LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
Listen 8140

<Proxy balancer://puppetmaster>
    BalancerMember http://127.0.0.1:18140
    #BalancerMember http://127.0.0.1:18141
    #BalancerMember http://127.0.0.1:18142
    #BalancerMember http://127.0.0.1:18143
</Proxy>

<VirtualHost *:8140>
        SSLEngine On
        SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
        SSLCertificateFile /var/lib/puppet/ssl/certs/publictest1.fedoraproject.org.pem
        SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/publictest1.fedoraproject.org.pem
        SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
        SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
        SSLVerifyClient optional
        SSLVerifyDepth 1
        SSLOptions +StdEnvVars

        RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
        RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

        <Location />
            SetHandler balancer-manager
            Order allow,deny
            Allow from all
        </Location>

        ProxyPass / balancer://puppetmaster/
        ProxyPassReverse / balancer://puppetmaster/
        ProxyPreserveHost On

        ErrorLog logs/puppetmaster-error.log
        CustomLog logs/puppetmaster-access.log combined
        CustomLog logs/puppetmaster-ssl_request.log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>