{"id":2438,"date":"2016-01-20T13:07:15","date_gmt":"2016-01-20T13:07:15","guid":{"rendered":"http:\/\/blog.designed79.co.uk\/?p=2438"},"modified":"2016-01-20T15:13:38","modified_gmt":"2016-01-20T15:13:38","slug":"haproxy-ssl-config","status":"publish","type":"post","link":"https:\/\/blog.designed79.co.uk\/?p=2438","title":{"rendered":"HAProxy SSL Config"},"content":{"rendered":"<pre># This configuration is a simplified example of how to use ssl on front\r\n# and backends with additional certificates loaded from a directory for SNI\r\n# capable clients.\r\n\r\nglobal\r\n        maxconn 4096\r\n        tune.ssl.default-dh-param 1024\r\n\r\ndefaults\r\n        mode http\r\n        timeout connect 5s\r\n        timeout client 5s\r\n        timeout server 5s\r\n        option forwardfor\r\n        option http-server-close\r\n\r\nfrontend myfrontend\r\n        bind :80\r\n        default_backend mybackend\r\n        reqadd X-Forwarded-Proto:\\ http\r\n\r\nfrontend myfrontend-https\r\n        # primary cert is \/etc\/cert\/server.pem\r\n        # \/etc\/cert\/certdir\/ contains additional certificates for SNI clients\r\n        bind :443 ssl crt \/usr\/local\/opt\/haproxy\/server.pem\r\n        default_backend mybackend\r\n        reqadd X-Forwarded-Proto:\\ https\r\n\r\n\r\nbackend mybackend\r\n        # a http backend\r\n        redirect scheme https code 301 if !{ ssl_fc }\r\n        server gitplain 127.0.0.1:8080\r\n        # a https backend\r\n        #server s4 10.0.0.3:443 ssl verify none<\/pre>\n<p><a href=\"https:\/\/blog.designed79.co.uk\/wp-content\/uploads\/2016\/01\/How-To-Implement-SSL-Termination-With-HAProxy-on-Ubuntu-14.04-DigitalOcean.pdf\"rel=\"\">How To Implement SSL Termination With HAProxy on Ubuntu 14.04 | DigitalOcean<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p># This configuration is a simplified example of how to use ssl on front # and backends with additional certificates loaded from [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2438","post","type-post","status-publish","format-standard","hentry","category-info-on-tech"],"_links":{"self":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2438"}],"version-history":[{"count":0,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2438\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}