HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
0answers
8 views

haproxy and fhem - How to path-redirect correctly

I want to have the site www.url.at/ha redirected in the backend to 127.0.0.1:8083. The url should remain www.url.at/ha (or www.url.at/ha/images/... or www.url.at/ha/?test=12). This works on most of ...
0
votes
1answer
7 views

haproxy/jetty - redirect all unknown path_beg

i have configured valid domains and paths e.g. http://submdomain.host.com/validpath1 http://submdomain.host.com/validpath2 this is identified redirected by: acl url_monitor path_beg /Monitor/ ...
0
votes
0answers
12 views

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
1
vote
0answers
17 views

MySQL proxy authentication options

I have a farm of production mysql servers that are currently protected by restricted passwords. I would prefer to restrict access to these systems at network level, but have to account for the fact ...
0
votes
1answer
23 views

SFTP configuration through HAProxy loadbalancing

I have LB server which currently load balancing 2 machines as for apache2 "http" and "https" requests as master/slave, How to make the same server load balancing "sftp" requests to the same both ...
0
votes
0answers
9 views

HAProxy roundrobin only works in http mode

When I have the following roundrobin setup using http mode, things work fine and refreshing the site alternates between returning web1 and web2. defaults timeout connect 5000ms timeout client ...
1
vote
1answer
22 views

HAProxy Cannot Connect to Backend (No Route to Host)

I couldn't make the proxy work for one of our websites (IIS7). I am getting a "no route to host" message from the haproxy logs. Server test_be/10.100.1.1:81 is DOWN, reason: Layer4 ...
3
votes
2answers
45 views

Is HAProxy still necessary when Varnish can act as a load balancer?

I would like to load-balance my application servers, as well as cache the responses from them. I've read an article dating back to 2012 on HAProxy's website, that was supposed to clear the confusion ...
0
votes
1answer
29 views

HAProxy not recognizing host headers?

I have been trying to configure HAProxy to send traffic to different backend servers based on hostnames. I tried using the directions found in How to divert traffic based on hostname using HAProxy? ...
0
votes
2answers
25 views

Keepalived heartbeats not being sent/received on EC2 VPC

I'm trying to setup keepalived + HAProxy as a redundant load balancer on an EC2 VPC (yes, I know that ELB is an option). I believe we have things configured correctly, but killing the master server ...
0
votes
1answer
36 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
0answers
17 views

HAProxy http_req_rate limit doesn't kick in

I'm trying to setup a rate limit on my HAProxy frontend, to prevent more than X requests to be sent to the backend in a specific time frame. As an example I want to limit to 1 request every 10 ...
1
vote
0answers
52 views

Nginx proxy with varying source address

I have a working nginx configuration to proxy all requests to a server from a range of source IPs. I currently have 20 source IPs set up, and the configuration is quite massive. I removed the other 18 ...
0
votes
1answer
25 views

Logstash conditional output to statsd - based on haproxy request URI

I have Logstash version 1.4.2 analysing haproxy logs using the HAPROXYHTTP pattern, and it is already sending counters and timing information to statsd for aggregation and onward storage in ...
0
votes
1answer
23 views

Add a path after / to http request in HAProxxy

I am currently redirecting my users from get.foo.com to foodownload.com, and then they can click and download bar.mp4. I want before redirecting, change the path, so by entering get.foo.com, their url ...
0
votes
0answers
7 views

monit: add NOALERT in an IF construct

On debian jessie, I have configured monit to check for HAproxy particular port forwardings, and to restart it if failed like this: check process haproxy with pidfile /run/haproxy.pid group ...
-1
votes
2answers
60 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to ...
1
vote
1answer
48 views

Remove header from response if empty with HAProxy

I'm in a situation whereas apparently something in my backend is setting a blank Set-Cookie. This only happens on Chrome. It might also be some kind of extension but in order to verify I'd like to ...
0
votes
1answer
75 views

Bind to all interfaces for IPv4 and IPv6 in haproxy

I want to configure haproxy to bind to a tcp as well as tcp6 socket on all interfaces (i.e., 0.0.0.0:80 and :::80). I was able to reach this goal with the following settings: listen web bind :80 ...
3
votes
0answers
100 views

How to Reduce Failover Interval in HAProxy?

I have setup HAProxy and it is working fine. I observed that when one of the node goes down HAProxy detects that immediately, but switch-over / redirect existing traffic to the rest of working nodes ...
1
vote
1answer
31 views

Is it possible to maintain the queue while restarting HAProxy

I am using HAProxy to load balance app servers. Each app server has a max connections limit, once that limit is exceeded the queue is exceeded. When that happens, I will be adding another app server ...
2
votes
1answer
31 views

haproxy do multiple checks and using different ports

At the moment i am using HAproxy to check an smtp server with the following: option tcp-check tcp-check expect rstring ^220 tcp-check send QUIT\r\n tcp-check expect rstring ^221 But ...
0
votes
1answer
39 views

test haproxy, varnish and apache configuration

I'm installing Varnish cache 4 behind a HAproxy which is behind an Apache instance. I've got several questions that could seem trivial to you (sorry then): How can i know if the HaProxy calls ...
3
votes
0answers
29 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
1
vote
1answer
26 views

Can haproxy use DNS to find backend pool?

Right now I have a slew of server entries defined like so: server cn0136 10.33.125.17:8008 check server cn0137 10.33.136.20:8008 check server cn0138 10.33.124.23:8008 check server cn0139 ...
3
votes
0answers
59 views

HAProxy usage with kubernetes

I am trying to setup a kubernetes cluster using HAProxy. Right now there are only two nodes. The loadbalancer is on the master node. But i see from the logs that the connection is tried on a virtual ...
2
votes
1answer
58 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
3
votes
0answers
24 views

Force disabled server selection when using cookie based session persistence?

Let's say I have an HTTP configuration block like so: listen testing bind 1.2.3.4:80 balance roundrobin use-server server1 if { urlp_val(force) eq 1 } use-server server2 if { urlp_val(force) ...
0
votes
0answers
32 views

haproxy ssl ciphers

This was my ssl cipher setting in haproxy which I picked up from a haproxy thread: global ssl-default-bind-ciphers ...
1
vote
2answers
30 views

haproxy remap tcp port with single backend

I'm using haproxy in tcp mode. I have a single frontend that listens to several ports: frontend front mode tcp bind *:20000 bind *:20001 ... default_backend back And a single ...
1
vote
1answer
30 views

Error setting up haproxy and varnish

I have been following a tutorial from haproxy blog on how to install varnish with haproxy. (Link) There is a problem with the haproxy config settings around this part: frontend ft_web_static bind ...
1
vote
0answers
101 views

haproxy sendmsg logger #1 failed: No such file or directory

I get the error: [ALERT] 342/125339 (1) : sendmsg logger #1 failed: No such file or directory (errno=2) /srv/dockervolume/haproxy/etc/rsyslog.d/49-haproxy.conf file: $AddUnixListenSocket ...
0
votes
0answers
53 views

HAProxy not forwarding requests to backend server

I have HAProxy (v1.5.8) as a load balancer with keepalived (v1.2.2) to maintain high availability. I also have several Jetty servers on a different machine on the local network as backend server with ...
1
vote
1answer
60 views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, ...
1
vote
1answer
58 views

Haproxy 1.5x reload configuration without terminating layer 7 sessions?

Folks, I moved one of our SaaS applications off a coyote point hardware load balancer onto a vm running nginx + haproxy with haproxy handling hash persistence. The problem I'm running into is the ...
1
vote
2answers
117 views

HAProxy rspadd or set-header

I am currently trying to improve my HAProxy HTTPS configuration. There seems to be two ways to set additional fields to response headers in HAProxy. I currently use http-response set-header, which ...
0
votes
0answers
76 views

How to force haproxy http to close connection with client?

I have a backend that performs some analysis of JSON data and if client's data is invalid I have to ban client. My backend use ipsets and iptables rule, but in order to make these rules work I must ...
0
votes
1answer
111 views

How to set up an automatic failover reverse proxy for two identical Icecast master servers?

I'm trying to do simple everything double with a reverse proxy in the front high availability for an Icecast master streaming server (i.e. I'm not talking about Icecast relays here). So, three VMs: ...
-1
votes
2answers
20 views

haproxy library not found on internet found log into message

At the time of restart the service we are getting the below error. And library liblua5.3.so is not avail on internet. Please suggest any alternative. /usr/sbin/haproxy-systemd-wrapper: error while ...
0
votes
1answer
38 views

haproxy reload from stats socket?

I know that I can reload haproxy from a shell command (I use service haproxy reload). I also am using the stats socket to enable and disable servers when doing maintenance on them. I also have ...
0
votes
1answer
42 views

How to fix simple HAProxy logging

I am running Ubuntu 14.04 and I am wondering how I can log everything that happens in HAProxy. I've been reading issues concerning logging and chroot. Everything is telling me to do write different ...
1
vote
1answer
72 views

HAProxy SSL roundrobin not working when SSL terminated and forwarded

I am using the following config to terminate SSL so that I can inspect the request, do URL rewriting, ACL etc, and then forward the SSL traffic back to my backend servers. However, I am not able to ...
0
votes
2answers
106 views

Haproxy - selecting backend dynamically from subdomain

I discovered recently that you can match a backend dynamically, based on the request hostheader, like this: use_backend %[req.hdr(host),lower] However, does anyone know any way I could use the ...
1
vote
1answer
78 views

HAProxy to terminate SSL also send SSL to backend server

I would like terminate SSL at HAProxy, do some manipulation on the header, rewrite URL and re-encrypt traffic and send to backend servers as SSL? I can't seem to find a way to do this. I can get ...
0
votes
1answer
57 views

HAProxy re-enable server when is up again

I'm trying to make sure that when a server goes up after being down (and not active any more) it will be re-enabled automatically. This is my haproxy.cfg: global log 127.0.0.1 local0 log ...
0
votes
1answer
23 views

Manage keepalive on haproxy

I'm tuning a haproxy server (version 1.5-dev22). Each url manage has today a backend with only one server (previously 2), so there no longer loadbalancing. Each backend has the option "httpclose" ...
0
votes
0answers
40 views

Configure a websocket server in front of HAProxy

I have a small python server script which creates a websocket connection and accepts base64 encoded IP packets (very similar to this). As of now my script decodes the IP packet and sends it out into ...
1
vote
1answer
43 views

Sometimes SSL error with haproxy

I'm trying to setup a haproxy for SSL offloading for multiple hosts. This works perfect with this config: # Example configuration for a possible web application. See the # full configuration options ...
1
vote
0answers
162 views

Exchange 2013 MAPI over HTTP Load balancing HAProxy

We have successfully managed to deploy HAProxy as a Layer-4 load balancer for all our Exchange 2013 SP1 HTTP based traffic (Autodiscover, OWA, EXP, EWS, MAPI, etc.) For various reasons, however, we ...
1
vote
1answer
80 views

Access to Proxy Protocol address within HAProxy

I am running HAProxy that is receiving layer 4 proxy protocol from an upstream source. I have a need to create a custom HTTP header with the address contained there. I can't seem to find how I can ...