HAProxy shift and shield config (ingress nginx migration step)

haproxy-shift-sheild-ingress-nginx.cfg

#------------  Global and defaults ------------#
# Set performance tuning and security logging
# [Placeholder: Global/defaults for buffer sizes, timeouts]

#----- Frontend: accept and route traffic -----#
frontend main_ingress
    bind :443 ssl crt /etc/haproxy/certs/
    mode http

    # Apply security policies at the edge
    # [Placeholder: ACLs for WAF/bot protection]

    # Migration routing logic
    # Send updated services to new HAProxy Ingress Controller
    use_backend new_haproxy_ingress if { hdr(host) -i new-app.example.com }

    # Everything else goes to legacy Ingress NGINX
    default_backend legacy_nginx_ingress

#-----------  Backends: old and new -----------#
backend legacy_nginx_ingress
    mode http
    # Points to existing Ingress NGINX LoadBalancer IP or Service
    server nginx_lb 192.168.1.50:80 check

backend new_haproxy_ingress
    mode http
    # Points to new HAProxy Kubernetes Ingress Controller
    server haproxy_kic 192.168.1.51:80 check