HAProxy Data Plane API 2.0 Adds More Dynamic Features

blog20200511-01.sh

$ cat urls.map
/api/           be_api
/documentation/ be_documentation
/blog/          be_blog

blog20200511-02.sh

$ curl -X POST \
    -F "fileUpload=@urls.map" \
    -u dataplaneapi:password \
    http://192.168.50.20:5555/v2/services/haproxy/runtime/maps

blog20200511-03.sh

$ curl -X POST \
    -H 'Content-Type: application/json' \
    -u dataplaneapi:password \
    -d '{"name":"%[path,lower,map_beg(/etc/haproxy/maps/urls.map,be_main)]","index":0}' \
    "http://192.168.50.20:5555/v2/services/haproxy/configuration/backend_switching_rules?frontend=fe_main&version=1"

blog20200511-04.sh

$ curl -X GET -u dataplaneapi:password 192.168.50.20:5555/v2/services/haproxy/runtime/maps
[
  {
    "description": "pattern loaded from file '/etc/haproxy/maps/urls.map' used by map at file '/etc/haproxy/haproxy.cfg' line 37",
    "file": "/etc/haproxy/maps/urls.map",
    "id": "1"
  }
]

blog20200511-05.sh

$ curl -X POST \
    -H 'Content-Type: application/json' \
    -u dataplaneapi:password \
    -d '{"key":"/images/", "value": "be_static"}' \
    "http://192.168.50.20:5555/v2/services/haproxy/runtime/maps_entries?map=urls.map"

blog20200511-06.sh

$ curl -X DELETE \
  -u dataplaneapi:password \
  "192.168.50.20:5555/v2/services/haproxy/runtime/maps_entries/%2Fapi%2F?map=urls.map"

blog20200511-07.sh

$ curl -X POST \
    -H 'Content-Type: application/json'  \
    -u dataplaneapi:password \
    -d '{"name": "login_requests", "stick_table": {"type": "ip", "size": 1000000, "expire": 600, "store": "http_req_rate(10m)"}}' \
    '192.168.50.20:5555/v2/services/haproxy/configuration/backends?version=1'

blog20200511-08.sh

$ curl -X GET -u dataplaneapi:password \
   '192.168.50.20:5555/v2/services/haproxy/runtime/stick_tables'

blog20200511-09.sh

$ curl -X GET -u dataplaneapi:password \
 '192.168.50.20:5555/v2/services/haproxy/runtime/stick_tables/login_requests?process=1'

blog20200511-10.sh

$ curl -X GET -u dataplaneapi:password \
   '192.168.50.20:5555/v2/services/haproxy/runtime/stick_table_entries?process=1&stick_table=http_requests'

blog20200511-11.cfg

peers lb_cluster
  peer host1 192.168.50.20:10000
  peer host2 192.168.50.21:10000

blog20200511-12.cfg

backend http_requests
  stick-table type ip size 1m expire 10m peers lb_cluster store http_req_rate(10m)

blog20200511-13.sh

$ curl -X POST \
  -H 'Content-Type: application/json'  \
  -u dataplaneapi:password \
  '192.168.50.20:5555/v2/services/haproxy/configuration/peer_section?version=1' \
  -d '{"name":"lb_cluster"}'

blog20200511-14.sh

$ curl -X POST \
  -H 'Content-Type: application/json' \
  -u dataplaneapi:password \
  '192.168.50.20:5555/v2/services/haproxy/configuration/peer_entries?version=2&peer_section=lb_cluster' \
  -d '{"name":"host1", "address":"192.168.50.20", "port":10000}'

blog20200511-15.sh

$ curl -X PUT \
  -H 'Content-Type: application/json'  \
  -u dataplaneapi:password \
  -d '{"name": "login_requests", "stick_table": {"type": "ip", "size": 1000000, "expire": 600, "store": "http_req_rate(10m)", "peers": "lb_cluster"}}' \
  '192.168.50.20:5555/v2/services/haproxy/configuration/backends/login_requests?version=1'

blog20200511-16.sh

$ curl -X POST \
  -H 'Content-Type: application/json' \
  -u dataplaneapi:password \
  -d '{"name": "internal_dns", "parse_resolv-conf": false, "accepted_payload_size": 8192}' \
  '192.168.50.20:5555/v2/services/haproxy/configuration/resolvers?version=1'

blog20200511-17.sh

$ curl -X POST \
  -H 'Content-Type: application/json' \
  -u dataplaneapi:password \
  -d '{"name": "ns1", "address": "10.0.0.1", "port": 53}' \
  '192.168.50.20:5555/v2/services/haproxy/configuration/nameservers?version=2&resolver=internal_dns'

blog20200511-18.cfg

resolvers internal_dns
  nameserver ns1 10.0.0.1:53
  accepted_payload_size 8192

blog20200511-19.sh

$ curl -X PUT \
  -H 'Content-Type: application/json' \
  -u dataplaneapi:password \
  -d '{"name": "server1", "address": "server1.site.com", "port": 8080, "check": "enabled", "resolvers": "internal_dns"}' \
  '192.168.50.20:5555/v2/services/haproxy/configuration/servers/server1?version=1&backend=be_main'

blog20200511-20.sh

curl -X POST \
  -H 'Content-Type: application/json' \
  -u dataplaneapi:password \
  -d '{"index": 0, "type": "track-sc0", "track-sc0-key": "src", "track-sc0-table": "login_requests", "cond": "if", "cond_test": "{ path_beg /login }"}' \
  '192.168.50.20:5555/v2/services/haproxy/configuration/http_request_rules?version=1&parent_type=frontend&parent_name=fe_main'

blog20200511-21.cfg

http-request track-sc0 src table login_requests if { path_beg /login }