# HAProxy Question

**URL:** <https://discourse.haproxy.org/t/haproxy-question/634>\
**Category:** Help!\
**Created:** [September 3, 2016, 9:31am UTC](https://discourse.haproxy.org/t/haproxy-question/634 "2016-09-03T09:31:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![paraffin](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/paraffin/32/112_2.png) [@paraffin](https://discourse.haproxy.org/u/paraffin)\
**Post date:** [September 3, 2016, 9:31am UTC](https://discourse.haproxy.org/t/haproxy-question/634/1 "2016-09-03T09:31:31Z")

</div>

Hi

We are looking to Load Balance 3 x IIS Web Servers over HTTPS using HAProxy and need session persistence (Sticky Sessions), most users will come from a single external IP as they are office based.

From my reading so far it seems that this is possible but there are not many pfsense based guides out there.

The solution I have come to in my head is as follows

SSL Offload at the pfSense/HAProxy  
Route to HTTP traffic internally  
Use a cookie based session persistence

Does this sound anywhere near what we need to do in order to achieve our desired outcome?

Does anyone have a similar setups that they could screenshot so I can understand the setup better?

Cheers

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [September 6, 2016, 2:13pm UTC](https://discourse.haproxy.org/t/haproxy-question/634/2 "2016-09-06T14:13:05Z")

</div>

Yes, cookie based session persistence is what makes sense here.

Read more about it here:

> **[Load Balancing, Affinity, Persistence, Sticky Sessions: What You Need to Know...](https://www.haproxy.com/blog/load-balancing-affinity-persistence-sticky-sessions-what-you-need-to-know/)**
>
> Synopsis To ensure high availability and performance of Web applications, it is now common to use a load-balancer. While some people uses layer 4 load-balancers, it can be sometime recommended to use layer 7 load-balancers to be more efficient with...

and in the docs.