Quantcast
Channel: HAProxy community - Latest topics
Viewing all articles
Browse latest Browse all 4849

Tcp Proxy tls Handshake after 12 hours

$
0
0

Hí my name is Adam, im implementing an proxy for a service routing mqtt trafic to a rabbitmq server (Message broker).
Everything is correct at begining but after a few hours, the service start handling an Handshake error.
the port is listening whit tls and mutuals tls verification.

Here is my configuration:

global

stats timeout 30s

daemon

log stdout format raw local0 info

ca-base /etc/ssl/certs

crt-base /etc/ssl/private

ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

ssl-default-bind-options ssl-min-ver TLSv1.0

defaults

log     global

mode    http

option  tcplog

option  dontlognull

timeout connect 1m

timeout client  1m

timeout server  1m

frontend rabbitui-frontend

bind *:8080 ssl crt-ignore-err all crt /etc/ssl/certs/tls.pem verify none

option tcplog

mode http

default_backend rabbitui-backend

frontend rabbittcp-frontend

bind *:8081 ssl crt-ignore-err all crt /etc/ssl/certs/tls.pem verify required ca-file /etc/ssl/certs/ca.pem crl-file /etc/ssl/certs/crl.pem

mode tcp

default_backend rabbittcp-backend

backend rabbitui-backend

mode http

server s1 ${RABBITMQ_HOST}:15672

backend rabbittcp-backend

mode tcp

server s1 ${RABBITMQ_HOST}:5672

2 posts - 2 participants

Read full topic


Viewing all articles
Browse latest Browse all 4849

Trending Articles