HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
1answer
27 views

Add a path after / to http request in HAProxxy

I am currently redirecting my users from get.foo.com to foodownload.com, and then they can click and download bar.mp4. I want before redirecting, change the path, so by entering get.foo.com, their url ...
1
vote
0answers
50 views

monit: add NOALERT in an IF construct

On debian jessie, I have configured monit to check for HAproxy particular port forwardings, and to restart it if failed like this: check process haproxy with pidfile /run/haproxy.pid group www-...
-1
votes
2answers
309 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to 22?...
1
vote
1answer
308 views

Remove header from response if empty with HAProxy

I'm in a situation whereas apparently something in my backend is setting a blank Set-Cookie. This only happens on Chrome. It might also be some kind of extension but in order to verify I'd like to ...
1
vote
1answer
1k views

Bind to all interfaces for IPv4 and IPv6 in haproxy

I want to configure haproxy to bind to a tcp as well as tcp6 socket on all interfaces (i.e., 0.0.0.0:80 and :::80). I was able to reach this goal with the following settings: listen web bind :80 ...
3
votes
0answers
187 views

How to Reduce Failover Interval in HAProxy?

I have setup HAProxy and it is working fine. I observed that when one of the node goes down HAProxy detects that immediately, but switch-over / redirect existing traffic to the rest of working nodes ...
2
votes
1answer
68 views

Is it possible to maintain the queue while restarting HAProxy

I am using HAProxy to load balance app servers. Each app server has a max connections limit, once that limit is exceeded the queue is exceeded. When that happens, I will be adding another app server ...
2
votes
1answer
91 views

haproxy do multiple checks and using different ports

At the moment i am using HAproxy to check an smtp server with the following: option tcp-check tcp-check expect rstring ^220 tcp-check send QUIT\r\n tcp-check expect rstring ^221 But ...
0
votes
1answer
58 views

test haproxy, varnish and apache configuration

I'm installing Varnish cache 4 behind a HAproxy which is behind an Apache instance. I've got several questions that could seem trivial to you (sorry then): How can i know if the HaProxy calls ...
3
votes
0answers
144 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
1
vote
1answer
45 views

Can haproxy use DNS to find backend pool?

Right now I have a slew of server entries defined like so: server cn0136 10.33.125.17:8008 check server cn0137 10.33.136.20:8008 check server cn0138 10.33.124.23:8008 check server cn0139 10.33.135.13:...
3
votes
2answers
448 views

HAProxy usage with kubernetes

I am trying to setup a kubernetes cluster using HAProxy. Right now there are only two nodes. The loadbalancer is on the master node. But i see from the logs that the connection is tried on a virtual ...
2
votes
1answer
255 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
3
votes
0answers
54 views

Force disabled server selection when using cookie based session persistence?

Let's say I have an HTTP configuration block like so: listen testing bind 1.2.3.4:80 balance roundrobin use-server server1 if { urlp_val(force) eq 1 } use-server server2 if { urlp_val(force) ...
0
votes
0answers
207 views

haproxy ssl ciphers

This was my ssl cipher setting in haproxy which I picked up from a haproxy thread: global ssl-default-bind-ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+...
1
vote
2answers
63 views

haproxy remap tcp port with single backend

I'm using haproxy in tcp mode. I have a single frontend that listens to several ports: frontend front mode tcp bind *:20000 bind *:20001 ... default_backend back And a single ...
1
vote
1answer
76 views

Error setting up haproxy and varnish

I have been following a tutorial from haproxy blog on how to install varnish with haproxy. (Link) There is a problem with the haproxy config settings around this part: frontend ft_web_static bind ...
2
votes
1answer
559 views

haproxy sendmsg logger #1 failed: No such file or directory

I get the error: [ALERT] 342/125339 (1) : sendmsg logger #1 failed: No such file or directory (errno=2) /srv/dockervolume/haproxy/etc/rsyslog.d/49-haproxy.conf file: $AddUnixListenSocket /var/lib/...
0
votes
0answers
196 views

HAProxy not forwarding requests to backend server

I have HAProxy (v1.5.8) as a load balancer with keepalived (v1.2.2) to maintain high availability. I also have several Jetty servers on a different machine on the local network as backend server with ...
1
vote
1answer
185 views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, ...
1
vote
1answer
207 views

Haproxy 1.5x reload configuration without terminating layer 7 sessions?

Folks, I moved one of our SaaS applications off a coyote point hardware load balancer onto a vm running nginx + haproxy with haproxy handling hash persistence. The problem I'm running into is the ...
1
vote
2answers
384 views

HAProxy rspadd or set-header

I am currently trying to improve my HAProxy HTTPS configuration. There seems to be two ways to set additional fields to response headers in HAProxy. I currently use http-response set-header, which ...
0
votes
0answers
145 views

How to force haproxy http to close connection with client?

I have a backend that performs some analysis of JSON data and if client's data is invalid I have to ban client. My backend use ipsets and iptables rule, but in order to make these rules work I must ...
1
vote
1answer
301 views

How to set up an automatic failover reverse proxy for two identical Icecast master servers?

I'm trying to do simple everything double with a reverse proxy in the front high availability for an Icecast master streaming server (i.e. I'm not talking about Icecast relays here). So, three VMs: ...
-1
votes
2answers
36 views

haproxy library not found on internet found log into message

At the time of restart the service we are getting the below error. And library liblua5.3.so is not avail on internet. Please suggest any alternative. /usr/sbin/haproxy-systemd-wrapper: error while ...
0
votes
1answer
134 views

haproxy reload from stats socket?

I know that I can reload haproxy from a shell command (I use service haproxy reload). I also am using the stats socket to enable and disable servers when doing maintenance on them. I also have ...
0
votes
1answer
147 views

How to fix simple HAProxy logging

I am running Ubuntu 14.04 and I am wondering how I can log everything that happens in HAProxy. I've been reading issues concerning logging and chroot. Everything is telling me to do write different ...
1
vote
1answer
433 views

HAProxy SSL roundrobin not working when SSL terminated and forwarded

I am using the following config to terminate SSL so that I can inspect the request, do URL rewriting, ACL etc, and then forward the SSL traffic back to my backend servers. However, I am not able to ...
3
votes
2answers
431 views

Haproxy - selecting backend dynamically from subdomain

I discovered recently that you can match a backend dynamically, based on the request hostheader, like this: use_backend %[req.hdr(host),lower] However, does anyone know any way I could use the ...
1
vote
1answer
3k views

HAProxy to terminate SSL also send SSL to backend server

I would like terminate SSL at HAProxy, do some manipulation on the header, rewrite URL and re-encrypt traffic and send to backend servers as SSL? I can't seem to find a way to do this. I can get ...
0
votes
1answer
150 views

HAProxy re-enable server when is up again

I'm trying to make sure that when a server goes up after being down (and not active any more) it will be re-enabled automatically. This is my haproxy.cfg: global log 127.0.0.1 local0 log 127....
0
votes
1answer
24 views

Manage keepalive on haproxy

I'm tuning a haproxy server (version 1.5-dev22). Each url manage has today a backend with only one server (previously 2), so there no longer loadbalancing. Each backend has the option "httpclose" ...
0
votes
0answers
81 views

Configure a websocket server in front of HAProxy

I have a small python server script which creates a websocket connection and accepts base64 encoded IP packets (very similar to this). As of now my script decodes the IP packet and sends it out into ...
1
vote
1answer
110 views

Sometimes SSL error with haproxy

I'm trying to setup a haproxy for SSL offloading for multiple hosts. This works perfect with this config: # Example configuration for a possible web application. See the # full configuration options ...
1
vote
0answers
579 views

Exchange 2013 MAPI over HTTP Load balancing HAProxy

We have successfully managed to deploy HAProxy as a Layer-4 load balancer for all our Exchange 2013 SP1 HTTP based traffic (Autodiscover, OWA, EXP, EWS, MAPI, etc.) For various reasons, however, we ...
1
vote
1answer
337 views

Access to Proxy Protocol address within HAProxy

I am running HAProxy that is receiving layer 4 proxy protocol from an upstream source. I have a need to create a custom HTTP header with the address contained there. I can't seem to find how I can ...
1
vote
1answer
219 views

How to select different backend based on URI when using “mode tcp”

I am using haproxy version 1.6.2 I have enabled http2 using the config below which I need to use "mode tcp". But once I have switched from "mode http" to "mode tcp" I couldn't use acl path_beg to ...
1
vote
2answers
87 views

Clustered cron with one server only overlap allowed

I've setuped load balancers: lb1 (active) and lb2 (passive), Glustered web servers: web1 (active), web2 (backup), and some clustered database. Both web servers and databases are A pointed to the VIP ...
1
vote
2answers
122 views

server crashes under high load

We are running a setup that has gotten a lot of media attention these days and we expect the traffic to continue. We have 1 haproxy loadbalancer, 3 application servers(2 image, 1 general) and one ...
2
votes
1answer
1k views

Haproxy: SSL encrypted backend with self-signed cert

I'm working to configure HAProxy such that it will terminate the SSL so there's only one place to configure the purchased SSL cert. However, I'd prefer that the connection to the backend servers also ...
1
vote
2answers
45 views

Reverse proxies and ssl, should I use the same certificates

Currently I'm using nginx as a reverse proxy over https and everything that is proxied is itself over https. SSL termination happens at Nginx and since the traffic is over https it get encrypted again ...
2
votes
2answers
87 views

HAProxy MySQL check failes permanently and unexpected

I am running HAProxy to spred the load between 3 mysql galera nodes. Unfortunatelly HAProxy shows that node2 is permanently offline while the other nodes work perfectly fine. The config looks just ...
1
vote
1answer
326 views

Error 11 on HAProxy startup - How to debug?

I am running HaProxy on ubuntu 14.04. The system works, but I do get an alert during startup which I would like to debug: sudo /etc/init.d/haproxy restart * Restarting haproxy haproxy [ALERT] 314/...
1
vote
0answers
87 views

Varnish - behind, in front of, or instead of load balancer(HAProxy/nginx)

I intend to run a few tiny ARM "physical cloud" servers behind a load balancer(either HAProxy or nginx itself), but i can't decide where to put Varnish in the whole mess. I can either have it on each ...
0
votes
1answer
208 views

haproxy fails to forward to backend server

i'm trying to configure haproxy on a red hat 7.1 machine (haproxy 1.5.4) to proxy a few nodejs instances. if i try to access on port 80 (haproxy frontend) it returns error 503 if i try to access on ...
1
vote
0answers
93 views

haproxy anonymous frontend, authorized backend with NTLM

Need to provide an anonymous readonly access to an svn repository AFAIK, haproxy cannot auth on backend by itself. There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
1answer
42 views

adding application server does not improve preformance with haproxy

I am running a haproxy load balancer in front of two application servers that serves images. The problem is that if i use one server or two does not make a difference on performance (see added images)....
1
vote
1answer
127 views

How to convert this from nginx to haproxy

How can I write this proxy pass example from nginx: code one: location /appDir/ { proxy_pass https://Name/appDir/; } to haproxy? additionally: the below is from haproxy site. code two: ...
2
votes
0answers
164 views

HAProxy failing at random times (backend has no server available!)

I have a CentOS 7.1 (x64) droplet configured to load balance between 2 apache/php servers. I have it working perfectly, but randomly throughout the day it reports the following: haproxy[12947]: ...
1
vote
1answer
107 views

Haproxy doesn't go to the write backend after coming back from Nginx Reverse Proxy

I am using haproxy and nginx to load balance as well as protect (through naxsi in nginx) my web servers. Haproxy is working fine but the minute I send it through nginx it defaults everything to the ...