Open Stack

On Wed, 2016-10-05 at 13:28 +1300, Xav Paice wrote:
> On Tue, 2016-10-04 at 17:48 -0600, Curtis wrote:
> > Maybe you have someone on staff who loves writing lua (for haproxy)? :)
> > 
> 
> Well, maybe not that far, but yeah we're now thinking down that route.
> If we get there, I'll quickly write something up about it.  Many thanks
> for the suggestion :)
> 

OK, that wasn't as hard as I thought it would be.  Thanks Curtis!

Haproxy config snippet, in case anyone else has the same need (note, not
in production, only rudimentary testing, and slightly sanitized for a
mailing list):

frontend objectstore
  bind :::8843 ssl crt host.crt.pem ca-file ca.pem no-sslv3
  mode http
  acl rgw_customer path_beg -m sub -f /some/list/of/rgw-folks
  use_backend rgw00 if rgw_customer
  default_backend swift-pxy00

backend rgw00
  balance roundrobin
  mode http
  http-request set-path /%[path,regsub(/v1/AUTH_.{32},swift/v1)]
  server rgw1 10.0.0.111:8443 check ca-file ca.pem crt host.crt.pem ssl
  server rgw2 10.0.0.230:8443 check ca-file ca.pem crt host.crt.pem ssl

backend swift-pxy00
  balance roundrobin
  mode http
  option httpchk HEAD /healthcheck HTTP/1.0
  option forwardfor
  option http-server-close
  timeout http-keep-alive 500
  server opxy1 10.0.0.123:8843 check ca-file ca.pem crt host.crt.pem ssl