Anycast

LICENSE

@@ -0,0 +1,14 @@
+           DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
+                   Version 2, December 2004
+ 
+Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
+
+Everyone is permitted to copy and distribute verbatim or modified
+copies of this license document, and changing it is allowed as long
+as the name is changed.
+ 
+           DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
+  TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+ 0. You just DO WHAT THE FUCK YOU WANT TO.
+

haproxy.cfg

@@ -52,6 +52,18 @@ backend letsencrypt
 	mode http
         server letsencrypt-http 127.0.0.1:12345 verify none
 
+# HTTP (port 80, anycast)
+frontend http-ac-in
+	bind 198.251.90.114:80
+	mode http
+	reqadd X-Forwarded-Proto:\ http
+
+	use_backend letsencrypt-lv1 if { path_beg -i /.well-known/acme-challenge }
+
+backend letsencrypt-lv1
+	mode http
+	server letsencrypt-http 10.250.66.2:12345 verify none
+
 # TCP LB (443)
 frontend 443-in
 	bind 209.141.34.95:443 tfo ssl crt /etc/haproxy/certs