OpenSearch/qa/remote-clusters/haproxy-default.cfg
Yannick Welsch 39b4710081 Add Docker-based tests for proxy connection mode (#51658)
Adds more tests for the new "proxy" remote cluster connection mode, using a Docker-based
setup, as well as testing SNI-based routing using HAProxy.

- Checks that the new proxy mode can work in situations where the publish host of the nodes in
the remote cluster are not routable.
- Checks that the new proxy mode can work with clusters where nodes are hidden behind
HAProxy.
- Checks that the new proxy mode can work with clusters where nodes are hidden behind
HAProxy, using SNI to identify the nodes/cluster behind HAProxy.

Relates #49067
2020-02-03 09:45:38 +01:00

28 lines
674 B
INI

global
log localhost local1 notice
maxconn 2000
daemon
defaults
log global
mode tcp
retries 3
option tcpka
option tcp-check
timeout client 30s
timeout server 30s
timeout connect 5s
frontend ft_ssl
bind *:9600
tcp-request inspect-delay 5s
tcp-request content accept if { req_ssl_hello_type 1 }
default_backend bk_ssl
backend bk_ssl
use-server server1 if { req_ssl_sni -i application1.example.com }
server server1 elasticsearch-default-1:9300 weight 0 check
use-server server2 if { req_ssl_sni -i application2.example.com }
server server2 elasticsearch-default-2:9300 weight 0 check
server default elasticsearch-default-2:9300 check