1
vote
0answers
30 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
0
votes
0answers
52 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
0
votes
1answer
131 views

set _SERVER[“HTTPS”] to yes with stunnel Haproxy Nginx

I am trying to set the _SERVER["HTTPS"] php variable to yes on my web servers. Actually, https trafic come to stunnel which forward it to haproxy which forward it to my web servers running under ...
1
vote
0answers
200 views

stunnel Haproxy ldap authentication

in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend. I have managed to enable authentication in haproxy. But the users and passwords ...
2
votes
2answers
639 views

Should I use an ssl terminator or just haproxy?

I'm trying to figure out how to set up my architecture for a socket.io app that will require both https and wss connections. I've found many tutorials on the web suggesting that you use something like ...
1
vote
0answers
381 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
3
votes
4answers
2k views

Pound + HAProxy or Stunnel + HAProxy

I'm looking at introducing a loadbalancer to my existing site infrastructure to help with traffic growth and provide a level of failure protection. The site I am running uses SSL certificates for the ...
3
votes
1answer
428 views

HAProxy and Stunnel PCI Compliance

I am setting up HAProxy to load balance between two web servers. Some of the pages on the site require SSL. Stunnel is handling the https connections and passing them off to haproxy (Stunnel ...
8
votes
4answers
5k views

haproxy + stunnel + keep-alive?

I'd like to put stunnel in front of haproxy 1.4 to handle HTTPS traffic. I also need stunnel to add the X-Forwarded-For header. This can be achieved by the "stunnel-4.xx-xforwarded-for.diff" patches ...
0
votes
3answers
557 views

Architecture question: adding SSL into the mix

Currently we have a configuration that at the highest level looks like this: [Traffic] -> Varnish (caching) -> HaProxy (load balancing) -> Apache (content and services) There are (obviously?) ...
0
votes
2answers
731 views

End to End SSL connection using Haproxy?

I want to know about how Haproxy reacts when I want to make the HTTPS connection over the server. In apache we have aj_proxy to make a ssl connection to tomcat server, so how that functionality can be ...
2
votes
1answer
650 views

HTTPS Stunnel and Haproxy

I am trying to use stunnel infront of Haproxy for SSL support. SSL certificates are located according to stunnel configuration. I am also able to get the https connection, but every time I use https, ...
1
vote
3answers
2k views

OpenSource (Layer 4) Load Balancer that can pass through original client IP?

I am setting up a web application which uses SSL for all requests. It needs to have room for scaling and also be highly available. It seems that the "recommended" way to handle this is to setup a pair ...
1
vote
2answers
2k views

stunnel+HAProxy+Apache question, multiple site certificates

currently I'm using the following scheme to serve both static y and dynamic content. I have compiled stunnel with X-Forwarded-For support patch. Internet(http) -> haproxy (frontend1) -> Apache Farm ...
1
vote
1answer
924 views

Using virtual IP with stunnel and haproxy

We have a load-balancer setup, in which an HTTPS Request flows through the following steps:- Client -> DNS -> stunnel on Load-Balancer -> HAProxy on LB -> Web-Server This setup works ...
0
votes
1answer
239 views

haproxy session stats change suddenly

We have a load balancer where if we refresh the stats page over and over, we will notice that the Current sessions value will stay stable for a time, say 45-50 sessions per server more or less, then ...
2
votes
1answer
937 views

Stunnel too many clients

I'm trying to hook up stunnel and haproxy to forward https connections through to some backend servers. I've got haproxy setup right, and I seem to have stunnel set up right. Trouble is that when I ...