VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
View previous topic :: View next topic |
Author |
Message |
cervajs2 at gmail.com Guest
|
Posted: Mon Aug 22, 2016 5:54 am Post subject: [asterisk-users] http.conf - haproxy |
|
|
hello,
is it possible move asterisk http server behind haproxy (haproxy as SSL
endpoint, asterisk http only)
any examples?
my current http.conf
[general]
enabled=yes
bindaddr=0.0.0.0
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/pki/tls/certs/some.crt
tlsprivatekey=/etc/pki/tls/private/some.key
tlscipher=ALL
tnx
marek
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
Back to top |
|
|
dan.jenkins88 at gmail... Guest
|
Posted: Mon Aug 22, 2016 6:24 am Post subject: [asterisk-users] http.conf - haproxy |
|
|
On Mon, Aug 22, 2016 at 11:53 AM, Marek Červenka <cervajs2@gmail.com (cervajs2@gmail.com)> wrote:
Quote: | hello,
is it possible move asterisk http server behind haproxy (haproxy as SSL endpoint, asterisk http only)
any examples?
my current http.conf
[general]
enabled=yes
bindaddr=0.0.0.0
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/pki/tls/certs/some.crt
tlsprivatekey=/etc/pki/tls/private/some.key
tlscipher=ALL
tnx
marek
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
|
Hi Marek,
You need to remove the tlsenable, tlsbindaddr, tlscertfile tlsprivatekey and tlscipher, which will make your Asterisk HTTP only, and then you can stick haProxy infront and forward all of the traffic to asterisk as a "backend"; haProxy would also have a "frontend" which will support your HTTPS setup. You might need to do URL rewriting in haProxy or even add a "prefix" config option to http.conf to add a prefix to the URLs asterisk gives out - it entirely depends on your setup
Dan |
|
Back to top |
|
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|