mirror of
https://github.com/opnsense/docs
synced 2024-11-09 01:10:33 +00:00
86 lines
2.3 KiB
ReStructuredText
86 lines
2.3 KiB
ReStructuredText
HAProxy How-Tos
|
|
===============
|
|
|
|
Redirect Root directory
|
|
-----------------------
|
|
|
|
Create a condition:
|
|
|
|
.. image:: images/haproxy_root_path_condition.png
|
|
|
|
============== ==============
|
|
name root
|
|
Condition type Path matches
|
|
Path matches /
|
|
============== ==============
|
|
|
|
Create a Rule:
|
|
|
|
.. image:: images/haproxy_forward_to_dir_rule.png
|
|
|
|
======================= ===================================================
|
|
name forward_to_dir
|
|
Test type IF
|
|
conditions root
|
|
Logical ops none
|
|
Execute function http-request redirect
|
|
HTTP Redirect parameter code 301 location http://www.example.net/directory/
|
|
======================= ===================================================
|
|
|
|
Please note that 301 is for a permanent redirect. If you want to do it teporary,
|
|
you will have to use another status code.
|
|
|
|
|
|
|
|
Under Public Services edit your frontend and add "forward_to_dir" to Select Rules.
|
|
|
|
.. image:: images/haproxy_forward_to_dir_service.png
|
|
|
|
|
|
Add Basic Authentication to a Service
|
|
-------------------------------------
|
|
|
|
I have a Webapplication which have to be exposed to the outside and doesn't allow authentication.
|
|
So HAProxy with basic auth would be just fine to get a mininum of security.
|
|
|
|
* Go to "Rules & Conditions" - "Conditions" and Add a new one:
|
|
|
|
.. image:: images/haproxy_condition_add_authentication.png
|
|
|
|
=================== =================
|
|
name choose a name
|
|
Condition type Custom
|
|
option pass-through http_auth(admins)
|
|
=================== =================
|
|
|
|
* Add a rule:
|
|
|
|
.. image:: images/haproxy_edit_rule_authentication.png
|
|
|
|
================ =================================
|
|
name a name for your rule
|
|
Test type UNLESS
|
|
condition select the previously created one
|
|
Logical operator none
|
|
Execute function http-request auth"
|
|
================ =================================
|
|
|
|
* Go to your frontend and add the ACL to it.
|
|
|
|
.. image:: images/haproxy_frontend_add_authentication.png
|
|
|
|
|
|
* Go to :menuselection:`Settings --> Global Parameters`, enable the advanced mode (top left), and add your users to configuration
|
|
via the "Custom options"
|
|
|
|
.. image:: images/haproxy_settings_global_params_auth.png
|
|
|
|
|
|
.. code-block:: none
|
|
|
|
userlist admins
|
|
user test1 insecure-password pw1
|
|
user test2 insecure-password pw2
|
|
|
|
|