aboutsummaryrefslogtreecommitdiff
path: root/doc/source/reference/high-availability
AgeCommit message (Collapse)AuthorFilesLines
2026-04-12Fix: Update outdated documentationPiotr Milewski1-3/+3
Change-Id: I5dc53f74afd9a5b565201dc9d3039d82cb65dabc Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2024-08-30harden haproxy TLS configurationSven Kieske1-0/+5
harden the TLS default config according to the mozilla "modern" recommendation: https://ssl-config.mozilla.org/#server=haproxy&version=2.1&config=modern&openssl=1.1.1k&guideline=5.7 if you want to revert to the old settings, set: kolla_haproxy_ssl_settings: "legacy" in globals.yaml alternatively you can also set it to "intermediate" for a middle ground between security and accessibility. this also adjusts the glance and neutron tls proxy ssl settings in their dedicated haproxy config templates to use the same mechanism. also add some haproxy related docs to the TLS guide and cross reference it from the haproxy-guide. Closes-Bug: #2060787 Signed-off-by: Sven Kieske <kieske@osism.tech> Change-Id: I311c374b34f22c78cc5bcf91e5ce3924c62568b6
2024-04-22CI: Add codespell to pep8Michal Nasiadka1-2/+2
Fix existing spelling errors Change-Id: Ie689cf5a344aaa630a4860448b09242333a8e119
2023-09-25[haproxy] Adds http/2 support to HAProxyDincer Celik1-0/+10
This change introduces haproxy_enable_http2 to let operators enable http/2 on HAProxy frontends when kolla_enable_tls_external is enabled. Change-Id: I2e00d3e9193a3052d43a228915ea249794490afe Closes-Bug: #1850924
2023-06-29haproxy: support single external frontendMichal Nasiadka1-0/+20
Use case: exposing single external https frontend and load balancing services using FQDNs. Support different ports for internal and external endpoints. Introduced kolla_url filter to normalize urls like: - https://magnum.external:443/v1 - http://magnum.external:80/v1 Change-Id: I9fb03fe1cebce5c7198d523e015280c69f139cd0 Co-Authored-By: Jakub Darmach <jakub@stackhpc.com>
2021-09-28Merge "Add way to change weight of haproxy backend per service"Zuul1-0/+17
2021-09-26Add way to change weight of haproxy backend per serviceMichal Arbet1-0/+17
This patch adding option to control weight of haproxy backends per service via host variable. Example: [control] server1 haproxy_nova_api_weight=10 server2 haproxy_nova_api_weight=2 haproxy_keystone_internal_weight=10 server3 haproxy_keystone_admin_weight=50 If weight is not defined, everything is working as before. Change-Id: Ie8cc228198651c57f8ffe3eb060875e45d1f0700
2021-09-16Remove haproxy,keepalived groupsMichal Arbet1-1/+1
Haproxy was renamed in [1]. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/770618 Change-Id: Ib2d7f0774fede570a8c4c315d83afd420c31da0b
2021-06-23Allow user to set sysctl_net_ipv4_tcp_retries2Michal Arbet2-0/+57
This patch is adding configuration option to manipulate with kernel option sysctl_net_ipv4_tcp_retries2. More informations about kernel option in [1][2] and RedHat suggestion [3] to set for DBs and HA. [1]: https://pracucci.com/linux-tcp-rto-min-max-and-tcp-retries2.html [2]: https://blog.cloudflare.com/when-tcp-sockets-refuse-to-die/ [3]: https://access.redhat.com/solutions/726753 Closes-Bug: #1917068 Change-Id: Ia0decbbfa4e33b1889b635f8bb1c9094567a2ce6
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:07:16 +0000