Thanks. It seems that haproxy needs to terminate ssl connection and start another ssl connecion to the backend to get it work. (HAProxy in HTTP mode?)
Using tcp mode of haproxy, it seems that SSL connction negotiation can not be started. Alex > From: luky...@hotmail.com > To: alex_wu2...@hotmail.com; haproxy@formilux.org > Subject: RE: what is the proper configuration for using send-proxy with SSL > Date: Mon, 5 Jan 2015 18:18:59 +0100 > > Hi Alex, > > > > I have a website https://mytest.com. (faked for testing) I intend to > > use haproxy in front of it with the option of send-proxy (using > > proxyprotocol with ssl connection). The ideal case is that haproxy just > > pass through the tcp packet without decoding it, and somehow the > > haproxy can use the option of send-proxy to send client src ip to the > > backend server. > > > > Is this possible? > > Absolutely, that is exactly what the proxy protocol is for, however your > backend (the webserver) needs to support the proxy protocol. > > > Lukas > >
