Skip to content

Instantly share code, notes, and snippets.

@daemonza
Created March 6, 2012 08:00
Show Gist options
  • Save daemonza/1984822 to your computer and use it in GitHub Desktop.
Save daemonza/1984822 to your computer and use it in GitHub Desktop.
Pound SSL redirect configuration file
######################################################################
# Pound configuration to route SSL requests to HAproxy and then let
# HAproxy load balance the rest of the services.
#
## global options:
User "www-data"
Group "www-data"
#RootJail "/chroot/pound"
## Logging: (goes to syslog by default)
## 0 no logging
## 1 normal
## 2 extended
## 3 Apache-style (common log format)
LogLevel 1
## check backend every X secs:
Alive 30
## use hardware-accelleration card supported by openssl(1):
#SSLEngine "<hw>"
# poundctl control socket
Control "/var/run/pound/poundctl.socket"
######################################################################
## listen, redirect and ... to:
## redirect all requests on port 8080 ("ListenHTTP") to the local webserver (see "Service" below):
ListenHTTPS
Address 10.0.0.125 ## This should be your outside IP
Port 443
Cert "/etc/pound/ha.pem"
## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
#xHTTP 0
Service
BackEnd
Address 192.168.1.125 # Inside IP of same server where HAproxy lives
Port 80
End
End
End
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment