Tutorial - HAProxy 1.7 on Debian Config.cfg Example | Vevioz Community

Tutorial HAProxy 1.7 on Debian Config.cfg Example

API

Staff member
Joined
Nov 17, 2018
Messages
132
Reaction score
30
Points
28
Location
Indonesia
Offline
Using your favorite text editor, open

/etc/haproxy/haproxy.cfg

Code:
global
    log /dev/log    local0
    log /dev/log    local1 notice
    chroot /var/lib/haproxy
    stats socket /run/haproxy/admin.sock mode 660 level admin
    stats timeout 30s
    user haproxy
    group haproxy
    daemon

    # Default SSL material locations
    ca-base /etc/ssl/certs
    crt-base /etc/ssl/private

    # Default ciphers to use on SSL-enabled listening sockets.
    # For more information, see ciphers(1SSL). This list is from:
    #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
    # An alternative list with additional directives can be obtained from
    #  https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=haproxy
    ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
    ssl-default-bind-options no-sslv3

defaults
    log    global
    mode    http
    option    httplog
    option    dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
    errorfile 400 /etc/haproxy/errors/400.http
    errorfile 403 /etc/haproxy/errors/403.http
    errorfile 408 /etc/haproxy/errors/408.http
    errorfile 500 /etc/haproxy/errors/500.http
    errorfile 502 /etc/haproxy/errors/502.http
    errorfile 503 /etc/haproxy/errors/503.http
    errorfile 504 /etc/haproxy/errors/504.http

frontend http
  bind *:80
  mode http
  option httpclose
  option forwardfor
  default_backend nodes

frontend https
  bind *:443 ssl crt /etc/ssl/self.pem
  mode http
  option httpclose
  option forwardfor
  reqadd X-Forwarded-Proto:\ https
  default_backend nodes

After saving changes, don't forget to restart haproxy

service haproxy restart
 
Last edited:

madamjkt

New member
Joined
Jun 13, 2019
Messages
23
Reaction score
8
Points
3
Age
39
Location
Jakarta
Offline
kalau buat panduan itu dijelaskan lah Mas gan
HAProxy
itu fungsi untuk apa.? trus kelebihannya apa aja kok kita disarankan pake itu?
 
  • Haha
Reactions: API
Top Bottom