<?xml version="1.0" encoding="US-ASCII"?>
<ConfigRoot Version="116" ConfigHash="15aba2c5fbe7c379771b3961c3f3eaea">
    <VirtualHosts/>
    <SslCertificates>
        <SslCertificate Id="-1000">
            <ServerCertificate></ServerCertificate>
            <CertificateChain></CertificateChain>
            <PrivateKey></PrivateKey>
            <PrivateKeyPlain></PrivateKeyPlain>
            <RootCaComment></RootCaComment>
            <Comment>This is Airlock's built-in default certificate</Comment>
            <VirtualHostIds/>
            <SslVpnHostIds/>
        </SslCertificate>
    </SslCertificates>
    <Nodes>
        <Node Id="1">
            <HostNameDHCPInterface></HostNameDHCPInterface>
            <HostName>airlock-waf</HostName>
            <SkinName>skinBlue</SkinName>
            <PublicKey></PublicKey>
            <NodeInformationComment></NodeInformationComment>
            <PhysicalNetworkInterfaces>
                <PhysicalNetworkInterface>
                    <LogicalName>INTERNAL</LogicalName>
                    <InterfaceName>enp0s3</InterfaceName>
                    <SpeedMode></SpeedMode>
                    <MTU>1500</MTU>
                    <DhcpEnabled>false</DhcpEnabled>
                    <Comment></Comment>
                </PhysicalNetworkInterface>
            </PhysicalNetworkInterfaces>
            <BondingNetworkInterfaces/>
            <VirtualNetworkInterfaces/>
            <BackendAddresses>
                <BackendAddress>
                    <LogicalName>INTERNAL</LogicalName>
                    <IpAddress>192.168.99.50/24</IpAddress>
                    <Comment></Comment>
                </BackendAddress>
            </BackendAddresses>
            <FailoverAddresses/>
            <ManagementAddresses>
                <ManagementAddress>
                    <LogicalName>INTERNAL</LogicalName>
                    <IpAddress>192.168.99.50/24</IpAddress>
                    <SslCertificateId>-1000</SslCertificateId>
                    <Comment></Comment>
                </ManagementAddress>
            </ManagementAddresses>
        </Node>
    </Nodes>
    <Reports>
        <Report Id="4">
            <SendEmails>false</SendEmails>
        </Report>
    </Reports>
    <GlobalSettings>
        <GlobalSetting Id="2">
            <GlobalAccessDeniedUrl>/auth/login</GlobalAccessDeniedUrl>
            <DNSServersDHCPInterface></DNSServersDHCPInterface>
            <DefaultDNSDomain></DefaultDNSDomain>
            <DNSServers></DNSServers>
            <DnsComment></DnsComment>
            <NTPClientMode>NONE</NTPClientMode>
            <NtpComment></NtpComment>
            <SNMPMode>NONE</SNMPMode>
            <SNMPCommunity>public</SNMPCommunity>
            <SnmpComment></SnmpComment>
            <ErrorPagePath>/error_path</ErrorPagePath>
            <IcapComment></IcapComment>
            <KerberosComment></KerberosComment>
            <AllowedNetworkEndpointsComment></AllowedNetworkEndpointsComment>
            <LogLevel>Info</LogLevel>
            <MailHosts></MailHosts>
            <MailHostsComment></MailHostsComment>
            <LogHosts/>
            <ReportingLocalEnabled>true</ReportingLocalEnabled>
            <ReportingRemoteEnabled>false</ReportingRemoteEnabled>
            <ReportingRemoteUrl></ReportingRemoteUrl>
            <ReportingComment></ReportingComment>
            <EventNotificationChannelsComment></EventNotificationChannelsComment>
            <LogLevelComment></LogLevelComment>
            <TrackSessionsBasedOn>cookie</TrackSessionsBasedOn>
            <SessionTimeout>600</SessionTimeout>
            <SessionLifetime>28800</SessionLifetime>
            <RestrictSessionsPerIp>true</RestrictSessionsPerIp>
            <SessionRestrictionLimitPerIp>1500</SessionRestrictionLimitPerIp>
            <SessionRestrictionWhitelistIpPattern>
                <Name>SessionRestrictionWhitelistPattern</Name>
                <Comment></Comment>
                <Active>false</Active>
                <Pattern>
                    <PatternString>^$</PatternString>
                    <IgnoreCase>false</IgnoreCase>
                    <InvertPattern>false</InvertPattern>
                    <AirlockRegexFormat>true</AirlockRegexFormat>
                </Pattern>
                <DefaultId>-1</DefaultId>
                <IpAddressRange></IpAddressRange>
            </SessionRestrictionWhitelistIpPattern>
            <SessionAirlockSessionTrackingComment></SessionAirlockSessionTrackingComment>
            <SessionAirlockCookiesComment></SessionAirlockCookiesComment>
            <SessionApplicationCookiesComment></SessionApplicationCookiesComment>
            <SessionDoSMitigationComment></SessionDoSMitigationComment>
            <AccessControlComment></AccessControlComment>
            <SessionCookieName>AL_SESS</SessionCookieName>
            <LbCookieName>AL_BALANCE</LbCookieName>
            <CsrfTokenName>CSRFT759</CsrfTokenName>
            <CookieStoreDomainInterpretation>true</CookieStoreDomainInterpretation>
            <EncryptedCookiePassphrase>y414mBflwziiKTXh1PwhvAi6uNQCDjv4qHn15TnYdhs8xyjDKLmi2DjqtGZ1og4tab5WbflVfaZPQc8GU7eLupApAHCVQhpGBFIE</EncryptedCookiePassphrase>
            <License></License>
            <LicenseComment></LicenseComment>
            <ExpertSettingsSgEnabled>false</ExpertSettingsSgEnabled>
            <ExpertSettingsSg></ExpertSettingsSg>
            <ExpertSettingsSgComment></ExpertSettingsSgComment>
            <ExpertSettingsApacheEnabled>false</ExpertSettingsApacheEnabled>
            <ExpertSettingsApache></ExpertSettingsApache>
            <ExpertSettingsApacheComment></ExpertSettingsApacheComment>
            <DefaultGateway></DefaultGateway>
            <DefaultGatewayDHCPInterface></DefaultGatewayDHCPInterface>
            <DestinationRoutesFromDHCPEnabled>false</DestinationRoutesFromDHCPEnabled>
            <SourceRoutesFromDHCPEnabled>false</SourceRoutesFromDHCPEnabled>
        </GlobalSetting>
    </GlobalSettings>
    <BackendGroups>
        <BackendGroup Id="5">
            <Name>Kubernetes</Name>
            <Comment></Comment>
            <BackendLoadBalancingComment></BackendLoadBalancingComment>
            <MappingIds/>
            <BackendHosts>
                <BackendHost>
                    <Port>0</Port>
                    <TransportProtocol>HTTP</TransportProtocol>
                    <Address>${MY_KUBERNETES_IP}</Address>
                    <Comment></Comment>
                    <Status>ENABLED</Status>
                    <Spare>false</Spare>
                    <Weight>100</Weight>
                </BackendHost>
            </BackendHosts>
            <AccessComment></AccessComment>
            <KerberosEnvironmentId>-1</KerberosEnvironmentId>
            <BackendFailureDetectionInBandEnabled>false</BackendFailureDetectionInBandEnabled>
            <BackendFailureDetectionInBandComment></BackendFailureDetectionInBandComment>
            <BackendFailureDetectionInBandStatusPattern>
                <PatternString>^503$</PatternString>
                <IgnoreCase>false</IgnoreCase>
                <InvertPattern>false</InvertPattern>
                <AirlockRegexFormat>true</AirlockRegexFormat>
                <Enabled>true</Enabled>
            </BackendFailureDetectionInBandStatusPattern>
            <BackendFailureDetectionInBandCheckResponseContent>false</BackendFailureDetectionInBandCheckResponseContent>
            <BackendFailureDetectionInBandContentTypePattern>
                <PatternString>^(text|application)/(html|xhtml)</PatternString>
                <IgnoreCase>false</IgnoreCase>
                <InvertPattern>false</InvertPattern>
                <AirlockRegexFormat>true</AirlockRegexFormat>
            </BackendFailureDetectionInBandContentTypePattern>
            <BackendFailureDetectionInBandMaxContentSize>512</BackendFailureDetectionInBandMaxContentSize>
            <BackendFailureDetectionInBandContentPattern>
                <PatternString>Service Unavailable</PatternString>
                <IgnoreCase>true</IgnoreCase>
                <InvertPattern>false</InvertPattern>
                <AirlockRegexFormat>true</AirlockRegexFormat>
            </BackendFailureDetectionInBandContentPattern>
            <BackendFailureDetectionOutOfBandEnabled>false</BackendFailureDetectionOutOfBandEnabled>
            <BackendFailureDetectionOutOfBandComment></BackendFailureDetectionOutOfBandComment>
            <BackendFailureDetectionOutOfBandUrl>/</BackendFailureDetectionOutOfBandUrl>
            <BackendFailureDetectionOutOfBandCheckIntervalGood>5</BackendFailureDetectionOutOfBandCheckIntervalGood>
            <BackendFailureDetectionOutOfBandFailureCountToBad>3</BackendFailureDetectionOutOfBandFailureCountToBad>
            <BackendFailureDetectionOutOfBandCheckIntervalBad>3</BackendFailureDetectionOutOfBandCheckIntervalBad>
            <BackendFailureDetectionOutOfBandSuccessCountToGood>3</BackendFailureDetectionOutOfBandSuccessCountToGood>
            <BackendFailureDetectionOutOfBandTimeout>2</BackendFailureDetectionOutOfBandTimeout>
            <BackendFailureDetectionOutOfBandStatusPattern>
                <PatternString>^503$</PatternString>
                <IgnoreCase>false</IgnoreCase>
                <InvertPattern>false</InvertPattern>
                <AirlockRegexFormat>true</AirlockRegexFormat>
                <Enabled>true</Enabled>
            </BackendFailureDetectionOutOfBandStatusPattern>
            <BackendFailureDetectionOutOfBandContentPattern>
                <PatternString>Service Unavailable</PatternString>
                <IgnoreCase>true</IgnoreCase>
                <InvertPattern>false</InvertPattern>
                <AirlockRegexFormat>true</AirlockRegexFormat>
                <Enabled>false</Enabled>
            </BackendFailureDetectionOutOfBandContentPattern>
            <ExpertSettingsSgEnabled>false</ExpertSettingsSgEnabled>
            <ExpertSettingsSg></ExpertSettingsSg>
            <ExpertSettingsSgComment></ExpertSettingsSgComment>
        </BackendGroup>
    </BackendGroups>
    <EtcHosts/>
    <NotificationChannels/>
    <IcapServices/>
    <KerberosEnvironments/>
    <AllowedNetworkEndpoints/>
    <Mappings/>
    <Routes/>
    <SourceRoutes/>
    <RoutesV6>
        <RouteV6 Id="6">
            <DefaultGateway></DefaultGateway>
        </RouteV6>
    </RoutesV6>
    <SourceRoutesV6/>
    <DenyRules />
    <DenyRuleGroups />
    <GlobalRequestHeaderActions />
    <GlobalResponseHeaderActions />
    <GeoLocationBlocks/>
    <SslVpnChannels/>
    <SslVpnHosts>
        <SslVpnHost Id="3">
            <IpAddress></IpAddress>
            <IpV6Address></IpV6Address>
            <Port>1287</Port>
            <SslCertificateId>-1</SslCertificateId>
            <ExternalLogicalInterfaceName></ExternalLogicalInterfaceName>
            <Enabled>false</Enabled>
            <Comment></Comment>
        </SslVpnHost>
    </SslVpnHosts>
    <OpenApis/>
</ConfigRoot>
