Debian 12 bookworm
Sponsored Link

HAProxy : SSL/TLS Setting2023/07/10
 
Configure HAProxy with SSL/TLS connection.
The connection between HAproxy and Clients are encrypted with SSL/TLS.
On this example, in addition to previous basic HTTP Load Balancing setting, add settings for SSL/TLS. 
-----------+---------------------------+--------------------------+------------
           |                           |                          |
           |10.0.0.30                  |10.0.0.51                 |10.0.0.52
+----------+-----------+   +-----------+----------+   +-----------+----------+
|   [ dlp.srv.world ]  |   | [ node01.srv.world ] |   | [ node02.srv.world ] |
|        HAProxy       |   |      Web Server#1    |   |      Web Server#2    |
+----------------------+   +----------------------+   +----------------------+
[1]
Get SSL certificates, refer to here.
[2] Configure HAProxy.
# concatenate cert and key

root@dlp:~#
cd /etc/letsencrypt/live/dlp.srv.world

root@dlp:/etc/letsencrypt/live/dlp.srv.world#
cat fullchain.pem privkey.pem > haproxy.pem

root@dlp:~#
cd

root@dlp:~#
vi /etc/haproxy/haproxy.cfg
# add into the frontend section
# * comment out the 80 port line if you do not need unencrypted connection

frontend http-in
        bind *:80
        bind *:443 ssl crt /etc/letsencrypt/live/dlp.srv.world/haproxy.pem
root@dlp:~#
systemctl restart haproxy

[3] Verify working normally to access to the frontend HAproxy Server.
Matched Content