Hi Martin,
On Sat, Sep 17, 2016 at 11:16:15PM +0200, Martin Tóth wrote:
> Hi fellow haproxy users,
>
> i just wanted to ask if new implementation of haproxy (implemented in v.
> 1.6.9) namespaces can work like this. I have Zabbix proxy daemon running
> inside network namespace in Linux, let???s say namespace is named
> ???customer???.
> I want to be able to run haproxy daemon in default linux namespace and be
> able to connect with haproxy to Zabbix proxy demon running inside own
> namespace. Is this possible ?
>
> My config :
>
> namespace_list
> namespace customer
>
> frontend customer
> mode tcp
> bind 10.0.0.2:10001 accept-proxy # this is IP and port on host
> (10.0.0.2 - linux server IP) where i should connect when i want to reach
> customer Zabbix proxy daemon
> default_backend serverlist
>
> backend serverlist
> mode tcp
> server s1 10.8.1.4:10050 namespace customer # this is zabbix proxy
> dameon
>
> It did not found any related example of configuration or more than one page
> of documentation.
It should work like this. I've used it just for a test recently, to see
if it was possible to isolate a daemon into a network-less namespace (no
NIC except "lo"), and with haproxy connecting into that namespace. And
yes, it works. I'm not a namespace user at all so I had to use "ip netns"
with the man page opened and after trial and error I managed to make it
work.
At least you need to enter your customer namespace and issue
"netstat -ltnp" to ensure that your zabbix server is properly listening
to incoming connections, otherwise it will obviously never work.
Hoping this helps,
Willy
