HAProxy Config Generator

Generate an HAProxy configuration for HTTP load balancing with TLS termination, an HTTPS redirect, HTTP health checks, sticky sessions and a stats page.

Free · No sign-up · Your inputs stay in your browser

Input

Generate an HAProxy load balancer config

Backend serversOne per line: name address:port

Domain (certificate file name)Health check path

Balancing

Sticky sessions (cookie)Stats page on 127.0.0.1:8404

Output

/etc/haproxy/haproxy.cfg

1,176 characters

global
    log /dev/log local0
    maxconn 50000
    ssl-default-bind-options ssl-min-ver TLSv1.2
    ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305

defaults
    mode http
    log global
    option httplog
    option forwardfor
    option http-server-close
    timeout connect 5s
    timeout client 30s
    timeout server 30s
    timeout http-request 10s

frontend web
    bind :80
    bind :443 ssl crt /etc/haproxy/certs/example.com.pem alpn h2,http/1.1
    http-request redirect scheme https code 301 unless { ssl_fc }
    http-response set-header Strict-Transport-Security "max-age=31536000"
    default_backend app

backend app
    balance leastconn
    option httpchk
    http-check send meth GET uri /health
    http-check expect status 200
    server app1 10.0.0.11:8080 check inter 2s fall 3 rise 2
    server app2 10.0.0.12:8080 check inter 2s fall 3 rise 2
    server app3 10.0.0.13:8080 check inter 2s fall 3 rise 2

frontend stats
    bind 127.0.0.1:8404
    stats enable
    stats uri /
    stats refresh 10s

HAProxy reads the certificate and key from one PEM file: cat fullchain.pem privkey.pem > the .pem named here. A server is taken out after three failed checks two seconds apart and returned after two good ones. Check with haproxy -c -f /etc/haproxy/haproxy.cfg before reloading.

Runs in this browser. Nothing you paste is sent to a server.

About this tool

Method, assumptions, practical next steps, and limits.

Choosing the algorithm

roundrobin sends requests in turn and suits short, uniform requests; leastconn sends each to the server with the fewest open connections and suits uneven or long requests such as uploads and websockets; source hashes the client IP for crude stickiness. The HAProxy documentation lists the rest.

Health checks

With check inter 2s fall 3 rise 2, a server is removed after three failed checks and returned after two good ones. The check should hit an endpoint that tests what the app needs (database, cache) without being expensive, and return 200 only when the instance can serve traffic.

Frequently asked questions

How do I give HAProxy a certificate?

Concatenate the full chain and the private key into one PEM file and point bind ... ssl crt at it, or at a directory of such files for several domains.

How do I reload HAProxy without dropping connections?

Check the file with haproxy -c -f /etc/haproxy/haproxy.cfg, then systemctl reload haproxy. The new process takes over the sockets while the old one finishes its connections.

Is what I paste sent anywhere?

No. The tool runs entirely in your browser with JavaScript. Nothing you type or paste is sent to our server or stored.

HAProxy Config Generator

Generate an HAProxy load balancer config

/etc/haproxy/haproxy.cfg

Choosing the algorithm

Health checks

Frequently asked questions

Similar tools

Nginx Config Formatter

.env File Parser and Converter

Kubernetes Manifest Generator