pfsense_2_3_haproxy_sni_plus_offloading_backends

Frontends on 1 IP serving websites from several backends

Features used: acl's / actions / offloading / SNI / certificates

• Some HTTPS traffic is forwarded as-is to the backend while using SNI to select differentiate between different domains
• Some HTTPS traffic is decrypted on haproxy, then host header is used for selecting the backend
• For some domains HTTP traffic is redirected to HTTPS, others are served by the default backend.

Frontend / Backend overview

Frontend 1

Frontend 2

Frontend 3

Backends

offloading backend with special check

Stats