HAProxy : SSL/TLS Setting2021/08/16

Configure HAProxy with SSL/TLS connection.
The connection between HAproxy and Clients are encrypted with SSL.

-----------+---------------------------+--------------------------+------------
           |                           |                          |
           |10.0.0.30                  |10.0.0.51                 |10.0.0.52
+----------+-----------+   +-----------+----------+   +-----------+----------+
|   [ dlp.srv.world ]  |   | [ node01.srv.world ] |   | [ node02.srv.world ] |
|        HAProxy       |   |      Web Server#1    |   |      Web Server#2    |
+----------------------+   +----------------------+   +----------------------+

[1]	Get SSL certificates, refer to here.
[2]	In addition to previous basic HTTP Load Balancing setting, add settings for SSL/TLS.

# concatinate cert and key

[root@dlp ~]#

cd /etc/letsencrypt/live/dlp.srv.world

[root@dlp dlp.srv.world]#

cat fullchain.pem privkey.pem > haproxy.pem

[root@dlp ~]#

vi /etc/haproxy/haproxy.cfg

# add into frontend section (if not need to listening 80 port)

frontend http-in
    bind *:80
    bind *:443 ssl crt /etc/letsencrypt/live/dlp.srv.world/haproxy.pem

[root@dlp ~]#

systemctl restart haproxy

[3]	If Firewalld is running, allow ports HAProxy listens.

[root@dlp ~]#

firewall-cmd --add-service=https

success
[root@dlp ~]#

firewall-cmd --runtime-to-permanent

success

[4]	Verify working normally to access to frontend HAproxy Server.

Matched Content