Anycast
This commit is contained in:
		
							parent
							
								
									fbf1dd22c4
								
							
						
					
					
						commit
						547cf72508
					
				| 
						 | 
					@ -0,0 +1,14 @@
 | 
				
			||||||
 | 
					           DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
 | 
				
			||||||
 | 
					                   Version 2, December 2004
 | 
				
			||||||
 | 
					 
 | 
				
			||||||
 | 
					Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					Everyone is permitted to copy and distribute verbatim or modified
 | 
				
			||||||
 | 
					copies of this license document, and changing it is allowed as long
 | 
				
			||||||
 | 
					as the name is changed.
 | 
				
			||||||
 | 
					 
 | 
				
			||||||
 | 
					           DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
 | 
				
			||||||
 | 
					  TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					 0. You just DO WHAT THE FUCK YOU WANT TO.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
							
								
								
									
										12
									
								
								haproxy.cfg
								
								
								
								
							
							
						
						
									
										12
									
								
								haproxy.cfg
								
								
								
								
							| 
						 | 
					@ -52,6 +52,18 @@ backend letsencrypt
 | 
				
			||||||
	mode http
 | 
						mode http
 | 
				
			||||||
        server letsencrypt-http 127.0.0.1:12345 verify none
 | 
					        server letsencrypt-http 127.0.0.1:12345 verify none
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					# HTTP (port 80, anycast)
 | 
				
			||||||
 | 
					frontend http-ac-in
 | 
				
			||||||
 | 
						bind 198.251.90.114:80
 | 
				
			||||||
 | 
						mode http
 | 
				
			||||||
 | 
						reqadd X-Forwarded-Proto:\ http
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						use_backend letsencrypt-lv1 if { path_beg -i /.well-known/acme-challenge }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					backend letsencrypt-lv1
 | 
				
			||||||
 | 
						mode http
 | 
				
			||||||
 | 
						server letsencrypt-http 10.250.66.2:12345 verify none
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# TCP LB (443)
 | 
					# TCP LB (443)
 | 
				
			||||||
frontend 443-in
 | 
					frontend 443-in
 | 
				
			||||||
	bind 209.141.34.95:443 tfo ssl crt /etc/haproxy/certs
 | 
						bind 209.141.34.95:443 tfo ssl crt /etc/haproxy/certs
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue