https://hurlster.com/wiki/index.php?action=history&feed=atom&title=Haproxy 2026-08-25T20:35:36Z Revision history for this page on the wiki MediaWiki 1.38.4 https://hurlster.com/wiki/index.php?title=Haproxy&diff=2675&oldid=prev 2018-12-18T17:21:06Z

<p>Created page with &quot;* cat haproxy.cfg &lt;pre&gt; global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.soc...&quot;</p> <p><b>New page</b></p><div>* cat haproxy.cfg<br /> &lt;pre&gt;<br /> global<br /> log /dev/log local0<br /> log /dev/log local1 notice<br /> chroot /var/lib/haproxy<br /> stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners<br /> stats timeout 30s<br /> tune.ssl.default-dh-param 2048<br /> nbproc 4<br /> stats bind-process 4<br /> user haproxy<br /> group haproxy<br /> daemon<br /> <br /> # Default SSL material locations<br /> ca-base /etc/ssl/certs<br /> crt-base /etc/ssl/private<br /> <br /> # Default ciphers to use on SSL-enabled listening sockets.<br /> # For more information, see ciphers(1SSL). This list is from:<br /> # https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/<br /> # An alternative list with additional directives can be obtained from<br /> # https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=haproxy<br /> ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS<br /> ssl-default-bind-options no-sslv3<br /> <br /> defaults<br /> log global<br /> mode http<br /> option dontlognull<br /> option http-keep-alive<br /> stats enable<br /> stats auth username:password<br /> stats uri /haproxyStats<br /> timeout connect 50000<br /> timeout client 50000<br /> timeout server 50000<br /> errorfile 400 /etc/haproxy/errors/400.http<br /> errorfile 403 /etc/haproxy/errors/403.http<br /> errorfile 408 /etc/haproxy/errors/408.http<br /> errorfile 500 /etc/haproxy/errors/500.http<br /> errorfile 502 /etc/haproxy/errors/502.http<br /> errorfile 503 /etc/haproxy/errors/503.http<br /> errorfile 504 /etc/haproxy/errors/504.http<br /> <br /> ## HTTP<br /> frontend http-in<br /> mode http<br /> bind x.x.x.x:80<br /> bind x.x.x.x:443 ssl crt /etc/ssl/domain.com.pem<br /> <br /> # Define domain based forward<br /> acl host_sub1 hdr(host) -i sub1.domain.com<br /> acl host_sub2 hdr(host) -i sub2.domain.com<br /> <br /> # Redirect domain based forwards<br /> use_backend sub1_http if host_sub1<br /> use_backend sub2_http if host_sub2<br /> <br /> # Fallthrough<br /> default_backend sub1_http<br /> <br /> backend sub1_http <br /> server node1 127.0.0.1:80 check<br /> <br /> backend sub2_http <br /> server node1 192.168.0.65:80 check<br /> &lt;/pre&gt;</div>

Gqwill69