Created
June 14, 2017 11:28
-
-
Save Karm/541fba87030c4ee380f0c6872fed5bab to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
LoadModule proxy_cluster_module modules/mod_proxy_cluster.so | |
LoadModule cluster_slotmem_module modules/mod_cluster_slotmem.so | |
LoadModule manager_module modules/mod_manager.so | |
LoadModule advertise_module modules/mod_advertise.so | |
MemManagerFile /tmp/mod_cluster-eapXXX/jbcs-httpd24-2.4/httpd/cache/mod_cluster | |
LoadModule http2_module modules/mod_http2.so | |
LoadModule proxy_http2_module modules/mod_proxy_http2.so | |
# Note I enforce h2 here, | |
# whereas the undermentioned vhost allows http/1.1 for MCMP. | |
Protocols h2 | |
ProtocolsHonorOrder on | |
ServerName rhel7GAx86-64:2080 | |
SSLEngine on | |
SSLProtocol All -SSLv2 -SSLv3 | |
SSLCipherSuite "HIGH !MEDIUM !LOW" | |
SSLProxyCipherSuite "HIGH !MEDIUM !LOW" | |
SSLProxyCheckPeerCN Off | |
SSLProxyCheckPeerName Off | |
SSLHonorCipherOrder On | |
SSLCertificateFile /opt/noe-tests/resources/ssl/proper/server.crt | |
SSLCertificateKeyFile /opt/noe-tests/resources/ssl/proper/server.key | |
SSLCACertificateFile /opt/noe-tests/resources/ssl/proper/myca.crt | |
SSLVerifyClient optional | |
SSLProxyVerify optional | |
SSLProxyEngine On | |
SSLProxyMachineCertificateFile /opt/noe-tests/resources/ssl/proper/client.pem | |
SSLProxyCACertificateFile /opt/noe-tests/resources/ssl/proper/myca.crt | |
SSLProxyProtocol All -SSLv2 -SSLv3 | |
EnableOptions | |
LogLevel debug | |
<IfModule manager_module> | |
Listen 192.168.122.172:8747 | |
<VirtualHost 192.168.122.172:8747> | |
<Directory /> | |
Require all granted | |
</Directory> | |
ServerAdvertise on | |
EnableMCPMReceive | |
<Location /mcm> | |
SetHandler mod_cluster-manager | |
Require all granted | |
</Location> | |
AdvertiseGroup 224.0.5.172:54613 | |
AdvertiseBindAddress 192.168.122.172:54613 | |
SSLEngine on | |
SSLProtocol All -SSLv2 -SSLv3 | |
SSLCipherSuite "HIGH !MEDIUM !LOW" | |
SSLProxyCipherSuite "HIGH !MEDIUM !LOW" | |
SSLProxyCheckPeerCN Off | |
SSLProxyCheckPeerName Off | |
SSLHonorCipherOrder On | |
SSLCertificateFile /opt/noe-tests/resources/ssl/proper/server.crt | |
SSLCertificateKeyFile /opt/noe-tests/resources/ssl/proper/server.key | |
SSLCACertificateFile /opt/noe-tests/resources/ssl/proper/myca.crt | |
SSLVerifyClient optional | |
SSLProxyVerify optional | |
SSLProxyEngine On | |
SSLProxyMachineCertificateFile /opt/noe-tests/resources/ssl/proper/client.pem | |
SSLProxyCACertificateFile /opt/noe-tests/resources/ssl/proper/myca.crt | |
SSLProxyProtocol All -SSLv2 -SSLv3 | |
Protocols h2 http/1.1 | |
ProtocolsHonorOrder on | |
KeepAliveTimeout 60 | |
MaxKeepAliveRequests 0 | |
ServerAdvertise on https://192.168.122.172:8747 | |
AdvertiseFrequency 5 | |
ManagerBalancerName qacluster | |
</VirtualHost> | |
</IfModule> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment