haproxy 1.4

Discussion in 'Server Operation' started by MirrorX, Feb 17, 2014.

  1. MirrorX

    MirrorX New Member

    dear all,

    i have installed haproxy 1.4 in front of 2 web servers for load balancing. In order to do that and since i use ssl, i have configured apache to accept the requests on port 443 and redirect them to another port (8080) where the haproxy is waiting. then haproxy redirects the connection to the app servers. this setup seems to work but when i open the web page of the load balancer there is a working about 'mixed content', and that there is unsecure http content transferred along with https and only when i click on 'disable protection on this page' i am able to see the full content.

    here is my config ->
    ---
    apache->
    <VirtualHost *:443>
    SSLEngine on
    SSLProxyEngine on
    RewriteEngine On
    SSLCertificateFile /home/hap/certif.cer
    SSLCertificateKeyFile /home/hap/certif.key
    SSLCertificateChainFile /home/hap/certif.crt
    ProxyPass / http://192.168.100.142:8080/
    ProxyPassReverse / http://192.168.100.142:8080/
    <Proxy http://127.0.0.1:8080/*>
    Allow from all
    </Proxy>
    </VirtualHost>
    -------------
    haproxy->
    global
    maxconn 4096
    user haproxy
    group haproxy
    daemon
    spread-checks 5 # 5%
    # uncomment this to get debug output
    debug



    defaults
    log global
    mode http
    # option httplog
    option dontlognull
    retries 3
    option redispatch
    maxconn 2000
    contimeout 5000
    clitimeout 50000
    srvtimeout 50000

    frontend web
    bind *:8080
    mode http
    default_backend app1


    backend app1
    mode http
    option httpclose
    balance roundrobin
    cookie SRVID insert indirect nocache
    option nolinger
    option httpchk GET / HTTP/1.0\r\nUser-Agent:\ HAProxy

    server app1_1 192.168.100.131:80 cookie app1_1 check inter 10s rise 2 fall 2
    server app1_2 192.168.100.132:80 cookie app1_2 check inter 10s rise 2 fall 2
    -------------------------


    could anyone provide any input on why this is happening and how it could be resolved?

    thank you in advance
     
  2. JESUSSAVES

    JESUSSAVES New Member

    Hi,

    Sorry but I don't know anything about haproxy but maybe I should look into it. Sounds like a good setup. But my question is, just a thought, do you have ISPConfig 3 setup which uses port 8080? As is said, just a thought.

    Setup haproxy
     

Share This Page