Example HAProxy configuration for HashiCorp Vault

haproxy.cfg

frontend vault_api_vip
    bind *:8200
    mode tcp
    default_backend vault_api_pool
    option tcplog

backend vault_api_pool
    mode tcp
    balance roundrobin
    option httpchk HEAD /v1/sys/health
    http-check expect status 200
    server vault01 vaul01.example.com:8200 check check-ssl verify none
    server vault02 vaul02.example.com:8200 check check-ssl verify none
    server vault03 vaul03.example.com:8200 check check-ssl verify none

frontend vault_replication_vip
    bind *:8201
    mode tcp
    default_backend vault_replication_pool
    option tcplog

backend vault_replication_pool
    mode tcp
    balance roundrobin
    option httpchk HEAD /v1/sys/health
    http-check expect status 200
    server vault01 vaul01.example.com:8201 check check-ssl verify none port 8200
    server vault02 vaul02.example.com:8201 check check-ssl verify none port 8200
    server vault03 vaul03.example.com:8201 check check-ssl verify none port 8200