HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
1answer
140 views

How to proxy traffic by IP using server names/aliases?

We have 5 different server locations each containing around 30 servers each, each server represents a URL and serves both HTTP and HTTPS. They're all identical however provide different content based ...
0
votes
2answers
399 views

HAproxy: digest authentication

We have setup a loadbalancer to balance 2 servers. The config looks like this: global maxconn 40960 user haproxy group haproxy daemon defaults log global option ...
4
votes
1answer
937 views

Best Practice for Mapping Domain Names to Docker Container

What is considered "best practices" for serving a a docker container from a specific domain name? For example: Container1 runs App A on port 8080, and accessed via AwesomeAppA.com Container2 runs ...
0
votes
1answer
105 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
1
vote
2answers
424 views

Struggling with Haproxy 1.5 ACLs using regular expressions and URL Parameters

I am using Haproxy 1.5.3 setup with ssl on the frontend and also sending ssl to the backend servers. the mode is http and using acls to determine stickyness. My test requests are as follows: wget ...
0
votes
1answer
428 views

Nginx no longer servers uwsgi application behind HAProxy - Looks for static file instead

We implemented our web application using web2py. It consists of several modules offering a REST API at various resources (e.g. /dids, /replicas, ...). The API is used by clients implementing ...
1
vote
1answer
396 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
1
vote
2answers
341 views

Haproxy backend servers on different interfaces

I have a haproxy server which gets limited to some 60k connections. I think it is because of ephemeral port limit as I have 1:1 connection mapping, so all my outgoing connections go to the same ...
1
vote
0answers
964 views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
2
votes
1answer
552 views

HAProxy error: Some configuration options require full privileges, so global.uid cannot be changed

After adding the line to /etc/haproxy/haproxy.cfg as part of creating a transparent proxy, source 0.0.0.0 usesrc clientip restarting haproxy starts giving an error ~# service haproxy reload ...
0
votes
1answer
589 views

Using 2 Transparent HAProxy for load balancing

We can configure HAProxy to be a transparent proxy by using the guide here, where one of the steps says ...to put the backend servers in a different subnet to the front end clients and make sure that ...
1
vote
1answer
587 views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
2
votes
1answer
1k views

Haproxy 1.5.3 / OpenSSL - Creating PEM

I have an HAProxy Server set up with the line: bind *:443 ssl crt /etc/ssl/domain.com/domain.com.pem I have the following files: /etc/ssl/domain.com/domain.com.key ...
0
votes
2answers
479 views

SSHD real-ip behind haproxy

I'm trying to setup an ssh over https connection using haproxy. I'm currently looking for a way for SSHD to get the source ip from haproxy, similar to reading X-Forwarded-For or X-Real-IP headers. ...
0
votes
0answers
156 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
1
vote
0answers
78 views

haproxy : Limit WebSocket payload length

My server is distributing websocket client connections over 4 local websocket servers and I need to prevent these websocket servers to get flooded with big chunks of data. Question: Is it possible ...
1
vote
1answer
39 views

haproxy : Checking for a single header

My server is distributing websocket client connections over 4 local websocket servers. Is it possible to instruct haProxy to accept only WebSocket version 13 (RFC 6455) ? i.e. Verify if ...
-1
votes
1answer
121 views

HAProxy - proxy to webserver via tcp

I have a simple web application, All requests to that application are HTTP based (RESTfull API and standard ajax) I have an haproxy before my tomcat cluster. So now i have clients that http request ...
2
votes
1answer
2k views

Dynamic HAProxy configuration

I try to figure out a way to dynamically manage the loadbalancer configuration. I want to add and remove "service nodes" depending on the overall system load. My research so far revealed "Thalassa" ...
0
votes
0answers
89 views

How to send data via UDP to indexer (Elasticsearch) when haproxy is responsing?

I have some web backends balanced via haproxy. Every backend sends some specific json data in response headers (example of header with data X-JSON-Data: {country:"US", os:"Android"}). This is not ...
2
votes
2answers
1k views

HAProxy/Keepalived vrrp set up in AWS EC2 with EIP (Basic EC2)

I am a newbie to CentOS/Linux/HAProxy/Keepalived, so I have had a lot to learn over the past few days! I have 2 CentOS 6.5 servers in Amazon AWS running on their own EC2 Micro instances. I also have ...
8
votes
1answer
8k views

How to block IP addresses in HAProxy?

Is there something like Apache "deny from ip" in haproxy?
0
votes
1answer
295 views

Can HAProxy reconnect a websocket to another backend server transparently?

I'm new to HAProxy so this might have an obvious answer but I wasn't able to find it. Consider this setup: two backend web applications; one HAProxy in front of the web applications; many clients ...
1
vote
1answer
517 views

HAProxy set acl with hosts from file

I'd like to migrate some 100+ sites from one server to another. Current plan is to gradually add an acl for each as they are moved to direct traffic to a new server. Here is a simplified example ...
0
votes
1answer
140 views

Restarting HAProxy with -st flag returns error

I'm restarting HAproxy (on Ubuntu Server x64 14.04) with the following command haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -st $(cat /var/run/haproxy.pid) However, when actually ...
1
vote
1answer
3k views

Lot of FIN_WAIT2, CLOSE_WAIT , LAST_ACK and TIME_WAIT in Haproxy

We are running haproxy in production for around 10k+ concurrent users. But we are seeing lot of FIN_WAIT2, CLOSE_WAIT , LAST_ACK and TIME_WAIT in the netstat output. This output is on a 8G ...
1
vote
0answers
46 views

is it possible to have reqrep for each server in haproxy loadbalancer?

There are 3 servers in a load balanced HAProxy setup. server serv1 192.168.1.101:8080 check inter 2000 rise 1 fall 1 server serv2 192.168.1.102:8080 check inter 2000 rise 1 fall 1 #The ...
1
vote
1answer
86 views

HAProxy is swapping (Major Faults) when Serving Web Sockets

I've observed some swapping in our HAProxy instance that serves web sockets. The fault rate is low (0.01 major faults/s) currently. We use nbproc mode with one process for the http processing, and 3 ...
0
votes
1answer
70 views

Can haproxy use umlaut-domains?

I am hosting several webpages on one server. For Routing, I am using haproxy. Now, one funny user wants an umlaut-domain "supportbär.de". #haproxy.cfg frontend http-in .. acl is_supportbaer ...
1
vote
1answer
4k views

haproxy with multiple IP in one server

I use haproxy to loadbalancer multiple virtual machines (web services). Each virtual machine has multiple IP addresses. What is best practice to setup this on haproxy? Right now my configuration are ...
0
votes
0answers
19 views

Session automatically unset into HAProxy Server

Its very critical issue. I set session using following code . session_start(); $_SESSION['price'] = 100; After one minute, session automatically destroy or unset. Its happen single time in each ...
0
votes
2answers
316 views

HAproxy current session is zero

I have some problems on sticky sessions with HAproxy. Haproxy counts every request as a new session. I have a Java servlet that creates the cookie JSESSIONID. If I refresh that page 5 times. The ...
1
vote
0answers
33 views

How to specify alternate errorfiles for a given backend?

We currently use errorfiles to send various 40x/59x error messages to the client on encountering errors. Currently these errorfiles are in html format but I'd like to switch them based on a format ...
0
votes
1answer
800 views

Haproxy sticky session not redirecting to different server when backend fails

I have the following configuration for my haproxy LB: global daemon maxconn 2048 # SSL ca-base /etc/ssl/certs crt-base /etc/ssl/private ssl-default-bind-ciphers ...
0
votes
0answers
152 views

Haproxy load balancing TPS lower than single node

I have 2 apache2 servers running in the back end and have a haproxy between them and the clients. If I bench tested anyone of these apache2 severs with ab i get north of a 1500TPS however when I bench ...
5
votes
2answers
2k views

HAProxy HTTP vs TCP

HAProxy gives you the option to set the mode to TCP or HTTP. It also allows you to set the port. So why allow me to choose between HTTP and TCP, if it's letting me choose the port too? Surely if I ...
1
vote
1answer
164 views

How to Add/Remove New Server behind Haproxy with Minimal Disruption

Haproxy is currently balancing the load between 2 servers, A an B. Clients are connecting to these servers via persistent TCP connections. Question: We want to upgrade from server A to a more ...
28
votes
3answers
19k views

How can I remove balanced node from haproxy via command line?

I have haproxy running as my load-balancer and from the stats web interface that comes with haproxy, I can put a web server into maintenance mode (and bring it back out again) - which is great! ...
1
vote
0answers
174 views

LVS + HA Proxy for L4 to L7 load balancing

Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA. ...
3
votes
2answers
2k views

HAProxy stops accepting connections

I've been using HAProxy to loadbalance my appservers for many months without problems. Recently some traffic spikes have lead me to setting the maxconn parameter to rate-limit connections to my ...
4
votes
1answer
6k views

How can I make haproxy route requests based on URL substrings?

A load balancer is set up with two back ends. The request URI will look like the following: http://example.com/answers/submit http://example.com/tag-02/answers/submit How can I configure haproxy ...
2
votes
2answers
6k views

HAProxy with SSL and sticky sessions

We're trying to set up HAProxy (v1.5.1) to use SSL. While we managed to do that, we're having some issues with the round robin settings: We do want to have stick sessions, but haproxy seems to send ...
1
vote
0answers
102 views

haproxy: explicitly setting the gpc0 value within a frontend or backend section

I have something like this in my haproxy config backend myservice option httplog stick-table type string size 10 expire 10m store gpc0 stick store-request req.hdr(MYHDR) server ...
4
votes
2answers
244 views

How to get name of server that has served request in fronted section?

I need to add server name in response HTTP headers X-Servedby. Is there any way to replace [server] with name of server that has served request? frontend front x.x.x.x:80 default_backend balancing ...
1
vote
3answers
1k views

HAProxy - HTTP Server error detection

I want to use HAProxy for load balancing and failover of an Apache-PHP application hosted on many identical backend servers. Is there any way of detecting a failed node on HAproxy and removing it from ...
2
votes
2answers
168 views

Resolving HAProxy BADREQs using socat

I'm trying to figure out why i'm getting BADREQs from time to time, by using "show errors" in socat. The problem is that it only shows the last error. I want to be able to see all of them ( like using ...
0
votes
1answer
234 views

Https on HAproxy 1.4 using stunnel

I'm running a load balancing server with HAproxy and implementing Https using stunnel on the same machine, on the actual webpages end i've got 2 diferent webs, A and B, with similar behaviour. Here ...
1
vote
1answer
221 views

Haproxy hdr_ip acl unaffected by reqidel?

I have an server that sits behind a load balancer, but for the time being can also be accessed directly. I have a white list of IP addresses that should be able to access it. Given the following ...
0
votes
1answer
103 views

HAProxy's Flooding MySQL Connections

I have a setup of 2 HAProxy servers using the KeepAlived process for failover, and each HAProxy is configured to load balance mysql connections to my MariaDB Galera cluster of 3 nodes. I'm trying to ...
2
votes
1answer
750 views

Why do Layer 7 load balancers configuration not require any client configuration changes?

For example, for haproxy (layer 7) load balancing, you only need to configure the "real servers" or "backends" behind the VIP (i.e., cluster IP). E.g.: listen smtp 192.168.3.10:25 mode tcp ...