global
  daemon
  tune.ssl.default-dh-param 2048
  ssl-default-bind-ciphers ALL:!MEDIUM:!LOW:!WEAK:!EXPORT:!DES:!PSK:!SRP:!CAMELLIA:!3DES
  ssl-default-bind-options  no-sslv3 no-tls-tickets
  log 127.0.0.1 local3 debug
  log-tag haproxy
  nbproc 16
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.1 mode 0664 level user process 1
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.2 mode 0664 level user process 2
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.3 mode 0664 level user process 3
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.4 mode 0664 level user process 4
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.5 mode 0664 level user process 5
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.6 mode 0664 level user process 6
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.7 mode 0664 level user process 7
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.8 mode 0664 level user process 8
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.9 mode 0664 level user process 9
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.10 mode 0664 level user process 10
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.11 mode 0664 level user process 11
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.12 mode 0664 level user process 12
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.13 mode 0664 level user process 13
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.14 mode 0664 level user process 14
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.15 mode 0664 level user process 15
  stats socket /dev/shm/haproxy-video_edge_ssl.sock.16 mode 0664 level user process 16


defaults 
  option dontlog-normal
  option httplog
  mode http
  option log-health-checks
  timeout connect 5s
  timeout client 5s
  timeout server 5s
  log global
  option http-keep-alive
  option splice-auto

frontend stats
  bind :2001
  default_backend stats

backend stats
    stats enable
    stats uri /stats # Real path redacted

frontend http
  bind :9080 
  mode http
  acl is_keepalive path_beg /keepalive/
  use_backend keepalive if is_keepalive
  default_backend non-keepalive

frontend tcp
  bind :10080
  mode tcp
  option tcplog
  default_backend tcp

frontend https-keepalive-rsa-http
  bind :9443 ssl no-sslv3 crt /dev/shm/pem.rsa
  acl is_keepalive path_beg /keepalive/
  use_backend keepalive if is_keepalive
  default_backend non-keepalive

frontend https-keepalive-ecc-http
  bind :9444 ssl no-sslv3 crt /dev/shm/pem.ecc
  acl is_keepalive path_beg /keepalive/
  use_backend keepalive if is_keepalive
  default_backend non-keepalive

frontend https-rsa-http
  bind :9445 ssl no-sslv3 crt /dev/shm/pem.rsa
  default_backend keepalive

frontend https-ecc-http
  bind :9446 ssl no-sslv3 crt /dev/shm/pem.ecc
  default_backend keepalive

frontend https-rsa-tcp
  bind :10443 ssl no-sslv3 crt /dev/shm/pem.rsa
  mode tcp
  option tcplog
  default_backend tcp

frontend https-ecc-tcp
  bind :10444 ssl no-sslv3 crt /dev/shm/pem.ecc
  mode tcp
  option tcplog
  default_backend tcp

backend keepalive
  option http-keep-alive
  rspadd Connection:\ keep-alive
  server 127.0.0.1:8080 127.0.0.1:8080 check
  server 127.0.0.1:80 127.0.0.1:80 check

backend non-keepalive
  no option http-keep-alive
  rspidel ^Connection:
  rspadd Connection:\ close
  server 127.0.0.1:8080 127.0.0.1:8080 check
  server 127.0.0.1:80 127.0.0.1:80 check

backend tcp
  mode tcp
  server 127.0.0.1:8080 127.0.0.1:8080 check
  server 127.0.0.1:80 127.0.0.1:80 check
