NameVirtualHost *:8140


     BalancerMember http://127.0.0.1:18140 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18141 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18142 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18143 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18144 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18145 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18146 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18147 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     BalancerMember http://127.0.0.1:18148 loadfactor=10 smax=5 max=100 ttl=30 retry=10
     ProxySet lbmethod=byrequests maxattempts=3 nofailover=Off



    SSLEngine on
    SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
    SSLCertificateFile /etc/puppet/ssl/certs/puppet.joostas.com.pem
    SSLCertificateKeyFile /etc/puppet/ssl/private_keys/puppet.joostas.com.pem
    SSLCertificateChainFile /etc/puppet/ssl/ca/ca_crt.pem
    SSLCACertificateFile /etc/puppet/ssl/ca/ca_crt.pem
    SSLCARevocationFile /etc/puppet/ssl/ca/ca_crl.pem
    SSLVerifyClient optional
    SSLVerifyDepth  1
    SSLOptions +StdEnvVars

    RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

    
	SetHandler balancer-manager
	Order deny,allow
	Deny from all
	Allow from x.x.x.x/32
    

    ProxyPass / balancer://puppetmaster:8140/
    ProxyPassReverse / balancer://puppetmaster:8140/
    ProxyPreserveHost on

    CustomLog "|/usr/sbin/rotatelogs /srv/log/apache2/puppet-access-%Y%m%d.access.log 86400" joost-ssl