X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ftemplates%2Fsnapshot%2Fhaproxy.cfg.erb;h=b7115349dfd495b90dca8c745875821d19a0a654;hb=99d5cc2a59e287389ddf62fbc9708bf7478875e5;hp=dbe39d24352b0dd53a73976228bea8dcfbd48c89;hpb=8ee494afb923011f7524125391bd6f780fa00c91;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/templates/snapshot/haproxy.cfg.erb b/modules/roles/templates/snapshot/haproxy.cfg.erb
index dbe39d243..b7115349d 100644
--- a/modules/roles/templates/snapshot/haproxy.cfg.erb
+++ b/modules/roles/templates/snapshot/haproxy.cfg.erb
@@ -50,6 +50,10 @@ frontend front_ssl
 	default_backend backend
 
 	option http-keep-alive
+	# We rate-limit requests by clients.
+	#  Currently, we do that at the netfilter level, so one
+	#  request per connection works best.
+	option httpclose
 	#option redispatch
 
 backend backend