digitaldemocratic/dd-sso/docker/haproxy/haproxy.cnf.parts/tail-waf.cnf

29 lines
617 B
Plaintext

#
# BEGIN: waf-tail.cnf
#
# Internal traffic
use_backend bk_web if { src 172.16.0.0/12 }
default_backend bk_waf
# WAF farm where users' traffic is routed first
backend bk_waf
mode http
server modsecurity dd-waf-apache:80 check port 80 inter 5s rise 2 fall 10 resolvers mydns init-addr none
# Internal traffic passes through this backend
backend bk_web
mode http
server bk_web dd-sso-haproxy:81 resolvers mydns init-addr 127.0.0.1
# Traffic secured by the WAF arrives here
frontend ft_web
bind :81 name http
log global
option httplog
timeout client 25s
maxconn 1000
#
# END: waf-tail.cnf
#