Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[asterisk-users] http.conf - haproxy


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> Asterisk Users
View previous topic :: View next topic  
Author Message
cervajs2 at gmail.com
Guest





PostPosted: Mon Aug 22, 2016 5:54 am    Post subject: [asterisk-users] http.conf - haproxy Reply with quote

hello,

is it possible move asterisk http server behind haproxy (haproxy as SSL
endpoint, asterisk http only)

any examples?

my current http.conf

[general]
enabled=yes
bindaddr=0.0.0.0
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/pki/tls/certs/some.crt
tlsprivatekey=/etc/pki/tls/private/some.key
tlscipher=ALL

tnx

marek


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
Back to top
dan.jenkins88 at gmail...
Guest





PostPosted: Mon Aug 22, 2016 6:24 am    Post subject: [asterisk-users] http.conf - haproxy Reply with quote

On Mon, Aug 22, 2016 at 11:53 AM, Marek Červenka <cervajs2@gmail.com (cervajs2@gmail.com)> wrote:
Quote:
hello,

is it possible move asterisk http server behind haproxy (haproxy as SSL endpoint, asterisk http only)

any examples?

my current http.conf

[general]
enabled=yes
bindaddr=0.0.0.0
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/pki/tls/certs/some.crt
tlsprivatekey=/etc/pki/tls/private/some.key
tlscipher=ALL

tnx

marek


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users





Hi Marek,


You need to remove the tlsenable, tlsbindaddr, tlscertfile tlsprivatekey and tlscipher, which will make your Asterisk HTTP only, and then you can stick haProxy infront and forward all of the traffic to asterisk as a "backend"; haProxy would also have a "frontend" which will support your HTTPS setup. You might need to do URL rewriting in haProxy or even add a "prefix" config option to http.conf to add a prefix to the URLs asterisk gives out - it entirely depends on your setup


Dan
Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> Asterisk Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services