From c6fb9270de5dd63202f58c6c814a80667da79d8a Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Mon, 15 Feb 2021 10:44:09 +0700 Subject: [PATCH] backend revolution - move backend to bottom - remove garbage line --- configuration/haproxy.cfg | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/configuration/haproxy.cfg b/configuration/haproxy.cfg index 7fe2ae9..df911a7 100644 --- a/configuration/haproxy.cfg +++ b/configuration/haproxy.cfg @@ -56,10 +56,6 @@ frontend 853-in # DoT use_backend dns-dot if { ssl_fc_sni dot.domain } -backend dns-dot - mode tcp - server dot 127.0.0.1:5353 check - # TCP LB (443) frontend 443-in-doh bind 0.0.0.0:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem alpn h2,http/2 @@ -75,12 +71,16 @@ frontend 443-in-doh use_backend dns-doh if { hdr(host) -i doh.domain } -backend dns-doh -mode http -server dns-doh 127.0.0.1:8053 check +backend dns-dot + mode tcp + server dot 127.0.0.1:5353 check -http-response set-header Strict-Transport-Security max-age=63072000 +backend dns-doh + mode http + server dns-doh 127.0.0.1:8053 check backend check mode http errorfile 503 /root/dns/check.http + +http-response set-header Strict-Transport-Security max-age=63072000