« Haproxy : Configuration de plusieurs certificats » : différence entre les versions
De www.yakakliker.org
(Page créée avec « === Exemple de configuration === <syntaxhighlight lang="bash"> frontend yakakliker bind *:80 bind *:443 ssl crt /etc/haproxy/cert/www.yakakliker.org.pem name www.yakakliker.org # filter cache mycache # http-request cache-use mycache # http-response cache-store mycache mode http option httplog acl yaka_acl hdr(host) www.yakakliker.org http-request redirect scheme https code 301 unless { ssl_fc } use_backend backend1 if yak... ») |
Aucun résumé des modifications |
||
| Ligne 34 : | Ligne 34 : | ||
use_backend backend2 if openproject_acl | use_backend backend2 if openproject_acl | ||
</syntaxhighlight><syntaxhighlight lang="bash"> | |||
backend backend1 | |||
balance source | |||
mode http | |||
filter cache mycache | |||
http-request cache-use mycache | |||
http-response cache-store mycache | |||
#option httpchk | |||
#http-check expect ! rstatus ^5 | |||
#default-server inter 3s fall 3 rise 2 | |||
option forwardfor except 127.0.0.1 | |||
http-request add-header X-Forwarded-Proto https if { ssl_fc } | |||
server web-server1 192.168.1.100:80 | |||
#server web-server2 192.168.2.100:80 check | |||
backend backend2 | |||
balance source | |||
mode http | |||
filter cache mycache | |||
http-request cache-use mycache | |||
http-response cache-store mycache | |||
#option httpchk | |||
#http-check expect ! rstatus ^5 | |||
#http-check expect string OK | |||
#http-check expect string success | |||
#http-check expect status 200 | |||
#option tcp-check | |||
#tcp-check send ping\r\n | |||
#tcp-check expect string PONG | |||
#default-server inter 3s fall 3 rise 2 | |||
option forwardfor except 127.0.0.1 | |||
http-request add-header X-Forwarded-Proto https if { ssl_fc } | |||
server web-server1 192.168.1.200:80 | |||
#server web-server2 192.168.2.200:80 check | |||
Version du 24 mai 2024 à 14:56
Exemple de configuration
frontend yakakliker
bind *:80
bind *:443 ssl crt /etc/haproxy/cert/www.yakakliker.org.pem name www.yakakliker.org
# filter cache mycache
# http-request cache-use mycache
# http-response cache-store mycache
mode http
option httplog
acl yaka_acl hdr(host) www.yakakliker.org
http-request redirect scheme https code 301 unless { ssl_fc }
use_backend backend1 if yaka_acl
acl guacamole_acl hdr(host) guacamole.yakakliker.org
use_backend backend3 if guacamole_acl
frontend openproject
bind *:80
bind *:443 ssl crt /etc/haproxy/cert/openproject.yakakliker.org.pem name openproject.yakakliker.org
# filter cache mycache
# http-request cache-use mycache
# http-response cache-store mycache
mode http
option httplog
acl openproject_acl hdr(host) openproject.yakakliker.org
http-request redirect scheme https code 301 unless { ssl_fc }
use_backend backend2 if openproject_acl
backend backend1
balance source
mode http
filter cache mycache
http-request cache-use mycache
http-response cache-store mycache
#option httpchk
#http-check expect ! rstatus ^5
#default-server inter 3s fall 3 rise 2
option forwardfor except 127.0.0.1
http-request add-header X-Forwarded-Proto https if { ssl_fc }
server web-server1 192.168.1.100:80
#server web-server2 192.168.2.100:80 check
backend backend2
balance source
mode http
filter cache mycache
http-request cache-use mycache
http-response cache-store mycache
#option httpchk
#http-check expect ! rstatus ^5
#http-check expect string OK
#http-check expect string success
#http-check expect status 200
#option tcp-check
#tcp-check send ping\r\n
#tcp-check expect string PONG
#default-server inter 3s fall 3 rise 2
option forwardfor except 127.0.0.1
http-request add-header X-Forwarded-Proto https if { ssl_fc }
server web-server1 192.168.1.200:80
#server web-server2 192.168.2.200:80 check
