# Haproxy SSL pass through

**URL:** <https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859>\
**Category:** Help!\
**Created:** [August 26, 2021, 11:53am UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859 "2021-08-26T11:53:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raju](https://avatars.discourse-cdn.com/v4/letter/r/a183cd/32.png) [@Raju](https://discourse.haproxy.org/u/Raju)\
**Post date:** [August 26, 2021, 11:53am UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859/1 "2021-08-26T11:53:10Z")

</div>

Hi Team,

I was wondering if you could help me with Haproxy load balancer with SSL Pass through. I have a wildcard for my domain. I have configure all setting for ssl pass through on my haproxy server. I have also installed SSL certificate in my backend server but the problem here is I can browse my page through its domain name with SSL encrypted but I can’t browse it with its IP address. Since I can’t browse it with IP address I am not able to point that IP address in backend setting on my haproxy configuration. I would like to know if there is any solution for it.

Thank You.

---

<div class="post-metadata">

**Author:** ![Rfraile](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@Rfraile](https://discourse.haproxy.org/u/Rfraile)\
**Post date:** [August 27, 2021, 7:42pm UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859/2 "2021-08-27T19:42:49Z")

</div>

Are you sure that the Subject Alternative Name of the certificate match the IP address too?

---

<div class="post-metadata">

**Author:** ![Goodmirek](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/goodmirek/32/1325_2.png) [@Goodmirek](https://discourse.haproxy.org/u/Goodmirek)\
**Post date:** [September 5, 2021, 12:49pm UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859/3 "2021-09-05T12:49:49Z")

</div>

Without seeing your config it is hard to say. If you configured HAProxy for SSL passthrough, i.e. TCP level 4 loadbalancing and your DNS points at the HAProxy, then there should be no issue even if your SSL certificate does not contain the IP address.  
What error does HAProxy return?

---

<div class="post-metadata">

**Author:** ![Raju](https://avatars.discourse-cdn.com/v4/letter/r/a183cd/32.png) [@Raju](https://discourse.haproxy.org/u/Raju)\
**Post date:** [September 8, 2021, 6:28am UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859/5 "2021-09-08T06:28:14Z")

</div>

Sry for late reply. I haven’t configured SAN. I will try it.

Thank you.

---

<div class="post-metadata">

**Author:** ![Raju](https://avatars.discourse-cdn.com/v4/letter/r/a183cd/32.png) [@Raju](https://discourse.haproxy.org/u/Raju)\
**Post date:** [September 9, 2021, 5:50am UTC](https://discourse.haproxy.org/t/haproxy-ssl-pass-through/6859/6 "2021-09-09T05:50:01Z")

</div>

Hi Goodmirek,  
Below is my haproxy configuration.

global  
log /dev/log local0  
log /dev/log local1 notice  
chroot /var/lib/haproxy  
stats socket /run/haproxy/admin.sock mode 660 level admin  
stats timeout 30s  
user haproxy  
group haproxy  
daemon

defaults  
mode tcp  
log global  
option dontlognull  
log-format “%ci:%cp [%t] %ft %b/%s %Tw/%Tc/%Tt %B %ts %ac/%fc/%bc/%sc/%rc %sq/%bq”

timeout connect 5000  
timeout client 50000  
timeout server 50000

frontend localhost  
bind \*:80  
bind \*:443  
option tcplog  
mode tcp  
default\_backend nodes

backend nodes  
mode tcp  
balance roundrobin  
option ssl-hello-chk  
server web01 192.168.20.102:443 check

My problem is when I map 192.168.20.102 to my sub-domain. It gets browse by that sub domain name with ssl encryption. But I can’t browse the page by its IP. So In haproxy configuration at my backend configuration I can’t call backend server IP.

So is there any way to solve it.

Ty.