Introduction

This is a crisp documentation containing the steps to integrate ShieldSquare Anti-bot solution at your HAProxy loadbalancer.

Prerequisites

1. Ensure you have created an account in ShieldSquare admin portal before getting started
2. LUA version 5.3.x
3. HAProxy (version 1.8 or above) compiled with LUA and OpenSSL

Integration Intructions

1.Download the connector kit shared by ShieldSquare support team
2.Place "shieldquare.lua" and "shieldsquare-spoe.cfg" in a dir. (Please do not change the order of args in shieldsquare-spoe.cfg)
3.Edit "shieldsquare.lua" file to configure SID and mode as below:

– Subscriber ID assigned after registration. 
 local _sid = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" 

– _mode (set 'false' for Monitor mode and 'true'for Active mode) 
 local _mode = false;

4.Edit HAProxy config file to do the following:

In global section 
 
 lua-load <path to>/shieldsquare.lua 
 
 In frontend section 

 filter spoe engine shieldsquare config <path to>/shieldsquare-spoe.cfg 
 http-response lua.shieldsquare_response 
 http-response set-header ShieldSquare-Response %[var(txn.ss.response)]

Add a new backend as below:
 backend ss-backend 
 mode tcp 
 timeout server 1m 
 server ss-cfm ss_scus.shieldsquare.net:12345 check maxconn 10

5.Restart HAproxy service and Verify ShieldSquare Integration in the ShieldSquare admin portal 'Verify Integration' page. 

Now, ShieldSquare integration is successful in Monitor mode. To learn more about monitor & active mode, read here. Upon successful integration verification, ShieldSquare support team will help you with instructions to switch to Active mode.