HAProxy For HTTP Only?
-
I am trying to set up a play site for a younger enthusiast on an isolated VLAN. I have a site with SSL already, but until we decide how to proceed with the Free DDNS or purchase a domain name, I wanted them to play with the site. I have been attempting to get HAProxy to allow access to this webserver with no luck.
My other site has a Lets Encrypt and allows http and https. This other site does not have a domain to set up SSL.
I am not sure where to begin.
-
@kn4thx
So I assume, you have a single public IP and multiple domain names, which you want to redirect to different backends. This requires that HAproxy can distinguish the requested domain name.There are two options to do this. Either read out the host header or via SNI.
HAproxy supports to modes: http and tcp.
The host header is only included in http requests. SNI is only included in TLS/SSL protocol and has to be supported by the client.
So if your protocol is not http, SNI is the only one option, hence TLS is required and you have also ensure, that your client support it.