global
  log 127.0.0.1   local0 info 
  log 127.0.0.1   local1 
  #log loghost local0 info
  maxconn 5000
  
  user haproxy
  group haproxy
  tune.ssl.default-dh-param 2048 

defaults
  log     global
  mode    http
  retries 3
  timeout check 10s
  timeout client 5m
  timeout connect 10s
  timeout http-keep-alive 1s
  timeout queue 1m
  timeout server 5m
  option dontlognull
  option http-server-close
  option httplog
  option redispatch
  balance  roundrobin

# Set up application listeners here.

listen stats
  bind 0.0.0.0:8080
  mode http
  option httpclose
  balance roundrobin
  stats refresh 10s
  stats uri /haproxy-status
  stats realm Haproxy\ Statistics

frontend web_frontend
  bind *:80
  mode http
  http-request set-header X-Forwarded-Proto http
  bind *:443 ssl crt /etc/haproxy/theorchard2048.com.pem ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
  mode http
  option httpclose
  option forwardfor
  timeout client 15m
  http-request set-header X-Forwarded-Proto https
  acl php_app_rb hdr_dom(host) -i rb.theorchard.com
  acl wowza_rest_api hdr_dom(host) -i wowza-rest-api.theorchard.com
  use_backend rb_backend if php_app_rb
  use_backend wowza_rest_api_backend if wowza_rest_api


backend rb_backend
  balance leastconn
  server prod-rbenc11 10.10.43.114:80 maxconn 256 check inter 3000 rise 2 fall 3 resolvers orchard_dns
  server prod-rbenc12 10.10.43.113:80 maxconn 256 check inter 3000 rise 2 fall 3 resolvers orchard_dns
  option httpchk GET /

backend wowza_rest_api_backend
  redirect scheme https code 301 if !{ ssl_fc }
  balance leastconn
  http-check expect status 401
  server prod-wowza01 10.10.41.57:8087 maxconn 256 check inter 3000 rise 2 fall 3 resolvers orchard_dns
  server prod-wowza02 10.10.41.66:8087 maxconn 256 check inter 3000 rise 2 fall 3 resolvers orchard_dns
  option httpchk GET /


resolvers orchard_dns
  nameserver dns1 10.10.60.26:53
  nameserver dns2 10.10.60.27:53
  resolve_retries 3
  timeout retry 1s
  hold valid 10s