Ssl passthrough haproxy

1. How to enable SSL in HAProxy?
2. What is SSL passthrough?
3. What is the difference between HTTP and TCP mode in HAProxy?

How to enable SSL in HAProxy?

First, create a self-signed SSL certificate

Use the following command to create your self-signed SSL certificate and move it to /etc/ssl/private. root@haproxy:~# openssl req -nodes -x509 -newkey rsa:2048 -keyout /etc/ssl/private/test. key -out /etc/ssl/private/test.

What is SSL passthrough?

SSL passthrough feature allows you to pass incoming security sockets layer (SSL) requests directly to a server for decryption rather than decrypting the request using a load balancer. SSL passthrough is widely used for web application security and it uses the TCP mode to pass encrypted data to servers.

What is the difference between HTTP and TCP mode in HAProxy?

HAProxy can run in two different modes: TCP or HTTP. When operating in TCP mode, we say that it acts as a layer 4 proxy. In HTTP mode, we say that it acts as a layer 7 proxy.