HAProxy config used with OpenShift 4 Bare Metal Clusters

openshift_haproxy.cfg

global
  log /dev/log  local0
  log /dev/log  local1 notice
  stats socket /var/lib/haproxy/stats level admin
  chroot /var/lib/haproxy
  user haproxy
  group haproxy
  daemon

defaults
  mode                    http
  log                     global
  option                  httplog
  option                  dontlognull
  option http-server-close
  option forwardfor       except 127.0.0.0/8
  option                  redispatch
  retries                 3
  timeout http-request    10s
  timeout queue           1m
  timeout connect         10s
  timeout client          1m
  timeout server          1m
  timeout http-keep-alive 10s
  timeout check           10s
  maxconn                 3000

#---------------------------------------------------------------------
listen stats
    bind :9000
    mode http
    stats enable
    stats uri /
    monitor-uri /healthz

frontend openshift-api-server
    bind *:6443
    default_backend openshift-api-server
    mode tcp
    option tcplog

backend openshift-api-server
    balance source
    mode tcp
    server {{ openshift_bootstrap[0].name | lower }} {{ openshift_bootstrap[0].ip }}:6443 check
    server bootstrap <IP_ADDRESS>:6443 check
    server control_plane_0 <IP_ADDRESS>:6443 check
    server control_plane_1 <IP_ADDRESS>:6443 check
    server control_plane_2 <IP_ADDRESS>:6443 check

frontend machine-config-server
    bind *:22623
    default_backend machine-config-server
    mode tcp
    option tcplog

backend machine-config-server
    balance source
    mode tcp
    server bootstrap <IP_ADDRESS>:22623 check
    server control_plane_0 <IP_ADDRESS>:22623 check
    server control_plane_1 <IP_ADDRESS>:22623 check
    server control_plane_2 <IP_ADDRESS>:22623 check

frontend ingress-http
    bind *:80
    default_backend ingress-http
    mode tcp
    option tcplog

backend ingress-http
    balance source
    mode tcp
    server control_plane_0 <IP_ADDRESS>:80 check
    server control_plane_1 <IP_ADDRESS>:80 check
    server control_plane_2 <IP_ADDRESS>:80 check
    server worker_0 <IP_ADDRESS>:80 check
    server worker_1 <IP_ADDRESS>:80 check

frontend ingress-https
    bind *:443
    default_backend ingress-https
    mode tcp
    option tcplog

backend ingress-https
    balance source
    mode tcp
    server control_plane_0 <IP_ADDRESS>:443 check
    server control_plane_1 <IP_ADDRESS>:443 check
    server control_plane_2 <IP_ADDRESS>:443 check
    server worker_0 <IP_ADDRESS>:443 check
    server worker_1 <IP_ADDRESS>:443 check

#---------------------------------------------------------------------