| rbachman[m] | Hi everyone, we're playing with the idea of integrating Anubis in our amphorae so that users have an easy way to get some form of bot/scraper protection for their services. I was curious, is anyone else already doing something like that, and is there an interest in having that upstreamed at some point? | 09:16 |
|---|---|---|
| opendevreview | Merged openstack/octavia stable/2025.2: Disabling periodic FIPS jobs on stable branches https://review.opendev.org/c/openstack/octavia/+/978851 | 10:41 |
| opendevreview | Merged openstack/octavia stable/2025.2: Add SKI and AKI extensions to amphora certificates https://review.opendev.org/c/openstack/octavia/+/982779 | 10:44 |
| opendevreview | Merged openstack/octavia stable/2025.1: Add SKI and AKI extensions to amphora certificates https://review.opendev.org/c/openstack/octavia/+/982780 | 10:44 |
| gthiemonge | rbachman[m]: I tried to do it with Claude Code :D but TBH I don't even know if it works (https://github.com/gthiemonge/octavia/commits/anubis/) I didn't find the time to test it. IIRC the integration of anubis with haproxy is a bit tricky | 11:34 |
| gthiemonge | rbachman[m]: it looks like some commits are missing, IMHO the key is how to enable and configure it (boolean in the listener, l7policies/rules?) | 11:36 |
| gthiemonge | rbachman[m]: there's ongoing work (well, it's kinda stuck) on an http rate limiting feature, I wonder how the features would fit together | 11:37 |
| yessou-sami | Hi gthiemonge, i was wondering what is missing on this https://review.opendev.org/c/openstack/octavia-dashboard/+/775561 review to get it upstream? | 12:09 |
| opendevreview | Richard Cruise proposed openstack/octavia master: Fix Listener update failures when Load Balancer is in ERROR https://review.opendev.org/c/openstack/octavia/+/985404 | 12:44 |
| rbachman[m] | gthiemonge: Oh neat! At a glance that already looks a quite a bit smoother around the edges than my hacked together version. I was going by the advanced cookie-based example for the routing that was added (not long ago?) to the anubis HAProxy docs https://anubis.techaro.lol/docs/admin/environments/haproxy/ . Once I have something a little more polished the intention is to give our users a setup to play with for their various use | 13:08 |
| rbachman[m] | cases. So I could get some testing in that way. | 13:08 |
| opendevreview | Richard Cruise proposed openstack/octavia master: Fix Listener update failures when Load Balancer is in ERROR https://review.opendev.org/c/openstack/octavia/+/985404 | 13:33 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!