A fairly easy configuration is to have Pound SSL sitting in front of
HAProxy. I don't have benchmark numbers, but the configuration is fairly
simple:
Pound:443 -> Haproxy:80 (or really any tcp port that haproxy is listening
on)
Here's most of my pound.cfg file:
ListenHTTPS
Address 0.0.0.0
Port 443
# Obviously, adjust this to point to wherever your ssl cert is
Cert "/etc/ssl/yourssl.pem"
End
Service
Backend
# in this configuration, haproxy is sitting on the same server as pound
Address 127.0.0.1
Port 80
End
End
On Wed, May 2, 2012 at 3:00 PM, Baptiste <[email protected]> wrote:
> On Wed, May 2, 2012 at 3:46 PM, Alexander Kamardash
> <[email protected]> wrote:
> > Hi,
> >
> >
> >
> > We want to perform LB, SSL termination and L7 on HAProxy. Could you
> please
> > advise the best approach for it? We are interested in max performance and
> > not complicated configuration.
> >
> > If you are already running such configuration, pls share what is the max
> > connection rate you reach.
> >
> >
> >
> > -------------
> >
> > Alexander
> >
> >
>
> Hi,
>
> If you can wait a bit, HAProxy will do SSL endpoint for you.
> Waiting that, either nginx or stud looks to perform quite well.
>
> cheers
>
>
