|
2 | 2 | <html lang="en"> |
3 | 3 | <head> |
4 | 4 | <meta charset="utf-8" /> |
5 | | - <title>HAProxy version 3.3-dev10-69 - Configuration Manual</title> |
| 5 | + <title>HAProxy version 3.3-dev10-82 - Configuration Manual</title> |
6 | 6 | <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" /> |
7 | 7 | <link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" /> |
8 | 8 | <link href="../css/page.css?0.4.2-15" rel="stylesheet" /> |
|
1849 | 1849 |
|
1850 | 1850 | <a class="list-group-item" href="#ecdhe">ecdhe</a> |
1851 | 1851 |
|
| 1852 | + <a class="list-group-item" href="#ech">ech</a> |
| 1853 | + |
1852 | 1854 | <a class="list-group-item" href="#email-alert">email-alert</a> |
1853 | 1855 |
|
1854 | 1856 | <a class="list-group-item" href="#email-alert from">email-alert from</a> |
|
4687 | 4689 | You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br> |
4688 | 4690 | </p> |
4689 | 4691 | <p class="text-right"> |
4690 | | - <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/10/29</b></small> |
| 4692 | + <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/10/30</b></small> |
4691 | 4693 | </p> |
4692 | 4694 | </div> |
4693 | 4695 | <!-- /.sidebar --> |
|
4698 | 4700 | <div class="text-center"> |
4699 | 4701 | <h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1> |
4700 | 4702 | <h2>Configuration Manual</h2> |
4701 | | - <p><strong>version 3.3-dev10-69</strong></p> |
| 4703 | + <p><strong>version 3.3-dev10-82</strong></p> |
4702 | 4704 | <p> |
4703 | 4705 | 2025/10/18<br> |
4704 | 4706 |
|
@@ -21320,7 +21322,32 @@ <h2 id="chapter-5.1" data-target="5.1"><small><a class="small" href="#5.1">5.1.< |
21320 | 21322 | </pre><a class="anchor" name="ecdhe"></a><a class="anchor" name="5-ecdhe"></a><a class="anchor" name="5.1-ecdhe"></a><a class="anchor" name="ecdhe (Bind and server options)"></a><a class="anchor" name="ecdhe (Bind options)"></a><div class="keyword"><b><a class="anchor" name="ecdhe"></a><a href="#5.1-ecdhe">ecdhe</a></b> <span style="color: #080"><named curve></span></div><pre class="text">This setting is only available when support for OpenSSL was built in. It sets |
21321 | 21323 | the named curve (RFC 4492) used to generate ECDH ephemeral keys. By default, |
21322 | 21324 | used named curve is prime256v1. |
21323 | | -</pre><a class="anchor" name="expose-fd"></a><a class="anchor" name="5-expose-fd"></a><a class="anchor" name="5.1-expose-fd"></a><a class="anchor" name="expose-fd (Bind and server options)"></a><a class="anchor" name="expose-fd (Bind options)"></a><a class="anchor" name="expose-fd listeners"></a><a class="anchor" name="5-expose-fd listeners"></a><a class="anchor" name="5.1-expose-fd listeners"></a><a class="anchor" name="expose-fd listeners (Bind and server options)"></a><a class="anchor" name="expose-fd listeners (Bind options)"></a><div class="keyword"><b><a class="anchor" name="expose-fd listeners"></a><a href="#5.1-expose-fd%20listeners">expose-fd listeners</a></b></div><pre class="text">This option is only usable with the stats socket. It gives your stats socket |
| 21325 | +</pre><a class="anchor" name="ech"></a><a class="anchor" name="5-ech"></a><a class="anchor" name="5.1-ech"></a><a class="anchor" name="ech (Bind and server options)"></a><a class="anchor" name="ech (Bind options)"></a><div class="keyword"><b><a class="anchor" name="ech"></a><a href="#5.1-ech">ech</a></b> <span style="color: #080"><dir></span> <span style="color: #008">[ EXPERIMENTAL ]</span></div><pre class="text">Apply all ECH keys from <dir> to the bind line. |
| 21326 | +The files must have the .ech extension and must use the PEM file format for |
| 21327 | +ECH. ( https://datatracker.ietf.org/doc/draft-farrell-tls-pemesni/ ) |
| 21328 | + |
| 21329 | +This keyword enables ECH in shared-mode. with HAProxy acting as both the TLS |
| 21330 | +endpoint and the ECH endpoint. |
| 21331 | +See https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ |
| 21332 | + |
| 21333 | +This is an experimental feature, which requires the |
| 21334 | +"<a href="#expose-experimental-directives">expose-experimental-directives</a>" option in the global section. It also |
| 21335 | +necessitates an OpenSSL version that supports ECH, and HAProxy must be |
| 21336 | +compiled with USE_ECH=1. |
| 21337 | +</pre><div class="separator"> |
| 21338 | +<span class="label label-success">Example:</span> |
| 21339 | +<pre class="prettyprint"> |
| 21340 | +<code>$ openssl ech -public_name foobar.com -out /etc/haproxy/echkeydir/foobar.com.ech |
| 21341 | + |
| 21342 | +$ cat haproxy.cfg |
| 21343 | +[...] |
| 21344 | +bind :443 ech /etc/haproxy/echkeydir/ ssl crt example.com.pem |
| 21345 | + |
| 21346 | +// Use the ECHCONFIG section of your .ech file |
| 21347 | +$ openssl s_client -tls1_3 -connect example.com:443 -servername example.com \ |
| 21348 | +-ech_config_list AD3+DQA5cwAgACB6ybtgtFYoM5r8nJSotus4c7K0EG..9vYmFyLmNvbQAA |
| 21349 | +</code></pre> |
| 21350 | +</div><a class="anchor" name="expose-fd"></a><a class="anchor" name="5-expose-fd"></a><a class="anchor" name="5.1-expose-fd"></a><a class="anchor" name="expose-fd (Bind and server options)"></a><a class="anchor" name="expose-fd (Bind options)"></a><a class="anchor" name="expose-fd listeners"></a><a class="anchor" name="5-expose-fd listeners"></a><a class="anchor" name="5.1-expose-fd listeners"></a><a class="anchor" name="expose-fd listeners (Bind and server options)"></a><a class="anchor" name="expose-fd listeners (Bind options)"></a><div class="keyword"><b><a class="anchor" name="expose-fd listeners"></a><a href="#5.1-expose-fd%20listeners">expose-fd listeners</a></b></div><pre class="text">This option is only usable with the stats socket. It gives your stats socket |
21324 | 21351 | the capability to pass listeners FD to another HAProxy process. |
21325 | 21352 | In master-worker mode, this is not required anymore, the listeners will be |
21326 | 21353 | passed using the internal socketpairs between the master and the workers. |
@@ -33663,7 +33690,7 @@ <h2 id="chapter-12.8" data-target="12.8"><small><a class="small" href="#12.8">12 |
33663 | 33690 | <br> |
33664 | 33691 | <hr> |
33665 | 33692 | <div class="text-right"> |
33666 | | - HAProxy 3.3-dev10-69 – Configuration Manual<br> |
| 33693 | + HAProxy 3.3-dev10-82 – Configuration Manual<br> |
33667 | 33694 | <small>, 2025/10/18</small> |
33668 | 33695 | </div> |
33669 | 33696 | </div> |
|
0 commit comments