Ha proxy as reverse proxy as WA for tlsv1.2->tlsv1

@yuriy.tigiev wrote:

Hello,

I’m looking for a haproxy configuration which will allow me to implement the scheme bellow.

client --(https tlsv1.2)–> haproxy --(https tlsv1)–> legacy server

The current configuration doesn’t work. I hope someone will help me update it for my requirements.

global
log 127.0.0.1 local2
tune.ssl.default-dh-param 2048

defaults
log global
option httplog

timeout connect 10s
timeout client 30s
timeout server 30s
maxconn 1000

frontend https-frontend
mode http
option forwardfor
bind *:8899 ssl crt /root/cert/rootcert.pem
default_backend https-backend

backend https-backend
balance source
mode http
option forwardfor header X-Client
server endpoint 172.30.129.207:8443 check ssl verify none

Posts: 2

Participants: 2

Read full topic