Thomas Lynch
241c04a1b2
Add health check setup in server registration
...
Add observe layer4 inter to default server line
Fix 3rd nginx and update docker-compose
Remove x-haproxy-cn header fetch because it only needs to be a static fetch of haproxy_cn, since the logic overwrite it to be equivalent
2025-03-28 21:27:21 +11:00
Thomas Lynch
a65d7b90d1
update example maps
2025-03-16 23:03:50 +11:00
Thomas Lynch
842df64c5e
Update haproxy dockerfile for newer lua and fix ca-certificate installation
...
Add verify_none option in server registration (for development testing of SSL backends)
2025-03-16 22:49:00 +11:00
Thomas Lynch
30eb129bd8
Push ssl testing
2025-03-16 15:55:49 +11:00
Thomas Lynch
488eb02210
Fix some issues with runtime socket because geo server splitting used invalid character
...
Add additional challenge, not enabled yet
2025-03-16 14:08:39 +11:00
Thomas Lynch
6f10291892
First iteration of working geo routing
2025-03-15 17:31:20 +11:00
Thomas Lynch
84ddfbc719
Add geo routing to different backends for same domain
2025-03-15 12:45:22 +11:00
Thomas Lynch
c0a2f77f8b
Read from ddos_config table to determine if nojs script should be shown (allowing to be disabled per domain or path
2025-03-09 23:06:59 +11:00
Thomas Lynch
0d5e39cad1
Implement varnish for caching alongside haproxy, remove using internal haproxy cache
2024-11-12 18:41:02 +11:00
Thomas Lynch
f6e1adf1c5
clear css map
2024-10-21 18:11:28 +11:00
Thomas Lynch
7e44a236a1
Add the custom css map (for bot-check page so far)
2024-10-21 00:07:03 +11:00
Thomas Lynch
f7dc984d60
Testing new ACLs for query string
2024-07-11 21:09:24 +10:00
Thomas Lynch
53a679fc76
add missing global configs for master-worker mode and crt base
2024-06-30 22:36:54 +10:00
Thomas Lynch
25f702d157
Add ACL so alt-svc header is only sent when geo continent not matching server env
2024-01-28 17:44:07 +11:00
Thomas Lynch
1dd69fd924
Add geo blocking for country and continent, changes get_ip_var lua script section to use two tables
2023-10-15 18:13:52 +11:00
Thomas Lynch
e36add4ee7
Add asn blocking
2023-09-09 21:39:45 +10:00
Thomas Lynch
93cac69798
Make blocked and whitelist maps multi tenant
2023-09-07 16:47:21 +10:00
Thomas Lynch
d687e54d17
Test with updated dataplaneapi for map fix and exclusing backends in sync, change to .yml, and empty backends map
2023-09-03 01:16:14 +10:00
Thomas Lynch
96fef80694
add maps for upcoming vpn and asn handling
2023-09-02 22:18:47 +10:00
Thomas Lynch
bdd2213c6b
haproxy 2.8 dockerfile, remove testing cert, change ddos map for json testing
2023-06-15 22:02:42 +10:00
Thomas Lynch
eb82a3d391
ne wjson map format for excluding exits
2023-06-15 22:01:53 +10:00
Thomas Lynch
1df8277ee2
Bugfix to declaration of crawler whitelist map, reduce difficulty for testing
2023-06-10 12:51:56 +10:00
Thomas Lynch
ab5614e702
Revert dockerfile because 2.8 and http/3 still has some issues with lua
2023-06-08 00:14:25 +10:00
Thomas Lynch
b70fd56201
Test with http3 quic and updated dockerfile with haproxy 2.8
2023-06-08 00:00:05 +10:00
Thomas Lynch
10c875e689
update config for crawler-whitelist, cleanup a few things in the example
2023-06-04 13:04:13 +10:00
Thomas Lynch
22b6b4795e
WIP of configurable challenge settings per-domain with a ddos_config map and handling
2023-05-21 20:13:23 +10:00
Thomas Lynch
14922d7e2f
Refactor fetching header for difference between applet and transaction mode.
...
Improve locale_strings map by re json.encode.
Add method to put translation jsons into txn var and read with a json_query fetch inside template files not served by a lua view e.g. maintenance page
2023-05-21 15:18:55 +10:00
Thomas Lynch
93c01c05c5
Update redirect to new redirect and rewrite
...
Add example geoip config
Add example alt-svc config
Update README
2023-04-19 21:04:44 +10:00
Thomas Lynch
94567f69ff
Improve appearance and affordance of challenge pages with some template and js tweaks
2023-03-19 13:07:41 +11:00
Thomas Lynch
5b98b5b15c
simple redirect map
2023-03-04 20:18:54 +11:00
Thomas Lynch
3cc7482084
Fully convert to data plane api
...
Change global ACL to a map to realtime update with data plane api
Change how on setartup servers are registered in lua
2023-02-18 15:14:40 +11:00
Thomas Lynch
875e9e5edd
Add back dataplaneapi in anticipation of using it to control haproxy rather than haproxy-sdk runtime socket
2023-02-12 13:17:03 +11:00
Thomas Lynch
08a966c121
Reorganise, move code to not be split between haproxy and src folder
2023-02-11 15:06:35 +11:00
