Skip to main content

Raymii.org Raymii.org Logo

Quis custodiet ipsos custodes?
Home | About | All pages | Cluster Status | RSS Feed | Gopher

haproxy: ssl backends

Published: 10-12-2013 | Author: Remy van Elst | Text only version of this article


❗ This post is over seven years old. It may no longer be up to date. Opinions may have changed.

This snippets shows you how to add an ssl backend to HAPROXY. You need haproxy 1.5 or higher, 1.4 does not support ssl backends.

Consider sponsoring me on Github. It means the world to me if you show your appreciation and you'll help pay the server costs.

You can also sponsor me by getting a Digital Ocean VPS. With this referral link you'll get $100 credit for 60 days.

Note: this is not about adding ssl to a frontend. this allows you to use an ssl enabled website as backend for haproxy.

The following config is required in a backend section:

backend example-backend
  balance roundrobin
  option httpchk GET /health_check
  server srv01 10.20.30.40:443 weight 1 maxconn 100 check ssl verify none
  server srv02 10.20.30.41:443 weight 1 maxconn 100 check ssl verify none

The important parts are:

10.20.30.41:443 
ssl verify none

You can also specify verify all. As expected, this will verify all certificates, however this will generate extra load. For this example setup the verify none is good enough.

More Info: http://cbonte.github.io/haproxy- dconv/configuration-1.5.html#ssl%20%28Server%20and%20default- server%20options%29

Tags: apache , haproxy , loadbalancer , snippets , ssl