Fix HAProxy 3.0.11 syntax errors in security templates
All checks were successful
HAProxy Manager Build and Push / Build-and-Push (push) Successful in 51s

- Fix tune.h2.fe-max-total-streams parameter name in global config
- Fix stick-table multiline syntax by removing line continuations
- Replace sc0_get_gpc with sc_get_gpc for proper 3.0.11 syntax
- Replace sc-set-gpc with sc-set-gpt for value assignments
- Update ACL definitions to use correct GPT fetch methods
- Simplify threat scoring to avoid unsupported add-var operations

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
2025-09-22 18:17:36 -07:00
parent cfabd39727
commit 78ebfef497
2 changed files with 28 additions and 40 deletions

View File

@@ -30,7 +30,7 @@ global
http-fail-codes 500-503 # Server errors for monitoring
# HTTP/2 Security and Performance Tuning
tune.h2.fe-max-total-streams 2000 # Connection cycling for security
tune.h2.fe.max-total-streams 2000 # Connection cycling for security
tune.h2.fe.glitches-threshold 50 # Protocol violation detection
tune.h2.fe.max-concurrent-streams 100 # Balanced security/performance
tune.bufsize 32768 # Enhanced HTTP/2 protection