On Wed, 2016-10-05 at 13:28 +1300, Xav Paice wrote: > On Tue, 2016-10-04 at 17:48 -0600, Curtis wrote: > > Maybe you have someone on staff who loves writing lua (for haproxy)? :) > > > > Well, maybe not that far, but yeah we're now thinking down that route. > If we get there, I'll quickly write something up about it. Many thanks > for the suggestion :) >
OK, that wasn't as hard as I thought it would be. Thanks Curtis! Haproxy config snippet, in case anyone else has the same need (note, not in production, only rudimentary testing, and slightly sanitized for a mailing list): frontend objectstore bind :::8843 ssl crt host.crt.pem ca-file ca.pem no-sslv3 mode http acl rgw_customer path_beg -m sub -f /some/list/of/rgw-folks use_backend rgw00 if rgw_customer default_backend swift-pxy00 backend rgw00 balance roundrobin mode http http-request set-path /%[path,regsub(/v1/AUTH_.{32},swift/v1)] server rgw1 10.0.0.111:8443 check ca-file ca.pem crt host.crt.pem ssl server rgw2 10.0.0.230:8443 check ca-file ca.pem crt host.crt.pem ssl backend swift-pxy00 balance roundrobin mode http option httpchk HEAD /healthcheck HTTP/1.0 option forwardfor option http-server-close timeout http-keep-alive 500 server opxy1 10.0.0.123:8843 check ca-file ca.pem crt host.crt.pem ssl _______________________________________________ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators