So, we talked about this today and came up with a tenative first plan:
* We are going to open 2 ports on our proxy01/10 (the ones in phx2).
* We are going to have haproxy forward in connections on those to the
rabbitmq cluster.
* One of them ( 5671 ) the normal rabbitmq port, will be used for
read-only access.
* The other will be used for applications that need to send messages as
well as receive them.
* We will configure rabbimq to use a different vhost with different
settings for the readonly people. Additionally if there's issues with
that, we can redirect haproxy to point to somewhere else down the road.
Hopefully that works for everyone.
kevin