HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

-3
votes
1answer
21 views

Redirecting URL's with HAProxy

I'm trying to redirect some url's with regirep, but I'm newbie at HAProxy and Regex and it's going hard to me: I need to redirect these paths: /myapp/ -> / /myapp/option1 -> /special/option1 ...
0
votes
1answer
15 views

HAProxy: stop subdomains from redirecting to https

After editing my haproxy config. All my subdomains are now redirecting to https. I just want my domain.com to redirect to https not my subdomains. How do I stop this? Below is my redirect script. ...
0
votes
0answers
8 views

HAProxy RTMP (TCP) load balancing

I am using HAProxy as load balancer for the RTMP protocol. For now it's working very very good but I have one small problem. I want to send the client's IP on the RTMP request after the load balancer. ...
1
vote
1answer
26 views

Scaling a web application horizontally in Tomcat (load balancing / clustering)

I develop a simple REST-style web application consisting of 2 basic modules. Module#1: server exposing REST web services, stateless, deployed in Tomcat Module#2: REST client There is one Tomcat ...
0
votes
1answer
34 views

Amazon RDS load balancing and performance

My question is simple. Is it possible to load balance rds (master and read-replicas) using the same haproxy instance used for application load balancing? This would mean that the IP of the ...
0
votes
1answer
30 views

HAProxy fails to connect when Shorewall firewall is enabled on web servers

I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers. As soon as I do, error messages ...
0
votes
0answers
47 views

EC2 Haproxy stops taking requests

I am using haproxy with Apache to keep alive an EC2 server. Sometimes haproxy stops taking new requests. If I reload haproxy it starts working normally. I have disabled iptables and increased open ...
0
votes
0answers
76 views

HAProxy - ssl client ca chain cannot be verified

Situation: I want this to work: requests come from clients and goes to haproxy through 443 port (ssl) and then it must go to backend on 80 port. I have server certificate given by intermediate ca ...
1
vote
3answers
174 views

HAProxy high CPU usage - configuration issue?

We recently had a spike in traffic, which while only moderate in size, caused haproxy to max out one of the CPU cores (and the server became unresponsive). I'm guessing that I'm doing something ...
0
votes
0answers
57 views

HaProxy session rate goes UP with fewer servers

I'm using Haproxy in front of a Solr cloud. I have just two servers in the cloud. My performance test (search only) is significantly faster if one of the servers is down, than if both servers are up - ...
0
votes
1answer
146 views

HAProxy option httpchk is not working

Given below is my haproxy.xfg file. HAPRoxy version 1.4.18, released 2011/09/16 is not making any calls to heatbeat.html. And although server1 does not have heartbeat.html it is sending traffic to ...
0
votes
1answer
29 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of ip addresses that I want to use to help determine to right actions to take with HAProxy. So if haproxy loads whitelists like this. "acl whitelist src -f ...
0
votes
1answer
70 views

HAProxy SSL with new GoDaddy certs

I renewed my certificate from GoDaddy and I got back two files: gd_bundle-g2-g1.crt 27ec89cfaa7c28.crt I have the private.key. However I totally forgot how to use, or produce, a valid .pem file to ...
0
votes
1answer
63 views

Using SHA256 with SSL certificates in HAProxy

Through an article on Security Labs I read about Google deprecating SHA-1 as signature in Chrome next year. Now I want to edit our HAProxy SSL configuration to fit the new security needs. What are ...
1
vote
1answer
127 views

Proxy over redis, HAProxy or twemproxy?

The best way to hide switching of master/slave redis servers, is to use a proxy over master server. Among proxy candidates, there is two more important (and used) choices: twemproxy and ...
2
votes
0answers
56 views

Configure haproxy to return a 204 for a certain ACL match

I want to return a HTTP 204 error code if anyone tries to access a particular path on my web server. I could set one of my webservers to return a 204 error and point haproxy to it as a backend. ...
0
votes
1answer
66 views

HAProxy route https SNI and http over the same port

I have an HAProxy routing HTTPS without termination using SNI. The configuration is similar to the following: frontend ft_ssl_vip bind 0.0.0.0:5000 mode tcp option tcplog tcp-request ...
0
votes
1answer
148 views

Will this HAProxy “restart script” work as gracefully I think it will?

I put this script together from various places. What I am hoping is that it will do the following once run: Pause all "NEW" http traffic for ports 80 and 443 - just "pause" them, don't give any ...
0
votes
1answer
30 views

How to do haproxy session mapping

I have a scenario where i have two tomcat servers A and B behind the haproxy, now one of the app servers have a new version of the war and the other tomcat has a old version of the war file.So at a ...
0
votes
2answers
41 views

Web proxying with 3rd party authentication

I have a typical website where users have to pay to sign up and access some premium content. This content are internal propietary web servers from different vendors (think of it like graphical ...
1
vote
2answers
97 views

HAProxy tuning - can't support > 50 concurrent users

I'm investigating replacing a proprietary, software load balancer with HAProxy. As part of this investigation, I am attempting to test HAProxy under load. While my HAProxy configuration works fine ...
0
votes
1answer
94 views

How can I use environment variables in haproxy.conf

My haproxy.cfg file has one backend servers using hostnames: backend servers server myapp ${PORTAL_PORT_3000_TCP_ADDR}:${PORTAL_PORT_3000_TCP_PORT} maxconn 32 myapp is running in other docker ...
1
vote
2answers
205 views

How to construct a MongoDB Health Check in HAProxy?

There is a fastcgi example of a binary health check on the HAProxy blog. How would I construct a similar check for MongoDB such that I am doing a more robust health check for MongoDB - one that ...
1
vote
0answers
51 views

Configuring HAProxy for RPC, only one host

I've tried several ideas on how to get this to work, including Squid, Pound, and now HAProxy, which seems to be the closest yet, so far. I have an NGinx server which I have set to be the primary web ...
2
votes
1answer
236 views

Best Practice for Mapping Domain Names to Docker Container

What is considered "best practices" for serving a a docker container from a specific domain name? For example: Container1 runs App A on port 8080, and accessed via AwesomeAppA.com Container2 runs ...
0
votes
1answer
58 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
0
votes
1answer
77 views

How to proxy traffic by IP using server names/aliases?

We have 5 different server locations each containing around 30 servers each, each server represents a URL and serves both HTTP and HTTPS. They're all identical however provide different content based ...
0
votes
1answer
141 views

Nginx no longer servers uwsgi application behind HAProxy - Looks for static file instead

We implemented our web application using web2py. It consists of several modules offering a REST API at various resources (e.g. /dids, /replicas, ...). The API is used by clients implementing ...
1
vote
2answers
203 views

Struggling with Haproxy 1.5 ACLs using regular expressions and URL Parameters

I am using Haproxy 1.5.3 setup with ssl on the frontend and also sending ssl to the backend servers. the mode is http and using acls to determine stickyness. My test requests are as follows: wget ...
1
vote
1answer
295 views

HAProxy and Intermediate SSL Certificate Issue

We are currently experiencing an issue with verifying a Comodo SSL certificate on an Ubuntu AWS cluster. Browsers are displaying the site/content fine and showing all the relevant certificate ...
1
vote
1answer
80 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
1
vote
2answers
95 views

Haproxy backend servers on different interfaces

I have a haproxy server which gets limited to some 60k connections. I think it is because of ephemeral port limit as I have 1:1 connection mapping, so all my outgoing connections go to the same ...
1
vote
0answers
263 views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
2
votes
1answer
122 views

HAProxy error: Some configuration options require full privileges, so global.uid cannot be changed

After adding the line to /etc/haproxy/haproxy.cfg as part of creating a transparent proxy, source 0.0.0.0 usesrc clientip restarting haproxy starts giving an error ~# service haproxy reload ...
0
votes
1answer
89 views

Using 2 Transparent HAProxy for load balancing

We can configure HAProxy to be a transparent proxy by using the guide here, where one of the steps says ...to put the backend servers in a different subnet to the front end clients and make sure that ...
1
vote
1answer
108 views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
0
votes
1answer
198 views

Haproxy 1.5.3 / OpenSSL - Creating PEM

I have an HAProxy Server set up with the line: bind *:443 ssl crt /etc/ssl/domain.com/domain.com.pem I have the following files: /etc/ssl/domain.com/domain.com.key ...
0
votes
1answer
286 views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy ...
0
votes
2answers
144 views

SSHD real-ip behind haproxy

I'm trying to setup an ssh over https connection using haproxy. I'm currently looking for a way for SSHD to get the source ip from haproxy, similar to reading X-Forwarded-For or X-Real-IP headers. ...
-1
votes
2answers
292 views

SSH over HTTPS through haproxy

I'm trying to setup an ssh over https connection using haproxy. I haven't found any working examples, so any help would be appreciated! client config; ~$ cat ~/.stunnel/stunnel.conf pid= client=yes ...
0
votes
0answers
44 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
1
vote
0answers
29 views

haproxy : Limit WebSocket payload length

My server is distributing websocket client connections over 4 local websocket servers and I need to prevent these websocket servers to get flooded with big chunks of data. Question: Is it possible ...
1
vote
1answer
25 views

haproxy : Checking for a single header

My server is distributing websocket client connections over 4 local websocket servers. Is it possible to instruct haProxy to accept only WebSocket version 13 (RFC 6455) ? i.e. Verify if ...
-1
votes
1answer
70 views

HAProxy - proxy to webserver via tcp

I have a simple web application, All requests to that application are HTTP based (RESTfull API and standard ajax) I have an haproxy before my tomcat cluster. So now i have clients that http request ...
2
votes
1answer
526 views

Dynamic HAProxy configuration

I try to figure out a way to dynamically manage the loadbalancer configuration. I want to add and remove "service nodes" depending on the overall system load. My research so far revealed "Thalassa" ...
0
votes
0answers
67 views

How to send data via UDP to indexer (Elasticsearch) when haproxy is responsing?

I have some web backends balanced via haproxy. Every backend sends some specific json data in response headers (example of header with data X-JSON-Data: {country:"US", os:"Android"}). This is not ...
0
votes
1answer
136 views

Can HAProxy reconnect a websocket to another backend server transparently?

I'm new to HAProxy so this might have an obvious answer but I wasn't able to find it. Consider this setup: two backend web applications; one HAProxy in front of the web applications; many clients ...
1
vote
1answer
102 views

HAProxy set acl with hosts from file

I'd like to migrate some 100+ sites from one server to another. Current plan is to gradually add an acl for each as they are moved to direct traffic to a new server. Here is a simplified example ...
0
votes
1answer
29 views

Restarting HAProxy with -st flag returns error

I'm restarting HAproxy (on Ubuntu Server x64 14.04) with the following command haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -st $(cat /var/run/haproxy.pid) However, when actually ...
1
vote
0answers
25 views

is it possible to have reqrep for each server in haproxy loadbalancer?

There are 3 servers in a load balanced HAProxy setup. server serv1 192.168.1.101:8080 check inter 2000 rise 1 fall 1 server serv2 192.168.1.102:8080 check inter 2000 rise 1 fall 1 #The ...