global
    chroot /var/lib/haproxy
    user haproxy
    group haproxy
    daemon
    log 192.0.2.1:5140 local1
    maxconn 40000
    nbthread 1
    stats socket /var/lib/kolla/haproxy/haproxy.sock group kolla mode 660
    ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
    ssl-default-bind-options prefer-client-ciphers ssl-min-ver TLSv1.3 no-tls-tickets
    ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
    ssl-default-server-options ssl-min-ver TLSv1.3 no-tls-tickets
    
    tune.ssl.default-dh-param 4096
    ca-base /etc/ssl/certs

defaults
    log global
    option redispatch
    retries 3
    timeout http-request 10s
    timeout http-keep-alive 10s
    timeout queue 1m
    timeout connect 10s
    timeout client 1m
    timeout server 1m
    timeout check 10s
    balance roundrobin
    maxconn 10000

listen stats
   bind 192.0.2.1:1984
   mode http
   stats enable
   stats uri /
   stats refresh 15s
   stats realm Haproxy\ Stats
   stats auth openstack:xrmxhGaMDTRSH3uPYHR5iF3XqNlzYIs1Le5P4m6Y

listen metrics
   bind 192.0.2.1:9101
   mode http
   http-request use-service prometheus-exporter if { path /metrics }

frontend status
    bind 192.0.2.1:61313
    bind 192.0.2.10:61313
    mode http
    monitor-uri /