On Mon, Oct 5, 2015 at 1:42 PM, Kuchekar, Yogita (Yogita) < [email protected]> wrote:
> Thanks for your reply.. > > > > Sorry for the typo. Version for Haproxy is 1.5. > > > > I have been trying to achieve this for a while referring to forum examples. > > My configuration is like this. Could you please point me to a working > example . > > > > defaults > > mode http > > log global > > option httplog > > option dontlognull > > option http-server-close > > option forwardfor except 127.0.0.0/8 > > option redispatch > > retries 3 > > timeout http-request 10s > > timeout queue 1m > > timeout connect 10s > > timeout client 1m > > timeout server 1m > > timeout http-keep-alive 10s > > timeout check 10s > > maxconn 3000 > > > > #--------------------------------------------------------------------- > > # main frontend which proxys to the backends > > #--------------------------------------------------------------------- > > > > > > frontend www > > bind 10.177.222.83:80 > > option http-server-close > Should not need to repease 'http-server-close' here since you have it in default already. > default_backend default-backend > > > > > > backend default-backend > > server adm-testing-platform 10.177.222.82:443 check > > > > I think this would work if you were using non-ssl port 80 for the server backend, but since you're using ssl port 443, you need to enable ssl options for that server line. Specifically the 'ssl' and 'ca-file' options detailed at https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5.2 -Bryan
