tarpit

frontend main
    mode http
    option forwardfor
    option http-buffer-request
    acl log4shell url,url_dec -i -m reg (?:\${[^}]{0,4}\${|\${(?:jndi|ctx))
    acl log4shell req.hdrs -i -m reg (?:\${[^}]{0,4}\${|\${(?:jndi|ctx))
    acl log4shell_form req.body,url_dec -i -m reg (?:\${[^}]{0,4}\${|\${(?:jndi|ctx))
    acl is_tarpit  path,lower,map_str_int(/etc/haproxy/tarpit.map,-1) eq 1
    acl is_tarpit  path,lower,map_beg_int(/etc/haproxy/tarpit_beg.map,-1) eq 1

    http-request tarpit if is_tarpit
    http-request tarpit if log4shell
    http-request tarpit if { req.fhdr(content-type) -m str application/x-www-form-urlencoded } log4shell_form