Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,128
questions
1
vote
2
answers
447
views
SNI for multi tenant load balancing in 2015
We're a multi-tenant service and terminate our SSL at our load balancers (HAProxy + Apache for SSL termination), this has caused growing pains due to dedicated IP requirements. But times have changed ...
- 598
1
vote
3
answers
2k
views
Inject header in HAProxy redirect function
I have HAProxy 1.5.8.
I have this basic 301 rule :
frontend http_frontend
bind *:80
mode http
redirect location https://xxxx.com code 301
The response looks like this :
HTTP/1.1 301 Moved ...
- 1,916
1
vote
2
answers
7k
views
HAProxy tuning - can't support > 50 concurrent users
I'm investigating replacing a proprietary, software load balancer with HAProxy. As part of this investigation, I am attempting to test HAProxy under load. While my HAProxy configuration works fine ...
- 81
1
vote
2
answers
2k
views
Haproxy backend servers on different interfaces
I have a haproxy server which gets limited to some 60k connections. I think it is because of ephemeral port limit as I have 1:1 connection mapping, so all my outgoing connections go to the same server....
- 335
1
vote
2
answers
3k
views
Cannot start HAProxy
When im starting HAProxy it says:
Starting haproxy: [ALERT] 038/154339 (770) : Starting proxy proxy1: cannot bind socket [FAILED]
My config:...
- 13
1
vote
1
answer
913
views
How does HAProxy loadbalancing forward the request?
I'm trying to understand how the loadbalancing in HAProxy works so that I can do some capacity planning. So which one is the right way the HAProxy load balancing works?
Scenario A:
Request from ...
- 421
1
vote
2
answers
5k
views
Loadbalancing JBoss with haproxy AND mod_jk
I've been tasked to explore ways of building a very fail-resistant configuration for a professional application developed for JBoss.
I have a somewhat fixed hardware configuration (servers have ...
- 905
1
vote
2
answers
62
views
Navigating traffic in inner network
I am just wondering if the following scenario is possible and how to implement this.
Suppose there are 2 DNS records from one of the Domain Services. Both records point to two different servers HTTP ...
- 261
1
vote
1
answer
2k
views
Blocking the port using Haproxy
is it possible that we can block any port to access lets say, 8080 to get blocked from outer-world except our certain ip address? I know how to block the ip address using
listen ...
...
acl ...
- 65
1
vote
1
answer
2k
views
Getting HAProxy to work with Apache
I own a VPS running several websites. One of my websites needs to use Mavin for CometD, but I still have to leave Apache running for the other sites. To do this I'm using HAProxy.
I moved Apache ...
- 41
1
vote
2
answers
1k
views
Load balacing Scenario - Am I right?
I currently have one webserver which runs my websites, all requests go straight there. The Webserver runs ruby on rails and everything is going fine, but as my sites grow, I will need to either get a ...
1
vote
1
answer
205
views
Why haproxy can not set custom header for ingress-nginx
I have config haproxy.cfg like bellow
...
frontend app
bind *:443
mode tcp
option tcplog
option forwardfor
http-request set-header X-AONE-IP 10.0.0.1
...
- 11
1
vote
1
answer
822
views
Haproxy log format to mimic Common log format
I would like to have haproxy log access using the same format as most webservers default, CLF or also known as NCSA Common log format.
Does anyone have documentation for doing this?
- 175
1
vote
1
answer
2k
views
HAProxy is not working with SNI and ACLs
I am trying to get haproxy to use acls with SNI and it ain't cooperating. It presents the correct cert so SNI must be working. However, I cannot get it to select a backend based on the hostname in ...
- 51
1
vote
1
answer
2k
views
HAProxy add HTTP response headers to the stats pages
Is it possible to somehow add arbitrary HTTP response headers to the "stats" pages in HAProxy?
haproxy version 1.7.x.
Regular stats setup:
listen view
bind *:10002
stats enable
...
- 382
1
vote
1
answer
1k
views
DNS and failure tolerance strategies for load balancers
I'm trying to educate myself about how to build a highly available load balancing service for application servers for e.g. HTTP traffic and how they work with DNS servers.
Consider the following ...
- 125
1
vote
1
answer
2k
views
Issue with HAProxy and SSL/TLS handshake by webserver for different subdomains in same browser session
We have a firewall with a HAProxy (pfSense) and multiple webservers. Every webserver is configured with HTTPS. The HAProxy frontend rules are defined with Server Name Indication TLS extension matches ...
- 11
1
vote
1
answer
1k
views
Traffic flow of Varnish, Hitch, and HAProxy
There are many questions and answers here about how to best order the flow of traffic between Varnish and HAProxy to a backend web server. Many of these posts are very old and recommend that Varnish ...
- 81
1
vote
1
answer
5k
views
haproxy: Can I annotate an IP whitelist file?
In my "/etc/haproxy/haproxy.cfg" file, I specify a whitelist file that contains IP addresses that are permitted to access a frontend.
frontend default-frontend
<snip>
tcp-request ...
- 1,038
1
vote
2
answers
5k
views
Does HAProxy support multiple subdomains within one server?
I currently have a structure with an Apache 2 server with multiple subdomains.
As the example below:
<VirtualHost *:80>
ServerName www.example.com
ServerAlias example.com
DocumentRoot /var/...
- 289
1
vote
3
answers
4k
views
Can HAProxy send some requests to all servers defined for a backend?
I'm using HAProxy 1.8 to proxy requests to my HTTP API and now want to load-balance between multiple servers, so something like this:
backend http-in-backend
balance roundrobin
server api-...
- 329
1
vote
2
answers
6k
views
How does HAProxy choose which certificate to serve?
I've got a HAProxy 1.5.9 server that will serve either a certificate signed by a self signed CA or a Let's Encrypt certificate depending on which 'servername' is provided. This is my configuration ...
- 4,780
1
vote
1
answer
2k
views
How to prevent nmap from fingerprinting HAProxy
In our periodic security scans, our HAProxy instances are always reported as a version disclosure vulnerability. On further inspection, it appears that there are no version banners in any responses ...
- 111
1
vote
1
answer
1k
views
serve static file when response status 404 HAproxy
I want to serve a static file like errorfile when the response status is 500. I have to use this config in the backend section.
- 111
1
vote
1
answer
1k
views
Regex to Identify an URL Parameter Not Knowing Which Parameter It Will Be
So I've been working on building out an haproxy cluster (1.5.x) and hit a snag where for a particular webapp I'm wanting to pitch API GETs to a read-only app cluster and the PUTs into a much smaller ...
- 48
1
vote
1
answer
7k
views
HAProxy read a cookie from request and re-assign it as a custom header
I am receiving a JWT token as part of the Cookie from an auth service.
Cookie: "jwt_token=eyBGfdr..................."
Now, I need to read that cookie within HAProxy, extract the jwt_token key and ...
- 113
1
vote
1
answer
9k
views
How to resolve backend conn errors on haproxy load balancer?
haproxy stats page
The following is my haproxy config
global
log /dev/log local0 notice
log /dev/log local0 debug
log 127.0.0.1 local0
chroot /var/lib/haproxy
stats socket /...
- 123
1
vote
1
answer
3k
views
How can I make haproxy rewrite a url while retaining a variable that is the middle of the path?
I'm trying to redirect a url that looks like http://host/api/getThingByID/12345 to http://host/api/addr/12345/getThing
Unfortunately, regsub() does not support capture groups. I was going to try to ...
- 746
1
vote
2
answers
6k
views
HAProxy served 503s and I don't know why
Yesterday, for around 10 minutes, my haproxy served a lot of 503 pages (directly from errorfile 503 /etc/haproxy/errors/503.http) and I don't know why. I have no health checks to my backends, so for ...
- 824
1
vote
1
answer
3k
views
HAProxy for Redis Sentinel: want BACKUP, not DOWN
I configured an HAProxy service for my Redis Cluster installation (3 nodes with Redis Sentinel managing the master delegation) and it works good: clients are redirected only to the master node and ...
- 1,903
1
vote
2
answers
4k
views
Haproxy appears do be issuing the wrong certificate
I am trying to secure a domain with haproxy. When I load the URL: bitbucket.kl.company.com, I get the error:
bitbucket.kl.company.com uses an invalid security certificate.
This certificate is only ...
- 333
1
vote
2
answers
3k
views
how to redirect on the requested scheme (http or https)
I'm redirecting to some domain based on an acl condition but I want the user to end up on either http or https depending on the scheme/protocol of their request. I've managed to do that with the 2 ...
- 824
1
vote
1
answer
1k
views
proxy haproxy or web server not rendering the content
I trying to setup a basic infra-structure using haproxy as a proxy server.
Here is my basic environment
Domain Name: example.com
Proxy Server
OS: Linux Ubuntu 16.04
Software: haproxy server
IP: ...
- 163
1
vote
2
answers
18k
views
DNS Load-Balancing with HAPROXY
I have a net with 2 DNS servers (master & slave), but I don't want clients to ask directly to them. So, in the same net, I have a debian machine with haproxy 1.7.5 installed. I want clients to ...
- 11
1
vote
3
answers
14k
views
HAProxy redirect multiple domain
I have only one public IP address, and three Web server in LAN. I want to redirect the traffic from WAN to the Web server like this, must support SSL/TLS traffic redirect:
https://www.example.com (A ...
- 23
1
vote
1
answer
664
views
Configuring HAProxy to route traffic based on url_param
I am very new to HAProxy. I spent a few hours trying to figure out how to do it but could not get any leads. My requirement is this:
If end point of request is /special then I need to check URL_PARAM....
1
vote
1
answer
3k
views
Comodo SSL certificates in HAProxy on CentOS7
I have a CentOS 7 server with HAProxy 1.6 as front and Apache 2.4 as back.
I am trying to load the SSL certificates in HAProxy, however it expects a .pem file.
I have got the following files from ...
- 440
1
vote
1
answer
9k
views
HAProxy Failed to start SYSV
I am trying to start ha proxy but without success. Here is an error from journalctl -xe:
Oct 18 23:11:27 upload-server polkitd[578]: Registered Authentication Agent for unix-process:2044:11115 (...
- 763
1
vote
2
answers
3k
views
HAProxy: configuring SSL with Let's Encrypt
I just generate a new SSL certificate using Let's Encrypt. Now I'm trying to configure HAProxy.
These are the folders and certificates:
700 archive
|--------> 755 company.cxx
...
- 563
1
vote
1
answer
5k
views
haproxy redirect ip request to ip/path
I have one haproxy node and 3 application server (tomcat) behind it. Users must open http://10.0.0.1 (by IP address) and then be redirected to http://10.0.0.2/app or http://10.0.0.3/app or http://10.0....
- 13
1
vote
2
answers
3k
views
Simple tool to monitor HAProxy web requests?
I'm looking for a tool that can monitor the number of requests that are going to the nodes within HAProxy to determine the need to push out another node to loadbalance the requests. Can something like ...
- 193
1
vote
1
answer
6k
views
HAProxy check does not check content on IIS
I am new to HAproxy and I have read the docs googled every possible phrase I could think of but I cannot get haproxy to read the content my test page returns.
Here's the setup:
Single arm config -
...
- 11
1
vote
2
answers
7k
views
HAProxy not recognizing host headers?
I have been trying to configure HAProxy to send traffic to different backend servers based on hostnames. I tried using the directions found in How to divert traffic based on hostname using HAProxy? ...
- 11
1
vote
1
answer
3k
views
Haproxy 1.5x reload configuration without terminating layer 7 sessions?
Folks,
I moved one of our SaaS applications off a coyote point hardware load balancer onto a vm running nginx + haproxy with haproxy handling hash persistence.
The problem I'm running into is the ...
- 168
1
vote
1
answer
588
views
Is HAProxy built with TPROXY on Ubuntu 14.04
Ubuntu 14.04 has TPROXY (How to check if Ubuntu 14.04 Kernel has TPROXY).
How do I find out if the version of HAProxy packaged for 14.04 is compiled with TPROXY?
- 199
1
vote
1
answer
2k
views
HAProxy: Unable to set chipper list - possible bug?
I have two machines running with similar configuration. Both have an HAProxy installed.
Now I want to enable native SSL Termination. This works perfectly on Server one. Now on Server 2 I cant get it ...
- 2,172
1
vote
3
answers
4k
views
Zabbix_server.log says [2006] MySQL server has gone away
Environment
CentOS 6.6, Zabbix 2.4
DB MySQL Galera cluster with 3 nodes
mysql-wsrep-server-5.6-5.6.23-25.10.el6.x86_64
galera-3-25.3.10-2.el6.x86_64
Errors
[Z3005] query failed: [2006] MySQL server ...
- 89
1
vote
1
answer
1k
views
haproxy-varnish can't reach 6k requests
Issue
I can't reach 6k requests/seconds.
I get a lot of timeouts.
My response time goes as high as 26 seconds.
Intro
I am setting up a server that will host a 100MB static-website.
The thing is ...
- 121
1
vote
1
answer
3k
views
Snort IDS on HAproxy with encrypted traffic
Using HAproxy, can I direct traffic to a backend server from all the other backend servers in a pool? From a networking standpoint, it would be comparable to mirroring all ports on a switch to one ...
1
vote
1
answer
3k
views
Upgraded OpenSSL version with HAProxy
I'll make this short and to the point. I'm running HAProxy 1.5.5 with SSL support for SSL termination/offloading. Do I need to recompile HAProxy if I update/upgrade openssl, or just restart the ...
- 53