That's an interesting issue.
Rudra Divakar, did you already exchanged on that problem?
I think that need to be discussing.
I saw the HAProxy process is configured by default to bind the stats API on all netns IPs [1] but I did not find any code that use it. That could be a way to perform health checks on the HAPproxy and probably to raise statistics to the collectors. But IMO we should though to restrict the access of that API to the vrouter for security reasons.
That's an interesting issue.
Rudra Divakar, did you already exchanged on that problem?
I think that need to be discussing.
I saw the HAProxy process is configured by default to bind the stats API on all netns IPs [1] but I did not find any code that use it. That could be a way to perform health checks on the HAPproxy and probably to raise statistics to the collectors. But IMO we should though to restrict the access of that API to the vrouter for security reasons.
[1] https:/ /github. com/Juniper/ contrail- controller/ blob/master/ src/vnsw/ agent/oper/ loadbalancer_ haproxy. cc#L80