global
  log 127.0.0.1   local0 info 
  log 127.0.0.1   local1 
  #log loghost local0 info
  maxconn 5000
  
  user haproxy
  group haproxy
  tune.ssl.default-dh-param 2048 

defaults
  log     global
  mode    http
  retries 3
  timeout check 10s
  timeout client 5m
  timeout connect 10s
  timeout http-keep-alive 1s
  timeout queue 1m
  timeout server 5m
  option dontlognull
  option http-server-close
  option httplog
  option redispatch
  balance  roundrobin

# Set up application listeners here.

listen stats
  bind 0.0.0.0:8080
  mode http
  option httpclose
  balance roundrobin
  stats refresh 10s
  stats uri /haproxy-status
  stats realm Haproxy\ Statistics


frontend web_frontend
  bind *:80
  mode http
  http-request set-header X-Forwarded-Proto http
  bind *:443 ssl crt /etc/haproxy/theorchard2048.com.pem ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
  mode http
  option httpclose
  option forwardfor
  http-request set-header X-Forwarded-Proto https
  acl php_app_assets hdr_dom(host) -i assets.theorchard.com
  acl wowza hdr_dom(host) -i wowza.theorchard.com
  use_backend assets_backend if php_app_assets
  use_backend wowza_backend if wowza


backend assets_backend
  redirect scheme https code 301 if !{ ssl_fc }
  server prod-bulkupload01 10.10.41.62:80 maxconn 256 check inter 3000 rise 2 fall 3
  server prod-bulkupload02 10.10.41.63:80 maxconn 256 cookie 2 check inter 3000 rise 2 fall 3 backup
  option httpchk GET /healthchk.php

backend wowza_backend
  redirect scheme https if !{ ssl_fc }
  balance source
  stick store-request src
  stick-table type ip size 200k expire 20m
  stick on src
  server prod-wowza01 10.10.41.57:1935 check inter 3000 rise 2 fall 3
  server prod-wowza02 10.10.41.66:1935 check inter 3000 rise 2 fall 3 backup
  option httpchk GET /

resolvers orchard_dns
  nameserver dns1 10.10.60.26:53
  nameserver dns2 10.10.60.27:53
  resolve_retries 3
  timeout retry 1s
  hold valid 10s