global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        user haproxy
        group haproxy
        maxconn     6000
        daemon
        tune.ssl.default-dh-param 2048
 
defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
 
listen stats
   bind 0.0.0.0:8080
   mode http
   stats enable
   stats hide-version
   stats realm Haproxy\ Statistics
   stats uri /stats
   stats auth username:password
 
frontend http_yemaosheng
    bind *:80
    mode http
    default_backend web-nodes
 
frontend https_yemaosheng
     #cat yemaosheng.crt yemaosheng.key | tee yemaosheng.pem
     bind *:443 ssl crt /root/yemaosheng.pem
     mode http
     option httpclose
     option forwardfor
     reqadd X-Forwarded-Proto:\ https
     default_backend web-nodes
 
backend web-nodes
    mode http
    balance roundrobin
    option forwardfor
    server web-1 10.0.1.2:80 check
    server web-2 10.0.1.3:80 check