Skip to content

Instantly share code, notes, and snippets.

@jacoelho
Last active October 3, 2017 22:25
Show Gist options
  • Save jacoelho/c2f0c86bf99d51038a9d to your computer and use it in GitHub Desktop.
Save jacoelho/c2f0c86bf99d51038a9d to your computer and use it in GitHub Desktop.
haproxy redis
defaults REDIS
mode tcp
timeout connect 3s
timeout server 6s
timeout client 6s
frontend ft_redis
bind *:6379 ssl crt /etc/haproxy/certificate.pem ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
default_backend bk_redis
backend bk_redis
option tcp-check
tcp-check connect
tcp-check send AUTH\ password\r\n
tcp-check expect string +OK
tcp-check send PING\r\n
tcp-check expect string +PONG
tcp-check send info\ replication\r\n
tcp-check expect string role:master
tcp-check send QUIT\r\n
tcp-check expect string +OK
server redis1 192.168.205.10:6380 check-ssl inter 1s ssl verify none
server redis2 192.168.205.11:6380 check-ssl inter 1s ssl verify none
server redis3 192.168.205.12:6380 check-ssl inter 1s ssl verify none
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment