So this is a new project I’ve recently finished.
Create a secure high availability (HA) load balancing service spreading user load across two pairs of two servers, providing two different sets of services:
One service requires SSL passthrough, while the other is a websockets connection over SSL, where the use of a proxy demands SSL termination. Securing communications with the web backend for the latter is done by routing the traffic via an OpenVPN tunnel.
The software I’ve chosen for this, is HAProxy 1.5 on FreeBSD 10.1-Release, running in a VSphere 5.5 environment.