SSL strong ciphers

ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:!EXPORT

List strong ssl ciphers
#openssl ciphers -v 'ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:!EXPORT'

specific strong cipher
#openssl ciphers -v 'RC4-SHA:AES256-SHA:AES128-SHA'

test
# openssl s_client -connect SERVERNAME:443 -cipher LOW:EXP


Apache sample
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:!EXPORT

SEC: Haproxy monitoring on log files

//install SEC
yum install sec


//edit sec conf file and add the input file
vim /etc/sysconfig/sec


//add haproxy.sec file in /etc/sec/
# SEC - Simple Event Correlator Configuration File
#
# Author: Steve Moitozo <god <> zilla <> us>
# Created: 20070304
# Description:
# SEC is being used for real-time notification of
# web server failure events. When HAProxy recognizes
# a server failure it writes information about the
# failure to its log file. SEC monitors the log file
# looking for certain events and sends notification
# e-mails to administrators
#
# match on a line like this:
# Server http_proxy/www0 is DOWN. 0 active and 2 backup servers left. Running on backup. 0 sessions active, 0 requeued, 0 remaining in queue.
# Take the name of the instance (http_proxy/www0) and put it in $1
# Take the server status (DOWN or UP) and put it in $2
# Take the rest of the line and put it in $3
#
type=Single
ptype=RegExp
pattern=Server\s+(\S+)\s+\S+\s+(\S+)(.*)
desc=$0
action=pipe '%t server $1 went $2 $3' /bin/mail -s 'HAProxy: $1 went $2' user@mail.com

//start sec
service sec start

//additionally sec can be started with

/usr/bin/sec --conf=/etc/sec/sshd.rules --input=/var/log/secure

Haproxy: Remote logging with rsyslog on Centos

Enable receiving logs port 514/UDP and log them in specified haproxy log files
//edit rsyslog.conf
vim /etc/rsyslog.conf

//enable udp

$ModLoad imudp
$UDPServerRun 514

//add the log files

local0.*       -/var/log/haproxy0.log

local1.*       -/var/log/haproxy1.log