acl <aclname> <criterion> [flags] [operator] <value> ...

acl invalid_src  src          0.0.0.0/7 224.0.0.0/3
acl invalid_src  src_port     0:1023
acl local_dst    hdr(host) -i localhost

balance <algorithm> [ <arguments> ]
balance url_param <param> [check_post]

balance roundrobin
balance url_param userid
balance url_param session_id check_post 64
balance hdr(User-Agent)
balance hdr(host)
balance hdr(Host) use_domain_only
balance hash req.cookie(clientid)

bind [<address>]:<port_range> [, ...] [param*]
bind /<path> [, ...] [param*]

listen http_proxy
    bind :80,:443
    bind 10.0.0.1:10080,10.0.0.1:10443

listen http_https_proxy
    bind :80
    bind :443 ssl crt /etc/haproxy/site.pem

cookie <name> [ rewrite | insert | prefix ] [ indirect ] [ nocache ]
              [ postonly ] [ preserve ] [ httponly ] [ secure ]
              [ domain <domain> ]* [ maxidle <idle> ] [ maxlife <life> ]
              [ dynamic ] [ attr <value> ]*

cookie JSESSIONID prefix
cookie SRV insert indirect nocache
cookie SRV insert postonly indirect
cookie SRV insert indirect nocache maxidle 30m maxlife 8h

default-server [param*]

default_backend <backend>

disabled

enabled

http-after-response <action> <options...> [ { if | unless } <condition> ]

http-after-response set-header Cache-Control "no-store,no-cache,private"
http-after-response set-header Pragma "no-cache"

http-check comment <string>

http-check connect [default] [port <expr>] [addr <ip>] [send-proxy]
                   [via-socks4] [ssl] [sni <sni>] [alpn <alpn>] [linger]
                   [proto <name>] [comment <msg>]

http-check connect port 8080

http-check disable-on-404

http-check expect [min-recv <int>] [comment <msg>]
                  [ok-status <st>] [error-status <st>] [tout-status <st>]
                  [on-success <fmt>] [on-error <fmt>] [status-code <expr>]
                  [!] <match> <pattern>

http-check expect status 200,201,300-310

http-check expect header name "set-cookie" value -m beg "sessid="

http-check send [meth <method>] [{ uri <uri> | uri-lf <fmt> }>] [ver <version>]
                [hdr <name> <fmt>]* [{ body <string> | body-lf <fmt> }]
                [comment <msg>]

http-check send meth GET uri / ver HTTP/1.1 hdr host 127.0.0.1

http-request <action> [options...] [ { if | unless } <condition> ]

acl nagios src 192.168.129.3

http-request allow if nagios
http-request deny

http-response <action> <options...> [ { if | unless } <condition> ]

http-response replace-value Cache-control ^public$ private

http-response set-status 503 reason "Slow Down"

log global
log <address> [len <length>] [format <format>] [sample <ranges>:<sample_size>]
    <facility> [<level> [<minlevel>]]
no log

log global #使用全局的日志配置

maxconn <conns>

mode { tcp|http }

option forwardfor [ except <network> ] [ header <name> ] [ if-none ]

option httpchk
option httpchk <uri>
option httpchk <method> <uri>
option httpchk <method> <uri> <version>

option httpchk GET /

option httplog [ clf ]

option httpslog

option tcp-check

option tcpka

option tcplog

retries <value>

server <name> <address>[:[port]] [param*]

server first  10.1.1.1:1080 cookie first  check inter 1000
server second 10.1.1.2:1080 cookie second check inter 1000

source <addr>[:<port>] [usesrc { <addr2>[:<port2>] | client | clientip } ]
source <addr>[:<port>] [usesrc { <addr2>[:<port2>] | hdr_ip(<hdr>[,<occ>]) } ]
source <addr>[:<port>] [interface <name>]

stats admin { if | unless } <cond>

stats auth <user>:<passwd>

stats enable

- stats uri   : /haproxy?stats
- stats realm : "HAProxy Statistics"
- stats auth  : no authentication
- stats scope : no restriction

stats hide-version

stats refresh <delay>

stats uri <prefix>

tcp-check comment <string>

tcp-check connect [default] [port <expr>] [addr <ip>] [send-proxy]
                   [via-socks4] [ssl] [sni <sni>] [alpn <alpn>] [linger]
                   [proto <name>] [comment <msg>]

tcp-check expect [min-recv <int>] [comment <msg>]
                  [ok-status <st>] [error-status <st>] [tout-status <st>]
                  [on-success <fmt>] [on-error <fmt>] [status-code <expr>]
                  [!] <match> <pattern>

tcp-check send <data> [comment <msg>]
tcp-check send-lf <fmt> [comment <msg>]

tcp-check send-binary <hexstring> [comment <msg>]
tcp-check send-binary-lf <hexfmt> [comment <msg>]

timeout check <timeout>

timeout client <timeout>

timeout connect <timeout>

timeout http-request <timeout>

timeout http-request <timeout>

use_backend <backend> [{if | unless} <condition>]

use-server <server> if <condition>
use-server <server> unless <condition>