infra/ansible
23
7
Fork 53
Code Pull requests 11 Activity Actions

proxies / src.fp.o: drop haproxy from src

Browse source 
Right now requests go:

client -> httpd on proxy -> anubis -> httpd on proxy -> varnish -> haproxy -> pkgs01

but haproxy is pretty useless in this case.
There is only one backend (pkgs01) so no load balancing, and doing a
liveness check is also pointless because if its down the request will
fail anyhow.

It might be tha haproxy ovehead is causing varnish to return retries
sometimes ( infra/tickets#13123 )

So, this drops it out for this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2026-03-11 17:18:45 -07:00 • committed by Kevin Fenzi
commit 7413d9c84f
2 changed files with 2 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/haproxy/templates/haproxy.cfg
View file

@ -237,23 +237,6 @@ backend oci-candidate-registry-backend
balance hdr(appserver)
server oci-candidate-registry01 oci-candidate-registry01:5000 check inter 10s rise 1 fall 2
{% if datacenter == 'rdu3' %}
# Only enable this on rdu3 proxies
frontend src-frontend
bind 0.0.0.0:10057
default_backend src-backend
backend src-backend
balance hdr(appserver)
{% if env == "staging" or datacenter == 'rdu3' %}
server pkgs01 pkgs01:80 check inter 10s rise 1 fall 2
{% endif %}
option httpchk GET /
retries 5
retry-on all-retryable-errors
{% endif %}
# This is an endpoint using only ipa01. This is used for API access, since sessions
# are not synchronized.
frontend ipa01-frontend

4
roles/varnish/templates/proxies.vcl.j2
View file

@ -36,8 +36,8 @@ backend registry {
}
backend src {
.host = "localhost";
.port = "10057";
.host = "pkgs01";
.port = "http";
}
acl purge {