LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 06-25-2010, 02:47 AM   #1
cbtshare
Member
 
Registered: Jul 2009
Posts: 569

Rep: Reputation: 42
stunnel with haproxy 1.4.6


Can anyone give any assistance on how to install stunnel (patch I think ) with haproxy.Its new to me and not finding much helpful stuff on google.I guess I would need clear cut instructions because I will be doing this on a production server and dont wanna make any mistakes.

Thank you
 
Old 06-25-2010, 12:06 PM   #2
mpapet
Member
 
Registered: Nov 2003
Location: Los Angeles
Distribution: debian
Posts: 453

Rep: Reputation: 46
Quote:
Originally Posted by cbtshare View Post
I will be doing this on a production server and dont wanna make any mistakes.

Thank you
No pressure or anything, right? Build a test server from any old box you have and hack away. Learning on production is a recipe for disaster.
 
Old 06-25-2010, 03:39 PM   #3
cbtshare
Member
 
Registered: Jul 2009
Posts: 569

Original Poster
Rep: Reputation: 42
Quote:
Originally Posted by mpapet View Post
No pressure or anything, right? Build a test server from any old box you have and hack away. Learning on production is a recipe for disaster.
no real pressure but it needs to get done, its a very important feature, put it that way.Setting up a test domain isn't a solution right now as the company would have to purchase 2 more servers ,ip addresses, SSL cert just for me to test on , not in their budget atm.
 
Old 06-25-2010, 04:28 PM   #4
mpapet
Member
 
Registered: Nov 2003
Location: Los Angeles
Distribution: debian
Posts: 453

Rep: Reputation: 46
Quote:
Originally Posted by cbtshare View Post
its a very important feature,
And no budget to implement it. Sounds like a recipe for success!

Quote:
Originally Posted by cbtshare View Post
as the company would have to purchase 2 more servers ,ip addresses, SSL cert just for me to test on , not in their budget atm.
What part of "build a couple of old boxes and DIY didn't you comprehend?"

How is stunnel being conflated with ha-proxy in your grand scheme?

Last edited by mpapet; 06-25-2010 at 04:45 PM.
 
Old 06-25-2010, 06:44 PM   #5
cbtshare
Member
 
Registered: Jul 2009
Posts: 569

Original Poster
Rep: Reputation: 42
Does anyone have experience in this setup?

Thank you
 
Old 08-05-2010, 10:12 AM   #6
wademac
Member
 
Registered: Apr 2008
Posts: 37

Rep: Reputation: 15
Quote:
Originally Posted by cbtshare View Post
Does anyone have experience in this setup?
Thank you
I have setup in production a haproxy solution using TCP on 443 requests and HTTP on port 80 the only issue is that the ip for 443 are all the haproxy server and not the user (aka option forwardfor)... This was only a fast fix due to the emergency need for load balancing of apache due to very high requests on one of our web servers.

I am currently setting up a test environment to use apache mod-proxy to receive the port 443 requests and do all the needed ssl stuff and than forward it to haproxy on say port 444 so it can do a HTTP and use option forwardfor so I can log the ip of the clients correctly.

If this does not work I will be trying the stunnel with the haproxy mod.

I will keep this thread updated with my outcome.
 
Old 08-09-2010, 02:35 PM   #7
wademac
Member
 
Registered: Apr 2008
Posts: 37

Rep: Reputation: 15
I have setup Nginx to handle the SSL on port 443 and use the proxy_pass to localip:8000 which haproxy listens to and sends the requests to the server to be secured.. the only issue I have is the secure stuff on the server is giving me a error.

Bad Request
Your browser sent a request that this server could not understand.

Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
haproxy agarwalpranay Linux - Newbie 4 06-19-2010 02:31 AM
Load Balancer haproxy agarwalpranay Linux - Networking 1 06-17-2010 10:42 AM
Haproxy handling diffrent URI guruyaya Linux - Server 0 09-11-2008 07:24 AM
Haproxy by host guruyaya Linux - Server 0 08-26-2008 09:15 AM
HAProxy balancing problem Sheridan Linux - Server 1 03-02-2008 01:44 AM


All times are GMT -5. The time now is 12:57 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration