Hi, AFAIK, Haproxy doesn't have a subrequest feature.
However, there are other design solutions possible to make Haproxy as SSO filter. I am using Haproxy is a similar fashion. I have coded my SSO to notify Haproxy whenever a new SSO authentication session is added. Haproxy adds that session id to the map. When a request comes to Haproxy, it checks the map for the session id. If session id is not present, haproxy is set to respond with 302 to the login page. You can do the same with a stick_table too instead of a map. However, you will need in_table(<table>) function which is only present in 1.6-devel as of now. Regards, Vivek On Tue, Dec 9, 2014 at 6:54 PM, Patrick Kaeding <pkaed...@launchdarkly.com> wrote: > Hello > > I'm interested in using HAProxy as my external-facing proxy, in front > of my applications. I want to implement an SSO application to handle > authentication (similar to what is described here: > http://dejanglozic.com/2014/10/07/sharing-micro-service-authentication-using-nginx-passport-and-redis/). > > Nginx has the ngx_http_auth_request_module > (http://nginx.org/en/docs/http/ngx_http_auth_request_module.html), > which looks like it would work well, but I am wondering if I can do > this with HAProxy, and not need Nginx as a second layer in front of my > applicaitons. > > Can HAProxy make subrequests to determine how to handle the incoming > request? Are there any resources I should check out to help with this? > > Thanks! > -- > Patrick Kaeding > pkaed...@launchdarkly.com >
