HAProxy Widget

jvorhees

Hello,

If you have not too much clients like me, and also have routing/natting with reverse proxy backends/servers that make difficult to see clients source addresses in tcp/https mode, this widget i've made (thanks to Marcelloc for his pfBlocker Widget that i use to start building this HAProxy widget, and Willy for his HAProxy explanations) is for you !

You could also Enable/Disable Backends/Servers as in stats page.

Tested with latest release of HAProxy-full 1.4.21 pkg v 1.0 package on pfsense 2.0.1

The only requirement is to install socat on your pfsense box

Widget files/readme: https://github.com/jvorhees/pfsense/tree/master/Widgets/Haproxy

Post here if you like it, or want to say something about ;-)

Jvorhees.

marcelloc

jvorhees,

Thanks for your contributuion. I'll try to merge it to haproxy when I have time. :)

att,
Marcello Coutinho

jvorhees

You're welcome !

it's my first contribution for this amazing firewall distribution, and sorry for nested foreach loops in php code ;)

att,
Jvorhees

PiBa

Hey jvorhees,

Do you have 'plans' on making this widget available as a 'standalone' package?

Im currently changing the haproxy-devel package. And would like to include your widget in its installation package.

Would you mind if i did so.?

Greets PiBa-NL

p.s. If you want to 'maintain' a package and get it committed to the main development tree it its easier to create a 'fork' on github from the main pfSense-packages tree, commit you changes to the fork and then send 'pull requests'.

jvorhees

Hello PiBa,

Feel free to include it !

I've no plan for now, but i stay tuned !

Att.
jvorhees

PS: Thank you for the package maintaining information (i had no "where to start in working with pfsense packages ? build,rules,the right way…"), i will get back to you when i have time for this !!!

PiBa

For your information, the widget is now included in the HAProxy-devel1.5-dev18 package.
Made a few improvements to it to also:
-Options configurable from the WebGUI.
-Faster server enable/disable responses.
-Dropped socat requirement.

Check it out if you want 8)