global
    # NOTE: on startup haproxy chroot's to /var/lib/haproxy.
    #
    # Unfortunately the program will open some files prior to the call to
    # chroot never to reopen them, and some after. So looking at the on-disk
    # layout of haproxy resources you will find some resources relative to /
    # such as the admin socket, and some relative to /var/lib/haproxy such as
    # the log socket.
    #
    # The logging socket is (re-)opened after the chroot and must be relative
    # to /var/lib/haproxy.
    log /dev/log local0
    log /dev/log local1 notice
    maxconn 20000
    user haproxy
    group haproxy
    spread-checks 0
    # The admin socket is opened prior to the chroot never to be reopened, so
    # it lives outside the chroot directory in the filesystem.
    stats socket /var/run/haproxy/admin.sock mode 600 level admin
    stats timeout 2m

defaults
    log global
    mode tcp
    option tcplog
    option dontlognull
    retries 3
    timeout queue 9000
    timeout connect 9000
    timeout client 90000
    timeout server 90000

listen stats
    bind 127.0.0.1:8888
    mode http
    stats enable
    stats hide-version
    stats realm Haproxy\ Statistics
    stats uri /
    stats auth admin:jByg7wywXmqRgY8MRCdT3htK2bL7Kgf2

frontend tcp-in_swift_api
    bind *:8080
    bind :::8080
    acl net_252.27.119.219 dst 252.27.119.219/255.0.0.0
    use_backend swift_api_252.27.119.219 if net_252.27.119.219
    default_backend swift_api_252.27.119.219

backend swift_api_252.27.119.219
    balance leastconn
    server swift-proxy-0 252.27.119.219:8070 check