global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon # Default SSL material locations ca-base /etc/ssl/certs crt-base /etc/ssl/private # Default ciphers to use on SSL-enabled listening sockets. # For more information, see ciphers(1SSL). This list is from: # https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS ssl-default-bind-options no-sslv3 defaults log global maxconn 2000 mode http option httplog option dontlognull timeout connect 5000 timeout client 90000 timeout server 90000 errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http listen stats :1936 stats enable stats uri /haproxy stats realm Haproxy\ Statistics stats auth admin:123456 stats refresh 30s stats hide-version stats show-legends stats show-node frontend Starlab bind *:80 maxconn 1000 default_backend Starlab backend Starlab balance roundrobin maxconn 1000 timeout connect 5s timeout queue 30s timeout client 5m timeout server 5m option httpclose option forwardfor option httpchk HEAD /haproxy_on HTTP/1.0 server Starlab01 load1.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab02 load2.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab03 load3.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab04 load4.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 frontend Starlab-int bind *:81 maxconn 3000 default_backend Starlab-int backend Starlab-int balance roundrobin maxconn 120 timeout connect 5s timeout client 20h timeout server 20h option httpclose option forwardfor option httpchk HEAD /haproxy_on HTTP/1.0 server Starlab01 load1.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab02 load2.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab03 load3.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40 server Starlab04 load4.starlab.cz:80 check inter 3000 fall 3 rise 2 maxconn 40