Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,127
questions
0
votes
0
answers
16
views
HAPROXY 2.8 drain mode is not working
I'm running HAPROXY 2.8 on ubuntu 22.02.4 LTS,
I want to put "svr01" in drain mode, I tried all of the following commands but it didn't work!
echo "set server app/svr01 state drain"...
2
votes
2
answers
2k
views
What is the meaning of these HAProxy configuration lines?
I've seen several examples (see below) of HAProxy logging configuration that all look like this:
/etc/haproxy/haproxy.cfg
global
log /dev/log local0
log /dev/log local1 notice
...
1
vote
0
answers
593
views
+50
HAProxy backend with different path prefix per server
Is it possible to configure an HAProxy backend with multiple servers and different path prefix for each server? I want something like this:
backend mybackend
server node1 server1.example.com/...
0
votes
0
answers
29
views
Using haproxy for websockets
I have a number of websocket servers with and without SSL and with and without path. I need to put a haproxy in front of them and round robin over them. I tried various configurations and none of them ...
0
votes
0
answers
63
views
Website's file types all set as HTML when going through HaProxy
When I open "my-website.com", the full page never loads because the .css and .js files seem to be served as html. This only happens when accessing the website through my loadbalencer.
I have ...
1
vote
2
answers
2k
views
HAProxy APIs - Reload Config
I notice there are two APIs for HaProxy. DataPlane and Runtime.
I don't see anything obvious that will just tell the system to reload and parse the .cfg file.
Seems like a no brainer thing to want to ...
0
votes
1
answer
83
views
How to configure HAproxy to a different backend based on path?
The problem is that, I have haproxy configured for multiple domains with backends respectively. The intended behaviour is to redirect a specific request such as myfirstdomain.com/alerts to backend2 ...
3
votes
2
answers
7k
views
Preserve backend server status when reloading haproxy
Because I have a large pool of https certificates that changes from day to day (massive multitenant application with many domains), I have a script that may reload haproxy at nearly random times. This ...
0
votes
1
answer
91
views
HAProxy always returns 502 Bad Gateway but the backend responds
I have a HAProxy 2.8.4 which is used to proxy multiple HTTPS services on multiple URL paths and several different backends, and also a PostgreSQL cluster over TCP. This is the full haproxy -vvv output:...
0
votes
0
answers
30
views
haproxy: inline acl with variable in statement condition
Let's have following backend configuration:
HAProxy version 2.4.24-0ubuntu0.22.04.1 2023/10/31 - https://haproxy.org/
backend back-test
http-request set-var(req.instance) hdr(X-Instance-Name)
...
0
votes
0
answers
37
views
What is the proper way to setup Rados Gateway (RGW) under Ceph using Cephadm?
I have setup a 'reef' Ceph Cluster using Cephadm and Ansible in a lab environment. I have buckets and pools already setup. The ceph.io site is confusing on how to setup the Rados Gateway (radosgw) ...
0
votes
1
answer
430
views
Change request without change url on browser HAProxy
I've configured haproxy, when i type test.example.com it redirects me to example.com/test
This is what I want, but the problem is that I want this happen without changing the url on the browser, I ...
1
vote
1
answer
7k
views
Haproxy backend server down due to layer 6 invalid response failed ssl handshake?
We have two servers which are in different networks. We want to have ssl communication from client to front-end and from front-end to back-end.
The front-end is able to receive and terminate ssl ...
1
vote
2
answers
2k
views
haproxy/apache/tomcat - no trailing slash results in a 301 redirection
I have this configuration in place:
haproxy(80,443) --> httpd(8443) --> tomcat(8096)
Going to https://websrv1/test will result in a 301 redirect to the httpd port for which
haproxy should be ...
1
vote
3
answers
5k
views
How to use HAProxy as a load balancer with SSL for Terminal Server Environment?
I've been working to implement a load balancer using HAProxy and use the load balancer as a bridge to backend(Terminal Server Windows 2008 R2), so that remote session between client to the load ...
0
votes
1
answer
8k
views
HAProxy -> nginx -> Fast CGI: epoll_wait() reported that client prematurely closed connection
I have been successful in setting up an PHP fast CGI application fronted by nginx. If I hit nginx directly everything works as expected. However, in production the traffic is routed through a HAProxy ...
0
votes
1
answer
192
views
Django uwsgi behind haproxy: http or http-socket?
I've a Django app inside a docket that uses uwsgi.
Since we have several Dockers running on different machines we have haproxy as load balancer.
My question is: should I use uwsgi with http or http-...
0
votes
1
answer
43
views
haproxy kills external-check process before script ends
I have a docker container running haproxy:2.8-lts, which does a check to the backend, but my script gets killed before it can finish resulting in a failed check and accumulated alot of processes in ...
0
votes
3
answers
161
views
Postfix/Dovecot relay or proxy?
I'm trying to figure it out how to reverse proxy based on condition email servers or how to deal with sending/receiving emails from different servers on only 1 public IP address?
My current ...
2
votes
2
answers
4k
views
Unable to configure haproxy with ssl
I want to make my server ssl protected, it has two parts one for website and another for application.
to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
0
answers
53
views
OPNsense + HAProxy behind NAT
I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved.
So in short words trying to achieve this kind of logic:
Dedicated Server (Proxmox ...
7
votes
3
answers
5k
views
Route Docker container traffic through another container
I'm trying to route tcp traffic of container B (10.10.1.2, custom binary using mysql and running on port 4242) through container A (10.10.1.3, haproxy, setup in transparent proxy mode) to the outside ...
1
vote
2
answers
7k
views
Nginx configuration with HAproxy proxy protocol and internal redirection
I need to redirect HTTPS stream from HAProxy to Nginx without SSL termination and without loosing an info about the original client IP. Unfortunately I cannot change the configuration of default 443 ...
2
votes
2
answers
13k
views
HAProxy as TCP load balancer (SSL passthrough) not working?
i am having some trouble setting up HAProxy as a TCP load balancer (layer 4) and i would like to have your advice about it.
i've been following many guides on the web and i came up with this ...
0
votes
1
answer
108
views
Client 443/HTTPS -> Virtual IP -> HA Proxy 80/HTTP and 443/HTTPS SSL terminaison -> Varnish 81/HTTP -> 82/HTTPS and 442/HTTPS Apache
I posted the same question on stackoverflow but someone adviced to post it here.
https://stackoverflow.com/questions/77885246/client-443-https-virtual-ip-ha-proxy-80-http-and-443-https-ssl-terminaison
...
0
votes
2
answers
6k
views
How can I configure haproxy to put two frontends to access owa online?
I am facing a problem with HAPROXY on an Ubuntu 16.04 server when redirecting to show OWA on the internet. I have a domain, and I installed exchange server 2013 on windows server 2012 r2.
I need to ...
0
votes
0
answers
15
views
Health Check Failures and 502 Errors with HAProxy and Golang Fiber Instances
I have a setup where Server A acts as the client, communicating with Server B through HAProxy. Server B runs four similar Golang Fiber instances, each with Prefork enabled on an EC2 t3xlarge instance. ...
0
votes
0
answers
46
views
gRPC proxied through pfSense with HAProxy plugin
I am trying to make a gRPC server available through pfSense with HAProxy running as a plugin.
I have ssl termination at HAProxy and it works fine for a number of hosts.
But trying to set the gRPC ...
1
vote
2
answers
5k
views
Mixed content http https and haproxy
I have a problem with haproxy and mixed content. When I try to connect through haproxy ssl, the browser (in this case either Firefox or Chrome), in default configuration, blocks the mixed content - in ...
0
votes
0
answers
87
views
haproxy not load balancing between 2 servers
I have two ports open on my backend servers, one for https requests and one for websocket requests. The websockets will use http, not https. I would like my haproxy instance to send an http 301 ...
0
votes
0
answers
38
views
IIS in windows 2019 HAproxy 504 gateway issue
We have an haproxy device that load balances a number of devices. However starting 1/18 two windows 2019 IIS servers have intermittently started responding to haproxy with a 504. This setup has been ...
0
votes
0
answers
86
views
How to log TLS session keys in HAProxy ala SSLKEYLOGFILE
I'm trying to avoid using an LD_PRELOAD-based solution, and the haproxy documentation seems to imply it's possible to make an sslkeylog file without actually saying how.
I know the information can be ...
1
vote
2
answers
7k
views
HAProxy not recognizing host headers?
I have been trying to configure HAProxy to send traffic to different backend servers based on hostnames. I tried using the directions found in How to divert traffic based on hostname using HAProxy? ...
0
votes
2
answers
145
views
Forward HTTPS Traffic to a proxy server
I have a smart-dns setup, Using dnsmasq as the dns server, which always resolves to my server ip address, for a given list of domains.
I want to configure either a webserver or proxy program to listen ...
1
vote
1
answer
9k
views
Haproxy open and listen tcp ports in a range
I want to listen to open and listen to a range of ports but this is very difficult it seems.
With the bind I can open to ports in that range. When I run a zenmap scan, it shows that the ports are ...
1
vote
0
answers
216
views
ssh bad packet length when haproxy offloads ssl
Haproxy has been configured to offload SSL to access SSH , but randomly or when more interaction happen , the SSH session is disconnected
Bad packet length 468396411.
ssh_dispatch_run_fatal: ...
0
votes
1
answer
308
views
HAPROXY SSL handshake failure - debugging process?
My HAPROXY 2.8.1 terminates SSL connections and does clear text with the backend servers.
When I test using my PC, there are no errors, however it fails when my customers' devices try to communicate. ...
0
votes
2
answers
81
views
Way to keep over 65k TCP connect to a server
As a programmer and a newcomer to network and infrastructure,
I've developed a server program capable of handling over 100,000 connections concurrently.
During testing in a local network with 20,000 ...
2
votes
1
answer
5k
views
HAPROXY : reverse proxy with TLS termination
I'm a newbie with HAProxy, and I want to use it to redirects HTTPS incoming requests to my HTTP backends servers.
I know, how it is possible to do it with Nginx, like this :
#SSL for all
server {
...
2
votes
1
answer
7k
views
Squid proxy behind Haproxy
In my configuration, I use Haproxy mainly for reverse proxy.
I installed Squid Proxy in my private lan and I can access it from external with port 3128. But I use the basic authentification ncsa and ...
0
votes
0
answers
114
views
High availability cluster bandwidth bottleneck
I want to setup a service with a lot of file transfer for thousands of users.
For now, my idea is to go with k8s + HAProxy with 3 masters (with VIP) and as
many slaves as needed.
So basically:
...
0
votes
0
answers
106
views
Configuring Nginx as a reverse proxy for any domain
Currently i have a setup, where dnsmasq is used as a dns server, which resolves an dns lookup, to my own servers IP address. Where SNIPORXY is listening on port 80 and 443 The configuration of the ...
0
votes
1
answer
216
views
Outbound proxy with multiple public IPs in Azure
For services where the outgoing (client) public IP address is important, such as email delivery - an HAProxy setup is often used to host the IPs, with MTAs driving the IP selection via Proxy Protocol.
...
2
votes
1
answer
4k
views
HAProxy, how to disable logs for the stats endpoint
I am enabling stats with something similar to this configuration:
global
log /var/run/log local0 info
defaults
log global
listen stats
bind *:9090
stats enable
stats auth secret:pass
...
3
votes
2
answers
9k
views
HAProxy max session limit
I have an Amazon OpsWorks stack running HAProxy (balance = source) and several node.js instances running socket.io. It seems HAProxy determines the max session limit for a given instance based on the ...
0
votes
0
answers
32
views
What number I'm able to use to notify about haproxy issue?
I have task to monitor Haproxy problems, and one of them is disappearing the field I recently used to get value from show stat output.
Firstly I've wanted to output -1 if there's no field that ...
0
votes
0
answers
77
views
HAPROXY http response 200 but response data missing
I have been working on troubleshooting mobile application issue, each and every request from mobile application will hit to domain lets say https://example.com with request payload in post body, this ...
-1
votes
1
answer
56
views
Accessibility Issue with HAProxy Load Balancer, VIP, and Keepalived Setup
I'm using 2 HAProxy servers with a Virtual IP (VIP) and Keepalived. While I can access the active HAProxy1 server, I face accessibility problems when HAProxy2 is active. How can I resolve the access ...
0
votes
1
answer
179
views
How to configure HAProxy to access K8S cluser?
I have setup K8S cluster, it is up and running
5 control planes
8 worker nodes
I have setup HAproxy working OK
2 nodes
1 virtaul IP
I can access the clustre from a client by using admin.conf file ...
0
votes
1
answer
4k
views
HAProxy as selective forward proxy and load balancer
I'm looking at doing some sidecar proxying. At the moment we have squid proxies as internet proxies and haproxy successfully load balancing those proxy connections.
What I want to do though is ...