Skip to content

Instantly share code, notes, and snippets.

@rlnorthcutt
Last active March 12, 2026 15:35
Show Gist options
  • Select an option

  • Save rlnorthcutt/de362c72f1bce4de778c58eb0b1adf56 to your computer and use it in GitHub Desktop.

Select an option

Save rlnorthcutt/de362c72f1bce4de778c58eb0b1adf56 to your computer and use it in GitHub Desktop.
HAProxy Onissa Horizons Config Example - advanced configuration for the custom “Blast” protocol with health checks
# --- FRONTEND CONFIGURATION ---
frontend ft_horizon_tcp_blast
# Blast protocol is tunneled on UAGs, running on port 8443 (external) vs. internal.
bind *:8443
default_backend bk_horizon_tcp_blast
# --- BACKEND CONFIGURATION ---
# 1. Dedicated Health Check Backend (The Source of Truth)
backend be_uag_https
mode http
option httpchk HEAD /favicon.ico
http-check expect status 200
# Note: The 'inter 30000' here controls the frequency for all tracking servers
default-server fall 3 inter 30000 rise 2
server srv1 192.168.1.101:443 check ssl verify none
server srv2 192.168.1.102:443 check ssl verify none
# 2. Standard TCP Backend (Tracking Health)
backend bk_horizon_tcp_blast
balance source
hash-type consistent
timeout server 36000000 # 10 Hour Timeout
server srv1 192.168.1.101:8443 track be_uag_https/srv1
server srv2 192.168.1.102:8443 track be_uag_https/srv2
# 3. UDP Load Balancing (Tracking Health)
udp-lb horizon_udp_blast
dgram-bind *:22443
balance source
server srv1 192.168.1.101:8443 track be_uag_https/srv1
server srv2 192.168.1.102:8443 track be_uag_https/srv2
udp-lb horizon_udp_pcoip
dgram-bind *:4172
balance source
timeout server 36000000
timeout client 36000000
server srv1 192.168.1.101:4172 track be_uag_https/srv1
server srv2 192.168.1.102:4172 track be_uag_https/srv2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment