On Tue, Sep 22, 2015 at 4:56 PM, Fitzpatrick, Adrian <[email protected]> wrote:
> Hi, > > > > I’m wondering is there a way to define an ACL so that it can be referenced > from multiple front-ends? Or, to ask the question another way – why can’t > ACL’s be defined in defaults? > > > > My scenario is that I am using HAProxy for Layer 7 content switching based > on URL, and I have about 5 front-ends and about 100 back-ends. Based on the > URL, each front-end selects which backend should process the request – > “use_backend if ….”. So I’ve got 100 ACLs, one each for the URL pattern > corresponding to the traffic destined for the particular backend. The 5 > front-ends separate incoming requests by location and user type, and > different front-ends have access to different sub-sets of the back-ends. > Currently I have to repeat the definition of the ACLs across each of these > 5 front-ends. Is there a way to define my ACLs in one place and reference > them across each of the 5 front-ends? E.g. I would have thought I could > just define all the ACLs in defaults, but this doesn’t appear to be > possible? > > > > Thanks, > > > > Adrian > > ********************************************************************* > > Please note that Revenue cannot guarantee that any personal and sensitive > data, sent in plain text via standard email, is fully secure. Customers who > choose to use this channel are deemed to have accepted any risk involved. The > alternative communication methods offered by Revenue include standard post > and the option to register for our (encrypted) MyEnquiries service on our > website www.revenue.ie. > > > ********************************************************************* > > Hi Adrian, You might achieve the same purpose with a few lines of configuration, using maps, to assossiate a URL path to a backend, then using the dynamic backend selection. There is an example here using Host header: http://blog.haproxy.com/2015/01/26/web-application-name-to-backend-mapping-in-haproxy/ Let me know if you need help with URL path. Baptiste
