global strict-limits # refuse to start if insufficient FDs/memory # add some process-wide tuning here if required # A stats socket may be added to check live metrics if the load generators # do not report them. # stats socket /tmp/haproxy.sock level admin # stats timeout 1h log /dev/log local0 log /dev/log local1 notice log 127.0.0.1:514 local0 info daemon defaults log global mode http option httplog option dontlognull balance random # power-of-two-choices timeout client 60s timeout server 60s timeout connect 10s frontend http_in mode http option httplog bind *:80 option forwardfor #http_entry #http_backend #http_ip frontend https_in mode tcp option tcplog bind *:443 acl tls req.ssl_hello_type 1 tcp-request inspect-delay 5s tcp-request content accept if tls #https_entry #https_backend #https_ip