readonly/DNSserver
1
0
Fork 0
mirror of https://github.com/minoplhy/DNSserver.git synced 2024-11-24 10:16:54 +00:00
Code Issues Projects Releases Wiki Activity

Haproxy improvement PR branch 'http20'

Browse Source 
http 2.0
    Remove some # line
    move backend to bottom
    remove garbage line
This commit is contained in:
Minoplhy 2021-02-16 22:28:34 +07:00 committed by GitHub
commit 19e40ba281
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
configuration/haproxy.cfg
View File

@ -56,14 +56,10 @@ frontend 853-in
# DoT
use_backend dns-dot if { ssl_fc_sni dot.domain }
backend dns-dot
mode tcp
server dot 127.0.0.1:5353 check
# TCP LB (443)
frontend 443-in-doh
bind 0.0.0.0:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem
bind [::]:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem
bind 0.0.0.0:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem alpn h2,http/2
bind [::]:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem alpn h2,http/2
mode http
@ -74,14 +70,17 @@ frontend 443-in-doh
use_backend dns-doh if { hdr(host) -i doh.domain }
# default_backend nginx
backend dns-dot
mode tcp
server dot 127.0.0.1:5353 check
backend dns-doh
mode http
server dns-doh 127.0.0.1:8053 check
http-response set-header Strict-Transport-Security max-age=63072000
backend check
mode http
errorfile 503 /root/dns/check.http
http-response set-header Strict-Transport-Security max-age=63072000