HAProxy

HTTPS Webserver to multiple http Webserver

Simply add the following at the end of /etc/haproxy/haproxy.cfg

frontend ssl_443
bind *:443 ssl crt /path/to/cert/example.pem
mode http
http-request set-header X-Forwarded-For %[src]
reqadd X-Forwarded-Proto:\ https
option http-server-close
default_backend ssl_443

backend ssl_443
mode http
balance roundrobin
server web1 10.80.100.10:80 check
server web2 10.80.100.11:80 check

pem layout

• cat certificate.crt intermediates.pem private.key > ssl-certs.pem

bind *:443 ssl crt /path/to/cert/ssl-certs.pem

letsencrypt cert

Works a bit differently as seen in https://gridscale.io/community/tutorials/haproxy-ssl/

sources

• https://gridscale.io/community/tutorials/haproxy-ssl/
• https://www.meshcloud.io/en/2017/04/18/pem-file-layout-for-haproxy/