High Availability Proxy (HAProxy) is a TCP and HTTP-based proxy server that runs on Linux, Solaris, and FreeBSD. It's used to load balance applications by distributing requests between multiple servers for application high availability.
HAProxy can be configured to isolate itself into a "chroot jail.". The term "chroot" can refer to either the chroot system call or the chroot wrapper program.
Deepfactor can operate in a chroot file system. However, the chroot file system must have DNS configured in order for Deepfactor runtime to send telemetry to a Deepfactor portal. Therefore, a valid resolv.conf needs to be added to the jail. For example:
mkdir -p /chroot-jail/etc
cp /etc/resolv.conf /chroot-jail/etc/resolv.conf
or
echo "nameserver 192.168.65.1" >> /chroot-jail/etc/resolv.conf
Comments
Please sign in to leave a comment.