python/psf-salt — pull request #12 by dstufft (2014-10-21 19:24:37+00:00)
Title: Service Fastly Fronted Services via HAProxy

Instead of having each Fastly fronted service configured differently send all incoming traffic through the load balancer nodes which will then send traffic to the backend servers. This has a number of benefits:

* Standardize the ingress of data in the PSF infrastructure.
* Single location for handling settings such as HSTS.
* Easily enable/disable Fastly for a particular service simply by changing the DNS CNAME.
* Use the short lived certificates instead of one off long lived self signed certificates.
* Ease the ability to add/remove/re-spin backend servers since the loadbalancer nodes will automatically configure themselves.
* Have Fastly share long lived connections to HAProxy instead of different long lived connections per backend server.