diff --git a/states/haproxy/templates/haproxy.cfg.j2 b/states/haproxy/templates/haproxy.cfg.j2 index 65703b2..d66984f 100644 --- a/states/haproxy/templates/haproxy.cfg.j2 +++ b/states/haproxy/templates/haproxy.cfg.j2 @@ -196,7 +196,7 @@ frontend fe_http from {{ haproxy.config.namespace }} http-request set-var(req.accesshash) str(),concat(,req.src,),concat(-,req.host,) ## Silent drop all external requests with no host header or HTTP/1.0 - http-request silent-drop if !domains !internal + http-request silent-drop if !domains !internal !ua http-request silent-drop if version_http10 ## Returns @@ -268,7 +268,7 @@ frontend fe_https from {{ haproxy.config.namespace }} http-request capture sc_http_req_rate(0) len 4 ## Silent drop all external requests with no host header - http-request silent-drop if !domains !internal + http-request silent-drop if !domains !internal !ua http-request silent-drop if version_http10 ## DDoS