Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# hoststated for SSL load balancing

load balances ssl services

    protocol httpssl {
    protocol http
             header append "$REMOTE_ADDR" to "X-Forwarded-For"
             header append "$SERVER_ADDR:$SERVER_PORT" to "X-Forwarded-By"
             header change "Keep-Alive" to "$TIMEOUT"
             url hash "sessid"
             cookie hash "sessid"
             path filter "*command=*" from "/cgi-bin/index.cgi"

             ssl { sslv2, ciphers "MEDIUM:HIGH" }
             tcp { nodelay, sack, socket buffer 65536, backlog 128 }
    }
    relay wwwssl {
             # Run as a SSL accelerator
             listen on $webserver port 443 ssl
             protocol httpssl
             table webhosts loadbalance
    }