Comments

• Shivam Member

  June 2014

  Hey,

  Have you made sure that HAProxy is listening on both ports 80 and 443 (HTTP and HTTPS respectively) and each uses the backend "application-backend" as the default.
• Shivam Member

  June 2014 edited June 2014

  Config file should be like this,

  global

  log 127.0.0.1   local0
  log 127.0.0.1   local1 notice
  maxconn 4096
  user haproxy
  group haproxy
  daemon
  

  defaults

  log global
  mode    http
  option  httplog
  option  dontlognull
  option forwardfor
  option http-server-close
  stats enable
   stats auth someuser:somepassword
   stats uri /haproxyStats
  

  frontend http-in

  bind *:80
  reqadd X-Forwarded-Proto:\ http
  default_backend application-backend
  

  frontend https-in

  bind *:443 ssl crt /etc/ssl/*your ssl key*
  reqadd X-Forwarded-Proto:\ https
  default_backend application-backend
  

  backend application-backend

  redirect scheme https if !{ ssl_fc }
  balance leastconn
  option httpclose
  option forwardfor
  cookie JSESSIONID prefix
  
  #enter the IP of your application here
  server node1 10.0.0.1 cookie A check 
  

  Of course you need to fill in the blanks / edit it where i've said
• agoldenberg Member, Host Rep

  June 2014

  @Shivam I believe so. My config is below.

  global
          log 127.0.0.1   local0
          log 127.0.0.1   local1 notice
          #log loghost    local0 info
          maxconn 4096
          #chroot /usr/share/haproxy
          user haproxy
          group haproxy
          daemon
          #debug
          #quiet
  
  defaults
          log     global
          mode    http
          option  httplog
          option  dontlognull
          option  http-server-close
          retries 3
          option redispatch
          fullconn 1000
          maxconn 1000
          timeout queue 600s
          timeout connect 5s
          timeout client 600s
          timeout server 600s
  
  
  
  
  frontend http-in
          bind proxy.domain.com:80
          bind proxy.domain.com:443 ssl crt /etc/ssl/ssl.crt
          reqadd X-Forwarded-Proto:\ https if { ssl_fc }
          default_backend normal
          option forwardfor
  
  
  backend normal
    server srv1 srv1.domain.com  minconn 100 maxqueue 10000 check-ssl
    server srv2 srv2.domain.com  minconn 100 maxqueue 10000 check-ssl
  
• agoldenberg Member, Host Rep

  June 2014

  Right now http://proxy.domain.com is working fine, but https I get a bad gateway error.
• agoldenberg Member, Host Rep

  June 2014

  @Shivam got it working!

  global
          log 127.0.0.1   local0
          log 127.0.0.1   local1 notice
          #log loghost    local0 info
          maxconn 4096
          #chroot /usr/share/haproxy
          user haproxy
          group haproxy
          daemon
          #debug
          #quiet
  
  defaults
          log     global
          mode    http
          option  httplog
          option  dontlognull
          option  http-server-close
          retries 3
          option redispatch
          fullconn 1000
          maxconn 1000
          timeout queue 600s
          timeout connect 5s
          timeout client 600s
          timeout server 600s
  
  
  
  frontend http-in
          bind proxy.domain.com:80
          default_backend normal
          option forwardfor
  
  
  frontend http-in-ssl
          bind proxy.domain.com:443 ssl crt /var/ssl/super.crt
          reqadd X-Forwarded-Proto:\ https if { ssl_fc }
          default_backend ssl
          option forwardfor
  
  
  
  backend normal
    server srv1 srv1.domain.com  minconn 100 maxqueue 10000
    server srv2 srv2.domain.com  minconn 100 maxqueue 10000
  
• Shivam Member

  June 2014

  If i helped in someway, glad you got to it at the end Let me know if you need additional help