Load balancing SSL with Pass through the traffic

@BigBill wrote:

Hi,

What I miss here? While redirecting from http to https, without entering the port number directly in the address, I am unable to connect to it.

For example, this doesn’t work:

https://consul.sre-test.sre.me/ui/dc1-test/nodes

while this one, does:

https://consul.sre-test.sre.me:8000/ui/dc1-test/nodes

haproxy.cfg:

frontend httpfront
  bind *:80
  mode http
  option httplog
  option forwardfor
  redirect scheme https code 301 if !{ ssl_fc }

frontend httpsfront
  bind *:443 ssl crt /data01/cert/haproxy.pem
  mode tcp
  option tcplog

  acl is_consul hdr_beg(host) -i consul.sre-test.sre.me
  
 use_backend consul  if is_consul

#---------------------------------------------------------------------
# round robin balancing between vault servers
#---------------------------------------------------------------------
backend consul
  balance roundrobin
  server is-srecore01t 10.53.132.76:8000 ssl verify required ca-file /data01/cert/ca2.pem
  server is-srecore02t 10.53.132.77:8000 ssl verify required ca-file /data01/cert/ca2.pem
  server is-srecore03t 10.53.132.78:8000 ssl verify required ca-file /data01/cert/ca2.pem

Any help on this question will be greatly appreciated.

Cheers,
BB

Posts: 1

Participants: 1

Read full topic