HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

-2
votes
0answers
9 views

There is a requirement from my boss to prepare a cluster of our application on wildfly application server

There is a requirement from my boss to prepare a cluster of our application on wildfly application server. I have designed the architecture as two haproxy(for loadbalancing),two apache servers for ...
0
votes
0answers
15 views

HAproxy ACL Conditional not matching AND statement

I'm using HAproxy 1.5.15 on Ubuntu 14.04 -- I'm attempting to add X-Frame-Options header but add an exclusion for a route http://foo.example.com/demo/* -- there is a page in it that is being embedded ...
0
votes
2answers
27 views

prevent from ddos attacks with nginx and apache (and haproxy?)

Sometimes i have ddos attacks on my server. I'm trying to prevent from this. I'm using Nginx to serve static content and as a reverse proxy and Apache to serve php applications. When the attack ...
-1
votes
0answers
15 views

HAProxy 2 frontend services with same port

I have two backend services service1 and service2, they both listen on 8080 and I want to put HAProxy in front of these 2 services. My problem is that I want my clients to continue calling the same ...
-1
votes
0answers
15 views

haproxy redirect and force https

So i am trying to use haproxy for redirection/load balancing of 2 different applications. I have 2 domain names, one for each application. For one of the applications, i need to add a prefix and force ...
0
votes
1answer
16 views

Block specific URL in HAProxy / url-encoding

I'm trying to restrict access to a specific URL. It should not allowed to access /admin.php. frontend example acl restricted_page path_beg -i /admin\.php http-request deny if restricted_page ...
-1
votes
0answers
13 views

Graceful Shutdown Tomcat [on hold]

I would like shut-down my tomcat instance gracefully, a graceful should involve the below processes, The respective tomcat instance should reject all (new) incoming requests Check for any in-flight ...
0
votes
0answers
11 views

haproxy and fhem - How to path-redirect correctly

I want to have the site www.url.at/ha redirected in the backend to 127.0.0.1:8083. The url should remain www.url.at/ha (or www.url.at/ha/images/... or www.url.at/ha/?test=12). This works on most of ...
0
votes
1answer
8 views

haproxy/jetty - redirect all unknown path_beg

i have configured valid domains and paths e.g. http://submdomain.host.com/validpath1 http://submdomain.host.com/validpath2 this is identified redirected by: acl url_monitor path_beg /Monitor/ ...
0
votes
1answer
36 views
+50

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
1
vote
0answers
18 views

MySQL proxy authentication options

I have a farm of production mysql servers that are currently protected by restricted passwords. I would prefer to restrict access to these systems at network level, but have to account for the fact ...
0
votes
1answer
24 views

SFTP configuration through HAProxy loadbalancing

I have LB server which currently load balancing 2 machines as for apache2 "http" and "https" requests as master/slave, How to make the same server load balancing "sftp" requests to the same both ...
0
votes
0answers
9 views

HAProxy roundrobin only works in http mode

When I have the following roundrobin setup using http mode, things work fine and refreshing the site alternates between returning web1 and web2. defaults timeout connect 5000ms timeout client ...
1
vote
1answer
28 views

HAProxy Cannot Connect to Backend (No Route to Host)

I couldn't make the proxy work for one of our websites (IIS7). I am getting a "no route to host" message from the haproxy logs. Server test_be/10.100.1.1:81 is DOWN, reason: Layer4 ...
3
votes
2answers
46 views

Is HAProxy still necessary when Varnish can act as a load balancer?

I would like to load-balance my application servers, as well as cache the responses from them. I've read an article dating back to 2012 on HAProxy's website, that was supposed to clear the confusion ...
0
votes
1answer
31 views

HAProxy not recognizing host headers?

I have been trying to configure HAProxy to send traffic to different backend servers based on hostnames. I tried using the directions found in How to divert traffic based on hostname using HAProxy? ...
0
votes
2answers
28 views

Keepalived heartbeats not being sent/received on EC2 VPC

I'm trying to setup keepalived + HAProxy as a redundant load balancer on an EC2 VPC (yes, I know that ELB is an option). I believe we have things configured correctly, but killing the master server ...
0
votes
1answer
37 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
0answers
18 views

HAProxy http_req_rate limit doesn't kick in

I'm trying to setup a rate limit on my HAProxy frontend, to prevent more than X requests to be sent to the backend in a specific time frame. As an example I want to limit to 1 request every 10 ...
1
vote
0answers
54 views

Nginx proxy with varying source address

I have a working nginx configuration to proxy all requests to a server from a range of source IPs. I currently have 20 source IPs set up, and the configuration is quite massive. I removed the other 18 ...
0
votes
1answer
32 views

Logstash conditional output to statsd - based on haproxy request URI

I have Logstash version 1.4.2 analysing haproxy logs using the HAPROXYHTTP pattern, and it is already sending counters and timing information to statsd for aggregation and onward storage in ...
0
votes
1answer
23 views

Add a path after / to http request in HAProxxy

I am currently redirecting my users from get.foo.com to foodownload.com, and then they can click and download bar.mp4. I want before redirecting, change the path, so by entering get.foo.com, their url ...
0
votes
0answers
8 views

monit: add NOALERT in an IF construct

On debian jessie, I have configured monit to check for HAproxy particular port forwardings, and to restart it if failed like this: check process haproxy with pidfile /run/haproxy.pid group ...
-1
votes
2answers
63 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to ...
1
vote
1answer
52 views

Remove header from response if empty with HAProxy

I'm in a situation whereas apparently something in my backend is setting a blank Set-Cookie. This only happens on Chrome. It might also be some kind of extension but in order to verify I'd like to ...
0
votes
1answer
87 views

Bind to all interfaces for IPv4 and IPv6 in haproxy

I want to configure haproxy to bind to a tcp as well as tcp6 socket on all interfaces (i.e., 0.0.0.0:80 and :::80). I was able to reach this goal with the following settings: listen web bind :80 ...
3
votes
0answers
107 views

How to Reduce Failover Interval in HAProxy?

I have setup HAProxy and it is working fine. I observed that when one of the node goes down HAProxy detects that immediately, but switch-over / redirect existing traffic to the rest of working nodes ...
1
vote
1answer
31 views

Is it possible to maintain the queue while restarting HAProxy

I am using HAProxy to load balance app servers. Each app server has a max connections limit, once that limit is exceeded the queue is exceeded. When that happens, I will be adding another app server ...
2
votes
1answer
34 views

haproxy do multiple checks and using different ports

At the moment i am using HAproxy to check an smtp server with the following: option tcp-check tcp-check expect rstring ^220 tcp-check send QUIT\r\n tcp-check expect rstring ^221 But ...
0
votes
1answer
41 views

test haproxy, varnish and apache configuration

I'm installing Varnish cache 4 behind a HAproxy which is behind an Apache instance. I've got several questions that could seem trivial to you (sorry then): How can i know if the HaProxy calls ...
3
votes
0answers
31 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
1
vote
1answer
28 views

Can haproxy use DNS to find backend pool?

Right now I have a slew of server entries defined like so: server cn0136 10.33.125.17:8008 check server cn0137 10.33.136.20:8008 check server cn0138 10.33.124.23:8008 check server cn0139 ...
3
votes
1answer
75 views

HAProxy usage with kubernetes

I am trying to setup a kubernetes cluster using HAProxy. Right now there are only two nodes. The loadbalancer is on the master node. But i see from the logs that the connection is tried on a virtual ...
2
votes
1answer
62 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
3
votes
0answers
25 views

Force disabled server selection when using cookie based session persistence?

Let's say I have an HTTP configuration block like so: listen testing bind 1.2.3.4:80 balance roundrobin use-server server1 if { urlp_val(force) eq 1 } use-server server2 if { urlp_val(force) ...
0
votes
0answers
38 views

haproxy ssl ciphers

This was my ssl cipher setting in haproxy which I picked up from a haproxy thread: global ssl-default-bind-ciphers ...
1
vote
2answers
33 views

haproxy remap tcp port with single backend

I'm using haproxy in tcp mode. I have a single frontend that listens to several ports: frontend front mode tcp bind *:20000 bind *:20001 ... default_backend back And a single ...
1
vote
1answer
32 views

Error setting up haproxy and varnish

I have been following a tutorial from haproxy blog on how to install varnish with haproxy. (Link) There is a problem with the haproxy config settings around this part: frontend ft_web_static bind ...
1
vote
0answers
104 views

haproxy sendmsg logger #1 failed: No such file or directory

I get the error: [ALERT] 342/125339 (1) : sendmsg logger #1 failed: No such file or directory (errno=2) /srv/dockervolume/haproxy/etc/rsyslog.d/49-haproxy.conf file: $AddUnixListenSocket ...
0
votes
0answers
61 views

HAProxy not forwarding requests to backend server

I have HAProxy (v1.5.8) as a load balancer with keepalived (v1.2.2) to maintain high availability. I also have several Jetty servers on a different machine on the local network as backend server with ...
1
vote
1answer
68 views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, ...
1
vote
1answer
61 views

Haproxy 1.5x reload configuration without terminating layer 7 sessions?

Folks, I moved one of our SaaS applications off a coyote point hardware load balancer onto a vm running nginx + haproxy with haproxy handling hash persistence. The problem I'm running into is the ...
1
vote
2answers
126 views

HAProxy rspadd or set-header

I am currently trying to improve my HAProxy HTTPS configuration. There seems to be two ways to set additional fields to response headers in HAProxy. I currently use http-response set-header, which ...
0
votes
0answers
80 views

How to force haproxy http to close connection with client?

I have a backend that performs some analysis of JSON data and if client's data is invalid I have to ban client. My backend use ipsets and iptables rule, but in order to make these rules work I must ...
0
votes
1answer
113 views

How to set up an automatic failover reverse proxy for two identical Icecast master servers?

I'm trying to do simple everything double with a reverse proxy in the front high availability for an Icecast master streaming server (i.e. I'm not talking about Icecast relays here). So, three VMs: ...
-1
votes
2answers
20 views

haproxy library not found on internet found log into message

At the time of restart the service we are getting the below error. And library liblua5.3.so is not avail on internet. Please suggest any alternative. /usr/sbin/haproxy-systemd-wrapper: error while ...
0
votes
1answer
43 views

haproxy reload from stats socket?

I know that I can reload haproxy from a shell command (I use service haproxy reload). I also am using the stats socket to enable and disable servers when doing maintenance on them. I also have ...
0
votes
1answer
42 views

How to fix simple HAProxy logging

I am running Ubuntu 14.04 and I am wondering how I can log everything that happens in HAProxy. I've been reading issues concerning logging and chroot. Everything is telling me to do write different ...
1
vote
1answer
82 views

HAProxy SSL roundrobin not working when SSL terminated and forwarded

I am using the following config to terminate SSL so that I can inspect the request, do URL rewriting, ACL etc, and then forward the SSL traffic back to my backend servers. However, I am not able to ...
0
votes
2answers
114 views

Haproxy - selecting backend dynamically from subdomain

I discovered recently that you can match a backend dynamically, based on the request hostheader, like this: use_backend %[req.hdr(host),lower] However, does anyone know any way I could use the ...