-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathhosts
151 lines (151 loc) · 8.51 KB
/
hosts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
---
all:
children:
switches:
children:
spines:
hosts:
spine-1:
ansible_host: 10.0.5.10
leaves:
hosts:
leaf-1:
ansible_host: 10.0.5.11
asn: 64521
leaf-2:
ansible_host: 10.0.5.12
asn: 64522
vars:
ansible_connection: network_cli
ansible_network_os: eos
ansible_become: yes
ansible_become_method: enable
ansible_become_pass: vagrant
servers:
hosts:
provisioner:
mac: 16189C18A68C
ansible_host: 10.0.5.254
records_config:
# - "LOCAL proxy.local.outgoing_ip_to_bind STRING {{ .publicip }}"
- "LOCAL proxy.local.incoming_ip_to_bind STRING {{ provisioner }}"
# - "CONFIG proxy.config.log.logfile_dir STRING {{.logfile_dir}}"
- "CONFIG proxy.config.http.connect_ports STRING 80 443 2195 8083 5222"
- "CONFIG proxy.config.url_remap.remap_required INT 0"
- "CONFIG proxy.config.url_remap.pristine_host_hdr INT 1"
- "CONFIG proxy.config.reverse_proxy.enabled INT 0"
- "CONFIG proxy.config.http.cache.http INT 0"
# - "CONFIG proxy.config.http.server_ports STRING ipv4:tr-pass:ip-out={{ .publicip }}:3128"
- "CONFIG proxy.config.hostdb.timeout INT 100"
- "CONFIG proxy.config.hostdb.lookup_timeout INT 2"
- "CONFIG proxy.config.hostdb.serve_stale_for INT 120"
- "CONFIG proxy.config.hostdb.fail.timeout INT 120"
- "CONFIG proxy.config.http.keep_alive_no_activity_timeout_in INT 115"
- "CONFIG proxy.config.http.keep_alive_no_activity_timeout_out INT 120"
- "CONFIG proxy.config.exec_thread.autoconfig INT 1"
- "CONFIG proxy.config.exec_thread.autoconfig.scale FLOAT 1.500000"
- "CONFIG proxy.config.exec_thread.limit INT 2"
- "CONFIG proxy.config.accept_threads INT 1"
- "CONFIG proxy.config.task_threads INT 2"
- "CONFIG proxy.config.cache.threads_per_disk INT 8"
- "CONFIG proxy.config.exec_thread.affinity INT 1"
- "CONFIG proxy.config.http.insert_request_via_str INT 1"
- "CONFIG proxy.config.http.insert_response_via_str INT 0"
- "CONFIG proxy.config.http.parent_proxy_routing_enable INT 0"
- "CONFIG proxy.config.http.parent_proxy.retry_time INT 300"
- "CONFIG proxy.config.http.parent_proxy.connect_attempts_timeout INT 30"
- "CONFIG proxy.config.http.forward.proxy_auth_to_parent INT 0"
- "CONFIG proxy.config.http.uncacheable_requests_bypass_parent INT 1"
- "CONFIG proxy.config.http.keep_alive_no_activity_timeout_in INT 115"
- "CONFIG proxy.config.http.keep_alive_no_activity_timeout_out INT 120"
- "CONFIG proxy.config.http.transaction_no_activity_timeout_in INT 30"
- "CONFIG proxy.config.http.transaction_no_activity_timeout_out INT 30"
- "CONFIG proxy.config.http.transaction_active_timeout_in INT 900"
- "CONFIG proxy.config.http.transaction_active_timeout_out INT 0"
- "CONFIG proxy.config.http.accept_no_activity_timeout INT 120"
- "CONFIG proxy.config.net.default_inactivity_timeout INT 86400"
- "CONFIG proxy.config.http.connect_attempts_max_retries INT 3"
- "CONFIG proxy.config.http.connect_attempts_max_retries_dead_server INT 1"
- "CONFIG proxy.config.http.connect_attempts_rr_retries INT 3"
- "CONFIG proxy.config.http.connect_attempts_timeout INT 30"
- "CONFIG proxy.config.http.post_connect_attempts_timeout INT 1800"
- "CONFIG proxy.config.http.down_server.cache_time INT 60"
- "CONFIG proxy.config.http.down_server.abort_threshold INT 10"
- "CONFIG proxy.config.http.negative_caching_enabled INT 0"
- "CONFIG proxy.config.http.negative_caching_lifetime INT 1800"
- "CONFIG proxy.config.http.insert_client_ip INT 1"
- "CONFIG proxy.config.http.insert_squid_x_forwarded_for INT 1"
- "CONFIG proxy.config.http.push_method_enabled INT 0"
- "CONFIG proxy.config.http.cache.ignore_client_cc_max_age INT 1"
- "CONFIG proxy.config.http.normalize_ae_gzip INT 1"
- "CONFIG proxy.config.http.cache.cache_responses_to_cookies INT 1"
- "CONFIG proxy.config.http.cache.cache_urls_that_look_dynamic INT 1"
- "CONFIG proxy.config.http.cache.when_to_revalidate INT 3"
- "CONFIG proxy.config.http.cache.required_headers INT 2"
- "CONFIG proxy.config.http.cache.heuristic_min_lifetime INT 3600"
- "CONFIG proxy.config.http.cache.heuristic_max_lifetime INT 86400"
- "CONFIG proxy.config.http.cache.heuristic_lm_factor FLOAT 0.100000"
- "CONFIG proxy.config.net.connections_throttle INT 30000"
- "CONFIG proxy.config.net.max_connections_in INT 30000"
- "CONFIG proxy.config.net.max_connections_active_in INT 10000"
- "CONFIG proxy.config.cache.ram_cache.size INT -1"
- "CONFIG proxy.config.cache.ram_cache_cutoff INT 4194304"
- "CONFIG proxy.config.cache.limits.http.max_alts INT 5"
- "CONFIG proxy.config.cache.max_doc_size INT 0"
- "CONFIG proxy.config.cache.min_average_object_size INT 8000"
- "CONFIG proxy.config.log.logging_enabled INT 3"
- "CONFIG proxy.config.log.max_space_mb_for_logs INT 10000"
- "CONFIG proxy.config.log.max_space_mb_headroom INT 8000"
- "CONFIG proxy.config.log.rolling_enabled INT 1"
- "CONFIG proxy.config.log.rolling_interval_sec INT 3600"
- "CONFIG proxy.config.log.rolling_size_mb INT 1024"
- "CONFIG proxy.config.log.auto_delete_rolled_files INT 1"
- "CONFIG proxy.config.log.periodic_tasks_interval INT 5"
- "CONFIG proxy.config.ssl.client.verify.server INT 0"
- "CONFIG proxy.config.ssl.client.CA.cert.filename STRING NULL"
- "CONFIG proxy.config.ssl.server.cipher_suite STRING ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA"
- "CONFIG proxy.config.diags.debug.enabled INT 0"
- "CONFIG proxy.config.diags.debug.tags STRING http.*|dns.*"
- "CONFIG proxy.config.dump_mem_info_frequency INT 0"
- "CONFIG proxy.config.http.slow.log.threshold INT 0"
- "CONFIG proxy.config.admin.user_id STRING trafficserver"
plugin_config:
- "stats_over_http.so"
- "header_rewrite.so /etc/trafficserver/header_rewrite.conf"
header_rewrite_conf:
- "cond %{SEND_RESPONSE_HDR_HOOK} [AND]"
- "cond %{HEADER:date} /.+/ [AND]"
- "cond %{METHOD} CONNECT"
- " rm-header date"
children:
kubernetes:
children:
master:
hosts:
k8s-master-001:
mac: 16189C195059
ansible_host: 10.0.5.100
toras: 64521
torpeerip: 10.100.0.254
nodeip: 10.100.0.1
worker:
hosts:
k8s-worker-001:
mac: 16189C127A5F
ansible_host: 10.0.5.101
toras: 64521
torpeerip: 10.100.0.254
nodeip: 10.100.0.2
k8s-worker-002:
mac: 16189C1BB228
ansible_host: 10.0.5.102
toras: 64522
torpeerip: 10.100.1.254
nodeip: 10.100.1.1
vars:
ansible_become: yes
ansible_become_method: sudo
vars:
ansible_connection: ssh
ansible_user: vagrant
ansible_ssh_pass: vagrant