Re: SPDY with Apache mod_spdy
Thanks. Your suggestion works. Regards, Erwin 2015-01-27 21:21 GMT+01:00 Baptiste bed...@gmail.com: On Tue, Jan 27, 2015 at 7:21 PM, Erwin Schliske erwin.schli...@sevenval.com wrote: Hello, actually I have the task to setup a system with Haproxy balancing a Apache with mod_spdy enabled. I don't have a problem with ssl-offloading, but I cannot find out how to serve spdy enabled clients. I have tried several howtos like http://www.igvita.com/2012/10/31/simple-spdy-and-npn-negotiation-with-haproxy/ My config is: listen spdytest modetcp bind X.X.X.X:443 ssl crt /etc/haproxy/ssl/example.com.pem no-sslv3 npn spdy/2 server backend1 10.X.X.X:1443 ssl All tutorials I've found use Nginx as webserver, which can serve spdy without ssl. But this is not the case with Apache mod_spdy. It needs https as proto. Does someone have a hint what I'm doing wrong? Thanks. Hi Erwin, HAProxy does not send the ALPN (or NPN) SSL extension to the server side with your configuration. Simply failover to a SSL forward configuration: listen spdytest modetcp bind X.X.X.X:443 server backend1 10.X.X.X:1443 Baptiste
SPDY with Apache mod_spdy
Hello, actually I have the task to setup a system with Haproxy balancing a Apache with mod_spdy enabled. I don't have a problem with ssl-offloading, but I cannot find out how to serve spdy enabled clients. I have tried several howtos like http://www.igvita.com/2012/10/31/simple-spdy-and-npn-negotiation-with-haproxy/ My config is: listen spdytest modetcp bind X.X.X.X:443 ssl crt /etc/haproxy/ssl/example.com.pem no-sslv3 npn spdy/2 server backend1 10.X.X.X:1443 ssl All tutorials I've found use Nginx as webserver, which can serve spdy without ssl. But this is not the case with Apache mod_spdy. It needs https as proto. Does someone have a hint what I'm doing wrong? Thanks. Regards, Erwin
Re: SPDY with Apache mod_spdy
On Tue, Jan 27, 2015 at 7:21 PM, Erwin Schliske erwin.schli...@sevenval.com wrote: Hello, actually I have the task to setup a system with Haproxy balancing a Apache with mod_spdy enabled. I don't have a problem with ssl-offloading, but I cannot find out how to serve spdy enabled clients. I have tried several howtos like http://www.igvita.com/2012/10/31/simple-spdy-and-npn-negotiation-with-haproxy/ My config is: listen spdytest modetcp bind X.X.X.X:443 ssl crt /etc/haproxy/ssl/example.com.pem no-sslv3 npn spdy/2 server backend1 10.X.X.X:1443 ssl All tutorials I've found use Nginx as webserver, which can serve spdy without ssl. But this is not the case with Apache mod_spdy. It needs https as proto. Does someone have a hint what I'm doing wrong? Thanks. Hi Erwin, HAProxy does not send the ALPN (or NPN) SSL extension to the server side with your configuration. Simply failover to a SSL forward configuration: listen spdytest modetcp bind X.X.X.X:443 server backend1 10.X.X.X:1443 Baptiste
Re: SPDY with Apache mod_spdy
I'm under the impression that Haproxy doesn't speak SPDY natively so best it can do for pass is through to a backend that does. If you use nginx to terminate ssl and spdy, then you can use all the features of haproxy. On Tue, Jan 27, 2015 at 1:21 PM, Erwin Schliske erwin.schli...@sevenval.com wrote: Hello, actually I have the task to setup a system with Haproxy balancing a Apache with mod_spdy enabled. I don't have a problem with ssl-offloading, but I cannot find out how to serve spdy enabled clients. I have tried several howtos like http://www.igvita.com/2012/10/31/simple-spdy-and-npn-negotiation-with-haproxy/ My config is: listen spdytest modetcp bind X.X.X.X:443 ssl crt /etc/haproxy/ssl/example.com.pem no-sslv3 npn spdy/2 server backend1 10.X.X.X:1443 ssl All tutorials I've found use Nginx as webserver, which can serve spdy without ssl. But this is not the case with Apache mod_spdy. It needs https as proto. Does someone have a hint what I'm doing wrong? Thanks. Regards, Erwin
