On Wed, Dec 10, 2014 at 5:35 AM, Vivek Malik <vivek.ma...@gmail.com> wrote: > Hi, > > AFAIK, Haproxy doesn't have a subrequest feature. > > However, there are other design solutions possible to make Haproxy as > SSO filter. I am using Haproxy is a similar fashion. I have coded my > SSO to notify Haproxy whenever a new SSO authentication session is > added. Haproxy adds that session id to the map. When a request comes > to Haproxy, it checks the map for the session id. If session id is not > present, haproxy is set to respond with 302 to the login page. > > You can do the same with a stick_table too instead of a map. However, > you will need in_table(<table>) function which is only present in > 1.6-devel as of now. > > Regards, > Vivek
A safer alternative would to use HAProxy Enterprise. It embeds all necessary features in a stable (and supported) HAProxy: http://haproxy.com/doc/hapee/1.5/introduction.html#backported-features Baptiste > > On Tue, Dec 9, 2014 at 6:54 PM, Patrick Kaeding > <pkaed...@launchdarkly.com> wrote: >> Hello >> >> I'm interested in using HAProxy as my external-facing proxy, in front >> of my applications. I want to implement an SSO application to handle >> authentication (similar to what is described here: >> http://dejanglozic.com/2014/10/07/sharing-micro-service-authentication-using-nginx-passport-and-redis/). >> >> Nginx has the ngx_http_auth_request_module >> (http://nginx.org/en/docs/http/ngx_http_auth_request_module.html), >> which looks like it would work well, but I am wondering if I can do >> this with HAProxy, and not need Nginx as a second layer in front of my >> applicaitons. >> >> Can HAProxy make subrequests to determine how to handle the incoming >> request? Are there any resources I should check out to help with this? >> >> Thanks! >> -- >> Patrick Kaeding >> pkaed...@launchdarkly.com >> >
