Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,128
questions
0
votes
1
answer
64
views
DNS loadbalancing options
I have assembly a high availability system, as the following illustration suggests:
DNS RR -> Balancer1
\
\
HAproxy1 ---> Backend ...
- 5,093
0
votes
1
answer
152
views
Managing stage and live webapps (apache, haproxy, https redirection)
We have a staging environment for our rails webapp set up as a second Apache virtual host, with haproxy 1.5 sitting in front of both. Until recently the stage was configured as a different frontend ...
- 306
1
vote
1
answer
2k
views
Haproxy timers - total session duration
I was looking at the Haproxy timers in the haproxy logs to deduce the response time.And for some reason, i don't seem to understand why the haproxy timers don't add up to give me the total session ...
- 306
2
votes
1
answer
6k
views
Haproxy "nbproc 2" high CPU
I had a 95% CPU usage with a single haproxy process, so I switched to nbproc 2.
I have a two frontends and two backends; I pinned 1 frontend and 1 backend to process 1, and pinned the remaining two ...
0
votes
0
answers
368
views
mTLS tunnel between HAProxy instances?
I've read several client side examples which involve a client and one HAProxy server. However, I'm wondering if it is possible to do the following with HAProxy.
I would like to have two HAProxy ...
- 101
0
votes
1
answer
466
views
haproxy not creating stick-table entries fast enough
I am running haproxy 1.5.18-3 on CentOS 7 and need to use the stick-table feature to make sure traffic for a specific user persists to a given server.
Things work fine when connections come in ...
- 3,663
6
votes
2
answers
7k
views
Weird interaction with systemctl with Haproxy on CentOS 7
Running haproxy through systemctl is different than running it manually.
on manual start, everything works.
starting through systemctl, haproxy is not able to find the service it proxies, and answers ...
- 14k
2
votes
1
answer
4k
views
HAProxy override backend cookie using query parameter
Based on this answer, I can successfully override the backend with a query parameter:
backend servers
balance roundrobin
cookie SERVERID insert indirect nocache
use-server web1 if { urlp(...
- 136
1
vote
1
answer
1k
views
proxy haproxy or web server not rendering the content
I trying to setup a basic infra-structure using haproxy as a proxy server.
Here is my basic environment
Domain Name: example.com
Proxy Server
OS: Linux Ubuntu 16.04
Software: haproxy server
IP: ...
- 163
6
votes
2
answers
7k
views
mod_evasive behind HAPROXY
I have a couple of Apache 2 machines behind an HAPROXY setup, I tried to setup mod_evasive on those Apache machine while also using mod_rpaf to get the real X-FORWARDED client ip.
For some reason, ...
1
vote
0
answers
938
views
Rate limiting requests from single IP by delay
Does anybody know a way of using HAProxy to add incoming requests to a delay once a certain maximum number of requests reached and not just reject or send a status code, actually queue a specific IP ...
- 111
2
votes
2
answers
196
views
Is HAProxy (1.7.5) logging synchronous (i.e. blocking) or asynchronous (i.e. non-blocking)?
We need to ensure that HAProxy logs are actually written to disk successfully before handing over the coming requests to our servers behind it. In other words, we need HAProxy to log synchronously and ...
- 198
3
votes
1
answer
13k
views
HAProxy request rewrite
I am trying to setup pass proxy with HAProxy.
Version :- HA-Proxy version 1.7.5 2017/04/03
I have two URL abc.com/foo and abc.com/bar and I want it to get redirected to my backend servers which are ...
- 638
0
votes
1
answer
2k
views
HAProxy maintenance with mode tcp and http2
I have a problem configuring HAProxy in TCP mode with http2.
My main goal is to serve static maintenance page over HTTPS.
Here's my HAProxy config:
global
log /dev/log local0
log /dev/log ...
- 350
8
votes
2
answers
5k
views
HAProxy switch to backup on 500 errors and/or server down
I'm setting up an HAProxy in front of only 2 backend servers, with a particular configuration: any request should go to server A; but, if server A returns a 5xx error code, all request should go to a ...
- 3,029
-1
votes
1
answer
2k
views
Haproxy redirection to Docker container
We have Haproxy in AWS and it will redirect all the traffic to our development environment.Recently i have deployed 2 docker container in one of the Ec2 instance. I would like to access those ...
- 106
0
votes
1
answer
469
views
HaProxy redirect Mysql traffic for a time interval
I have a MariaDB cluster with HaProxy. I need to redirect my clients to other machines everyday between 07.00-07.10 due to heavy working cronjobs. For example i have 3 server that ips are 192.168.1.2,...
- 76
0
votes
0
answers
349
views
HAProxy - how to setup timeout for connection with no request?
I have a public facing server that uses HA Proxy as front end. I use TCP mode. I want to set it up such that if the client established connection (completed 3-way handshake) but does not send any ...
- 181
1
vote
2
answers
968
views
Unable to see logs for servers that are supposedly "down"
We have an HA MariaDB cluster where our load balancer has suddenly started not being able to see our db nodes as online. We've updated our application to hit the nodes directly and bypass the load ...
- 638
1
vote
0
answers
89
views
Hosting SSL tunneled OpenVPN and HTTPS on the same server at the same 443 port [duplicate]
Is there a way to host a SSL-tunneled (using stunnel) OpenVPN server and a regular Apache HTTPS server on the same server using HAProxy? It seems that by using stunnel, the format of the packets ...
- 530
3
votes
2
answers
9k
views
HaProxy and Windows Auth
Can I get HaProxy to forward windows auth credentials onto IIS?
I have searched for a day and cannot find much information out there.
0
votes
0
answers
894
views
HAProxy node automatically going into MAINT mode
Some of my servers in haproxy randomly goes into maintenance mode. I am wondering how is this possible? Is there a configuration which can kick this in.
My assumption is that node can go into ...
- 303
0
votes
0
answers
201
views
How do I hide "index.php" from URL on HAProxy
Here I install the HAProxy-1.7 on linux machine and first get the http+https request on HAProxy server which trasfer into varnish cache then apache2 web server handle and respond to client. Please ...
- 164
0
votes
1
answer
922
views
Disable `redirect prefix` for `stats uri` in HAProxy
In HAProxy (1.5) I have this rule to redirect all requests to a canonical domain:
redirect prefix https://domain.tld code 301 unless { hdr(host) -i domain.tld }
This works fine. However, I also have ...
- 388
3
votes
2
answers
677
views
How to drop varnishncsa log if req.url matches
I've got a few load balancers that all perform health checks on a number of varnish instances. The health check on the varnish side consists of matching the request method and URL to return a 200 ...
CommunityBot
- 1
0
votes
2
answers
2k
views
Is it possible to duplicate network traffic from port to 2 different machines?
In first I will try to describe the problem.
We use following network configuration:
machine1 with installed haproxy
machine2 with application(in this case we can assume that is only RabbitMq ...
- 37.6k
2
votes
1
answer
3k
views
Can NGINX inspect the TLS request to look for SNI like HAProxy (etc) does?
It seems that, when configuring HAProxy for hostname routing on HTTPS connections, it is crucial to include a tcp-request inspect-delay directive to "give HAProxy a chance to look into the connection"....
CommunityBot
- 1
5
votes
1
answer
532
views
HAProxy listen with two arguments?
I keep seeing HAProxy configuration examples with a two-argument syntax. Indeed, the default configuration file supplied with 1.4.18 contains this:
listen appli1-rewrite 0.0.0.0:10001
cookie ...
- 580
0
votes
1
answer
3k
views
2-host MariaDB Galera cluster with keepalived only, no HAproxy?
We're about to replace a legacy MySQL database using master-slave replication (only 2 hosts total - one master, one slave) with a MariaDB Galera master-master replication cluster to ensure more hassle-...
- 37.6k
1
vote
0
answers
281
views
Haproxy 1.5 504 Duplicate Orders Woocommerce Checkout
My HAProxy 1.5 load-balancer is occasionally getting 504 error from one either of the backend nodes. The 504 error is only specific to Woocommerce /checkout. The /checkout endpoint calls the payment ...
- 111
0
votes
1
answer
789
views
OpenShift Free Tier: 503 Service Unavailable
I've been working on my Ghost theme for the last few hours, and suddenly this error. Attached is a copy of my HAProxy status output.
I've restarted both NodeJS and HAProxy. Neither restart fixed the ...
- 80.3k
1
vote
3
answers
14k
views
HAProxy redirect multiple domain
I have only one public IP address, and three Web server in LAN. I want to redirect the traffic from WAN to the Web server like this, must support SSL/TLS traffic redirect:
https://www.example.com (A ...
- 521
0
votes
0
answers
129
views
HAProxy time-out error for SSL in AWS
I tried to run HAProxy inside a docker container which run with the AWS ECS. As per a requirement I received the container is run behind a classic load-balancer.
I managed the mentioned setup to ...
4
votes
2
answers
30k
views
Send PROXY protocol header from HAProxy
I've probably got lost in the masses of documentation on this subject, but I'm trying to configure my HAProxy process to send the PROXY protocol header as described at http://www.haproxy.org/download/...
- 3,768
0
votes
1
answer
1k
views
HAProxy Interface/eth aware binding as non root user
I have 2 network interfaces on my instance (eth0 and eth1) I am trying to setup HAProxy to be interface aware and have separate frontends per interface.
The config below works as root (ie. i do not ...
- 281
3
votes
1
answer
1k
views
how do persistent http connections (http-keep-alive) affect the Tq value?
From what I understand, the Tq time is the time between the end of the TCP client handshake and the time that the last HTTP header is read.
The haxproxy 1.4 manual describes Tq time as:
Tq: total ...
CommunityBot
- 1
1
vote
1
answer
2k
views
HAProxy 1.7 not resolving docker 1.13.1 container
docker ps -a:
de09facf7c91 x/x:x "/usr/bin/supervisord" 51 minutes ago Up 24 minutes 8080/tcp ...
- 1,661
3
votes
1
answer
4k
views
SSL offloading for multiple domains (multiple certs) on Haproxy
Let's say that we have haproxy in front of 2 apache:
+----> Apache (10.0.0.2)
Haproxy (10.0.0.1) --|
+----> Apache (10.0.0.3)
Haproxy is configured to ...
- 2,456
2
votes
0
answers
218
views
HAProxy: Prevent 503 errors on failover [duplicate]
I'm trying to setup HAProxy as an highly available reverse proxy. We're running it on a cluster of 3 nodes, where all nodes are identical. When a service is down on one of the node, any of the other ...
- 121
1
vote
0
answers
4k
views
Configure HAProxy with Apache and Tomcat servers
I want to configure HAProxy with Apache and Tomcat Servers. My current application structure is Apache -> Tomcat. I need to configure HAProxy above Apache which is HAProxy -> Apache -> Tomcat like ...
- 11
0
votes
0
answers
203
views
HAProxy create new sessions in Tomcat
I'am using HAProxy 1.5.18 on CentOS 7.3 and Tomcat 8.
HAProxy create a lot of sessions (more 350) on my Tomcat Server! Every 10 seconds, a new session is created.
I think it is this line :
option ...
- 13
2
votes
2
answers
18k
views
How to log requests from HAProxy?
I am setting up HAProxy as a load balancer and I can get it working (it is forwarding requests to backends). However, I cannot get it to log each request to a file. I can see system type messages like ...
- 424
4
votes
1
answer
8k
views
How to use Docker with HAProxy+Keepalived?
I want to practise in creation of high-available web-application using multiple Docker containers on one machine.
I launch several web-servers within Docker containers. Say, three servers rest1, ...
- 3,819
0
votes
3
answers
3k
views
Measuring page response time for different servers in web farm (HAProxy?)
I'm building out a small webserver farm (IIS7.5) to serve up an internal website. One of the things I want to measure is what the HTTP response time is between user requests and the page being served.
...
- 3,325
3
votes
1
answer
9k
views
Increase client timeout for WebSocket connections to certain URL
On CentOS 7 Linux I successfully use HAProxy 1.5.14 in front of Jetty 9 serving a Wordpress site via FastCGI.
It works really well, but for a HTML5/WebSocket game at the same website much higher ...
- 714
1
vote
0
answers
461
views
HAProxy Docker Container Doing L4 Load Balancing Not Being Transparent
Using the official latest HAProxy Docker container and the following config file:
frontend logging_frontend
bind *:1514
mode tcp
timeout client 1m
default_backend logging_backend
...
- 420
1
vote
2
answers
2k
views
DNS Reverse Proxy
I'm using Docker to deploy lots of micro services behind a reverse proxy. I would like to load balance my micro services based on DNS queries and also allow for automated failover and rebalancing ...
- 3,819
2
votes
3
answers
2k
views
How to mark Haproxy server initially down
I have an haproxy.cfg that is dynamically updated when new servers are added, however at the time a new server is added the server may still be coming up. (Servers are not initially healthy). Due to ...
- 36.9k
0
votes
1
answer
1k
views
HAproxy - SSL and virtual hosts issues
HAProxy Config:
frontend https-proxy
bind *:443 ssl crt /path/to/certs
default_backend web
backend web
balance roundrobin
option httpchk
option forwardfor
option ...
- 1,341
-1
votes
1
answer
1k
views
HAProxy / Heartbeat - multiple floating IPs
I have successfully PoC'd the use of two HAProxy servers w/ heartbeat to load balance traffic between two squid servers with pass through Kerberos authentication in our shared services office. I've ...
- 121