haproxy 配置https
Posted
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了haproxy 配置https相关的知识，希望对你有一定的参考价值。
今天测试配置haproxy代理https，一直报错，后来发现，后端已经是https这里则不需要特别指定了
配置文件如下：
global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon stats socket /var/lib/haproxy/stats defaults mode http log global option httplog option dontlognull option http-server-close option forwardfor except 127.0.0.0/8 option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 frontend h5_f bind *:80 mode http log global use_backend h5_server frontend h5_w bind *:443 mode tcp log global use_backend h5_four backend h5_four mode tcp balance roundrobin server h5_f1 10.29.25.11:443 weight 1 maxconn 10000 check inter 10s server h5_f2 10.30.20.9:443 weight 1 maxconn 10000 check inter 10s backend h5_server mode http balance roundrobin server h5_one 10.29.25.11:80 weight 1 maxconn 10000 check inter 10s server h5_tow 10.30.20.9:80 weight 1 maxconn 10000 check inter 10s
如果后端没有配置https则需要
global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon stats socket /var/lib/haproxy/stats defaults mode http log global option httplog option dontlognull option http-server-close option forwardfor except 127.0.0.0/8 option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 frontend h5_f bind *:80 mode http log global use_backend h5_server frontend h5_w bind *:443 ssl crt /etc/haproxy/ckl.pem mode http log global use_backend h5_four backend h5_four mode http balance roundrobin server h5_f1 10.29.25.11:443 weight 1 maxconn 10000 check inter 10s server h5_f2 10.30.20.9:443 weight 1 maxconn 10000 check inter 10s backend h5_server mode http balance roundrobin server h5_one 10.29.25.11:80 weight 1 maxconn 10000 check inter 10s server h5_tow 10.30.20.9:80 weight 1 maxconn 10000 check inter 10s
本文出自 “深呼吸再出击” 博客，请务必保留此出处http://ckl893.blog.51cto.com/8827818/1944926
以上是关于haproxy 配置https的主要内容，如果未能解决你的问题，请参考以下文章