SSL Termination in HAProxy - HAProxy Basics

Did you know that setting up SSL termination using HAProxy takes less than a minute? In our YouTube debut, we'll show you how to do it, and make sure to Subscribe to see more of these guides in the future.

Timestamps:
00:25 - What is SSL Termination
01:16 - Requirements
01:46 - Add SSL Termination to HAProxy
03:00 - Redirect to HTTPS
03:57 - Restrict which SSL/TLS Version to use
05:38 - Test your SSL/TLS ciphers

[aldehc]

AWESOME!!!! very straightforward video and tool, thanks very much.

[TheOGTurn]

Haha I've been fighting getting this to work with crazy cfg files .... Took my normal working config and added the single bind line and it worked.... Gracias

[SubjectXXX]

Nice quick overview of this scenario, is there available walkthrough how to do the same, but with different domains on backend servers? I think its called Reverse proxy..

[omancoding]

Hi, thanks for the video.
Can SSL termination work for TCP mode (not HTTP)?
With one frontend but several backend points in roundrobin sequence?

[yxtjehr]

Big help to me!
I want to setup let's encrypt auto renew, have any suggestion ?

[eAzydaman]

This is really great but if I want my webservers and ISPconfig to handle all certificates is there any way to do that when I have a setup with HAproxy/keepalived? Right now I get can't bind to port 80 error.

[jamesdavies]

How do you get the .pem to include the cert and key? I'm lost on how to combine the two.

[LazarTas]

Great video. I was just wandering which plugins and setup are you using to connect to VS to Linux server. Thanks :)

[markuslacht]

Where do you have to specify test.com in your haproxy.cfg file? Is that not required at all? I am a little bit confused.

[omancoding]

What about tcp mode ? Does it work in such way?

[TheMysteryuncover]

I created a secret with cert-manager it has tls.crt tls.key and ca.crt. I have tried to make SSL termination by using the pem file and adding the path of crt and key, but ha-proxy deployment failed to start up and showed an error unable to stat SSL certificate.

[ElectricPinguino]

How would one ensure 'Secure Renegotiation' is supported on the web server via the haproxy load balancer? My test site fails that test on SSL Labs. SSL termination is handled on my haproxy load balancer. Thank you in advance for any leads! Great video!

[Oswee]

And the order matters in the combined .pem file.

[shazadrojan]

Thanks for the video, great info. I am assuming that the HAProxy is configured to Load Balance at layer 7 and not Layer 4 right? Can you do the same for Layer 4 or is it necessary to terminate SSl at layer 4 if I want to only use 443?

[stephennorton]

Shucks, now I can do some real scraping instead of the ol' ... nevermind.

[fxstreamer]

such a stupid expression . calling it "termination" instead of decryption