global
maxconn 100000
chroot /usr/local/haproxy
stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin
uid 99
gid 99
daemon
nbproc 4
cpu-map 1 0
cpu-map 2 1
cpu-map 3 2
cpu-map 4 3
pidfile /var/lib/haproxy/haproxy.pid
log 127.0.0.1 local3


defaults
option http-keep-alive
option forwardfor
maxconn 100000
mode http
timeout connect 300000ms
timeout client 300000ms
timeout server 300000ms
log-format %ci:%cp\ %si:%sp\ %B\ %U\ %ST\ %r\ %b\ %f\ %bi\ %hrl\ %hsl\

listen weblb
bind *:80
bind *:443 ssl crt /etc/haproxy/ssl/cicic.pem
redirect scheme https if !{ ssl_fc }
http-request set-header Host #这里写域名#
mode http
log global
server web x.x.x.x:443 check ssl verify none

haproxy 2.2代理后端https服务