> Hi 
> 
> I am trying to set up haproxy with tcp mode for passing through ssl 
> connection. But i want to check my backend health with http call. 
> My backend requiers the use of a client key. 
> 
> I tried something like this: 
> option httpchk GET /status HTTP/1.0\r\nHost:\ localhost 
> server backend1 backend1:8900 check ssl verify none crt 
> /etc/haproxy/client-key.pemĀ 

Don't use:
check ssl

it will enable SSL for all the traffic, not only for health checks.

You wan't:
check-ssl

which enables SSL only for the health checks
(since your passing through TCP without intercepting
SSL).




Regards,

Lukas

                                          

Reply via email to