Re: Setting up IMAP proxy balancer and SSL offloading

Nginx is installed on RH 6.5. This is my nginx.conf

-----------------------------
user nginx;
worker_processes 2;

pid /var/run/nginx.pid;
error_log /var/log/nginx/error.log;


events {
worker_connections 1024;
}

upstream backend1 {
server 10.108.20.8:143;
server 10.108.20.9:143;
}

upstream backend2 {
server 10.108.20.8:144;
server 10.108.20.9:144;
}

mail {
proxy on;

imap_capabilities "IMAP4rev1" "UIDPLUS"; ## default

server {
listen 10.108.101.226:143;
protocol imap;
auth_http backend1;
proxy on;
}

server {
listen 10.108.101.226:144;
protocol imap;
auth_http backend2;
proxy on;

}

server {
listen 10.108.101.226:993 ssl;
protocol imap;
auth_http backend1;
proxy on;

ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 SSLv3;
ssl_ciphers HIGH:!ADH:!MD5:@STRENGTH;
ssl_session_cache shared:TLSSL:16m;
ssl_session_timeout 10m;
## default SSL cert. Each host should have its own.
ssl_certificate ssl/XX.crt;
ssl_certificate_key ssl/XX.key;
}

server {
listen 10.108.101.227:994 ssl;
protocol imap;
auth_http backend2;
proxy on;

ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 SSLv3;
ssl_ciphers HIGH:!ADH:!MD5:@STRENGTH;
ssl_session_cache shared:TLSSL:16m;
ssl_session_timeout 10m;
## default SSL cert. Each host should have its own.
ssl_certificate ssl/XX.crt;
ssl_certificate_key ssl/XX.key;
}

}
-----------------------------
error.log output.

[emerg] 6028#0: "upstream" directive is not allowed here in /etc/nginx/nginx.conf

Regards.