synapse-easy 0.1.9 → 0.1.10
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/synapse/easy.rb +1 -2
- data/lib/synapse/easy/haproxy.rb +2 -5
- data/lib/synapse/easy/section.rb +3 -0
- data/lib/synapse/easy/section/base.rb +42 -0
- data/lib/synapse/easy/section/http.rb +65 -0
- data/lib/synapse/easy/section/stats.rb +50 -0
- data/lib/synapse/easy/section/tcp.rb +24 -0
- data/lib/synapse/easy/service.rb +1 -0
- data/lib/synapse/easy/version.rb +1 -1
- metadata +7 -5
- data/lib/synapse/easy/extra_section.rb +0 -32
- data/lib/synapse/easy/frontend_section.rb +0 -13
- data/lib/synapse/easy/stats_section.rb +0 -56
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: a19980fe2271a379f2a63484db6e16aa2ea350ba
|
4
|
+
data.tar.gz: 1fe87c961e77a8adaa66b98864270f2a7d47e323
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: de8ff95866152c578605708fa211145613b38d5fb521500a9f1ccb110a3369f328be0fe9af8e0161ee71c7bb20b13330444975269fc0cef507c07f8512154262
|
7
|
+
data.tar.gz: 641a34cd6951c34b48ab51f45637557a175aadc371130e32e6d871956767c0d11795655904a3c81954788d2df7b0666ac24e3692f32451555c8627c548981771
|
data/lib/synapse/easy.rb
CHANGED
data/lib/synapse/easy/haproxy.rb
CHANGED
@@ -84,17 +84,14 @@ module Synapse
|
|
84
84
|
]
|
85
85
|
end
|
86
86
|
def defaults
|
87
|
-
defaults =
|
87
|
+
defaults = default_options
|
88
88
|
defaults << "log #{default_log}"
|
89
89
|
defaults << "maxconn #{default_maxconn}"
|
90
90
|
defaults << "retries #{default_retries}"
|
91
91
|
defaults << "balance #{default_balance}"
|
92
|
-
defaults +=
|
92
|
+
defaults += default_timeouts.collect{|l,t| "timeout #{l} #{t}"}
|
93
93
|
defaults
|
94
94
|
end
|
95
|
-
def extra_sections
|
96
|
-
@extra_sections
|
97
|
-
end
|
98
95
|
def to_synapse
|
99
96
|
FileUtils.mkdir_p workdir.to_s unless Dir.exists? workdir.to_s
|
100
97
|
{
|
@@ -0,0 +1,42 @@
|
|
1
|
+
require "pathname"
|
2
|
+
require "active_support/core_ext/hash/indifferent_access"
|
3
|
+
require "fake/hash"
|
4
|
+
|
5
|
+
module Synapse
|
6
|
+
module Easy
|
7
|
+
module Section
|
8
|
+
class Base
|
9
|
+
include Fake::Hash
|
10
|
+
attr_accessor :type, :name, :options, :address, :port
|
11
|
+
def initialize params={}
|
12
|
+
@address = params[:address]
|
13
|
+
@address ||= "localhost"
|
14
|
+
@port = params[:port]
|
15
|
+
@port ||= Freeport.port
|
16
|
+
@name = params[:name]
|
17
|
+
@type = params[:type]
|
18
|
+
@type ||= "frontend"
|
19
|
+
@options = params[:options]
|
20
|
+
@options ||= []
|
21
|
+
end
|
22
|
+
def label
|
23
|
+
"#{type} #{name}"
|
24
|
+
end
|
25
|
+
def section_options
|
26
|
+
options
|
27
|
+
end
|
28
|
+
def each *args, &block
|
29
|
+
section_options.each(*args,&block)
|
30
|
+
end
|
31
|
+
def bind
|
32
|
+
[address,port].compact.join(":")
|
33
|
+
end
|
34
|
+
def to_synapse
|
35
|
+
{
|
36
|
+
label => section_options
|
37
|
+
}
|
38
|
+
end
|
39
|
+
end
|
40
|
+
end
|
41
|
+
end
|
42
|
+
end
|
@@ -0,0 +1,65 @@
|
|
1
|
+
require "synapse/easy/section/tcp"
|
2
|
+
|
3
|
+
module Synapse
|
4
|
+
module Easy
|
5
|
+
module Section
|
6
|
+
class Http < Tcp
|
7
|
+
attr_accessor :protocol, :ssl, :default_certificate, :certificates,
|
8
|
+
:ciphers, :secure_cookies, :strict_security
|
9
|
+
def initialize params={}
|
10
|
+
super
|
11
|
+
@mode = :http
|
12
|
+
@protocol = params[:protocol]
|
13
|
+
@protocol ||= :http
|
14
|
+
@protocol = :http unless [:http, :https].include? @protocol.to_sym
|
15
|
+
@ssl = not(params[:default_certificate].nil?)
|
16
|
+
@ssl ||= false if ssl.nil?
|
17
|
+
@default_certificate = params[:default_certificate]
|
18
|
+
@default_certificate ||= "/etc/ssl/private/ssl-cert-snakeoil.key crt /etc/ssl/certs/ssl-cert-snakeoil.pem" if ssl
|
19
|
+
@certificates = params[:certificates]
|
20
|
+
@certificates ||= []
|
21
|
+
@ciphers = params[:ciphers]
|
22
|
+
@ciphers ||= %W{ECDHE-ECDSA-AES256-GCM-SHA384
|
23
|
+
ECDHE-ECDSA-AES128-GCM-SHA256
|
24
|
+
ECDHE-ECDSA-AES256-SHA384
|
25
|
+
ECDHE-ECDSA-AES256-SHA
|
26
|
+
ECDHE-RSA-AES256-SHA384
|
27
|
+
ECDHE-RSA-AES256-SHA
|
28
|
+
DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA
|
29
|
+
DES-CBC3-SHA !NULL !aNULL !RC4 !RC2 !MEDIUM
|
30
|
+
!LOW !EXPORT !DES !MD5 !PSK !3DES} if ssl
|
31
|
+
@secure_cookies = params[:secure_cookies]
|
32
|
+
@secure_cookies ||= true if @secure_cookies.nil? and ssl
|
33
|
+
@strict_security = params[:strict_security]
|
34
|
+
@strict_security ||= true if @strict_security.nil? and ssl
|
35
|
+
end
|
36
|
+
def secure_cookies
|
37
|
+
"rsprep ^Set-Cookie:\\ (.*) Set-Cookie:\\ \\1;\\ Secure" if @secure_cookies
|
38
|
+
end
|
39
|
+
def strict_security
|
40
|
+
"rspadd Strict-Transport-Security:\\ max-age=31536000;\\ includeSubDomains" if @strict_security
|
41
|
+
end
|
42
|
+
def complex_bind
|
43
|
+
@complex_bind = []
|
44
|
+
@complex_bind << bind
|
45
|
+
@complex_bind << "ssl" if ssl
|
46
|
+
@complex_bind << "crt" if ssl
|
47
|
+
@complex_bind << default_certificate
|
48
|
+
certificates.each do |certificate|
|
49
|
+
@complex_bind << "crt"
|
50
|
+
@complex_bind << certificate
|
51
|
+
end
|
52
|
+
@complex_bind.compact.join(" ")
|
53
|
+
end
|
54
|
+
def section_options
|
55
|
+
@options.reject{|o| o =~ /^bind/} + [
|
56
|
+
"bind #{complex_bind}",
|
57
|
+
"reqadd X-Forwarded-Proto:\\ #{protocol}",
|
58
|
+
secure_cookies,
|
59
|
+
strict_security
|
60
|
+
].compact
|
61
|
+
end
|
62
|
+
end
|
63
|
+
end
|
64
|
+
end
|
65
|
+
end
|
@@ -0,0 +1,50 @@
|
|
1
|
+
require "synapse/easy/section/base"
|
2
|
+
require "socket"
|
3
|
+
require "freeport"
|
4
|
+
|
5
|
+
module Synapse
|
6
|
+
module Easy
|
7
|
+
module Section
|
8
|
+
class Stats < Base
|
9
|
+
attr_accessor :uri, :enabled, :refresh, :realm, :node, :hide_version,
|
10
|
+
:username, :password, :scope, :show_node
|
11
|
+
def initialize params={}
|
12
|
+
super
|
13
|
+
@uri = params[:uri]
|
14
|
+
@uri ||= "/"
|
15
|
+
@enabled = params[:enabled]
|
16
|
+
@enabled ||= true if @enabled.nil?
|
17
|
+
@refresh = params[:refresh]
|
18
|
+
@refresh ||= 5
|
19
|
+
@realm = params[:realm]
|
20
|
+
@realm ||= "HAProxy\\ Stats"
|
21
|
+
@hide_version = params[:hide_version]
|
22
|
+
@hide_version ||= true if @hide_version.nil?
|
23
|
+
@username = params[:username]
|
24
|
+
@password = params[:password]
|
25
|
+
@scope = params[:scope]
|
26
|
+
@show_node = params[:show_node]
|
27
|
+
@show_node ||= false if @show_node.nil?
|
28
|
+
@node = params[:node]
|
29
|
+
@node ||= Socket.gethostname
|
30
|
+
end
|
31
|
+
def section_options
|
32
|
+
@options + [
|
33
|
+
"mode http",
|
34
|
+
( "stats enable" if enabled ),
|
35
|
+
"stats uri #{uri}",
|
36
|
+
"stats refresh #{refresh}",
|
37
|
+
"stats realm #{realm}",
|
38
|
+
( "stats hide-version" if hide_version),
|
39
|
+
( "stats auth #{username}:#{password}" if username and password ),
|
40
|
+
( "stats scope #{scope}" if scope ),
|
41
|
+
( "stats show-node #{node}" if show_node ),
|
42
|
+
].compact
|
43
|
+
end
|
44
|
+
def label
|
45
|
+
"listen stats #{bind}"
|
46
|
+
end
|
47
|
+
end
|
48
|
+
end
|
49
|
+
end
|
50
|
+
end
|
@@ -0,0 +1,24 @@
|
|
1
|
+
require "synapse/easy/section/base"
|
2
|
+
|
3
|
+
module Synapse
|
4
|
+
module Easy
|
5
|
+
module Section
|
6
|
+
class Tcp < Base
|
7
|
+
attr_accessor :mode, :default_backend
|
8
|
+
def initialize params={}
|
9
|
+
super
|
10
|
+
@type = "frontend"
|
11
|
+
@mode = params[:mode]
|
12
|
+
@mode ||= :tcp
|
13
|
+
@default_backend = params[:default_backend]
|
14
|
+
end
|
15
|
+
def section_options
|
16
|
+
@options + [
|
17
|
+
"mode #{mode}",
|
18
|
+
"bind #{bind}",
|
19
|
+
].compact
|
20
|
+
end
|
21
|
+
end
|
22
|
+
end
|
23
|
+
end
|
24
|
+
end
|
data/lib/synapse/easy/service.rb
CHANGED
data/lib/synapse/easy/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: synapse-easy
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.1.
|
4
|
+
version: 0.1.10
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Mathias Kaufmann
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date: 2015-04-
|
11
|
+
date: 2015-04-02 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: resolv-consul
|
@@ -95,11 +95,13 @@ files:
|
|
95
95
|
- bin/console
|
96
96
|
- bin/setup
|
97
97
|
- lib/synapse/easy.rb
|
98
|
-
- lib/synapse/easy/extra_section.rb
|
99
|
-
- lib/synapse/easy/frontend_section.rb
|
100
98
|
- lib/synapse/easy/haproxy.rb
|
99
|
+
- lib/synapse/easy/section.rb
|
100
|
+
- lib/synapse/easy/section/base.rb
|
101
|
+
- lib/synapse/easy/section/http.rb
|
102
|
+
- lib/synapse/easy/section/stats.rb
|
103
|
+
- lib/synapse/easy/section/tcp.rb
|
101
104
|
- lib/synapse/easy/service.rb
|
102
|
-
- lib/synapse/easy/stats_section.rb
|
103
105
|
- lib/synapse/easy/version.rb
|
104
106
|
- synapse-easy.gemspec
|
105
107
|
homepage: http://synapse.stei.gr/easy
|
@@ -1,32 +0,0 @@
|
|
1
|
-
require "pathname"
|
2
|
-
require "active_support/core_ext/hash/indifferent_access"
|
3
|
-
require "fake/hash"
|
4
|
-
|
5
|
-
module Synapse
|
6
|
-
module Easy
|
7
|
-
class ExtraSection
|
8
|
-
include Fake::Hash
|
9
|
-
attr_accessor :name, :type, :options
|
10
|
-
def initialize params={}
|
11
|
-
@name = params[:name]
|
12
|
-
@type = params[:type]
|
13
|
-
@type ||= "frontend"
|
14
|
-
@options ||= []
|
15
|
-
end
|
16
|
-
def label
|
17
|
-
"#{type} #{name}"
|
18
|
-
end
|
19
|
-
def section_options
|
20
|
-
options
|
21
|
-
end
|
22
|
-
def each *args, &block
|
23
|
-
section_options.each(*args,&block)
|
24
|
-
end
|
25
|
-
def to_synapse
|
26
|
-
{
|
27
|
-
label => section_options
|
28
|
-
}
|
29
|
-
end
|
30
|
-
end
|
31
|
-
end
|
32
|
-
end
|
@@ -1,56 +0,0 @@
|
|
1
|
-
require "synapse/easy/extra_section"
|
2
|
-
require "socket"
|
3
|
-
require "freeport"
|
4
|
-
|
5
|
-
module Synapse
|
6
|
-
module Easy
|
7
|
-
class StatsSection < ExtraSection
|
8
|
-
attr_accessor :address, :port, :uri, :enabled, :refresh, :realm,
|
9
|
-
:hide_version, :username, :password, :scope, :show_node,
|
10
|
-
:node
|
11
|
-
def initialize params={}
|
12
|
-
super
|
13
|
-
@address = params[:address]
|
14
|
-
@address ||= "localhost"
|
15
|
-
@port = params[:port]
|
16
|
-
@port ||= Freeport.port
|
17
|
-
@uri = params[:uri]
|
18
|
-
@uri ||= "/"
|
19
|
-
@enabled = params[:enabled]
|
20
|
-
@enabled ||= true if @enabled.nil?
|
21
|
-
@refresh = params[:refresh]
|
22
|
-
@refresh ||= 5
|
23
|
-
@realm = params[:realm]
|
24
|
-
@realm ||= "HAProxy\\ Stats"
|
25
|
-
@hide_version = params[:hide_version]
|
26
|
-
@hide_version ||= true if @hide_version.nil?
|
27
|
-
@username = params[:username]
|
28
|
-
@password = params[:password]
|
29
|
-
@scope = params[:scope]
|
30
|
-
@show_node = params[:show_node]
|
31
|
-
@show_node ||= false if @show_node.nil?
|
32
|
-
@node = params[:node]
|
33
|
-
@node ||= Socket.gethostname
|
34
|
-
end
|
35
|
-
def section_options
|
36
|
-
@options + [
|
37
|
-
"mode http",
|
38
|
-
( "stats enable" if enabled ),
|
39
|
-
"stats uri #{uri}",
|
40
|
-
"stats refresh #{refresh}",
|
41
|
-
"stats realm #{realm}",
|
42
|
-
( "stats hide-version" if hide_version),
|
43
|
-
( "stats auth #{username}:#{password}" if username and password ),
|
44
|
-
( "stats scope #{scope}" if scope ),
|
45
|
-
( "stats show-node #{node}" if show_node ),
|
46
|
-
].compact
|
47
|
-
end
|
48
|
-
def bind
|
49
|
-
[address,port].compact.join(":")
|
50
|
-
end
|
51
|
-
def label
|
52
|
-
"listen stats #{bind}"
|
53
|
-
end
|
54
|
-
end
|
55
|
-
end
|
56
|
-
end
|