Hi everyone!
I am experimenting with using HAProxy as my public front end to my
CPVM. It is not going well.
I was hoping that someone could offer up some hints on how to make this
work. Here is the meat of my current config:
> frontend console_proxy_frontend
> bind *:443 ssl crt /etc/haproxy/certs/cpv.mi-connect.com.pem
> mode http
> # Required for WebSockets (used in CloudStack 4.11+)
> option forwardfor
> acl is_websocket hdr(Upgrade) -i WebSocket
> use_backend cpvm_backend if is_websocket
> default_backend cpvm_backend
>
> frontend websocket_frontend
> # bind *:8000
> bind *:8080 ssl crt /etc/haproxy/certs/cpv.mi-connect.com.pem
> mode http
> default_backend cpvm_backend
>
> backend cpvm_backend
> mode http
> balance roundrobin
> # Enable WebSocket support
> option http-server-close
> option forwardfor
> http-request set-header X-Forwarded-Port %[dst_port]
> http-request add-header X-Forwarded-Proto https if { ssl_fc }
>
> server cpvm1 192.168.1.10:80 check
> # server cpvm2 192.168.1.102:8080 check
>
>
Thanks!
Ron Gage