[asterisk-users] http.conf - haproxy

[Dan Jenkins]

On Mon, Aug 22, 2016 at 11:53 AM, Marek Červenka <cervajs2 at gmail.com> wrote:

> hello,
>
> is it possible move asterisk http server behind haproxy (haproxy as SSL
> endpoint, asterisk http only)
>
> any examples?
>
> my current http.conf
>
> [general]
> enabled=yes
> bindaddr=0.0.0.0
> tlsenable=yes
> tlsbindaddr=0.0.0.0:8089
> tlscertfile=/etc/pki/tls/certs/some.crt
> tlsprivatekey=/etc/pki/tls/private/some.key
> tlscipher=ALL
>
> tnx
>
> marek
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>


Hi Marek,

You need to remove the tlsenable, tlsbindaddr, tlscertfile tlsprivatekey
and tlscipher, which will make your Asterisk HTTP only, and then you can
stick haProxy infront and forward all of the traffic to asterisk as a
"backend"; haProxy would also have a "frontend" which will support your
HTTPS setup. You might need to do URL rewriting in haProxy or even add a "
prefix" config option to http.conf to add a prefix to the URLs asterisk
gives out - it entirely depends on your setup

Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20160822/2d6a161f/attachment.html>