|
2 | 2 | <html lang="en"> |
3 | 3 | <head> |
4 | 4 | <meta charset="utf-8" /> |
5 | | - <title>HAProxy version 3.3-dev8-70 - Configuration Manual</title> |
| 5 | + <title>HAProxy version 3.3-dev8-94 - Configuration Manual</title> |
6 | 6 | <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" /> |
7 | 7 | <link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" /> |
8 | 8 | <link href="../css/page.css?0.4.2-15" rel="stylesheet" /> |
|
4617 | 4617 | You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br> |
4618 | 4618 | </p> |
4619 | 4619 | <p class="text-right"> |
4620 | | - <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/09/08</b></small> |
| 4620 | + <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/09/11</b></small> |
4621 | 4621 | </p> |
4622 | 4622 | </div> |
4623 | 4623 | <!-- /.sidebar --> |
|
4628 | 4628 | <div class="text-center"> |
4629 | 4629 | <h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1> |
4630 | 4630 | <h2>Configuration Manual</h2> |
4631 | | - <p><strong>version 3.3-dev8-70</strong></p> |
| 4631 | + <p><strong>version 3.3-dev8-94</strong></p> |
4632 | 4632 | <p> |
4633 | 4633 | 2025/09/05<br> |
4634 | 4634 |
|
@@ -8408,11 +8408,21 @@ <h2 id="chapter-3.1" data-target="3.1"><small><a class="small" href="#3.1">3.1.< |
8408 | 8408 | </pre><a class="anchor" name="key-base"></a><a class="anchor" name="3-key-base"></a><a class="anchor" name="3.1-key-base"></a><a class="anchor" name="key-base (Global section)"></a><a class="anchor" name="key-base (Process management and security)"></a><div class="keyword"><b><a class="anchor" name="key-base"></a><a href="#3.1-key-base">key-base</a></b> <span style="color: #080"><dir></span></div><pre class="text">Assigns a default directory to fetch SSL private keys from when a relative |
8409 | 8409 | path is used with "<a href="#key">key</a>" directives. Absolute locations specified prevail and |
8410 | 8410 | ignore "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">key-base<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#key-base%20%28Certificate%20Storage%29">Certificate Storage</a></li><li><a href="#key-base%20%28Process%20management%20and%20security%29">Process management and security</a></li></ul></span>". This option only works with a crt-store load line. |
8411 | | -</pre><a class="anchor" name="limited-quic"></a><a class="anchor" name="3-limited-quic"></a><a class="anchor" name="3.1-limited-quic"></a><a class="anchor" name="limited-quic (Global section)"></a><a class="anchor" name="limited-quic (Process management and security)"></a><div class="keyword"><b><a class="anchor" name="limited-quic"></a><a href="#3.1-limited-quic">limited-quic</a></b></div><pre class="text">This setting must be used to explicitly enable the QUIC listener bindings when |
8412 | | -haproxy is compiled against a TLS/SSL stack without QUIC support, typically |
8413 | | -OpenSSL. It has no effect when haproxy is compiled against a TLS/SSL stack |
8414 | | -with QUIC support, quictls for instance. Note that QUIC 0-RTT is not supported |
8415 | | -when this setting is set. |
| 8411 | +</pre><a class="anchor" name="limited-quic"></a><a class="anchor" name="3-limited-quic"></a><a class="anchor" name="3.1-limited-quic"></a><a class="anchor" name="limited-quic (Global section)"></a><a class="anchor" name="limited-quic (Process management and security)"></a><div class="keyword"><b><a class="anchor" name="limited-quic"></a><a href="#3.1-limited-quic">limited-quic</a></b></div><pre class="text">This setting must be used to explicitly enable the QUIC listener bindings |
| 8412 | +when haproxy is compiled with a version of OpenSSL without QUIC support. It |
| 8413 | +activates an haproxy internal compatibility layer which must have been |
| 8414 | +selected at build time with USE_QUIC_OPENSSL_COMPAT=1. This compatibility |
| 8415 | +layer supports most of the necessary TLS operations, albeit without QUIC |
| 8416 | +0-RTT capability. |
| 8417 | + |
| 8418 | +This feature is primarily targetted for OpenSSL prior to version 3.5.2, where |
| 8419 | +QUIC API was not implemented or only partially. The compatibility layer can |
| 8420 | +still be activated for version 3.5.2 and above, but this is probably |
| 8421 | +unnecessary. |
| 8422 | + |
| 8423 | +If limited-quic is set but the compatibility layer was not selected at build |
| 8424 | +time, the option is silently ignored and QUIC TLS operations rely on the TLS |
| 8425 | +library. |
8416 | 8426 | </pre><a class="anchor" name="localpeer"></a><a class="anchor" name="3-localpeer"></a><a class="anchor" name="3.1-localpeer"></a><a class="anchor" name="localpeer (Global section)"></a><a class="anchor" name="localpeer (Process management and security)"></a><div class="keyword"><b><a class="anchor" name="localpeer"></a><a href="#3.1-localpeer">localpeer</a></b> <span style="color: #080"><name></span></div><pre class="text">Sets the local instance's peer name. It will be ignored if the "-L" |
8417 | 8427 | command line argument is specified or if used after "<a href="#peers">peers</a>" section |
8418 | 8428 | definitions. In such cases, a warning message will be emitted during |
@@ -33297,7 +33307,7 @@ <h2 id="chapter-12.8" data-target="12.8"><small><a class="small" href="#12.8">12 |
33297 | 33307 | <br> |
33298 | 33308 | <hr> |
33299 | 33309 | <div class="text-right"> |
33300 | | - HAProxy 3.3-dev8-70 – Configuration Manual<br> |
| 33310 | + HAProxy 3.3-dev8-94 – Configuration Manual<br> |
33301 | 33311 | <small>, 2025/09/05</small> |
33302 | 33312 | </div> |
33303 | 33313 | </div> |
|
0 commit comments