=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/etc/Attic/relayd.conf,v retrieving revision 1.3 retrieving revision 1.4 diff -u -r1.3 -r1.4 --- src/etc/Attic/relayd.conf 2007/02/26 13:04:34 1.3 +++ src/etc/Attic/relayd.conf 2007/02/26 13:58:31 1.4 @@ -1,4 +1,4 @@ -# $OpenBSD: relayd.conf,v 1.3 2007/02/26 13:04:34 pyr Exp $ +# $OpenBSD: relayd.conf,v 1.4 2007/02/26 13:58:31 reyk Exp $ # # Macros # @@ -10,6 +10,7 @@ # # interval 10 # timeout 200 +# prefork 5 # # Each table will be mapped to a pf table. @@ -38,4 +39,29 @@ table webhosts backup table fallback +} + +# +# Relays and protocols are used for Layer 7 loadbalancing +# +protocol httpssl { + protocol http + append "$REMOTE_ADDR" to "X-Forwarded-For" + append "$SERVER_ADDR:$SERVER_PORT" to "X-Forwarded-By" + change "Connection" to "close" + + # Various TCP performance options + tcp { nodelay, sack, socket buffer 65536, backlog 128 } + +# ssl { no sslv2, sslv3, tlsv1, ciphers HIGH } +# ssl session cache disable +} + +relay wwwssl { + # Run as a SSL accelerator + listen on 192.168.1.1 port 443 ssl + protocol httpssl + + # Forward to hosts in the webhosts table using a src/dst hash + table webhosts loadbalance }