haproxy ssl配置

最新推荐文章于 2024-08-12 09:57:36 发布

tlwlmy

最新推荐文章于 2024-08-12 09:57:36 发布

阅读量2.4k

点赞数

分类专栏： haproxy 负载均衡运维文章标签： ssl

本文链接：https://blog.csdn.net/tianjiewang/article/details/78605192

版权

运维同时被 3 个专栏收录

52 篇文章 0 订阅

订阅专栏

负载均衡

7 篇文章 0 订阅

订阅专栏

haproxy

5 篇文章 0 订阅

订阅专栏

一、使用tcp监控端口

frontend https_443_in
    bind 0.0.0.0:443
    mode tcp
    option tcplog 

    acl test_host hdr(host) -i www.test.com
    use_backend logic-https if test_host

backend logic-https
    mode tcp
    balance roundrobin
    server logic-01 172.31.1.2:443 check inter 2000 rise 3 fall 3 weight 1
    server logic-02 172.31.1.3:443 check inter 2000 rise 3 fall 3 weight 1

二、使用https监控端口

frontend https
    bind *:443 ssl crt /etc/ssl/haproxy-certs/www.test.com.pem crt /etc/ssl/haproxy-certs/www.test.cn.pem
    mode http
    reqadd X-Forwarded-Proto:\ https
    option httpclose
    option forwardfor  
    option http-server-close
    capture request header Host len 255
    capture request header User-Agent len 255
    capture request header Referer len 255
    capture request header Cookie len 255

    acl test_host hdr(host) -i www.test.com www.test.cn
    use_backend logic-http if test_host

backend logic-http 
    balance roundrobin
    cookie SERVERID
    server logic-01 172.31.1.2:80 check inter 2000 rise 3 fall 3 weight 1
    server logic-02 172.31.1.3:80 check inter 2000 rise 3 fall 3 weight 1