Skip to content

Instantly share code, notes, and snippets.

@artbikes
Forked from dvbportal/haproxy-spdy-config
Last active August 29, 2015 14:15
Show Gist options
  • Save artbikes/4a8d952c19f48ef5e72a to your computer and use it in GitHub Desktop.
Save artbikes/4a8d952c19f48ef5e72a to your computer and use it in GitHub Desktop.
haproxy.conf
============
frontend spdy
mode tcp
bind xxx.xxx.xxx.xxx:443 ssl crt /etc/haproxy/ssl.pem crt /etc/haproxy/certs.d npn spdy/3.1,http/1.1 ciphers AES256+EECDH:AES256+EDH:AES128+EDH:EECDH:!aNULL:!eNULL:!LOW:!DES:!3DES:!RC4; no-sslv3
option tcplog
log global
# route to nginx
use_backend nginx_spdy if { ssl_fc_npn -i spdy/3.1 }
default_backend nginx
backend nginx
mode tcp
server nginx01 xxx.xxx.xxx.xxx:80
backend nginx_spdy
mode tcp
server nginx02 xxx.xxx.xxx.xxx:81
nginx.conf
==========
server {
listen xxx.xxx.xxx.xxx:80;
listen xxx.xxx.xxx.xxx:81 spdy;
server_name $host;
server_name_in_redirect on;
autoindex off;
add_header Strict-Transport-Security "max-age=31536000";
location / {
...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment