mirror of
https://github.com/netbirdio/plugins.git
synced 2026-05-22 18:44:07 -07:00
net/haproxy: streamline "settings" page, improve inline help, add new button
This commit is contained in:
Frank Wall
@@ -44,20 +44,26 @@ class IndexController extends \OPNsense\Base\IndexController
|
||||
public function indexAction()
|
||||
{
|
||||
// include form definitions
|
||||
$this->view->mainForm = $this->getForm("main");
|
||||
$this->view->formDialogFrontend = $this->getForm("dialogFrontend");
|
||||
$this->view->formDialogBackend = $this->getForm("dialogBackend");
|
||||
$this->view->formDialogServer = $this->getForm("dialogServer");
|
||||
$this->view->formDialogHealthcheck = $this->getForm("dialogHealthcheck");
|
||||
$this->view->formDialogAction = $this->getForm("dialogAction");
|
||||
$this->view->formDialogAcl = $this->getForm("dialogAcl");
|
||||
$this->view->formDialogUser = $this->getForm("dialogUser");
|
||||
$this->view->formDialogGroup = $this->getForm("dialogGroup");
|
||||
$this->view->formDialogLua = $this->getForm("dialogLua");
|
||||
$this->view->formDialogErrorfile = $this->getForm("dialogErrorfile");
|
||||
$this->view->formDialogMapfile = $this->getForm("dialogMapfile");
|
||||
$this->view->formDialogAction = $this->getForm("dialogAction");
|
||||
$this->view->formDialogBackend = $this->getForm("dialogBackend");
|
||||
$this->view->formDialogCpu = $this->getForm("dialogCpu");
|
||||
$this->view->formDialogErrorfile = $this->getForm("dialogErrorfile");
|
||||
$this->view->formDialogFrontend = $this->getForm("dialogFrontend");
|
||||
$this->view->formDialogGroup = $this->getForm("dialogGroup");
|
||||
$this->view->formDialogHealthcheck = $this->getForm("dialogHealthcheck");
|
||||
$this->view->formDialogLua = $this->getForm("dialogLua");
|
||||
$this->view->formDialogMapfile = $this->getForm("dialogMapfile");
|
||||
$this->view->formDialogResolver = $this->getForm("dialogResolver");
|
||||
$this->view->formDialogServer = $this->getForm("dialogServer");
|
||||
$this->view->formDialogUser = $this->getForm("dialogUser");
|
||||
$this->view->generalCacheForm = $this->getForm("generalCache");
|
||||
$this->view->generalDefaultsForm = $this->getForm("generalDefaults");
|
||||
$this->view->generalLoggingForm = $this->getForm("generalLogging");
|
||||
$this->view->generalPeersForm = $this->getForm("generalPeers");
|
||||
$this->view->generalSettingsForm = $this->getForm("generalSettings");
|
||||
$this->view->generalStatsForm = $this->getForm("generalStats");
|
||||
$this->view->generalTuningForm = $this->getForm("generalTuning");
|
||||
// set additional view parameters
|
||||
$mdlHAProxy = new \OPNsense\HAProxy\HAProxy();
|
||||
$this->view->showIntro = (string)$mdlHAProxy->general->showIntro;
|
||||
|
||||
@@ -0,0 +1,30 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Cache</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.enabled</id>
|
||||
<label>Cache enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's cache which was designed to perform cache on small objects (favicon, css...). This is a minimalist low-maintenance cache which runs in RAM.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.totalMaxSize</id>
|
||||
<label>Maximum Size of Cache (MB)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the size in RAM of the cache in megabytes. This size is split in blocks of 1kB which are used by the cache entries. Its maximum value is 4095.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.maxAge</id>
|
||||
<label>Maximum Object Age (sec)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the maximum expiration duration. Cache-Control response headers will be respected if they are less than this value. The default value is 60 seconds.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.maxObjectSize</id>
|
||||
<label>Maximum Object Size (bytes)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the maximum size of the objects to be cached. Must not be greater than an half of the maximum size of the cache. If not set, it equals to a 256th of the cache size. All objects with sizes larger than this value will not be cached.]]></help>
|
||||
</field>
|
||||
</form>
|
||||
+63
@@ -0,0 +1,63 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Default Parameters</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.maxConnections</id>
|
||||
<label>Max. Connections</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum number of concurrent connections for this frontend.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutClient</id>
|
||||
<label>Client Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum inactivity time on the client side. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutConnect</id>
|
||||
<label>Connection Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum time to wait for a connection attempt to a server to succeed. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutCheck</id>
|
||||
<label>Check Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets an additional read timeout for running health checks on a server. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutServer</id>
|
||||
<label>Server Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum inactivity time on the server side. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.retries</id>
|
||||
<label>Retries</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the number of retries to perform on a server after a connection failure (default is 3).]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.redispatch</id>
|
||||
<label>Session redistribution</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Enable or disable session redistribution in case of connection failure.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.init_addr</id>
|
||||
<label>DNS Resolve Order</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<sortable>true</sortable>
|
||||
<help><![CDATA[Indicates in which order server addresses should be resolved upon startup. Method "last" suggests to pick the address which appears in the state file. Method "libc" uses the libc's internal resolver. Method "none" specifically indicates that the server should start without any valid IP address in a down state. It can be useful to ignore some DNS issues upon startup, waiting for the situation to get fixed later. Defaults to "last,libc".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the defaults settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</form>
|
||||
+31
@@ -0,0 +1,31 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Logging</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.host</id>
|
||||
<label>Log Host</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Indicates where to send the logs. Takes an IPv4 or IPv6 address optionally followed by a colon (':') and a UDP port, i.e. 127.0.0.1 or 10.0.0.1:514]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.facility</id>
|
||||
<label>Syslog facility</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Choose one of the 24 standard syslog facilities. The default value is local0.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.level</id>
|
||||
<label>Filter syslog level</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Can be specified to filter outgoing messages. By default, all messages are sent. If a level is specified, only messages with a severity at least as important as this level will be sent.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.length</id>
|
||||
<label>Max. line length</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Specify an optional maximum line length in characters. Log lines larger than this value will be truncated before being sent. The reason is that syslog servers act differently on log line length. All servers support the default value of 1024 characters, but some servers simply drop larger lines while others do log them.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</form>
|
||||
@@ -0,0 +1,56 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Peers</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.enabled</id>
|
||||
<label>Enable peers</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable or disable HAProxy peers. This will propagate entries of any data-types in stick-tables between several HAProxy instances over TCP connections in a multi-master fashion.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<label>Peer 1 (this host)</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.name1</id>
|
||||
<label>Peer name (FQDN)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The name of the peer. This is usually the full hostname to make it possible for HAProxy to recognize the local peer. If HAProxy is unable to find the local peer it will fail to start.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.listen1</id>
|
||||
<label>Listen address (IP)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The listen address of the local peer or the address of the remote peer.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.port1</id>
|
||||
<label>TCP Port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The TCP port that should be used for connections to this peer. It must not be used by any other service.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<label>Peer 2 (remote host)</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.name2</id>
|
||||
<label>Peer name (FQDN)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The name of the peer. This is usually the full hostname to make it possible for HAProxy to recognize the local peer. If HAProxy is unable to find the local peer it will fail to start.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.listen2</id>
|
||||
<label>Listen address (IP)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The listen address of the local peer or the address of the remote peer.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.port2</id>
|
||||
<label>TCP Port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The TCP port that should be used for connections to this peer. It must not be used by any other service.]]></help>
|
||||
</field>
|
||||
</form>
|
||||
+30
@@ -0,0 +1,30 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Service</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.enabled</id>
|
||||
<label>Enable HAProxy</label>
|
||||
<type>checkbox</type>
|
||||
<help>Enable or disable the HAProxy service.</help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.gracefulStop</id>
|
||||
<label>Graceful stop</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's graceful stop mode. In this mode HAProxy will continue to process existing connections until they close. Note that this may severely slow down HAProxy's shutdown, depending on the configured timeout values. If graceful stop mode is not enabled, HAProxy will use the hard stop mode where it immediately quits and all established connections are closed. Hard stop mode is recommended.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.seamlessReload</id>
|
||||
<label>Seamless reload</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[HAProxy will handle service restarts in a way that no connections are dropped. This is the best restart mode, because it has no impact on user experience. That being said, there might be edge cases where seamless reloads lead to unexpected behaviour.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.showIntro</id>
|
||||
<label>Show introduction pages</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Uncheck to hide all additional introduction pages. Requires a manual page reload for the change to take effect.]]></help>
|
||||
</field>
|
||||
</form>
|
||||
@@ -0,0 +1,60 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Statistics</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.enabled</id>
|
||||
<label>Stats enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's statistics page.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.port</id>
|
||||
<label>Local stats TCP port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Choose a TCP port to be used for the local statistics page. The default value is 8822.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.remoteEnabled</id>
|
||||
<label>Enable remote access</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable remote access to HAProxy's statistics page. <b>This may be a security risk if you do not enable authentication!</b> Note that you need to add appropiate firewall rules for this to work.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.remoteBind</id>
|
||||
<label>Remote listen addresses</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<allownew>true</allownew>
|
||||
<help><![CDATA[Configure listen addresses for the statistics page to enable remote access, i.e. 10.0.0.1:8080 or haproxy.example.com:8999. Use TAB key to complete typing a listen address.]]></help>
|
||||
<hint>Enter address:port here. Finish with TAB.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.authEnabled</id>
|
||||
<label>Enable authentication</label>
|
||||
<type>checkbox</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.allowedUsers</id>
|
||||
<label>Allowed Users</label>
|
||||
<type>select_multiple</type>
|
||||
<allownew>true</allownew>
|
||||
<hint>Type username or choose from list.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.allowedGroups</id>
|
||||
<label>Allowed Groups</label>
|
||||
<type>select_multiple</type>
|
||||
<allownew>true</allownew>
|
||||
<hint>Type group or choose from list.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the statistics settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</form>
|
||||
+102
@@ -0,0 +1,102 @@
|
||||
<form>
|
||||
<field>
|
||||
<label>Global Parameters</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.root</id>
|
||||
<label>Run as root</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable or disable HAProxy running as root.<br/><div class="text-info"><b>NOTE:</b> Enabling root could be a security issue but it's required by some feature.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.nbproc</id>
|
||||
<label>HAProxy processes</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Number of HAProxy processes to start.<br/><div class="text-info"><b>NOTE:</b> You may experience random issues in multi-process mode. For more information about the "nbproc" option please see the HAProxy Documentation.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.nbthread</id>
|
||||
<label>HAProxy threads</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Number of threads to create for each HAProxy process.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.maxConnections</id>
|
||||
<label>Maximum connections</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum number of concurrent connections per HAProxy process.<br/><div class="text-info"><b>NOTE:</b> HAProxy will not be able to allocate enough memory if you set this value too high. Consider raising the settings for kern.maxfiles and kern.maxfilesperproc if you need to specify a non-default value.</div>]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.sslServerVerify</id>
|
||||
<label>Verify SSL Server Certificates</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[This enforces a certain behavior for SSL verify on servers, ignoring per-server settings. If set to 'enforce verify', server certificates are verified. If set to 'disable verify', server certificates are not verified. The default is 'no preference' to only use per-server configurations and not enforce a global default for all servers.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.maxDHSize</id>
|
||||
<label>Maximum SSL DH Size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum size of the Diffie-Hellman parameters used for generating the ephemeral/temporary Diffie-Hellman key in case of DHE key exchange (default is 1024).<br/><div class="text-info"><b>NOTE:</b> Higher values will increase the CPU load. For more information about the "tune.ssl.default-dh-param" option please see the HAProxy Documentation.</div>]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.bufferSize</id>
|
||||
<label>Buffer size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Change the buffer size (in bytes). Lower values allow more sessions to coexist in the same amount of RAM, and higher values allow some applications with very large cookies to work. The default value is 16384. <br/><div class="text-info"><b>NOTE:</b> It is strongly recommended not to change this from the default value, as very low values will break some services such as statistics, and values larger than default size will increase memory usage, possibly causing the system to run out of memory.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.checkBufferSize</id>
|
||||
<label>Health check buffer size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Change the check buffer size (in bytes). Higher values may help find string or regex patterns in very large pages, though doing so may imply more memory and CPU usage. The default value is 16384.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.luaMaxMem</id>
|
||||
<label>Maximum RAM per LUA process</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum amount of RAM in megabytes per process usable by Lua. By default it is zero which means unlimited. It is important to set a limit to ensure that a bug in a script will not result in the system running out of memory.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.spreadChecks</id>
|
||||
<label>Spread checks</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Add some randomness in the check interval between 0 and +/- 50%. A value between 2 and 5 seems to show good results. The default value is 0 (disabled).]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the global settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<label>SSL default settings</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_defaultsEnabled</id>
|
||||
<label>Enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable global SSL default values.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_bindOptions</id>
|
||||
<label>Bind options</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<allownew>true</allownew>
|
||||
<help><![CDATA[Used to enforce or disable certain SSL options.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_cipherList</id>
|
||||
<label>Cipher List</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[It sets the default string describing the list of cipher algorithms ("cipher suite") that are negotiated during the SSL/TLS handshake.]]></help>
|
||||
</field>
|
||||
</form>
|
||||
@@ -1,356 +0,0 @@
|
||||
<form>
|
||||
<tab id="haproxy-general" description="Settings">
|
||||
<subtab id="haproxy-general-settings" description="Service Settings">
|
||||
<field>
|
||||
<id>haproxy.general.enabled</id>
|
||||
<label>Enable HAProxy</label>
|
||||
<type>checkbox</type>
|
||||
<help>Enable or disable the HAProxy service.</help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.gracefulStop</id>
|
||||
<label>Graceful stop</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's graceful stop mode. In this mode HAProxy will continue to process existing connections until they close. Note that this may severely slow down HAProxy's shutdown, depending on the configured timeout values. If graceful stop mode is not enabled, HAProxy will use the hard stop mode where it immediately quits and all established connections are closed. Hard stop mode is recommended.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.seamlessReload</id>
|
||||
<label>Seamless reload</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[HAProxy will handle service restarts in a way that no connections are dropped. This is the best restart mode, because it has no impact on user experience. That being said, there might be edge cases where seamless reloads lead to unexpected behaviour.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.showIntro</id>
|
||||
<label>Show introduction pages</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Uncheck to hide all additional introduction pages. Requires a manual page reload for the change to take effect.]]></help>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-peers" description="Peers / Session Sync">
|
||||
<field>
|
||||
<id>haproxy.general.peers.enabled</id>
|
||||
<label>Enable peers</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable or disable HAProxy peers. This will propagate entries of any data-types in stick-tables between several HAProxy instances over TCP connections in a multi-master fashion.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<label>Peer 1</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.name1</id>
|
||||
<label>Peer name (FQDN)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The name of the peer. This is usually the full hostname to make it possible for HAProxy to recognize the local peer. If HAProxy is unable to find the local peer it will fail to start.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.listen1</id>
|
||||
<label>Listen address (IP)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The listen address of the local peer or the address of the remote peer.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.port1</id>
|
||||
<label>TCP Port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The TCP port that should be used for connections to this peer. It must not be used by any other service.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<label>Peer 2</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.name2</id>
|
||||
<label>Peer name (FQDN)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The name of the peer. This is usually the full hostname to make it possible for HAProxy to recognize the local peer. If HAProxy is unable to find the local peer it will fail to start.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.listen2</id>
|
||||
<label>Listen address (IP)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The listen address of the local peer or the address of the remote peer.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.peers.port2</id>
|
||||
<label>TCP Port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[The TCP port that should be used for connections to this peer. It must not be used by any other service.]]></help>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-global" description="Global Parameters">
|
||||
<field>
|
||||
<label>NOTE: Define global parameters for the HAProxy service. They cannot be overriden.</label>
|
||||
<type>info</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.root</id>
|
||||
<label>Run as root</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable or disable HAProxy running as root.<br/><div class="text-info"><b>NOTE:</b> Enabling root could be a security issue but it's required by some feature.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.nbproc</id>
|
||||
<label>HAProxy processes</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Number of HAProxy processes to start.<br/><div class="text-info"><b>NOTE:</b> You may experience random issues in multi-process mode. For more information about the "nbproc" option please see the HAProxy Documentation.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.nbthread</id>
|
||||
<label>HAProxy threads</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Number of threads to create for each HAProxy process.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.maxConnections</id>
|
||||
<label>Maximum connections</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum number of concurrent connections per HAProxy process.<br/><div class="text-info"><b>NOTE:</b> HAProxy will not be able to allocate enough memory if you set this value too high. Consider raising the settings for kern.maxfiles and kern.maxfilesperproc if you need to specify a non-default value.</div>]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.sslServerVerify</id>
|
||||
<label>Verify SSL Server Certificates</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[This enforces a certain behavior for SSL verify on servers, ignoring per-server settings. If set to 'enforce verify', server certificates are verified. If set to 'disable verify', server certificates are not verified. The default is 'no preference' to only use per-server configurations and not enforce a global default for all servers.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.maxDHSize</id>
|
||||
<label>Maximum SSL DH Size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum size of the Diffie-Hellman parameters used for generating the ephemeral/temporary Diffie-Hellman key in case of DHE key exchange (default is 1024).<br/><div class="text-info"><b>NOTE:</b> Higher values will increase the CPU load. For more information about the "tune.ssl.default-dh-param" option please see the HAProxy Documentation.</div>]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.bufferSize</id>
|
||||
<label>Buffer size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Change the buffer size (in bytes). Lower values allow more sessions to coexist in the same amount of RAM, and higher values allow some applications with very large cookies to work. The default value is 16384. <br/><div class="text-info"><b>NOTE:</b> It is strongly recommended not to change this from the default value, as very low values will break some services such as statistics, and values larger than default size will increase memory usage, possibly causing the system to run out of memory.</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.checkBufferSize</id>
|
||||
<label>Health check buffer size</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Change the check buffer size (in bytes). Higher values may help find string or regex patterns in very large pages, though doing so may imply more memory and CPU usage. The default value is 16384.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.luaMaxMem</id>
|
||||
<label>Maximum RAM per LUA process</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets the maximum amount of RAM in megabytes per process usable by Lua. By default it is zero which means unlimited. It is important to set a limit to ensure that a bug in a script will not result in the system running out of memory.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.spreadChecks</id>
|
||||
<label>Spread checks</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Add some randomness in the check interval between 0 and +/- 50%. A value between 2 and 5 seems to show good results. The default value is 0 (disabled).]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the global settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<label>SSL default settings</label>
|
||||
<type>header</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_defaultsEnabled</id>
|
||||
<label>Enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable global SSL default values.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_bindOptions</id>
|
||||
<label>Bind options</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<allownew>true</allownew>
|
||||
<help><![CDATA[Used to enforce or disable certain SSL options.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.tuning.ssl_cipherList</id>
|
||||
<label>Cipher List</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[It sets the default string describing the list of cipher algorithms ("cipher suite") that are negotiated during the SSL/TLS handshake.]]></help>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-defaults" description="Default Parameters">
|
||||
<field>
|
||||
<label>NOTE: Define default parameters for ALL Public Services, Backend Pools and Servers here. They may still be overriden elsewhere.</label>
|
||||
<type>info</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.maxConnections</id>
|
||||
<label>Max. Connections</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum number of concurrent connections for this frontend.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutClient</id>
|
||||
<label>Client Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum inactivity time on the client side. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutConnect</id>
|
||||
<label>Connection Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum time to wait for a connection attempt to a server to succeed. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutCheck</id>
|
||||
<label>Check Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Sets an additional read timeout for running health checks on a server. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.timeoutServer</id>
|
||||
<label>Server Timeout</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the maximum inactivity time on the server side. Defaults to milliseconds. Optionally the unit may be specified as either "d", "h", "m", "s", "ms" or "us".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.retries</id>
|
||||
<label>Retries</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Set the number of retries to perform on a server after a connection failure (default is 3).]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.redispatch</id>
|
||||
<label>Session redistribution</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Enable or disable session redistribution in case of connection failure.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.init_addr</id>
|
||||
<label>DNS Resolve Order</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<sortable>true</sortable>
|
||||
<help><![CDATA[Indicates in which order server addresses should be resolved upon startup. Method "last" suggests to pick the address which appears in the state file. Method "libc" uses the libc's internal resolver. Method "none" specifically indicates that the server should start without any valid IP address in a down state. It can be useful to ignore some DNS issues upon startup, waiting for the situation to get fixed later. Defaults to "last,libc".]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.defaults.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the defaults settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-logging" description="Logging Configuration">
|
||||
<field>
|
||||
<id>haproxy.general.logging.host</id>
|
||||
<label>Log Host</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Indicates where to send the logs. Takes an IPv4 or IPv6 address optionally followed by a colon (':') and a UDP port, i.e. 127.0.0.1 or 10.0.0.1:514]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.facility</id>
|
||||
<label>Syslog facility</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Choose one of the 24 standard syslog facilities. The default value is local0.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.level</id>
|
||||
<label>Filter syslog level</label>
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Can be specified to filter outgoing messages. By default, all messages are sent. If a level is specified, only messages with a severity at least as important as this level will be sent.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.logging.length</id>
|
||||
<label>Max. line length</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Specify an optional maximum line length in characters. Log lines larger than this value will be truncated before being sent. The reason is that syslog servers act differently on log line length. All servers support the default value of 1024 characters, but some servers simply drop larger lines while others do log them.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-statistics" description="Statistics Configuration">
|
||||
<field>
|
||||
<id>haproxy.general.stats.enabled</id>
|
||||
<label>Stats enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's statistics page.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.port</id>
|
||||
<label>Local stats TCP port</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Choose a TCP port to be used for the local statistics page. The default value is 8822.]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.remoteEnabled</id>
|
||||
<label>Enable remote access</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable remote access to HAProxy's statistics page. <b>This may be a security risk if you do not enable authentication!</b> Note that you need to add appropiate firewall rules for this to work.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.remoteBind</id>
|
||||
<label>Remote listen addresses</label>
|
||||
<type>select_multiple</type>
|
||||
<style>tokenize</style>
|
||||
<allownew>true</allownew>
|
||||
<help><![CDATA[Configure listen addresses for the statistics page to enable remote access, i.e. 10.0.0.1:8080 or haproxy.example.com:8999. Use TAB key to complete typing a listen address.]]></help>
|
||||
<hint>Enter address:port here. Finish with TAB.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.authEnabled</id>
|
||||
<label>Enable authentication</label>
|
||||
<type>checkbox</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.allowedUsers</id>
|
||||
<label>Allowed Users</label>
|
||||
<type>select_multiple</type>
|
||||
<allownew>true</allownew>
|
||||
<hint>Type username or choose from list.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.allowedGroups</id>
|
||||
<label>Allowed Groups</label>
|
||||
<type>select_multiple</type>
|
||||
<allownew>true</allownew>
|
||||
<hint>Type group or choose from list.</hint>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.stats.customOptions</id>
|
||||
<label>Custom options</label>
|
||||
<type>textbox</type>
|
||||
<help><![CDATA[These lines will be added to the statistics settings of to the HAProxy configuration file.<br/><div class="text-info"><b>NOTE:</b> The syntax will not be checked, use at your own risk!</div>]]></help>
|
||||
<advanced>true</advanced>
|
||||
</field>
|
||||
</subtab>
|
||||
<subtab id="haproxy-general-cache" description="Cache">
|
||||
<field>
|
||||
<id>haproxy.general.cache.enabled</id>
|
||||
<label>Cache enabled</label>
|
||||
<type>checkbox</type>
|
||||
<help><![CDATA[Enable HAProxy's cache which was designed to perform cache on small objects (favicon, css...). This is a minimalist low-maintenance cache which runs in RAM.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.totalMaxSize</id>
|
||||
<label>Maximum Size of Cache (MB)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the size in RAM of the cache in megabytes. This size is split in blocks of 1kB which are used by the cache entries. Its maximum value is 4095.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.maxAge</id>
|
||||
<label>Maximum Object Age (sec)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the maximum expiration duration. Cache-Control response headers will be respected if they are less than this value. The default value is 60 seconds.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<id>haproxy.general.cache.maxObjectSize</id>
|
||||
<label>Maximum Object Size (bytes)</label>
|
||||
<type>text</type>
|
||||
<help><![CDATA[Define the maximum size of the objects to be cached. Must not be greater than an half of the maximum size of the cache. If not set, it equals to a 256th of the cache size. All objects with sizes larger than this value will not be cached.]]></help>
|
||||
</field>
|
||||
</subtab>
|
||||
</tab>
|
||||
</form>
|
||||
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user