Re: Haproxy 1.5 ssl redirect

2015-05-28 Thread Sean Patronis
Unfortunately, that did not solve all the problems that proxypass and proxypassreverse does in Apache's mod_proxy. It may be an artifact of how we do our internal load balancing, but the information Baptiste sent me about mirroring the proxypass rules here:

Re: Haproxy 1.5 ssl redirect

2015-05-27 Thread Sean Patronis
I have another question to add to the mix. While attempting to mirror the proxypass and proxypassreverse capabilities of Apache's mod_proxy and force https connections across everything through haproxy, I have run into a small snag and want to try and work around it. We have multiple

Re: Haproxy 1.5 ssl redirect

2015-05-27 Thread Nathan Williams
we use redirect scheme https code 301 if !{ ssl_fc } on our SSL-only backends, many of which are accessed by multiple hostnames. if i understand correctly what you're trying to accomplish, i think that should do the trick? On Wed, May 27, 2015 at 8:38 AM Sean Patronis spatro...@add123.com wrote:

Re: Haproxy 1.5 ssl redirect

2015-03-18 Thread Sean Patronis
Thanks for the link. That looks promising, but testing did not change anything and I am waiting on the developers to give me some indication of what headers they may expect. Maybe we can tackle this a different way since we know it works in apache. I am attempting to replace the following

Re: Haproxy 1.5 ssl redirect

2015-03-18 Thread Baptiste
Hi Sean, You may find some useful information here: http://blog.haproxy.com/2014/04/28/howto-write-apache-proxypass-rules-in-haproxy/ and here: http://blog.haproxy.com/2013/02/26/ssl-offloading-impact-on-web-applications/ Baptiste On Wed, Mar 18, 2015 at 3:39 PM, Sean Patronis

Re: Haproxy 1.5 ssl redirect

2015-03-18 Thread Sean Patronis
Baptiste, Thanks for the links, I had run across them earlier this morning in my google searching, but your post made me pay more attention to them... I have it working now, and the trick that seemed to do it for me was making all the paths absolute (since I am forcing https anyhow, and each

Re: Haproxy 1.5 ssl redirect

2015-03-18 Thread Baptiste
Hi Sean! You're welcome :) I still have in my TODO list to contact you about your AVI network experience ;) Talk to you soon. Baptiste On Wed, Mar 18, 2015 at 7:06 PM, Sean Patronis spatro...@add123.com wrote: Baptiste, Thanks for the links, I had run across them earlier this morning in my

Haproxy 1.5 ssl redirect

2015-03-17 Thread Sean Patronis
I seem to be having an interesting issue with forced ssl redirects in Haproxy 1.5.11 Sorry if this sounds clear as mud, but here goes: When I load a domain that is served by haproxy that is supposed to force https, it initially forces the connection to be https (if you attempt to connect

Re: Haproxy 1.5 ssl redirect

2015-03-17 Thread Cyril Bonté
Hi, Le 17/03/2015 20:42, Sean Patronis a écrit : Unfortunately that did not fix it. I mirrored your config and the problem still exists. I am not quite sure how the URL is getting built on the backend (the developers say it is all relative URL/URI), but whatever haproxy is doing, it is doing

Re: Haproxy 1.5 ssl redirect

2015-03-17 Thread Sean Patronis
Unfortunately that did not fix it. I mirrored your config and the problem still exists. I am not quite sure how the URL is getting built on the backend (the developers say it is all relative URL/URI), but whatever haproxy is doing, it is doing it differently than apache (with mod_proxy).

Re: Haproxy 1.5 ssl redirect

2015-03-17 Thread Scott McKeown|redIT
Hi Sean, I've got a setup that is somewhat like what you are after. I have however, done it in a very dirrerent way for this very same reason. Example below: global log /dev/log local4 debug maxconn 4096 daemon tune.ssl.default-dh-param 2048