to whitelist ip by adding inline haproxy config file and it works well
I was wondering if there is a way that I can point the ip address to a file and read it from the haproxy config
Here is my Haproxy conf
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
user haproxy
group haproxy
daemon
defaults
log global
mode http
option httplog
option dontlognull
contimeout 5000
clitimeout 50000
srvtimeout 50000
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
frontend http-in
bind *:80
mode http
reqadd X-Forwarded-Proto:\ http
acl whitelist src 192.168.12.32 192.168.0.1
acl all src 0.0.0.0
acl demo hdr_end(host) -i 192.168.20.26
use_backend demo if demo whitelist
backend demo
balance leastconn
option httpclose
option forwardfor
cookie JSESSIONID prefix
server locahost localhost:8080 cookie A check
+3
source to share
1 answer
we will specify whitelist ip source with "-f" flag inside haproxy.conf file.
Create whitelist.lst inside / etc / haproxy / and list the whole whitelist with subnet mask like: - 192.168.1.1/32 192.168.2.1/32 192.168.0.1/24 etc.Here is my haproxy conf file that loads the whitelist from a file.
frontend http-in
bind *:80
mode http
reqadd X-Forwarded-Proto:\ http
acl whitelist src -f /etc/haproxy/whitelist.lst
acl all src 0.0.0.0
acl demo hdr_end(host) -i 192.168.20.26
use_backend demo if demo whitelist
backend demo
balance leastconn
option httpclose
option forwardfor
cookie JSESSIONID prefix
server locahost localhost:8080 cookie A check
+5
source to share