[{"_1":2,"_179":-5,"_180":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_158":159},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":89,"_112":113,"_146":-5,"_147":11,"_148":21,"_149":11,"_150":11,"_151":-5,"_152":11,"_153":-5,"_154":155,"_156":114,"_157":-7},"canonicalUrl","https://hub.docker.com/r/impulsecloud/ic-dockercloud-haproxy/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","impulsecloud","reponame","ic-dockercloud-haproxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":21,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2016-05-13T04:10:59.443213Z","description","HAProxy image that balances between linked containers and, if launched in Docker Cloud.","is_private","last_updated","2016-05-13T04:41:16.732514Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.distribution.manifest.v1+prettyjws","name","pull_count",2948,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# dockercloud/haproxy\n\n\nHAProxy image that balances between linked containers and, if launched in Docker Cloud or using Docker Compose v2,\nreconfigures itself when a linked cluster member redeploys, joins or leaves.\n\n## Version\n\n- latest: `dockercloud/haproxy:1.2.1`\n\n**Attention** : Please *ALWAYS* use a specific image tag that works for you. Do *NOT* use `dockercloud/haproxy:latest` in any situation other than testing purpose.\n\n## Usage\n\nYou can use `dockercloud/haproxy` in three different ways:\n\n- running in Docker Cloud\n- running with docker legacy links\n- running with Docker Compose v2(new links, compatible with Docker Swarm)\n\n### Running in Docker Cloud\n\n1. Launch the service you want to load-balance using Docker Cloud.\n\n2. Launch the load balancer. To do this, select \"Jumpstarts\", \"Proxies\" and select `dockercloud/haproxy`. During the \"Environment variables\" step of the wizard, link to the service created earlier (the name of the link is not important), and add \"Full Access\" API role (this will allow HAProxy to be updated dynamically by querying Docker Cloud's API).\n\n\t**Note**:\n\t- If you are using `docker-cloud cli`, or `stackfile`, please set `roles` to `global`\n\t- Please **DO NOT** set `sequential_deployment: true` on this image.\n\nThat's it - the haproxy container will start querying Docker Cloud's API for an updated list of containers in the service and reconfigure itself automatically, including:\n\n* start/stop/terminate containers in the linked application services\n* start/stop/terminate/scale up/scale down/redeploy the linked application services\n* add new links to HAProxy\n* remove old links from HAProxy\n\n##### example of stackfile in Docker Cloud:\n\n\tweb:\n\t image: 'dockercloud/hello-world:latest'\n\t target_num_containers: 2\n\tlb:\n\t image: 'dockercloud/haproxy:latest'\n\t links:\n\t - web\n\t ports:\n\t - '80:80'\n\t roles:\n\t - global\n\n### Running with docker legacy links\n\nLegacy link refers to the link created before docker 1.10, and the link created in default bridge network in docker 1.10 or after.\n\n##### example of legacy links using docker cli\n\n docker run -d --name web1 dockercloud/hello-world\n docker run -d --name web2 dockercloud/hello-world\n docker run -d -p 80:80 --link web1:web1 --link web2:web2 dockercloud/haproxy\n\n#### example of docker-compose.yml v1 format:\n\n\tweb1:\n\t image: 'dockercloud/hello-world:latest'\n\tweb2:\n\t image: 'dockercloud/hello-world:latest'\n\tlb:\n\t image: 'dockercloud/haproxy:latest'\n\t links:\n\t - web1\n\t - web2\n\t ports:\n\t - '80:80'\n\n**Note**: Any link alias sharing the same prefix and followed by \"-/_\" with an integer is considered to be from the same service. For example: `web-1` and `web-2` belong to service `web`, `app_1` and `app_2` are from service `app`, but `app1` and `web2` are from different services.\n\n\n### Running with Docker Compose v2(new links)\n\nDocker Compose 1.6 supports a new format of the compose file. In the new version(v2), the old link that injects environment variables is deprecated.\n\nSimilar to using legacy links, here list some differences that you need to notice:\n- This image must be run using Docker Compose, as it relies on the Docker Compose labels for configuration.\n- The container needs access to the docker socket, you must mount the correct files and set the related environment to make it work.\n- A link is required in order to ensure that dockercloud/haproxy is aware of which service it needs to balance, although links are not needed for service discovery since docker 1.10. Linked aliases are not required.\n- DO not overwrite `HOSTNAME` environment variable in `dockercloud/haproxy container`.\n- As it is the case on Docker Cloud, auto reconfiguration is supported when the linked services scales or/and the linked container starts/stops.\n\n##### example of docker-compose.yml running in linux:\n\n\tversion: '2'\n\tservices:\n\t web:\n\t image: dockercloud/hello-world\n\t lb:\n\t image: dockercloud/haproxy\n\t links:\n\t - web\n\t volumes:\n\t - /var/run/docker.sock:/var/run/docker.sock\n\t ports:\n\t - 80:80\n\n##### example of docker-compose.yml running in Mac OS\n\n\tversion: '2'\n\tservices:\n\t web:\n\t image: dockercloud/hello-world\n\t lb:\n\t image: dockercloud/haproxy\n\t links:\n\t - web\n\t environment:\n\t - DOCKER_TLS_VERIFY\n\t - DOCKER_HOST\n\t - DOCKER_CERT_PATH\n\t volumes:\n\t - $DOCKER_CERT_PATH:$DOCKER_CERT_PATH\n\t ports:\n\t - 80:80\n\nOnce the stack is up, you can scale the web service using `docker-compose scale web=3`. dockercloud/haproxy will automatically reload its configuration.\n\n#### Running with Docker Compose v2 and Swarm (using envvar)\nWhen using links like previous section, the Docker Swarm scheduler can be too restrictive. \nEven with overlay network, swarm (As of 1.1.0) will attempt to schedule haproxy on the same node as the linked service due to legacy links behavior. \nThis can cause unwanted scheduling patterns or errors such as \"Unable to find a node fulfilling all dependencies...\"\n\nSince Compose V2 allows discovery through the service names, Dockercloud haproxy only needs the links to indentify which service should be load balanced.\n\nA second option is to use the `ADDITIONAL_SERVICES` variable for indentification of services.\n\n- Set the `ADDITIONAL_SERVICES` env variable to your linked services.\n- You also want to set depends_on to ensure the web service is started before haproxy so that the hostname can be resolved. This controls scheduling order but not location.\n- The container still needs access to the docker daemon to get load balanced containers' configs.\n- If any trouble with haproxy not updating the config, try running reload.sh or set the `DEBUG` envvar.\n- This image is also compatible with Docker Swarm, and supports the docker native `overlay` network across multi-hosts.\n\n##### example of docker-compose.yml in 'project_dir' directory running in linux:\n\n\tversion: '2'\n\tservices:\n\t web:\n\t image: dockercloud/hello-world\n\t blog:\n\t image: dockercloud/hello-world\n\t lb:\n\t image: dockercloud/haproxy\n \t depends_on:\n - web\n - blog\n environment:\n - ADDITIONAL_SERVICES=project_dir:web,project_dir:blog\n\t volumes:\n\t - /var/run/docker.sock:/var/run/docker.sock\n\t ports:\n\t - 80:80\n\n## Configuration\n\n### Global and default settings of HAProxy###\n\nSettings in this part is immutable, you have to redeploy HAProxy service to make the changes take effects\n\n|Environment Variable|Default|Description|\n|:-----:|:-----:|:----------|\n|ADDITIONAL_SERVICES| |list of additional services to balance (es: `prj1:web,prj2:sql`). Discovery will be based on `com.docker.compose.[project|service]` container labels. This environment variable only works on compose v2, and the referenced services must be on a network accessible to this containers.|\n|BALANCE|roundrobin|load balancing algorithm to use. Possible values include: `roundrobin`, `static-rr`, `source`, `leastconn`. See:[HAProxy:balance](https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-balance)|\n|CA_CERT_FILE| |the path of a ca-cert file. This allows you to mount your ca-cert file directly from a volume instead of from envvar. If set, `CA_CERT` envvar will be ignored. Possible value: `/cacerts/cert0.pem`|\n|CA_CERT| |CA cert for haproxy to verify the client. Use the same format as `DEFAULT_SSL_CERT`|\n|CERT_FOLDER| |the path of certificates. This allows you to mount your certificate files directly from a volume instead of from envvars. If set, `DEFAULT_SSL_CERT` and `SSL_CERT` from linked services are ignored. Possible value:`/certs/`|\n|DEFAULT_SSL_CERT| |Default ssl cert, a pem file content with private key followed by public certificate, '\\n'(two chars) as the line separator. should be formatted as one line - see [SSL Termination](#ssl-termination)|\n|EXTRA_BIND_SETTINGS| |comma-separated string(`:`) of extra settings, and each part will be appended to the related port bind section in the configuration file. To escape comma, use `\\,`. Possible value: `443:accept-proxy, 80:name http`|\n|EXTRA_DEFAULT_SETTINGS| |comma-separated string of extra settings, and each part will be appended to DEFAULT section in the configuration file. To escape comma, use `\\,`|\n|EXTRA_FRONTEND_SETTINGS_\\| |comma-separated string of extra settings, and each part will be appended frontend section with the port number specified in the name of the envvar. To escape comma, use `\\,`. E.g. `EXTRA_FRONTEND_SETTINGS_80=balance source, maxconn 2000`|\n|EXTRA_GLOBAL_SETTINGS| |comma-separated string of extra settings, and each part will be appended to GLOBAL section in the configuration file. To escape comma, use `\\,`. Possible value: `tune.ssl.cachesize 20000, tune.ssl.default-dh-param 2048`|\n|EXTRA_SSL_CERTS| |list of extra certificate names separated by comma, eg. `CERT1, CERT2, CERT3`. You also need to specify each certificate as separate env variables like so: `CERT1=\"\"`, `CERT2=\"\"`, `CERT3=\"\"`|\n|HEALTH_CHECK|check|set health check on each backend route, possible value: \"check inter 2000 rise 2 fall 3\". See:[HAProxy:check](https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5.2-check)|\n|HTTP_BASIC_AUTH| |a comma-separated list of credentials(`:`) for HTTP basic auth, which applies to all the backend routes. To escape comma, use `\\,`. *Attention:* DO NOT rely on this for authentication in production|\n|MAXCONN|4096|sets the maximum per-process number of concurrent connections.|\n|MODE|http|mode of load balancing for HAProxy. Possible values include: `http`, `tcp`, `health`|\n|MONITOR_PORT| |the port number where monitor_uri should be added to. Use together with `MONTIOR_URI`. Possible value: `80`|\n|MONITOR_URI| |the exact URI which we want to intercept to return HAProxy's health status instead of forwarding the request.See: http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-monitor-uri. Possible value: `/ping`|\n|OPTION|redispatch|comma-separated list of HAProxy `option` entries to the `default` section.|\n|RSYSLOG_DESTINATION|127.0.0.1|the rsyslog destination to where HAProxy logs are sent|\n|SSL_BIND_CIPHERS| |explicitly set which SSL ciphers will be used for the SSL server. This sets the HAProxy `ssl-default-bind-ciphers` configuration setting.|\n|SSL_BIND_OPTIONS|no-sslv3|explicitly set which SSL bind options will be used for the SSL server. This sets the HAProxy `ssl-default-bind-options` configuration setting. The default will allow only TLSv1.0+ to be used on the SSL server.|\n|STATS_AUTH|stats:stats|username and password required to access the Haproxy stats.|\n|STATS_PORT|1936|port for the HAProxy stats section. If this port is published, stats can be accessed at `http://:/`\n|TIMEOUT|connect 5000, client 50000, server 50000|comma-separated list of HAProxy `timeout` entries to the `default` section.|\n\n### Settings in linked application services###\n\nSettings here can overwrite the settings in HAProxy, which are only applied to the linked services. If run in Docker Cloud, when the service redeploys, joins or leaves HAProxy service, HAProxy service will automatically update itself to apply the changes\n\n|Environment Variable|Description|\n|:-----:|:----------|\n|APPSESSION|sticky session option, possible value `JSESSIONID len 52 timeout 3h`. See:[HAProxy:appsession](http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-appsession)|\n|BALANCE|load balancing algorithm to use. Possible values include: `roundrobin`, `static-rr`, `source`, `leastconn`. See:[HAProxy:balance](https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-balance)|\n|COOKIE|sticky session option. Possible value `SRV insert indirect nocache`. See:[HAProxy:cookie](http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-cookie)|\n|DEFAULT_SSL_CERT|similar to SSL_CERT, but stores the pem file at `/certs/cert0.pem` as the default ssl certs. If multiple `DEFAULT_SSL_CERT` are specified in linked services and HAProxy, the behavior is undefined|\n|EXCLUDE_PORTS|comma separated port numbers(e.g. 3306, 3307). By default, HAProxy will add all the ports exposed by the application services to the backend routes. You can exclude the ports that you don't want to be routed, like database port|\n|EXTRA_SETTINGS|comma-separated string of extra settings, and each part will be appended to either related backend section or listen session in the configuration file. To escape comma, use `\\,`. Possible value: `balance source`|\n|FORCE_SSL|if set(any value) together with ssl termination enabled. HAProxy will redirect HTTP request to HTTPS request.\n|GZIP_COMPRESSION_TYPE|enable gzip compression. The value of this envvar is a list of MIME types that will be compressed, possible value: `text/html text/plain text/css`|\n|HEALTH_CHECK|set health check on each backend route, possible value: \"check inter 2000 rise 2 fall 3\". See:[HAProxy:check](https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5.2-check)|\n|HSTS_MAX_AGE|enable HSTS. It is an integer representing the max age of HSTS in seconds, possible value: `31536000`|\n|HTTP_CHECK|enable HTTP protocol to check on the servers health, possible value: \"OPTIONS * HTTP/1.1\\r\\nHost:\\ www\". See:[HAProxy:httpchk](https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-option%20httpchk)|\n|OPTION|comma-separated list of HAProxy `option` entries. `option` specified here will be added to related backend or listen part, and overwrite the OPTION settings in the HAProxy container|\n|SSL_CERT|ssl cert, a pem file with private key followed by public certificate, '\\n'(two chars) as the line separator|\n|TCP_PORTS|comma separated ports(e.g. 9000, 9001, 2222/ssl). The port listed in `TCP_PORTS` will be load-balanced in TCP mode. Port ends with `/ssl` indicates that port needs SSL termination.\n|VIRTUAL_HOST_WEIGHT|an integer of the weight of an virtual host, used together with `VIRTUAL_HOST`, default:0. It affects the order of acl rules of the virtual hosts. The higher weight one virtual host has, the more priority that acl rules applies.|\n|VIRTUAL_HOST|specify virtual host and virtual path. Format: `[scheme://]domain[:port][/path], ...`. wildcard `*` can be used in `domain` and `path` part|\n\nCheck [the HAProxy configuration manual](http://cbonte.github.io/haproxy-dconv/configuration-1.5.html) for more information on the above.\n\n## Virtual host and virtual path\n\nBoth virtual host and virtual path can be specified in environment variable `VIRTUAL_HOST`, which is a set of comma separated urls with the format of `[scheme://]domain[:port][/path]`.\n\n|Item|Default|Description|\n|:---:|:-----:|:---------|\n|scheme|http|possible values: `http`, `https`, `wss`|\n|domain||virtual host. `*` can be used as the wildcard|\n|port|80/433|port number of the virtual host. When the scheme is `https` `wss`, the default port will be to `443`|\n|/path||virtual path, starts with `/`. `*` can be used as the wildcard|\n\n#### examples of matching\n\n|Virtual host|Match|Not match|\n|:-----------|:----|:--------|\n|http://example.com|example.com|www.example.com|\n|example.com|example.com|www.example.com|\n|example.com:90|example.com:90|example.com|\n|https://example.com|https://example.com|example.com|\n|https://example.com:444|https://example.com:444|https://example.com|\n|\\*.example.com|www.example.com|example.com|\n|\\*example.com|www.example.com, example.com, anotherexample.com|www.abc.com|\n|www.e\\*e.com|www.example.com, www.exxe.com|www.axxa.com|\n|www.example.\\*|www.example.com, www.example.org|example.com|\n|\\*|any website with HTTP||\n|https://\\*|any website with HTTPS||\n|\\*/path|example.com/path, example.org/path?u=user|example.com/path/|\n|\\*/path/|example.com/path/, example.org/path/?u=user|example.com/path, example.com/path/abc|\n|\\*/path/\\*|example.com/path/, example.org/path/abc|example.com/abc/path/\n|\\*/\\*/path/\\*|example.com/path/, example.org/abc/path/, example.net/abc/path/123|example.com/path|\n|\\*/\\*.js|example.com/abc.js, example.org/path/abc.js|example.com/abc.css|\n|\\*/\\*.do/|example.com/abc.do/, example.org/path/abc.do/|example.com/abc.do|\n|\\*/path/\\*.php|example.com/path/abc.php|example/abc.php, example.com/root/abc.php|\n|\\*.example.com/\\*.jpg|www.example.com/abc.jpg, abc.example.com/123.jpg|example.com/abc.jpg|\n|\\*/path, \\*/path/|example.com/path, example.org/path/||\n|example.com:90, https://example.com|example.com:90, https://example.com||\n\n**Note**:\n1. The sequence of the acl rules generated based on VIRTUAL_HOST are random. In HAProxy, when an acl rule with a wide scope(e.g. *.example.com) is put before a rule with narrow scope(e.g. web.example.com), the narrow rule will never be reached. As a result, if the virtual hosts you set have overlapping scopes, you need to use `VIRTUAL_HOST_WEIGHT` to manually set the order of acl rules, namely, giving the narrow virtual host a higher weight than the wide one.\n2. Every service that has the same VIRTUAL_HOST environment variable setting will be considered and merged into one single service. It may be useful for some testing scenario.\n\n## SSL termination\n\n`dockercloud/haproxy` supports ssl termination on multiple certificates. For each application that you want ssl terminates, simply set `SSL_CERT` and `VIRTUAL_HOST`. HAProxy, then, reads the certificate from the link environment and sets the ssl termination up.\n\n**Attention**: there was a bug that if an environment variable value contains \"=\", which is common in the `SSL_CERT`, docker skips that environment variable. As a result, multiple ssl termination only works on docker 1.7.0 or higher, or in Docker Cloud.\n\nSSL termination is enabled when:\n\n1. at least one SSL certificate is set, and\n2. either `VIRTUAL_HOST` is not set, or it is set with \"https\" as the scheme.\n\nTo set SSL certificate, you can either:\n\n1. set `DEFAULT_SSL_CERT` in `dockercloud/haproxy`, or\n2. set `SSL_CERT` and/or `DEFAULT_SSL_CERT` in the application services linked to HAProxy\n\nThe difference between `SSL_CERT` and `DEFAULT_SSL_CERT` is that, the multiple certificates specified by `SSL_CERT` are stored in as cert1.pem, cert2.pem, ..., whereas the one specified by `DEFAULT_SSL_CERT` is always stored as cert0.pem. In that case, HAProxy will use cert0.pem as the default certificate when there is no SNI match. However, when multiple `DEFAULT_SSL_CERTIFICATE` is provided, only one of the certificates can be stored as cert0.pem, others are discarded.\n\n#### PEM Files\nThe certificate specified in `dockercloud/haproxy` or in the linked application services is a pem file, containing a private key followed by a public certificate(private key must be put before the public certificate and any extra Authority certificates, order matters). You can run the following script to generate a self-signed certificate:\n\n\topenssl req -x509 -newkey rsa:2048 -keyout key.pem -out ca.pem -days 1080 -nodes -subj '/CN=*/O=My Company Name LTD./C=US'\n\tcp key.pem cert.pem\n\tcat ca.pem >> cert.pem\n\nOnce you have the pem file, you can run this command to convert the file correctly to one line:\n\n\tawk 1 ORS='\\\\n' cert.pem\n\nCopy the output and set it as the value of `SSL_CERT` or `DEFAULT_SSL_CERT`.\n\n## Affinity and session stickiness\n\nThere are three method to setup affinity and sticky session:\n\n1. set `BALANCE=source` in your application service. When setting `source` method of balance, HAProxy will hash the client IP address and make sure that the same IP always goes to the same server.\n2. set `APPSESSION=`. use application session to determine which server a client should connect to. Possible value of `` could be `JSESSIONID len 52 timeout 3h`\n2. set `COOKIE=`. use application cookie to determine which server a client should connect to. Possible value of `` could be `SRV insert indirect nocache`\n\nCheck [HAProxy:appsession](http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-appsession) and [HAProxy:cookie](http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-cookie) for more information.\n\n\n## TCP load balancing\n\nBy default, `dockercloud/haproxy` runs in `http` mode. If you want a linked service to run in a `tcp` mode, you can specify the environment variable `TCP_PORTS`, which is a comma separated ports(e.g. 9000, 9001).\n\nFor example, if you run:\n\n\tdocker --name app-1 --expose 9000 --expose 9001 -e TCP_PORTS=\"9000, 9001\" your_app\n\tdocker --name app-2 --expose 9000 --expose 9001 -e TCP_PORTS=\"9000, 9001\" your_app\n\tdocker run --link app-1:app-1 --link app-2:app-2 -p 9000:9000, 9001:9001 dockercloud/haproxy\n\nThen, haproxy balances the load between `app-1` and `app-2` in both port `9000` and `9001` respectively.\n\nMoreover, If you have more exposed ports than `TCP_PORTS`, the rest of the ports will be balancing using `http` mode.\n\nFor example, if you run:\n\n\tdocker --name app-1 --expose 80 --expose 22 -e TCP_PORTS=22 your_app\n\tdocker --name app-2 --expose 80 --expose 22 -e TCP_PORTS=22 your_app\n\tdocker run --link app-1:app-2 --link app-2:app-2 -p 80:80 -p 22:22 dockercloud/haproxy\n\nThen, haproxy balances in `http` mode at port `80` and balances in `tcp` on port at port `22`.\n\nIn this way, you can do the load balancing both in `tcp` and in `http` at the same time.\n\nIn `TCP_PORTS`, if you set port that ends with '/ssl', for example `2222/ssl`, HAProxy will set ssl termination on port `2222`.\n\nNote:\n\n1. You are able to set `VIRTUAL_HOST` and `TCP_PORTS` at the same them, giving more control on `http` mode.\n2. Be careful that, the load balancing on `tcp` port is applied to all the services. If you link two(or more) different services using the same `TCP_PORTS`, `dockercloud/haproxy` considers them coming from the same service.\n\n## WebSocket support\n-----------------\n\nThere are two ways to enable the support of websocket:\n\n1. As websocket starts using HTTP protocol, you can use virtual host to specify the scheme using `ws` or `wss`. For example, `-e VIRTUAL_HOST=\"ws://ws.example.com, wss://wss.example.com\"\n2. Websocket itself is a TCP connection, you can also try the TCP load balancing mentioned in the previous section.\n\n\n## Use case scenarios\n\n#### My webapp container exposes port 8080(or any other port), and I want the proxy to listen in port 80\n\nUse the following:\n\n docker run -d --expose 80 --name webapp dockercloud/hello-world\n docker run -d --link webapp:webapp -p 80:80 dockercloud/haproxy\n\n#### My webapp container exposes port 80 and database ports 8083/8086, and I want the proxy to listen in port 80 without my database ports added to haproxy\n\n docker run -d -e EXCLUDE_PORTS=8803,8806 --expose 80 --expose 8033 --expose 8086 --name webapp dockercloud/hello-world\n docker run -d --link webapp:webapp -p 80:80 dockercloud/haproxy\n\n#### My webapp container exposes port 8080(or any other port), and I want the proxy to listen in port 8080\n\nUse the following:\n\n docker run -d --expose 8080 --name webapp your_app\n docker run -d --link webapp:webapp -p 8080:80 dockercloud/haproxy\n\n#### I want the proxy to terminate SSL connections and forward plain HTTP requests to my webapp to port 8080(or any port)\n\nUse the following:\n\n docker run -d -e SSL_CERT=\"YOUR_CERT_TEXT\" --name webapp dockercloud/hello-world\n docker run -d --link webapp:webapp -p 443:443 -p 80:80 dockercloud/haproxy\n\nor\n\n docker run -d --link webapp:webapp -p 443:443 -p 80:80 -e DEFAULT_SSL_CERT=\"YOUR_CERT_TEXT\" dockercloud/haproxy\n\nThe certificate in `YOUR_CERT_TEXT` is a combination of private key followed by public certificate. Remember to put `\\n` between each line of the certificate. A way to do this, assuming that your certificate is stored in `~/cert.pem`, is running the following:\n\n docker run -d --link webapp:webapp -p 443:443 -p 80:80 -e DEFAULT_SSL_CERT=\"$(awk 1 ORS='\\\\n' ~/cert.pem)\" dockercloud/haproxy\n\n#### I want the proxy to terminate SSL connections and redirect HTTP requests to HTTPS\n\nUse the following:\n\n docker run -d -e FORCE_SSL=yes -e SSL_CERT=\"YOUR_CERT_TEXT\" --name webapp dockercloud/hello-world\n docker run -d --link webapp:webapp -p 443:443 dockercloud/haproxy\n\n#### I want to load my SSL certificate from volume instead of passing it through environment variable\n\nYou can use `CERT_FOLDER` envvar to specify which folder the certificates are mounted in the container, using the following:\n\n docker run -d --name webapp dockercloud/hello-world\n docker run -d --link webapp:webapp -e CERT_FOLDER=\"/certs/\" -v $(pwd)/cert1.pem:/certs/cert1.pem -p 443:443 dockercloud/haproxy\n\n#### I want to set up virtual host routing by domain\n\nVirtual hosts can be configured by the proxy reading linked container environment variables (`VIRTUAL_HOST`). Here is an example:\n\n docker run -d -e VIRTUAL_HOST=\"www.webapp1.com, www.webapp1.org\" --name webapp1 dockercloud/hello-world\n docker run -d -e VIRTUAL_HOST=www.webapp2.com --name webapp2 your/webapp2\n docker run -d --link webapp1:webapp1 --link webapp2:webapp2 -p 80:80 dockercloud/haproxy\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",27549184,"orgData",{"_90":91,"_92":93,"_94":95,"_96":33,"_97":98,"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":108,"_110":108,"_111":21},"id","6c5f0d63653f4cb484a3e9601e918e33","uuid","6c5f0d63-653f-4cb4-84a3-e9601e918e33","type","organization","orgname","full_name","Impulse Cloud","location","Australia","company","Impulse Cloud Pty Ltd","profile_url","http://impulsecloud.com.au","date_joined","2015-06-24T02:22:41.882649Z","gravatar_url","","gravatar_email","badge","is_active","recentTags",[114],{"_115":44,"_116":117,"_118":119,"_90":120,"_121":122,"_50":135,"_136":117,"_137":33,"_138":56,"_57":139,"_140":141,"_142":-5,"_143":135,"_144":133,"_145":21},"content_type","creator",346995,"full_size",15029849,3004919,"images",[123],{"_124":125,"_126":108,"_127":-5,"_128":-5,"_129":108,"_130":108,"_131":-5,"_132":62,"_63":133,"_134":-5},"architecture","amd64","features","last_pulled","last_pushed","os","os_features","os_version","size","inactive","variant","2016-05-13T04:41:14.699175Z","last_updater","last_updater_username","media_type","latest","repository",685336,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":160,"_167":168,"_154":177,"_178":11},{"_40":161,"_42":162,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":163,"_57":35,"_32":33,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":164,"_79":21,"_80":166,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":165},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_169":64,"_170":-5,"_171":-5,"_172":173},"count","next","previous","results",[174],{"_115":44,"_116":117,"_118":119,"_90":120,"_121":175,"_50":135,"_136":117,"_137":33,"_138":56,"_57":139,"_140":141,"_142":-5,"_143":135,"_144":133,"_145":21},[176],{"_124":125,"_126":108,"_127":-5,"_128":-5,"_129":108,"_130":108,"_131":-5,"_132":62,"_63":133,"_134":-5},[],"canDeleteTags","actionData","errors"]

impulsecloud/ic-dockercloud-haproxy

Tags for impulsecloud/ic-dockercloud-haproxy