haproxytechblog · June 18, 2022 21:32 · Nov 15, 2018 · Nov 15, 2018 · Nov 15, 2018 · Nov 15, 2018
diff --git a/blog20181001-1.cfg → blog20181001-01.cfg b/blog20181001-1.cfg → blog20181001-01.cfg
diff --git a/blog20181001-2.cfg → blog20181001-02.cfg b/blog20181001-2.cfg → blog20181001-02.cfg
diff --git a/blog20181001-3.map → blog20181001-03.map b/blog20181001-3.map → blog20181001-03.map
diff --git a/blog20181001-4.cfg → blog20181001-04.cfg b/blog20181001-4.cfg → blog20181001-04.cfg
diff --git a/blog20181001-5.cfg → blog20181001-05.cfg b/blog20181001-5.cfg → blog20181001-05.cfg
diff --git a/blog20181001-6.cfg → blog20181001-06.cfg b/blog20181001-6.cfg → blog20181001-06.cfg
diff --git a/blog20181001-7.cfg → blog20181001-07.cfg b/blog20181001-7.cfg → blog20181001-07.cfg
diff --git a/blog20181001-8.cfg → blog20181001-08.cfg b/blog20181001-8.cfg → blog20181001-08.cfg
diff --git a/blog20181001-9.sh → blog20181001-09.sh b/blog20181001-9.sh → blog20181001-09.sh
diff --git a/blog20181001-10.cfg b/blog20181001-10.cfg
@@ -0,0 +1,8 @@
+frontend api_gateway
+    bind :443 ssl crt /etc/hapee-1.8/certs/cert.pem
+    stick-table type string size 1m expire 24h store http_req_rate(10s)
+
+    acl rate_abuse  url_param(apitoken),table_http_req_rate(api_gateway) gt 10
+
+    http-request track-sc0 url_param(apitoken) unless rate_abuse
+    http-request deny deny_status 429 if rate_abuse
diff --git a/blog20181001-3.map b/blog20181001-3.map
@@ -1,7 +1,7 @@
 # endpoint                  backend name
-  api.haproxy.com/catalog/       be_catalog
-  api.haproxy.fr/catalog/        be_catalog
-  api.haproxy.com/cart/          be_cart
-  api.haproxy.fr/cart/           be_cart
-  partner.haproxy.com/inventory/ be_inventory
-  partner.haproxy.fr/inventory/  be_inventory
+api.haproxy.com/catalog/       be_catalog
+api.haproxy.fr/catalog/        be_catalog
+api.haproxy.com/cart/          be_cart
+api.haproxy.fr/cart/           be_cart
+partner.haproxy.com/inventory/ be_inventory
+partner.haproxy.fr/inventory/  be_inventory
diff --git a/blog20181001-4.cfg b/blog20181001-4.cfg
@@ -0,0 +1,3 @@
+frontend api_gateway
+  # …
+  use_backend %[base,map_beg(“/etc/hapee-1.8/routing.map”)]
diff --git a/blog20181001-5.cfg b/blog20181001-5.cfg
@@ -0,0 +1,4 @@
+backend mobile_api
+    balance roundrobin 
+    server s1 10.0.0.3:80
+    server s2 10.0.0.4:80
diff --git a/blog20181001-6.cfg b/blog20181001-6.cfg
@@ -0,0 +1,5 @@
+backend mobile_api
+    balance roundrobin 
+    option httpchk GET /health
+    server s1 10.0.0.3:80 check
+    server s2 10.0.0.4:80 check
diff --git a/blog20181001-7.cfg b/blog20181001-7.cfg
@@ -0,0 +1,4 @@
+backend mobile_api
+    balance roundrobin 
+    server s1 10.0.0.3:80 maxconn 100
+    server s2 10.0.0.4:80 maxconn 100
diff --git a/blog20181001-8.cfg b/blog20181001-8.cfg
@@ -0,0 +1,8 @@
+frontend api_gateway
+    bind :443 ssl crt /etc/hapee-1.8/certs/cert.pem
+    stick-table type string size 1m expire 24h store http_req_cnt
+
+    acl exceeds_limit  url_param(apitoken),table_http_req_cnt(api_gateway) gt 1000
+
+    http-request track-sc0 url_param(apitoken) unless exceeds_limit
+    http-request deny deny_status 429 if exceeds_limit
diff --git a/blog20181001-9.sh b/blog20181001-9.sh
@@ -0,0 +1,3 @@
+root@server1:~$ echo "show table api_gateway" | socat UNIX-CONNECT:/var/run/haproxy.sock stdio
+# table: api_gateway, type: string, size:1048576, used:1
+0x55bd73392fa4: key=abcdefg use=0 exp=86396974 http_req_cnt=12
diff --git a/blog20181001-3.map b/blog20181001-3.map
@@ -0,0 +1,7 @@
+# endpoint                  backend name
+  api.haproxy.com/catalog/       be_catalog
+  api.haproxy.fr/catalog/        be_catalog
+  api.haproxy.com/cart/          be_cart
+  api.haproxy.fr/cart/           be_cart
+  partner.haproxy.com/inventory/ be_inventory
+  partner.haproxy.fr/inventory/  be_inventory
diff --git a/example-1.cfg → blog20181001-1.cfg b/example-1.cfg → blog20181001-1.cfg
diff --git a/example-2.cfg → blog20181001-2.cfg b/example-2.cfg → blog20181001-2.cfg
diff --git a/example-1.cfg b/example-1.cfg
@@ -0,0 +1,12 @@
+frontend api_gateway
+    bind :443 ssl crt /etc/hapee-1.8/certs/cert.pem
+    acl PATH_cart path_beg -i /cart
+    acl PATH_catalog path_beg -i /catalog
+    use_backend be_cart if PATH_cart
+    use_backend be_catalog if PATH_catalog
+
+backend be_cart
+    server s1 10.0.0.3:80
+
+backend be_catalog
+    server s1 10.0.0.5:80
diff --git a/example-2.cfg b/example-2.cfg
@@ -0,0 +1,22 @@
+frontend api_gateway
+    bind :443 ssl crt /etc/hapee-1.8/certs/cert.pem
+
+    acl VHOST_publicapi req.hdr(Host) -i -m dom api.haproxy.com api.haproxy.fr
+    acl VHOST_partnersapi req.hdr(Host) -i -m dom partner.haproxy.com partner.haproxy.fr
+
+    acl PATH_catalog path_beg -i /catalog
+    acl PATH_cart path_beg -i /cart    
+    acl PATH_inventory path_beg -i /inventory
+
+    use_backend be_cart if VHOST_publicapi PATH_cart
+    use_backend be_catalog if VHOST_publicapi PATH_catalog
+    use_backend be_inventory if VHOST_partnersapi PATH_inventory
+
+backend be_cart
+    server s1 10.0.0.3:80
+
+backend be_catalog
+    server s1 10.0.0.5:80
+
+backend be_inventory
+    server s1 10.0.0.7