HAProxy SSL SNI Configuration

HAProxyLoad BalancingSecuritySNISSL

 

 

http://blog.haproxy.com/2012/04/13/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/

 

Adding SSL Cert

 

Create SSL Bundle in this order

certificate, intermediate, intermediate, key,


Should modify haproxy.cfg to look like this


 

# Single VIP with sni content switching
frontend ft_ssl_vip
bind 10.10.10.0:443 ssl crt /etc/ssl/certs/your.bundle.pem
mode tcp

 



Creds:

http://serverfault.com/questions/622206/haproxy-1-5-3-openssl-creating-pem 



Leave a Reply