HAProxy not passing SSL traffic in TCP mode (unknown protocol)
- by David
Hi,
I've got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully.
I'm now trying to get SSL traffic to work (in TCP mode and on just one server for now) however I keep getting the following error when testing via openssl:
26396:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:588:
However, when I try the same test (openssl s_client -connect) on the web servers IP address and hostname, everything seems to look OK. I can setup a hosts record locally and confirm that the browsers are picking up the SSL certificate succesfully for the domain.
I guess this has led me to the conclusion that there is a problem at the HAProxy setup I have, so would really appreciate some advice here.
frontend https-c-in
bind 178.79.xxx.xxx:443
mode tcp
default_backend c-https
backend c-https
balance source
option ssl-hello-chk
option httpclose
server c-web-01 192.168.xxx.xxx:443 check inter 2000 rise 2 fall 5
