Haproxy SSL Post: 302843383

Sponsored Content

Special Forums UNIX and Linux Applications Haproxy SSL Post 302843383 by timmywong on Tuesday 13th of August 2013 06:00:34 AM

08-13-2013

Registered User

Haproxy SSL

I have a single SSL eg. www.abc.com.

Im trying to get haproxy to accept any request eg. xyz.com or ijk.com to redirect to https://www.abc.com. Is this possible?

#---------------------------------------------------------------------
# main frontend for XXX which proxys to the backends
#---------------------------------------------------------------------
frontend sslApp443
mode http
bind XXX.XXX.XXX.XXX:80
bind XXX.XXX.XXX.XXX:443 ssl crt /etc/haproxy/certs/mailapplab.crt
option http-server-close
option forwardfor
reqadd X-Forwarded-Proto:\ https
redirect scheme https if !{ ssl_fc }
default_backend AppWebSSL443

#---------------------------------------------------------------------
# round robin balancing between the various backends
#---------------------------------------------------------------------
backend AppWebSSL443
mode http
balance roundrobin
option httpchk HEAD / HTTP/1.0
cookie SERVERID insert indirect
server LABAPP01SSL XXX.XXX.XXX.XXX:80 cookie LABAPP1 check inter 2000 rise 2 fall 5
server LABAPP02SSL XXX.XXX.XXX.XXX:80 cookie LABAPP2 check inter 2000 rise 2 fall 5

---------- Post updated at 06:00 PM ---------- Previous update was at 04:08 PM ----------

Its ok.. I managed to figure this out.

acl correctdomain hdr(host) www.abc.com
mode http
bind xxx.xxx.xxx.xxx:80
bind xxx.xxx.xxx.xxx:443 ssl crt /etc/haproxy/certs/mailapplab.crt
redirect location https://www.abc.com if !correctdomain

timmywong

View Public Profile for timmywong

Find all posts by timmywong

5 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

implicit ssl vs explicit ssl

Can someone explain the difference between the two. Thanks

2. UNIX for Dummies Questions & Answers

to enable POP3(ssl) and SMTP(ssl) in Squid

i have configured Squid proxy server in Fedora 8 with two network interfaces. HTTP, HTTPS, FTP are working fine but we are unable to download mails using mail clients from mail server with POP3(ssl) and SMTP(ssl). so please someone help us how to enable pop and smtp in Squid.

3. Web Development

Apache, cgi script run twice when ssl, once when not ssl

I have interesting problem. https:/host/some/x.cgi - this script has run twice when I call this url But http:/host/some/x.cgi work fine, only once. Output is text/plain. If I change output format to the Content-type text/html, then both urls works fine - executed only once.

4. Red Hat

Centos 6.3 HAproxy not logging

I have configured rsyslog (CentOS 6.3) adding the -c 0 -r options and the line local2.* /var/log/haproxy.log and restarted rsyslog but all that happens is an haproxy.log gets created. It is never written to. Not quite sure how to troubleshoot this. Below is my haproxy.cfg file. Nothing else is...

5. Linux

Apache wildcard ssl on subdomain serves same page for non ssl virtualhosts

Issue observed: I have configured ng.my-site.com using widlcard ssl cert. When I hit https://www.my-site.com it loads ng.my-site.com website! please advise if I missed any concept / configs... Thank you! httpd.conf <VirtualHost *:80> ServerName www.my-site.com ServerAdmin...

LEARN ABOUT MOJAVE

lwp::protocol::https

LWP::Protocol::https(3) 				User Contributed Perl Documentation				   LWP::Protocol::https(3)

NAME

       LWP::Protocol::https - Provide https support for LWP::UserAgent

SYNOPSIS

	 use LWP::UserAgent;

	 $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 1 });
	 $res = $ua->get("https://www.example.com");

DESCRIPTION

       The LWP::Protocol::https module provides support for using https schemed URLs with LWP.	This module is a plug-in to the LWP protocol
       handling, so you don't use it directly.	Once the module is installed LWP is able to access sites using HTTP over SSL/TLS.

       If hostname verification is requested by LWP::UserAgent's "ssl_opts", and neither "SSL_ca_file" nor "SSL_ca_path" is set, then
       "SSL_ca_file" is implied to be the one provided by Mozilla::CA.	If the Mozilla::CA module isn't available SSL requests will fail.  Either
       install this module, set up an alternative "SSL_ca_file" or disable hostname verification.

       This module used to be bundled with the libwww-perl, but it was unbundled in v6.02 in order to be able to declare its dependencies properly
       for the CPAN tool-chain.  Applications that need https support can just declare their dependency on LWP::Protocol::https and will no longer
       need to know what underlying modules to install.

SEE ALSO

       IO::Socket::SSL, Crypt::SSLeay, Mozilla::CA

COPYRIGHT

       Copyright 1997-2011 Gisle Aas.

       This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

perl v5.18.2							    2013-04-29						   LWP::Protocol::https(3)