I'm working on integrating HAProxy with traceable.ai's security product.

As part of the integration, we'd like to capture the contents of any http
responses processed by HAProxy and send them to a service either via SPOA
or an RPC call from Lua. The response contents are used by the product to
help identify possible security threats.

I've tried a few things, but haven't found a reliable way to capture the
contents of response bodies. Is this possible with HAProxy?

Here are the approaches I've explored so far:

1. I used the "res.body" fetch but that only provides the contents
sometimes (I presume if it's available in a buffer):
https://github.com/rnburn/haproxy-extcap/blob/master/test/docker/extcap.conf#L19

2. I also tried accessing the contents of the response channel from a Lua
action, but that fails with "Cannot manipulate HAProxy channels in HTTP
mode"
https://github.com/rnburn/haproxy-extcap/blob/master/test/docker/response.lua#L5

Reply via email to