HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
0answers
112 views

HAproxy ACL Conditional not matching AND statement

I'm using HAproxy 1.5.15 on Ubuntu 14.04 -- I'm attempting to add X-Frame-Options header but add an exclusion for a route http://foo.example.com/demo/* -- there is a page in it that is being embedded ...
0
votes
1answer
66 views

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
4
votes
2answers
1k views

HAProxy authenticated httpchk (health check)

I am using HAProxy on EC2 and using httpchk to manage node availability. I had used a pseudo-unique path as the health check route in an attempt to make sure only my servers responded to the health ...
0
votes
1answer
608 views

Block specific URL in HAProxy / url-encoding

I'm trying to restrict access to a specific URL. It should not allowed to access /admin.php. frontend example acl restricted_page path_beg -i /admin\.php http-request deny if restricted_page ...
0
votes
0answers
76 views

haproxy and fhem - How to path-redirect correctly

I want to have the site www.url.at/ha redirected in the backend to 127.0.0.1:8083. The url should remain www.url.at/ha (or www.url.at/ha/images/... or www.url.at/ha/?test=12). This works on most of ...
0
votes
1answer
33 views

haproxy/jetty - redirect all unknown path_beg

i have configured valid domains and paths e.g. http://submdomain.host.com/validpath1 http://submdomain.host.com/validpath2 this is identified redirected by: acl url_monitor path_beg /Monitor/ ...
1
vote
0answers
24 views

MySQL proxy authentication options

I have a farm of production mysql servers that are currently protected by restricted passwords. I would prefer to restrict access to these systems at network level, but have to account for the fact ...
2
votes
1answer
4k views

option http-server-close on HAProxy haproxy-1.5-dev19 will result in Connection: close header sent in response

I basically have the following issue: whenever I add option http-server-close to the haproxy config (either in frontend or backend section), haproxy will send a Connection: close header in the ...
1
vote
2answers
2k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
232 views

SFTP configuration through HAProxy loadbalancing

I have LB server which currently load balancing 2 machines as for apache2 "http" and "https" requests as master/slave, How to make the same server load balancing "sftp" requests to the same both ...
0
votes
1answer
120 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
0answers
16 views

HAProxy roundrobin only works in http mode

When I have the following roundrobin setup using http mode, things work fine and refreshing the site alternates between returning web1 and web2. defaults timeout connect 5000ms timeout client ...
1
vote
1answer
179 views

HAProxy Cannot Connect to Backend (No Route to Host)

I couldn't make the proxy work for one of our websites (IIS7). I am getting a "no route to host" message from the haproxy logs. Server test_be/10.100.1.1:81 is DOWN, reason: Layer4 ...
0
votes
1answer
99 views

HAProxy not recognizing host headers?

I have been trying to configure HAProxy to send traffic to different backend servers based on hostnames. I tried using the directions found in How to divert traffic based on hostname using HAProxy? ...
0
votes
2answers
65 views

Keepalived heartbeats not being sent/received on EC2 VPC

I'm trying to setup keepalived + HAProxy as a redundant load balancer on an EC2 VPC (yes, I know that ELB is an option). I believe we have things configured correctly, but killing the master server ...
0
votes
0answers
70 views

HAProxy http_req_rate limit doesn't kick in

I'm trying to setup a rate limit on my HAProxy frontend, to prevent more than X requests to be sent to the backend in a specific time frame. As an example I want to limit to 1 request every 10 ...
3
votes
4answers
24k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
1
vote
1answer
199 views

Apache's mod_dir keeps redirecting to wrong Port

I have a setup with a HAProxy in front of a Varnish cache who requests an Apache2 server. The Apache is listening on an internal IP on Port 12345 and is configured with UseCanonicalPhysicalPort Off ...
1
vote
2answers
6k views

HAProxy and Intermediate SSL Certificate Issue

We are currently experiencing an issue with verifying a Comodo SSL certificate on an Ubuntu AWS cluster. Browsers are displaying the site/content fine and showing all the relevant certificate ...
0
votes
1answer
102 views

Logstash conditional output to statsd - based on haproxy request URI

I have Logstash version 1.4.2 analysing haproxy logs using the HAPROXYHTTP pattern, and it is already sending counters and timing information to statsd for aggregation and onward storage in Graphite/...
1
vote
0answers
121 views

Nginx proxy with varying source address

I have a working nginx configuration to proxy all requests to a server from a range of source IPs. I currently have 20 source IPs set up, and the configuration is quite massive. I removed the other 18 ...
0
votes
1answer
27 views

Add a path after / to http request in HAProxxy

I am currently redirecting my users from get.foo.com to foodownload.com, and then they can click and download bar.mp4. I want before redirecting, change the path, so by entering get.foo.com, their url ...
18
votes
8answers
32k views

Remote IP's with HAProxy

I'm testing a new web server setup which is having a couple of issues. Essentially, we have a web server, where the code uses the remote IP for some interesting things, and also some apache ...
8
votes
2answers
10k views

HAProxy, health checking multiple servers with different host names

I need to load balance between multiple running servers with different host names. I cannot set-up the same virtual host on each one. Is it possible to have only one listen configuration with ...
2
votes
3answers
2k views

Use HAProxy or Nginx to Load Balance between VPS

I want to load balance + failover backup multiple vps webservers hosted on different providers. I heard that for HAProxy you need multiple server under the same subnet, plus a shared (virtual) ip ...
1
vote
0answers
51 views

monit: add NOALERT in an IF construct

On debian jessie, I have configured monit to check for HAproxy particular port forwardings, and to restart it if failed like this: check process haproxy with pidfile /run/haproxy.pid group www-...
-1
votes
2answers
313 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to 22?...
1
vote
1answer
320 views

Remove header from response if empty with HAProxy

I'm in a situation whereas apparently something in my backend is setting a blank Set-Cookie. This only happens on Chrome. It might also be some kind of extension but in order to verify I'd like to ...
3
votes
0answers
189 views

How to Reduce Failover Interval in HAProxy?

I have setup HAProxy and it is working fine. I observed that when one of the node goes down HAProxy detects that immediately, but switch-over / redirect existing traffic to the rest of working nodes ...
1
vote
2answers
123 views

server crashes under high load

We are running a setup that has gotten a lot of media attention these days and we expect the traffic to continue. We have 1 haproxy loadbalancer, 3 application servers(2 image, 1 general) and one ...
0
votes
2answers
92 views

stud or haproxy as front facing?

I'm planning to use haproxy to proxy a tls service that IS NOT http at the backend. Is there any reason why you'd use stud as the front facing app vs haproxy then stud? i.e. 1) INTERNET -> stud -> ...
1
vote
1answer
1k views

Bind to all interfaces for IPv4 and IPv6 in haproxy

I want to configure haproxy to bind to a tcp as well as tcp6 socket on all interfaces (i.e., 0.0.0.0:80 and :::80). I was able to reach this goal with the following settings: listen web bind :80 ...
2
votes
1answer
1k views

log format ignored for frontend 'http-in' since it has no log address

I'm using the following haproxy.cfg from the couchdb project: global maxconn 512 spread-checks 5 defaults mode http log global monitor-uri /...
2
votes
1answer
70 views

Is it possible to maintain the queue while restarting HAProxy

I am using HAProxy to load balance app servers. Each app server has a max connections limit, once that limit is exceeded the queue is exceeded. When that happens, I will be adding another app server ...
1
vote
2answers
65 views

haproxy remap tcp port with single backend

I'm using haproxy in tcp mode. I have a single frontend that listens to several ports: frontend front mode tcp bind *:20000 bind *:20001 ... default_backend back And a single ...
1
vote
2answers
2k views

Using HaProxy environmental variables in haproxy.cfg not working

Trying to figure out why environmental variables in haproxy.cfg aren't working in HA-Proxy version 1.5.2 on the command line, using Printenv I get a list of environmental variables like ...
2
votes
1answer
91 views

haproxy do multiple checks and using different ports

At the moment i am using HAproxy to check an smtp server with the following: option tcp-check tcp-check expect rstring ^220 tcp-check send QUIT\r\n tcp-check expect rstring ^221 But ...
0
votes
1answer
59 views

test haproxy, varnish and apache configuration

I'm installing Varnish cache 4 behind a HAproxy which is behind an Apache instance. I've got several questions that could seem trivial to you (sorry then): How can i know if the HaProxy calls ...
4
votes
2answers
2k views

Prevent HAProxy from toggling back from fallback to master

We have Redis master-slave setup, and we want to fallback to the slave once the master failed. But if it has failed it should never toggle back, even if the master is online again. Is this possible?
23
votes
4answers
16k views

HAProxy graceful reload with zero packet loss

I'm running an HAProxy load balancing server to balance load to multiple Apache servers. I need to reload HAProxy at any given time in order to change the load balancing algorithm. This all works ...
3
votes
0answers
151 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
1
vote
1answer
46 views

Can haproxy use DNS to find backend pool?

Right now I have a slew of server entries defined like so: server cn0136 10.33.125.17:8008 check server cn0137 10.33.136.20:8008 check server cn0138 10.33.124.23:8008 check server cn0139 10.33.135.13:...
3
votes
2answers
2k views

Weird interaction with systemctl with Haproxy on CentOS 7

Running haproxy through systemctl is different than running it manually. on manual start, everything works. starting through systemctl, haproxy is not able to find the service it proxies, and ...
3
votes
0answers
55 views

Force disabled server selection when using cookie based session persistence?

Let's say I have an HTTP configuration block like so: listen testing bind 1.2.3.4:80 balance roundrobin use-server server1 if { urlp_val(force) eq 1 } use-server server2 if { urlp_val(force) ...
2
votes
1answer
264 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
0
votes
0answers
210 views

haproxy ssl ciphers

This was my ssl cipher setting in haproxy which I picked up from a haproxy thread: global ssl-default-bind-ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+...
1
vote
2answers
2k views

HAProxy redirect HTTPS to HTTP

I'm using HAProxy as a load balancer and i'd like to redirect any traffic that comes in on 443 (HTTPS) to 80 (HTTP). My site doesn't support HTTPS at all and i'd rather just redirect users than cause ...
1
vote
1answer
76 views

Error setting up haproxy and varnish

I have been following a tutorial from haproxy blog on how to install varnish with haproxy. (Link) There is a problem with the haproxy config settings around this part: frontend ft_web_static bind ...
5
votes
3answers
1k views

Is it possible to use multiple load balancers to redirect traffic to my application servers?

I'm new to load balancing and I'm wondering if it's possible to use multiple load balancers to redirect traffic to my application servers. I don't really understand how this can be done. Shouldn't a ...
0
votes
0answers
198 views

HAProxy not forwarding requests to backend server

I have HAProxy (v1.5.8) as a load balancer with keepalived (v1.2.2) to maintain high availability. I also have several Jetty servers on a different machine on the local network as backend server with ...