AnyConnect and HA

@tgray96 wrote:

Hello,

I am trying to utilize HAProxy to reverse proxy both web traffic, and anyconnect vpn traffic.

This is my current config:

frontend https
bind *:443
mode tcp
option tcplog
tcp-request inspect-delay 5s
use_backend remote if !{ req.ssl_hello_type 1 } !{ req.len 0 }
use_backend nginx if { req_ssl_sni -i website1.com }
use_backend nginx if { req_ssl_sni -i website2.com }
use_backend nginx if { req_ssl_sni -i website3.com }
default_backend remote

backend remote
mode tcp
server remote asaurl:443

backend nginx
mode tcp
server nginx internalurl:444

backend open
mode http
server open internalurl:80

All traffic is currently being pushed to backend remote. So if I browse to website 1,2,3 instead of the vpn url, all traffic is presented to the ASA.

Any ideas?

Posts: 1

Participants: 1

Read full topic