Clark Boylan f24bbf97a7 Do more robust checks against zuul-web with haproxy
Switch the port 80 and 443 endpoints over to doing http checks instead
of tcp checks. This ensures that both apache and the zuul-web backend
are functional before balancing to them.

The fingergw remains a tcp check.

Change-Id: Iabe2d7822c9ef7e4514b9a0eb627f15b93ad48e2
2022-03-04 14:17:51 -08:00

39 lines
1011 B
YAML

zuul_lb_listeners:
- name: balance_zuul_http
bind:
- ':::80'
check_option: 'httpchk'
servers:
- name: 'zuul01.opendev.org'
address: '104.130.246.57:80'
check_method: 'check'
- name: 'zuul02.opendev.org'
address: '104.130.246.31:80'
check_method: 'check'
- name: balance_zuul_https
bind:
- ':::443'
check_option: 'httpchk'
servers:
- name: 'zuul01.opendev.org'
address: '104.130.246.57:443'
check_method: 'check-ssl verify none'
- name: 'zuul02.opendev.org'
address: '104.130.246.31:443'
check_method: 'check-ssl verify none'
- name: balance_zuul_finger
bind:
- ':::79'
check_option: 'tcp-check'
servers:
- name: 'zuul01.opendev.org'
address: '104.130.246.57:79'
check_method: 'check'
- name: 'zuul02.opendev.org'
address: '104.130.246.31:79'
check_method: 'check'
iptables_extra_public_tcp_ports:
- 443
- 80
- 79