wr0ngway/rubber — pull request #243 by viniciusnz (2012-12-15 20:03:36+00:00)
Title: Haproxy as standalone ssl processor

This commit solves the issue of not being able to see the user's IP address through SSL. The "HTTP_X_FORWARDED_FOR" was not included by HaProxy and the user's IP was lost, since previous HaProxy versions were not handling the SSL encryption / decryption process.

This changes the connection process from

---(SSL)---> HAPROXY ---(SSL)---> APACHE ---(CLEAR)---> PASSENGER / APP

to

---(SSL)---> HAPROXY ---(CLEAR)---> APACHE ---(CLEAR)---> PASSENGER / APP

For this it must use the lastest version of haproxy (dev15), hence the change in the install process.

I did a monkey patch to make the install process work. Initially it won't work because the ssl clause is not available on the 1.4, non dev version of haproxy. Once the 1.5-dev15 version has overwritten the original haproxy than it works again.

Let me know your comments about it... Best,