Search code examples
marathonservice-discovery

Multiple domains differen paths marathon lb

I would like to hit the same service on two domains with different paths. Configured in marathon lb.

http://front-dev.marathon.ice.mesos/auth

and

http://auth-dev.marathon.ice.mesos

I have tried:

HAPROXY_0_VHOST=front-dev.marathon.ice.mesos,auth-dev.marathon.ice.mesos
HAPROXY_0_PATH=/auth

This will let me hit

http://front-dev.marathon.ice.mesos/auth and http://auth-dev.marathon.ice.mesos/auth

Not exactly what I wanted.

I have also tried 

HAPROXY_0_VHOST=front-dev.marathon.ice.mesos,auth-dev.marathon.ice.mesos
HAPROXY_0_PATH=/auth
HAPROXY_1_PATH=/

That changes nothing.

Two separate VHOST labels does not work either 

HAPROXY_0_VHOST=front-dev.marathon.ice.mesos
HAPROXY_1_VHOST=auth-dev.marathon.ice.mesos
HAPROXY_0_PATH=/auth
HAPROXY_1_PATH=/

1_VHOST and 1_PATH is ignored

Solution

  • The logic you're looking for doesn't quite exist in MLB. It sounds like you want something like:

    if (vhostA) use backend
else if (vhostB && pathB) use backend

    There's a trick to accomplish the code above. If you look at the generated config, you should see a set of ACLs in the frontends for HTTP and HTTPS. To get rid of the extraneous config, configure just a vhost and switch to the simpler HAPROXY_HTTP_FRONTEND_ACL. We need to override the defaults, like this:

    {
  "labels": {
    "HAPROXY_0_HTTP_FRONTEND_ACL"="  acl path_is_auth path_beg /auth\n  acl host_is_front_dev hdr(host) -i front-dev.marathon.ice.mesos\n  acl host_is_auth_dev hdr(host) -i auth-dev.marathon.ice.mesos\n  use_backend {backend} if host_is_auth_dev or host_is_front_dev path_is_auth\n"
  }
}

    That should do it. Check the generated HAProxy config from MLB with curl marathon-lb.marathon.mesos:9090/_haproxy_getconfig.

    You'll also need to update the equivalent HTTPS frontend ACLs if you're using HTTPS. Look here for a full list of the templates.