Re: Recommended SSL ciphers and settings

rspadd Strict-Transport-Security:\ max-age=31536000;\ includeSubDomains if ssl-proxy Do I need to add it to the frontend or backend? Will it break raw TLS (not HTTPS)? Thanks On Tue, Sep 9, 2014 at 1:25 PM, Thomas Heil wrote: > Hi, > > > On 09.09.2014 11:43, pablo platt wrot

Re: Recommended SSL ciphers and settings

I've tried both options and I'm still not getting A+. Unfortunately, I can't ask the user what the error is. If I'll run into this again, I'll try to get this info. Thanks On Mon, Sep 8, 2014 at 9:46 AM, Jarno Huuskonen wrote: > Hi, > > On Sun, Sep 07, pabl

Recommended SSL ciphers and settings

Hi, I'm using haproxy to terminate SSL and it works for most of my users. I have alphassl wildcard certificate. I'm using SSL to improve WebSockets and RTMP connections of port 443. I don't have sensitive data or e-commerce. I have one user that see a warning in Chrome and can't use my website. I

Re: debian repository http://haproxy.debian.net/

, May 23, 2014 at 8:29 PM, Willy Tarreau wrote: > On Fri, May 23, 2014 at 08:22:11PM +0300, pablo platt wrote: > > Something like this for haproxy will bring confident and prevent > confusion > > and questions. > > http://nginx.org/en/linux_packages.html > > We'

Re: debian repository http://haproxy.debian.net/

Something like this for haproxy will bring confident and prevent confusion and questions. http://nginx.org/en/linux_packages.html On Fri, May 23, 2014 at 8:08 PM, Willy Tarreau wrote: > On Fri, May 23, 2014 at 05:10:49PM +0200, Ghislain wrote: > > Le 23/05/2014 15:23, Baptiste a écrit : > > >It

Re: Ubuntu 14.04 package

I've just installed it with the new ubuntu trusty release. Great timing. Thank you for providing this ppa. On Thu, Apr 17, 2014 at 12:05 PM, Vincent Bernat wrote: > ❦ 17 avril 2014 08:59 CEST, Vincent Bernat : > > >> Is there a 1.5~dev22 deb package for Ubuntu 14.04 (trusty)? > >> > >> I've

Re: Ubuntu 14.04 package

Thank you, this is extremely helpful. On Thu, Apr 17, 2014 at 9:59 AM, Vincent Bernat wrote: > ❦ 12 avril 2014 12:49 CEST, pablo platt : > > > Is there a 1.5~dev22 deb package for Ubuntu 14.04 (trusty)? > > > > I've found the following ppa but it only has pac

Re: Recommended strategy for running 1.5 in production

r internal repo. > > Ramin > > > On 4/16/2014 12:07 PM, pablo platt wrote: > >> The Ubuntu PPA is great but it is not 'official' and I couldn't find >> Ubuntu 14.04 package. >> https://launchpad.net/~vbernat/+archive/haproxy-1.5 >> <https:/

Re: Recommended strategy for running 1.5 in production

On Wed, Apr 16, 2014 at 09:22:56PM +0300, Apollon Oikonomopoulos wrote: > > (Cc'ing the Debian maintainers as well) > > > > Hi all, > > > > On 19:28 Wed 16 Apr , Willy Tarreau wrote: > > > On Wed, Apr 16, 2014 at 07:14:31PM +0300, pablo platt wrote: >

Re: Recommended strategy for running 1.5 in production

An official Ubuntu dev repo will also make testing easier. It's much easier to use a apt-get than building from source and figuring out command line options. On Wed, Apr 16, 2014 at 7:05 PM, Philipp < e1c1bac6253dc54a1e89ddc046585...@posteo.net> wrote: > Am 16.04.2014 17:40 schrieb Willy Tarreau

Ubuntu 14.04 package

Hi, Is there a 1.5~dev22 deb package for Ubuntu 14.04 (trusty)? I've found the following ppa but it only has package for Ubuntu 13.10 and below. https://launchpad.net/~vbernat/+archive/haproxy-1.5 Is there a script to build my own deb package for the dev version? It will be great if we could ha

Re: DTLS termination

Any other proxy that can terminate DTLS? Thanks On Wed, Nov 27, 2013 at 5:40 PM, Lukas Tribus wrote: > Hi! > > > > Can version 1.5 terminate DTLS connections like it does for SSL? > > No; haproxy only works with TCP (HTTP or raw TCP). DTLS is for datagram > protocols like UDP, which haproxy do

DTLS termination

Hi, Can version 1.5 terminate DTLS connections like it does for SSL? Thanks

Re: Websockets and RTMP

;t connect: frontend port443 bind :443 mode tcp default_backend ssl_backend backend ssl_backend srvtimeout 65000 server nginx_server 127.0.0.1:4443 On Tue, May 14, 2013 at 2:16 PM, pablo platt wrote: > Is my config reasonable? > > > On Sun, May 12, 201

Re: Websockets and RTMP

Is my config reasonable? On Sun, May 12, 2013 at 6:14 PM, Jonathan Matthews wrote: > On 12 May 2013 10:03, pablo platt wrote: > > Can you please explain how to use ssl_fc? > > I couldn't find it in the configuration docs. > > > > Please see below the global a

Re: Websockets and RTMP

erver media_server 127.0.0.1:1935 backend websocket_backend server websocket-server 127.0.0.1:4443 On Sat, May 11, 2013 at 10:41 PM, Baptiste wrote: > Hi Pablo, > > My answers inline. > > On Sat, May 11, 2013 at 6:20 PM, pablo platt > wrote: > > Hi, > > > > I

Websockets and RTMP

Hi, I need to proxy secure websockets and RTMP (normal tcp) on the same port. In the future I'll need normal HTTP requests and static files. haproxy will pass ssl requests to backend1 and RTMP requests to backend2. Processes will be open for a long time (minutes - hours). The backends are on the s