On 02/02/2015 05:31 μμ, Willy Tarreau wrote:
> Hi Christian,
> 

[...snip...]

> 
> We've been considering this for a while now without any elegant solution.
> Recently while discussing with Emeric we got an idea to implement "scopes",
> and along these lines I think we could instead try to inherit ACLs from
> other frontends/backends/defaults sections. Currently defaults sections
> support having a name, though this name is not internally used, admins
> often put some notes there such as "tcp" or a customer's id.
> 
> Here we could have something like this :
> 
>     defaults foo
>         acl local src 127.0.0.1
> 
>     frontend bar
>         acl client src 192.168.0.0/24
>         use_backend c1 if client
>         use_backend c2 if foo/local
> 
> It would also bring the extra benefit of allowing complex shared configs
> to use their own "global" ACLs regardless of what is being used in other
> sections.
> 
> That's just an idea, of course.
> 

That sounds awesome, please bring in on :-)

Cheers,
Pavlos


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to