Can anyone give any assistance on how to install stunnel (patch I think ) with haproxy.Its new to me and not finding much helpful stuff on google.I guess I would need clear cut instructions because I will be doing this on a production server and dont wanna make any mistakes.

Thank you

No pressure or anything, right? Build a test server from any old box you have and hack away. Learning on production is a recipe for disaster.

no real pressure but it needs to get done, its a very important feature, put it that way.Setting up a test domain isn't a solution right now as the company would have to purchase 2 more servers ,ip addresses, SSL cert just for me to test on , not in their budget atm.

And no budget to implement it. Sounds like a recipe for success!

What part of "build a couple of old boxes and DIY didn't you comprehend?"

How is stunnel being conflated with ha-proxy in your grand scheme?

Does anyone have experience in this setup?

Thank you

I have setup in production a haproxy solution using TCP on 443 requests and HTTP on port 80 the only issue is that the ip for 443 are all the haproxy server and not the user (aka option forwardfor)... This was only a fast fix due to the emergency need for load balancing of apache due to very high requests on one of our web servers.

I am currently setting up a test environment to use apache mod-proxy to receive the port 443 requests and do all the needed ssl stuff and than forward it to haproxy on say port 444 so it can do a HTTP and use option forwardfor so I can log the ip of the clients correctly.

If this does not work I will be trying the stunnel with the haproxy mod.

I will keep this thread updated with my outcome.

I have setup Nginx to handle the SSL on port 443 and use the proxy_pass to localip:8000 which haproxy listens to and sends the requests to the server to be secured.. the only issue I have is the secure stuff on the server is giving me a error.

Bad Request
Your browser sent a request that this server could not understand.

Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.