| Lukas Tribus | 19f7fda | 2013-06-06 21:26:24 +0200 | [diff] [blame] | 1 | # This configuration is a simplified example of how to use ssl on front |
| 2 | # and backends with additional certificates loaded from a directory for SNI |
| 3 | # capable clients. |
| 4 | |
| 5 | global |
| 6 | maxconn 100 |
| 7 | |
| 8 | defaults |
| 9 | mode http |
| 10 | timeout connect 5s |
| 11 | timeout client 5s |
| 12 | timeout server 5s |
| 13 | |
| 14 | frontend myfrontend |
| 15 | # primary cert is /etc/cert/server.pem |
| 16 | # /etc/cert/certdir/ contains additional certificates for SNI clients |
| 17 | bind :443 ssl crt /etc/cert/server.pem crt /etc/cert/certdir/ |
| 18 | bind :80 |
| 19 | default_backend mybackend |
| 20 | |
| 21 | backend mybackend |
| 22 | # a http backend |
| 23 | server s3 10.0.0.3:80 |
| 24 | # a https backend |
| Willy Tarreau | 15255f7 | 2015-10-13 15:44:31 +0200 | [diff] [blame] | 25 | server s4 10.0.0.3:443 ssl verify none |
| Lukas Tribus | 19f7fda | 2013-06-06 21:26:24 +0200 | [diff] [blame] | 26 | |