haproxy job from logsearch/211.0.2
This job runs Haproxy which act as a single entry point to the cluster (LB)
Github source:
a08d4dc
or
master branch
Properties¶
haproxy
¶
client_timeout
¶Timeout waiting for data from a client (in seconds)
- Default
30
cluster_monitor
¶
auth
¶
password
¶Basic auth password for cluster monitor kibana. Optional
- Default
""
username
¶Basic auth username for cluster monitor kibana. Optional
- Default
""
backend_port
¶The port number the cluster monitor backends are listening on
- Default
5601
backend_servers
¶Array of the cluster monitor backend IPs
- Default
[]
inbound_port
¶The public port of the cluster monitor UI
- Default
8080
connect_timeout
¶Timeout waiting for connections to establish to a server (in seconds)
- Default
5
elastic
¶
auth
¶
password
¶Basic auth password for Elasticsearch. Optional
username
¶Basic auth username for Elasticsearch. Optional
backend_servers
¶List of Elasticsearch nodes
- Default
[]
enable_ssl
¶Enable or Disable SSL for for Elasticsearch traffic on haproxy
- Default
true
inbound_port
¶The public port for Elasticsearch interface. IMPORTANT: Do not set this value unless you understand what are you doing! External access to Elasticsearch allows to do everything with it, including index deletion. Once enabled this feature, it is strictly recommended to set the password below.
enable_stats_socket
¶Whether to enable a socket that can be used to query errors and status
- Default
false
fd_limit
¶File descriptors limit (uname -n)
- Default
256000
ingestor
¶
backend_port
¶The port number the ingestor backends are listening on
- Default
5514
backend_servers
¶Array of the ingestor backend IPs
- Default
[]
enable_ssl
¶Enable or Disable SSL for for syslog/ingestor traffic on haproxy
- Default
true
relp
¶
backend_port
¶The port number the ingestor backends are listening on
- Default
2514
inbound_port
¶The public port of the ingestor service
- Default
2514
syslog
¶
backend_port
¶The port number the ingestor backends are listening on
- Default
5514
inbound_port
¶The public port of the ingestor service
- Default
5514
tls
¶
backend_port
¶The port number the ingestor backends are listening on
- Default
6514
inbound_port
¶The public port of the ingestor service
- Default
6514
kibana
¶
auth
¶
password
¶Basic auth password for kibana. Optional
- Default
""
username
¶Basic auth username for kibana. Optional
- Default
""
backend_port
¶The port of the kibana backend server(s)
- Default
5601
backend_servers
¶The list of kibana servers
enable_ssl
¶Enable or Disable SSL for Kibana traffic on haproxy
- Default
true
inbound_port
¶
http
¶The public port of the kibana service
- Default
80
https
¶The public port of the kibana service
- Default
443
log_level
¶Log level
- Default
info
queue_timeout
¶Timeout for requests queued waiting for free connection slots (in seconds)
- Default
30
server_timeout
¶Timeout waiting for data from a server (in seconds)
- Default
30
ssl_pem
¶SSL certificate (PEM file). Omit if you don’t want to use SSL
syslog_server
¶An IPv4 address optionally followed by a colon and a UDP port. It can also be an IPv6 address or filesystem path to a UNIX domain socket.
- Default
127.0.0.1
Templates¶
Templates are rendered and placed onto corresponding
instances during the deployment process. This job's templates
will be placed into /var/vcap/jobs/haproxy/
directory
(learn more).
bin/haproxy.sh
(fromhaproxy
)config/bpm.yml
(frombpm.yml.erb
)config/cert.pem
(fromcert.pem.erb
)config/haproxy.config
(fromhaproxy.config.erb
)
Packages¶
Packages are compiled and placed onto corresponding
instances during the deployment process. Packages will be
placed into /var/vcap/packages/
directory.