RE: Haproxy and ssl

I may need to support SSL soon. Would you run one SSL tunnel both between client and HAPROXY, and again between HAPROXY and each of the load balanced servers?

Thanks,
John

-----Original Message-----
From: Willy Tarreau [mailto:w#1wt.eu]
Sent: Saturday, September 29, 2007 4:16 AM To: Kaye Ng
Cc: haproxy#formilux.org
Subject: Re: Haproxy and ssl

. . .

If you really need SSL, I strongly suggest that you look at stunnel. It's
a very nice and performant piece of software. There is a patch on my site
to make it add the X-Forwarded-For header in HTTP requests. I could really
say that stunnel's existence is one of the reasons I don't want to waste
time working on SSL ;-) Received on 2007/09/30 03:27