haproxy reverse proxy and virtual hostHaProxy - Http and SSL pass through configHow can I use a custom 503 error document when HAProxy sends a 503 HTTP code?haproxy forward uri to root of another serverHAProxy - ssl client ca chain cannot be verifiedHA-Proxy 301 re-direct: https to https://wwwHAProxy to redirect http to https for multiple domain names without SSL TerminationHaProxy giving - 503 Service UnavailableCapture and forward extended PKI cert attributes (e.g. UPN) using haproxyHAProxy maintenance with mode tcp and http2openldap with haproxy - (ldap_result() failed: Can't contact LDAP server)
What happens if you dump antimatter into a black hole?
How do LIGO and VIRGO know that a gravitational wave has its origin in a neutron star or a black hole?
Have I damaged my car by attempting to reverse with hand/park brake up?
BOOM! Perfect Clear for Mr. T
How long would it take for people to notice a mass disappearance?
What are the differences between credential stuffing and password spraying?
Verb "geeitet" in an old scientific text
How do I overfit?
How can I close a gap between my fence and my neighbor's that's on his side of the property line?
Why wasn't the Night King naked in S08E03?
Fitch Proof Question
How can I support myself financially as a 17 year old with a loan?
How to display a value with zenity?
Purpose of のは in this sentence?
What is the closest airport to the center of the city it serves?
How did Shepard's and Grissom's speeds compare with orbital velocity?
Set collection doesn't always enforce uniqueness with the Date datatype? Does the following example seem correct?
What was the first instance of a "planet eater" in sci-fi?
Pressure inside an infinite ocean?
Point of the the Dothraki's attack in GoT S8E3?
Can a nothic's Weird Insight action discover secrets about a player character that the character doesn't know about themselves?
Why isn't nylon as strong as kevlar?
How to model the curly cable part of the phone
Missing Piece of Pie - Can you find it?
haproxy reverse proxy and virtual host
HaProxy - Http and SSL pass through configHow can I use a custom 503 error document when HAProxy sends a 503 HTTP code?haproxy forward uri to root of another serverHAProxy - ssl client ca chain cannot be verifiedHA-Proxy 301 re-direct: https to https://wwwHAProxy to redirect http to https for multiple domain names without SSL TerminationHaProxy giving - 503 Service UnavailableCapture and forward extended PKI cert attributes (e.g. UPN) using haproxyHAProxy maintenance with mode tcp and http2openldap with haproxy - (ldap_result() failed: Can't contact LDAP server)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I'm trying to configure haproxy (1.5.8) in reverse proxy mode linking to some kind of virtualhost hosted on an old Unix server. The haproxy will be in DMZ and the webserver on the LAN.
Basically I want:
https://a.domain.com/lo -> http://a.b.c.d:5000/lo
https://a.domain.com/lp -> http://a.b.c.d:5500/lp
By defaut the Unix server will throw a virtualhost error if i try to connect to http://a.b.c.d:5000/, and will display the webpage if I open http://a.b.c.d:5000/lo.
frontend ft1
mode http
option forwardfor
bind *:443 ssl crt /etc/ssl/certs.pem
use_backend bk_Lo if path_beg /lo
use_backend bk_Lp if path_beg /lp
default_backend bk_Lo
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lp a.b.c.d:5500
But I can't figure a way to rewrite the url correctly, I always end up with an error 503.
Is this even possible with haproxy ?
Can someone point me in the right direction to solve this?
Thank you for your help.
Davron
reverse-proxy haproxy
add a comment |
I'm trying to configure haproxy (1.5.8) in reverse proxy mode linking to some kind of virtualhost hosted on an old Unix server. The haproxy will be in DMZ and the webserver on the LAN.
Basically I want:
https://a.domain.com/lo -> http://a.b.c.d:5000/lo
https://a.domain.com/lp -> http://a.b.c.d:5500/lp
By defaut the Unix server will throw a virtualhost error if i try to connect to http://a.b.c.d:5000/, and will display the webpage if I open http://a.b.c.d:5000/lo.
frontend ft1
mode http
option forwardfor
bind *:443 ssl crt /etc/ssl/certs.pem
use_backend bk_Lo if path_beg /lo
use_backend bk_Lp if path_beg /lp
default_backend bk_Lo
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lp a.b.c.d:5500
But I can't figure a way to rewrite the url correctly, I always end up with an error 503.
Is this even possible with haproxy ?
Can someone point me in the right direction to solve this?
Thank you for your help.
Davron
reverse-proxy haproxy
add a comment |
I'm trying to configure haproxy (1.5.8) in reverse proxy mode linking to some kind of virtualhost hosted on an old Unix server. The haproxy will be in DMZ and the webserver on the LAN.
Basically I want:
https://a.domain.com/lo -> http://a.b.c.d:5000/lo
https://a.domain.com/lp -> http://a.b.c.d:5500/lp
By defaut the Unix server will throw a virtualhost error if i try to connect to http://a.b.c.d:5000/, and will display the webpage if I open http://a.b.c.d:5000/lo.
frontend ft1
mode http
option forwardfor
bind *:443 ssl crt /etc/ssl/certs.pem
use_backend bk_Lo if path_beg /lo
use_backend bk_Lp if path_beg /lp
default_backend bk_Lo
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lp a.b.c.d:5500
But I can't figure a way to rewrite the url correctly, I always end up with an error 503.
Is this even possible with haproxy ?
Can someone point me in the right direction to solve this?
Thank you for your help.
Davron
reverse-proxy haproxy
I'm trying to configure haproxy (1.5.8) in reverse proxy mode linking to some kind of virtualhost hosted on an old Unix server. The haproxy will be in DMZ and the webserver on the LAN.
Basically I want:
https://a.domain.com/lo -> http://a.b.c.d:5000/lo
https://a.domain.com/lp -> http://a.b.c.d:5500/lp
By defaut the Unix server will throw a virtualhost error if i try to connect to http://a.b.c.d:5000/, and will display the webpage if I open http://a.b.c.d:5000/lo.
frontend ft1
mode http
option forwardfor
bind *:443 ssl crt /etc/ssl/certs.pem
use_backend bk_Lo if path_beg /lo
use_backend bk_Lp if path_beg /lp
default_backend bk_Lo
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lp a.b.c.d:5500
But I can't figure a way to rewrite the url correctly, I always end up with an error 503.
Is this even possible with haproxy ?
Can someone point me in the right direction to solve this?
Thank you for your help.
Davron
reverse-proxy haproxy
reverse-proxy haproxy
asked Nov 22 '16 at 11:03
DavronDavron
615
615
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
global
log 127.0.0.1 local0
maxconn 2000
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
user haproxy
group haproxy
daemon
stats socket /var/lib/haproxy/stats
defaults
log global
option dontlognull
option redispatch
retries 3
timeout connect 5000s
timeout client 1200000s
timeout server 1200000s
frontend http_proxy
mode http
bind *:443 ssl crt /etc/ssl/cert_for_a.pem crt /etc/ssl/cert_for_b.pem
option httplog
option http-server-close
acl a_domain_url hdr_beg(host) a.domain.com
use_backend bk_Lo if path_beg /lo
acl work_url hdr_beg(host) b.domain.com
use_backend bk_Lp if path_beg /lp
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lo a.b.c.d:5500
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f816293%2fhaproxy-reverse-proxy-and-virtual-host%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
global
log 127.0.0.1 local0
maxconn 2000
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
user haproxy
group haproxy
daemon
stats socket /var/lib/haproxy/stats
defaults
log global
option dontlognull
option redispatch
retries 3
timeout connect 5000s
timeout client 1200000s
timeout server 1200000s
frontend http_proxy
mode http
bind *:443 ssl crt /etc/ssl/cert_for_a.pem crt /etc/ssl/cert_for_b.pem
option httplog
option http-server-close
acl a_domain_url hdr_beg(host) a.domain.com
use_backend bk_Lo if path_beg /lo
acl work_url hdr_beg(host) b.domain.com
use_backend bk_Lp if path_beg /lp
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lo a.b.c.d:5500
add a comment |
global
log 127.0.0.1 local0
maxconn 2000
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
user haproxy
group haproxy
daemon
stats socket /var/lib/haproxy/stats
defaults
log global
option dontlognull
option redispatch
retries 3
timeout connect 5000s
timeout client 1200000s
timeout server 1200000s
frontend http_proxy
mode http
bind *:443 ssl crt /etc/ssl/cert_for_a.pem crt /etc/ssl/cert_for_b.pem
option httplog
option http-server-close
acl a_domain_url hdr_beg(host) a.domain.com
use_backend bk_Lo if path_beg /lo
acl work_url hdr_beg(host) b.domain.com
use_backend bk_Lp if path_beg /lp
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lo a.b.c.d:5500
add a comment |
global
log 127.0.0.1 local0
maxconn 2000
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
user haproxy
group haproxy
daemon
stats socket /var/lib/haproxy/stats
defaults
log global
option dontlognull
option redispatch
retries 3
timeout connect 5000s
timeout client 1200000s
timeout server 1200000s
frontend http_proxy
mode http
bind *:443 ssl crt /etc/ssl/cert_for_a.pem crt /etc/ssl/cert_for_b.pem
option httplog
option http-server-close
acl a_domain_url hdr_beg(host) a.domain.com
use_backend bk_Lo if path_beg /lo
acl work_url hdr_beg(host) b.domain.com
use_backend bk_Lp if path_beg /lp
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lo a.b.c.d:5500
global
log 127.0.0.1 local0
maxconn 2000
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
user haproxy
group haproxy
daemon
stats socket /var/lib/haproxy/stats
defaults
log global
option dontlognull
option redispatch
retries 3
timeout connect 5000s
timeout client 1200000s
timeout server 1200000s
frontend http_proxy
mode http
bind *:443 ssl crt /etc/ssl/cert_for_a.pem crt /etc/ssl/cert_for_b.pem
option httplog
option http-server-close
acl a_domain_url hdr_beg(host) a.domain.com
use_backend bk_Lo if path_beg /lo
acl work_url hdr_beg(host) b.domain.com
use_backend bk_Lp if path_beg /lp
backend bk_Lo
mode http
server lo a.b.c.d:5000
backend bk_Lp
mode http
server lo a.b.c.d:5500
answered Dec 16 '16 at 0:27
sangbeom kimsangbeom kim
1
1
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f816293%2fhaproxy-reverse-proxy-and-virtual-host%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown