How do you guys deal with reverse-proxy config ?

IBM-Security / ibmsecurity

Idempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.

Apache License 2.0

47 stars 73 forks source link

How do you guys deal with reverse-proxy config ? #308

Open Cedric-Ser opened 3 years ago

Cedric-Ser commented 3 years ago

Hello,

At our end, we're using the set_stanza and set_entry capabilities from the framework with a several drawback: it's slow. A complete RP config takes approximatively 20 minutes (even when there's no changes).

How do you guys cope with small RP changes ? What's your process ?

Cédric Servais

tombosmansibm commented 2 years ago

Hi Cedric, I struggled with the same issue, so after just using tags to exclude the reverse proxy configuration, I've improved the idempotency of the entry part of the reverse proxy here : #342

Cedric-Ser commented 2 years ago

Hello Tom, thank you,

I ended up making codes that converts the whole conf file as a dict and back to a conf file after running a json.diff using the excellent jsondiff library :)

Using the API, as the LMI, to upload the file allows to go from dozens of minutes to seconds in terms of deployments.

Regards,

Cédric.

tombosmansibm commented 2 years ago

That's a good idea :+1: