Sponsored Content
Full Discussion: Haproxy SSL
Special Forums UNIX and Linux Applications Haproxy SSL Post 302843383 by timmywong on Tuesday 13th of August 2013 06:00:34 AM
Old 08-13-2013
Haproxy SSL

I have a single SSL eg. www.abc.com.

Im trying to get haproxy to accept any request eg. xyz.com or ijk.com to redirect to https://www.abc.com. Is this possible?


#---------------------------------------------------------------------
# main frontend for XXX which proxys to the backends
#---------------------------------------------------------------------
frontend sslApp443
mode http
bind XXX.XXX.XXX.XXX:80
bind XXX.XXX.XXX.XXX:443 ssl crt /etc/haproxy/certs/mailapplab.crt
option http-server-close
option forwardfor
reqadd X-Forwarded-Proto:\ https
redirect scheme https if !{ ssl_fc }
default_backend AppWebSSL443


#---------------------------------------------------------------------
# round robin balancing between the various backends
#---------------------------------------------------------------------
backend AppWebSSL443
mode http
balance roundrobin
option httpchk HEAD / HTTP/1.0
cookie SERVERID insert indirect
server LABAPP01SSL XXX.XXX.XXX.XXX:80 cookie LABAPP1 check inter 2000 rise 2 fall 5
server LABAPP02SSL XXX.XXX.XXX.XXX:80 cookie LABAPP2 check inter 2000 rise 2 fall 5

---------- Post updated at 06:00 PM ---------- Previous update was at 04:08 PM ----------

Its ok.. I managed to figure this out.


acl correctdomain hdr(host) www.abc.com
mode http
bind xxx.xxx.xxx.xxx:80
bind xxx.xxx.xxx.xxx:443 ssl crt /etc/haproxy/certs/mailapplab.crt
redirect location https://www.abc.com if !correctdomain
 

5 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

implicit ssl vs explicit ssl

Can someone explain the difference between the two. Thanks (1 Reply)
Discussion started by: jerardfjay
1 Replies

2. UNIX for Dummies Questions & Answers

to enable POP3(ssl) and SMTP(ssl) in Squid

i have configured Squid proxy server in Fedora 8 with two network interfaces. HTTP, HTTPS, FTP are working fine but we are unable to download mails using mail clients from mail server with POP3(ssl) and SMTP(ssl). so please someone help us how to enable pop and smtp in Squid. (1 Reply)
Discussion started by: praneel2k
1 Replies

3. Web Development

Apache, cgi script run twice when ssl, once when not ssl

I have interesting problem. https:/host/some/x.cgi - this script has run twice when I call this url But http:/host/some/x.cgi work fine, only once. Output is text/plain. If I change output format to the Content-type text/html, then both urls works fine - executed only once. (2 Replies)
Discussion started by: kshji
2 Replies

4. Red Hat

Centos 6.3 HAproxy not logging

I have configured rsyslog (CentOS 6.3) adding the -c 0 -r options and the line local2.* /var/log/haproxy.log and restarted rsyslog but all that happens is an haproxy.log gets created. It is never written to. Not quite sure how to troubleshoot this. Below is my haproxy.cfg file. Nothing else is... (0 Replies)
Discussion started by: glev2005
0 Replies

5. Linux

Apache wildcard ssl on subdomain serves same page for non ssl virtualhosts

Issue observed: I have configured ng.my-site.com using widlcard ssl cert. When I hit https://www.my-site.com it loads ng.my-site.com website! please advise if I missed any concept / configs... Thank you! httpd.conf <VirtualHost *:80> ServerName www.my-site.com ServerAdmin... (0 Replies)
Discussion started by: ashokvpp
0 Replies
CURLOPT_USE_SSL(3)					     curl_easy_setopt options						CURLOPT_USE_SSL(3)

NAME
CURLOPT_USE_SSL - request using SSL / TLS for the transfer SYNOPSIS
#include <curl/curl.h> CURLcode curl_easy_setopt(CURL *handle, CURLOPT_USE_SSL, long level); DESCRIPTION
Pass a long using one of the values from below, to make libcurl use your desired level of SSL for the transfer. These are all protocols that start out plain text and get "upgraded" to SSL using the STARTTLS command. This is for enabling SSL/TLS when you use FTP, SMTP, POP3, IMAP etc. CURLUSESSL_NONE Don't attempt to use SSL. CURLUSESSL_TRY Try using SSL, proceed as normal otherwise. CURLUSESSL_CONTROL Require SSL for the control connection or fail with CURLE_USE_SSL_FAILED. CURLUSESSL_ALL Require SSL for all communication or fail with CURLE_USE_SSL_FAILED. DEFAULT
CURLUSESSL_NONE PROTOCOLS
FTP, SMTP, POP3, IMAP EXAMPLE
CURL *curl = curl_easy_init(); if(curl) { curl_easy_setopt(curl, CURLOPT_URL, "ftp://example.com/dir/file.ext"); /* require use of SSL for this, or fail */ curl_easy_setopt(curl, CURLOPT_USE_SSL, CURLUSESSL_ALL); /* Perform the request */ curl_easy_perform(curl); } AVAILABILITY
Added in 7.11.0. This option was known as CURLOPT_FTP_SSL up to 7.16.4, and the constants were known as CURLFTPSSL_* RETURN VALUE
Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if not. SEE ALSO
CURLOPT_SSLVERSION(3), CURLOPT_SSL_OPTIONS(3), libcurl 7.54.0 February 03, 2016 CURLOPT_USE_SSL(3)
All times are GMT -4. The time now is 04:06 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy