HAProxy 1.8.x support tls v1.3 in CentOS 7

O. Prerequisites with openssl 1.1.1

yum -y install pcre2-devel zlib-devel

1. Download

wget http://www.haproxy.org/download/1.8/src/haproxy-1.8.17.tar.gz

tar -xvzf haproxy-1.8.17.tar.gz
sleep 1
cd haproxy-1.8.17

2. Install

make TARGET=linux2628 CPU=native USE_PCRE2=1 USE_PCRE2_JIT=1 USE_OPENSSL=1 SSL_LIB=/usr/local/ssl/lib SSL_INC=/usr/local/ssl/include/openssl USE_ZLIB=1

make install

3. Configuration

8. Reference

https://dnsprivacy.org/wiki/display/DP/Building+HAProxy+so+that+it+can+use+TLSv1.3

https://certsimple.com/blog/haproxy-http2-dynamic-load-balancing-ssl

http://itscom.org/archives/8377