Tuesday, November 11, 2014

HaProxy - Http and SSL pass through config

I've currently got an HaProxy LB solution in place and everything is working fine however we are having an issue with a very few clients who cannot get to our site via HTTPS (SSL) they can browse our site in Http but as soon as they click on an absolute HTTPS link they are taken to our home page instead. Wondering if anyone can look at our config below and see if there's something awry. I believe we are on HaProxy 1.2.17



global
log 127.0.0.1 local0
log 127.0.0.1 local1 notice
#log loghost local0 info
maxconn 6144
#debug

#quiet
user haproxy
group haproxy

defaults
log global
mode http
option httplog
option dontlognull
retries 3

redispatch
maxconn 2000
contimeout 5000
clitimeout 50000
srvtimeout 50000
stats auth # admin password

stats uri /monitor
listen webfarm
# bind :80,:443

bind :443
mode tcp
balance source
#cookie SERVERID insert indirect
#option httpclose
#option forwardfor
#option httpchk HEAD /check.cfm HTTP/1.0
server webA 111.10.10.1
#server webB 111.10.10.2
server webB 111.10.10.3

server webC 111.10.10.4

listen webfarmhttp :80
mode http
balance source
# option httpclose
option forwardfor
# option httpchk HEAD /check.cfm HTTP/1.0
option httpchk /check.cfm
server webA 111.10.10.1

#server webB 111.10.10.2
server webB 111.10.10.3
server webC 111.10.10.4

listen monitor :8443
mode http
balance roundrobin
#cookie SERVERID insert indirect
option httpclose
option forwardfor

#option httpchk HEAD /check.txt HTTP/1.0
#option httpchk HEAD /check.cfm HTTP/1.0
server webA 111.10.10.1
server webB 111.10.10.2

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...