Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two web server and one haproxy load balancer in front of them.

I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with single ssl certificate?

share|improve this question
up vote 2 down vote accepted
  1. Purchase an SSL certificate
  2. Decide where you will terminate the SSL. Pound and stunnel are commonly used, although dev versions of HAProxy now include SSL support.
  3. Install pound/stunnel/whatever on your load balancer + configure it with cert from (1). Pound/stunnel/whatever will listen on 443 and you can just pass back to your HAProxy instance.
  4. Re-direct all traffic from HTTP to HTTPS or make your application aware of the SSL. E.g., redirect to (this should be secure).

Good luck!

share|improve this answer
thanks, this is what a saw on other place :). Ill try this config next days – Novkovski Stevo Bato Feb 13 '13 at 18:49

It depends entirely on your current haproxy configuration. If you're using something that depends on being able to inspect the payload of the session, then you will either need to offload your SSL process before haproxy, or upgrade to haproxy 1.5 to use it's SSL offloading capabilities.

If you're not using anything that needs to inspect the payload, then you just need to make sure you're listening on port 443. Configure IIS with your SSL certificates.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.