菜单
Configure HAProxy for TCP or HTTP load balancing, SSL/TLS termination, and ACL-based routing. Use when creating or editing haproxy.cfg files for frontends, backends, and listen sections.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Configure Envoy proxy for HTTP reverse proxying, TCP forwarding, TLS termination, gRPC proxying, or traffic management. Use when creating or editing Envoy bootstrap YAML configs.
Configure frp (Fast Reverse Proxy) to expose services behind NAT or firewalls. Use when setting up frps (server) and frpc (client) configs for TCP, UDP, HTTP, HTTPS, or SOCKS5 tunnelling.
Configure go-gost (Go Simple Tunnel) proxy. Use when setting up SOCKS5/HTTP proxies, port forwarding, proxy chaining, SSH tunnels, TLS-encrypted proxies, or DNS-over-TLS with go-gost v3.
Configure nginx as a reverse proxy, load balancer, stream (TCP/UDP) proxy, SSL termination frontend, or HTTP forward proxy. Use when working with nginx.conf or nginx stream module configs.
Configure Proxyman for HTTP/HTTPS traffic interception on macOS/iOS. Use when writing Proxyman addon scripts to rewrite headers, mock responses, block requests, or map URLs to local fixtures.
'Configure Traefik reverse proxy with Docker provider, Let\'s Encrypt TLS, middlewares (auth, rate-limit, headers), or TCP routing. Use when creating or editing traefik.yml and dynamic config files.'
| name | configure-haproxy |
| description | Configure HAProxy for TCP or HTTP load balancing, SSL/TLS termination, and ACL-based routing. Use when creating or editing haproxy.cfg files for frontends, backends, and listen sections. |
| license | Apache-2.0 |
| compatibility | Requires HAProxy 2.8+ (LTS). Available as haproxy:lts-alpine Docker image. |
| metadata | {"author":"proxy-tools","version":"1.0"} |
| allowed-tools | docker bash |
HAProxy configuration has four main sections: global, defaults, frontend, and backend.
global
log stdout format raw local0 info
maxconn 50000
defaults
log global
mode http # or tcp for L4
option httplog
timeout connect 5s
timeout client 30s
timeout server 30s
frontend http_front
bind *:80
default_backend app_back
backend app_back
balance roundrobin
option httpchk GET /healthz
server web1 web1.internal:8080 check
server web2 web2.internal:8080 check
| Mode | Use case |
|---|---|
http | HTTP/1.1 and HTTP/2 (L7) — inspect/route by URL, headers |
tcp | Raw TCP proxy (L4) — databases, SMTP, Redis |
roundrobin | leastconn | source (IP hash) | uri | random
haproxy/examples/:
http-proxy.cfg — HTTP load balancing with health checkstcp-proxy.cfg — TCP (MySQL, Redis)ssl-termination.cfg — HTTPS terminationacl-routing.cfg — Route by host/path/IPhaproxy -c -f haproxy/haproxy.cfg
# or via Docker:
docker run --rm -v $(pwd)/haproxy/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro \
haproxy:lts-alpine haproxy -c -f /usr/local/etc/haproxy/haproxy.cfg
docker compose -f haproxy/docker-compose.yml up -dhttp://localhost:8404/statsHAProxy expects a single PEM file: cat fullchain.pem privkey.pem > server.pem
haproxy/