Haproxy : Configuration de plusieurs certificats

Exemple de configuration

frontend yakakliker
    bind *:80
    bind *:443 ssl crt /etc/haproxy/cert/www.yakakliker.org.pem name www.yakakliker.org

#    filter cache mycache
#    http-request cache-use mycache
#    http-response cache-store mycache

    mode http
    option httplog
    acl yaka_acl  hdr(host)   www.yakakliker.org
    http-request redirect scheme https code 301 unless { ssl_fc }
    use_backend backend1 if yaka_acl

 
    acl guacamole_acl hdr(host) guacamole.yakakliker.org
    use_backend backend3 if guacamole_acl


frontend openproject
    bind *:80
    bind *:443 ssl crt /etc/haproxy/cert/openproject.yakakliker.org.pem name openproject.yakakliker.org

#    filter cache mycache
#    http-request cache-use mycache
#    http-response cache-store mycache

    mode http
    option httplog
    acl openproject_acl  hdr(host)   openproject.yakakliker.org
    http-request redirect scheme https code 301 unless { ssl_fc }
    use_backend backend2 if openproject_acl

backend backend1
    balance source
    mode http

    filter cache mycache
    http-request cache-use mycache
    http-response cache-store mycache


    #option httpchk
    #http-check expect ! rstatus ^5
    #default-server inter 3s fall 3 rise 2

    option forwardfor except 127.0.0.1
    http-request add-header X-Forwarded-Proto https if { ssl_fc }
    server web-server1  192.168.1.100:80
    #server web-server2  192.168.2.100:80 check


backend backend2
    balance source
    mode http

    filter cache mycache
    http-request cache-use mycache
    http-response cache-store mycache

    #option httpchk
    #http-check expect ! rstatus ^5
    #http-check expect string OK
    #http-check expect string success
    #http-check expect status 200

    #option tcp-check
    #tcp-check send ping\r\n
    #tcp-check expect string PONG
    #default-server inter 3s fall 3 rise 2

    option forwardfor except 127.0.0.1
    http-request add-header X-Forwarded-Proto https if { ssl_fc }
    server web-server1  192.168.1.200:80
    #server web-server2  192.168.2.200:80 check

Test de la configuration

 haproxy -f /etc/haproxy/haproxy.cfg -c

Lien

https://docs.haproxy.org/