Skip to content

Move to HAProxy 3.2 LTS#29

Open
richturner wants to merge 3 commits into
mainfrom
move_to_3.2_lts
Open

Move to HAProxy 3.2 LTS#29
richturner wants to merge 3 commits into
mainfrom
move_to_3.2_lts

Conversation

@richturner

Copy link
Copy Markdown
Member

Tested on test server and seems to work, just a minor haproxy.cfg change needed to avoid a parsing warning

@richturner richturner linked an issue May 19, 2026 that may be closed by this pull request
8 tasks
@richturner richturner self-assigned this May 19, 2026
@richturner richturner marked this pull request as draft May 19, 2026 21:31
@richturner

Copy link
Copy Markdown
Member Author

Should look at using built in ACME functionality and removing use of certbot although that is providing AWS Route 53 wildcard cert generation which I doubt we can replace.

@richturner richturner marked this pull request as ready for review June 1, 2026 15:12
@sonarqubecloud

sonarqubecloud Bot commented Jun 1, 2026

Copy link
Copy Markdown

@richturner richturner requested a review from a team June 19, 2026 13:22
@wborn wborn requested a review from Copilot June 19, 2026 17:19

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the container base image to HAProxy 3.2 (LTS) and adjusts the HAProxy config to eliminate a parsing warning around the optional MQTT rate-limiting ACL.

Changes:

  • Bump Docker base image from haproxy:2.8-alpine to haproxy:3.2-alpine.
  • Update haproxy.cfg MQTT rate-limit ACL to use a defaulted env expansion (${MQTT_RATE_LIMIT-0}) to avoid a parsing warning.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
Dockerfile Upgrades the HAProxy base image to 3.2-alpine.
haproxy.cfg Tweaks MQTT rate-limit env expansion to avoid a HAProxy 3.2 parsing warning.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread haproxy.cfg
Comment on lines 129 to 132
.if defined(MQTT_RATE_LIMIT)
# Rate limiting
acl too_fast fe_sess_rate ge "${MQTT_RATE_LIMIT}"
acl too_fast fe_sess_rate ge "${MQTT_RATE_LIMIT-0}"
tcp-request connection reject if too_fast
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade HAProxy to latest LTS version

3 participants