Skip to content

Instantly share code, notes, and snippets.

@feythin

feythin/gist:ea87e3a736550d7dd3a637ac9ee4530f

Forked from kylebrandt/gist:733572edb66c27894f22
Created April 8, 2017 14:34
Show Gist options
  • Save feythin/ea87e3a736550d7dd3a637ac9ee4530f to your computer and use it in GitHub Desktop.
Save feythin/ea87e3a736550d7dd3a637ac9ee4530f to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @kylebrandt kylebrandt created this gist Mar 1, 2016.
    52 changes: 52 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,52 @@
    global
    chroot /var/lib/haproxy
    daemon
    group haproxy
    log 127.0.0.1 local0
    maxconn 4000
    pidfile /var/run/haproxy.pid
    stats socket /var/lib/haproxy/stats
    user haproxy

    defaults
    balance roundrobin
    log global
    mode http
    option allbackups
    option forceclose
    option httpchk GET /
    timeout connect 15s
    timeout client 60s
    timeout server 600s
    timeout queue 10s

    frontend tsdb
    bind *:80
    acl path_get path -m beg /api/query
    acl path_put path -m beg /api/put
    acl path_put path -m beg /api/metadata/put
    acl path_put path -m beg /api/count
    default_backend bosun
    option httplog
    stats enable
    stats uri /haproxy
    use_backend tsdb_read if path_get
    use_backend tsdb_write if path_put

    backend bosun
    server ny-bosun01 ny-bosun01:8080

    backend tsdb_read
    server ny-tsdb01 ny-tsdb01:4242 check
    server ny-tsdb02 ny-tsdb02:4242 check
    server ny-tsdb03 ny-tsdb03:4242 check backup

    backend tsdb_write
    # A bunch of ACLs to make sure we don't get writes accidently from dev machines, vpn, etc
    acl allowed src ....
    acl blocked src ....
    http-request deny if blocked
    http-request deny unless allowed
    server ny-tsdb03 ny-tsdb03:5252 check
    server ny-tsdb01 ny-tsdb01:5252 check backup
    server ny-tsdb02 ny-tsdb02:5252 check backup