dvbportal · February 9, 2015 20:30 · Feb 9, 2015
diff --git a/haproxy-spdy-config b/haproxy-spdy-config
@@ -0,0 +1,35 @@
+haproxy.conf
+============
+
+frontend spdy
+  mode tcp
+  bind xxx.xxx.xxx.xxx:443 ssl crt /etc/haproxy/ssl.pem crt /etc/haproxy/certs.d npn spdy/3.1,http/1.1 ciphers AES256+EECDH:AES256+EDH:AES128+EDH:EECDH:!aNULL:!eNULL:!LOW:!DES:!3DES:!RC4; no-sslv3
+  option tcplog
+  log global
+
+  # route to nginx
+  use_backend nginx_spdy if { ssl_fc_npn -i spdy/3.1 }
+  default_backend nginx
+
+backend nginx
+  mode tcp
+  server nginx01 xxx.xxx.xxx.xxx:80
+
+backend nginx_spdy
+  mode tcp
+  server nginx02 xxx.xxx.xxx.xxx:81
+
+nginx.conf
+==========
+
+server {
+  listen xxx.xxx.xxx.xxx:80;
+  listen xxx.xxx.xxx.xxx:81 spdy;
+  server_name $host;
+  server_name_in_redirect on;
+  autoindex off;
+
+  add_header Strict-Transport-Security "max-age=31536000";
+
+  location / {
+  ...