HAProxy Data Plane API 2.6

blog20220718-01.cfg

global
  # Uses a UDP port
  log 192.168.56.30:514 local0

blog20220718-02.cfg

ring logbuffer
  description "My log buffer"
  format rfc3164
  maxlen 1200
  size 32764
  timeout connect 5s
  timeout server 10s

  # Uses a TCP port
  server mysyslogsrv 192.168.56.30:514 log-proto octet-count

blog20220718-03.cfg

global
  log ring@logbuffer local0 info

blog20220718-04.sh

$ curl -X POST \
  --user admin:password \
  -H "Content-Type: application/json" \
  -d '{
       "name": "logbuffer",
       "description": "My log buffer",
       "format": "rfc3164",
       "maxlen": 1200,
       "size": 32764,
       "timeout_connect": 5000,
       "timeout_server": 1000
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/rings?version=1"

blog20220718-05.sh

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
       "name": "mysyslogsrv",
       "address": "192.168.56.30",
       "port": 514,
       "log_proto": "octet-count"
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/servers?parent_type=ring&parent_name=logbuffer&version=2"

blog20220718-06.cfg

log-forward sylog
  # receive log messages on UDP port
  dgram-bind 192.168.56.20:514

  # receive log messages on TCP port
  bind 192.168.56.20:514

  # forward to this syslog server using UDP
  log 192.168.56.21:514 local0

blog20220718-07.sh

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
       "name": "sylog",
       "maxconn": 100
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/log_forwards?version=3"

blog20220718-08.sh

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
        "address": "192.168.56.20",
       "port": 514
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/binds?parent_type=log_forward&parent_name=syslog&version=4"

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
        "address": "192.168.56.20",
       "port": 514
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/dgram_binds?log_forward=syslog&version=5"

blog20220718-09.sh

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
        "address": "192.168.56.21:514",
       "facility": "level0",
        "sample_range": "1",
        "sample_size": 2,
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/log_targets?parent_type=log_forward&parent_name=syslog&version=5"

blog20220718-10.cfg

frontend test
   http-after-response set-header Cache-Control "no-store,no-cache,private"

blog20220718-11.sh

$ curl -X GET \
  -–user admin:password \
  -H "Content-Type: application/json" \
  "http://127.0.0.1:5555/v2/health"

HTTP/1.1 200 OK
Content-Type: application/json
Vary: Origin
Date: Thu, 14 Jul 2022 13:01:17 GMT
Content-Length: 22
Connection: close

{
  "haproxy": "up"
}

blog20220718-12.hcl

haproxy {
 config_file = "/etc/haproxy/haproxy.cfg"
 haproxy_bin = "haproxy"

 reload {
   reload_delay = 5
   reload_cmd = "systemctl reload haproxy"
   restart_cmd = "systemctl restart haproxy"
   status_cmd = "systemctl status haproxy"
   reload_retention = 1
 }
}

blog20220718-13.yaml

haproxy:
 config_file: "/etc/haproxy/haproxy.cfg"
 haproxy_bin: "haproxy"
 reload:
   reload_delay: 5
   reload_cmd: "systemctl reload haproxy"
   restart_cmd: "systemctl restart haproxy"
   status_cmd: "systemctl status haproxy"
   reload_retention: 1

blog20220718-14.sh

$ curl -X POST \
  -–user admin:password \
  -H "Content-Type: application/json" \
  -d '{
        "index": 0,
       "action": "set-header",
       "hdr_name": "Cache-Control",
       "hdr_fmt": "no-store,no-cache,private",
      }' \
  "http://127.0.0.1:5555/v2/services/haproxy/configuration/http_after_response_rules?parent_type=frontend&parent_name=test&version=1"