RE: Haproxy support for HTTPS (SSL) backend servers

Have you tried Varnish?
http://www.varnish-cache.org/
It's intended as a caching proxy but can do what you're after perfectly well.

Also if there's anything it can't do, you can in-line drop in to C in the config files and make it do it!

-----Original Message-----
From: Pasi Kärkkäinen [mailto:pasik#iki.fi] Sent: 19 October 2010 12:33
To: Reinis Rozitis
Cc: haproxy#formilux.org
Subject: Re: Haproxy support for HTTPS (SSL) backend servers

On Mon, Oct 18, 2010 at 07:00:37PM +0300, Reinis Rozitis wrote:
>> I meant the features that need to parse the HTTP request and do
>> things based on it..
>>
>> So tcp/raw mode won't work..
>>
>> Thanks for the reply though!
>>
>> -- Pasi
>
> I think you are better in this case using 'nginx' for example -
> http://wiki.nginx.org/HttpProxyModule (can do ACL / rewrites / header
> change and balancing on its own).
>

Yeah, I've tried nginx aswell. It supports SSL on both the frontend and backend, which is good, but the problem with nginx is that it doesn't support http/1.1 on the backend side..

I have some application that also requires http/1.1 and refuses to serve http/1.0 requests.. this is not easy :)

• Pasi