HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
1answer
1k views

HAProxy pgsql-check error

I use HAProxy 1.5-dev21 to load balance PostgreSQL connections over some read-only Postgresql 9.2 servers. Version 1.5 of HAProxy implements a pgsql-check option, similar to mysql-check. Here is my ...
1
vote
1answer
1k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
1answer
7 views

HAProxy to redirect http to https for multiple domain names without SSL Termination

I am using HAProxy to redirect traffic to different web servers in local network. Without SSL enabled, I can route based on hostname like this (in frontend section): acl is_local hdr_end(host) -i ...
0
votes
2answers
2k views

Loadbalancing JBoss with haproxy AND mod_jk

I've been tasked to explore ways of building a very fail-resistant configuration for a professional application developed for JBoss. I have a somewhat fixed hardware configuration (servers have ...
0
votes
0answers
11 views

HAProxy TProxy support CentOS 7

PER: Howto Transparent proxying and binding with HAProxy and ALOHA load-balancer Says following kernel flags set: CONFIG_NETFILTER_TPROXY CONFIG_NETFILTER_XT_TARGET_TPROXY in ...
1
vote
1answer
14 views

HA Proxy and Websockets

I'm setting up my first HAProxy reverse proxy server. It's going to be a proxy for an HTML5 app running on tomcat from a different server. I was able to get it to proxy out via HTTP, redirect all ...
0
votes
1answer
14 views

HAProxy HTTPS Redirect to different domain

Currently I have a HAProxy configuration which redirects all HTTP traffic to HTTPS. frontend http-in bind *:80 redirect scheme https code 301 I then have various HTTPS domains configured, ...
1
vote
1answer
2k views

option http-server-close on HAProxy haproxy-1.5-dev19 will result in Connection: close header sent in response

I basically have the following issue: whenever I add option http-server-close to the haproxy config (either in frontend or backend section), haproxy will send a Connection: close header in the ...
1
vote
1answer
14 views

HAProxy - Using ACL in Frontend with SSL-Termination

I'm using HAProxy in front of nginx. HAProxy terminates the SSL-Connection and passes only static requests to nginx (png, jpg, etc.). I don't know why, but there are some requests forwarded to nginx ...
0
votes
0answers
6 views

HAProxy redirecting

I'm trying to get HAProxy to redirect to the right URI's in case the requested URI is non-www or non-https. The problem I'm encoutering is that it redirects as soon as it hits a line, resulting in ...
0
votes
0answers
27 views

Haproxy Layer 4 balancing with TLS

We have ssl3 turned off in favor of TLS. Most the tutorials on https for layer4 support with haproxy, ie ssl passthrough, uses check-ssl or ssl-hello-chk. In our setup this will fail because we have ...
0
votes
1answer
31 views

Block IPs for some time on HAProxy

I would like to blacklist IPs that are spamming a particular URL, but only for a determined amount of time. let's say 10 minutes. I'm thinking of creating a stick-table, and store the src IP and ...
3
votes
4answers
3k views

Need help troubleshooting intermittant TCP timeout in HAProxy

I have an application where the client connects to a server via a simple TCP based protocol over TLS/SSL. In development, this has worked great for many months while we were building our application ...
2
votes
1answer
457 views

How can I whitelist oubound-from-private-subnet traffic to S3 on the NAT instance of an EC2 VPC?

I'm researching privacy-compliant high-security deployment options for AWS VPC. I'm looking for a method of tightening outbound traffic from the private subnets at the NAT instance. For example, how ...
4
votes
1answer
6k views

HAProxy, health checking multiple servers with different host names

I need to load balance between multiple running servers with different host names. I cannot set-up the same virtual host on each one. Is it possible to have only one listen configuration with ...
5
votes
2answers
2k views

Load Balancing DNS Servers: UDP / TCP

I have been asked to rebuild our load balancing infrastructure in the data center. The original request was to load balance FTP servers. I tried doing that using the current load balancer (Piranha / ...
0
votes
1answer
1k views

Server's maxconn parameter in haproxy

I'm using HAProxy in production to balance queries to a series of server instances that can only process 1 query at a time (by our own decision). Knowing that I set the maxconn parameter in the server ...
0
votes
1answer
4k views

Haproxy - timeout http-request vs timeout http-keep-alive vs timeout server

I'm trying to wrap my head around how the haproxy options timeout http-request <timeout> timeout http-keep-alive <timeout> timeout server <timeout> interact with each other. I'm ...
0
votes
1answer
39 views

HA-Proxy 301 re-direct: https to https://www

I am trying to have HA-Proxy 301 redirect an https domain. I need: https://example.com to redirect to https://www.example.com This is what I was trying to get it to work: # corp - example.com ...
0
votes
2answers
1k views

HAProxy + Percona XtraDB Cluster

I am attempting to setup HAproxy in conjunction with Percona XtraDB Cluster on a series of 3 EC2 instances. I have found a few tutorials online dealing with this specific issue, but I am a bit stuck. ...
4
votes
0answers
174 views

HAProxy switch to backup on 500 errors and/or server down

I'm setting up an HAProxy in front of only 2 backend servers, with a particular configuration: any request should go to server A; but, if server A returns a 5xx error code, all request should go to a ...
5
votes
1answer
525 views

Configure haproxy to return a 204 for a certain ACL match

I want to return a HTTP 204 error code if anyone tries to access a particular path on my web server. I could set one of my webservers to return a 204 error and point haproxy to it as a backend. ...
1
vote
1answer
4k views

haproxy: Is there a way to group acls for greater efficiency?

I have some logic in a frontend that routes to different backends based on both the host and the url. Logically it looks like this: if hdr(host) ends with 'a.domain.com': if url starts with ...
1
vote
3answers
2k views

Squid via Haproxy

Anyone experienced with configuring Squid to forward requests to HAproxy? I use Squid as a proxy, with ACLs and other stuff, and I need to know if I can tell it to forward requests to HAproxy, which ...
1
vote
2answers
48 views

haproxy: how to prepare a server maintenance without kicking app sessions?

The issue I'm using haproxy to load balance web servers. I use session persistence with additional cookies as some applications use session files and these are not synchronized between servers. I ...
2
votes
3answers
41 views

SSL binding with no hostname, and centralized certificate store?

We have a web app that serves a large number of websites from a single IIS website. The IIS website simply has a catch-all binding on port 80. Up till now, for the SSL bindings, we have added a new IP ...
1
vote
2answers
948 views

Unexpected behaviour when dynamically add node in HAproxy server

I wanted to use HAProxy for my web app for load balancing purpose. I am trying to add a new rabbitmq node dynamically in HAProxy server using command : haproxy -p /var/run/haproxy.pid -sf $(cat ...
1
vote
1answer
948 views

Corosync/Pacemaker + Haproxy Failed Actions: insufficient privileges

I setup a Corosync/Pacemaker cluster + HAproxy using the following guide on Ubuntu 14.04 LTS: ...
0
votes
1answer
34 views

HAProxy 1.5.4 Performance Tuning

I currently have HAProxy 1.5.4 setup using keepalived for HA on centos 7 using IPtables to create a transparent load balancer to load balance a number of cisco WSA proxy servers for internet filtering ...
3
votes
2answers
98 views

Haproxy Resolvers Section + Amazon ELB

I'm currently using Haproxy-1.6-dev2 in front of an amazon ELB, and I'm running into DNS resolution issues. I'm working with the dev version of haproxy because of the new resolvers feature, but ...
2
votes
3answers
345 views

Using Multiple Load Balancers

I'm new to load balancing and I'm wondering if it's possible to use multiple load balancers to redirect traffic to my application servers. I don't really understand how this can be done. Shouldn't a ...
0
votes
3answers
10k views

could not bind socket while haproxy restart

I m restarting HAproxy by following command haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -sf $(cat /var/run/haproxy.pid) but i get following message [ALERT] 183/225022 (9278) : ...
1
vote
1answer
965 views

Weird interaction with systemctl with Haproxy on CentOS 7

Running haproxy through systemctl is different than running it manually. on manual start, everything works. starting through systemctl, haproxy is not able to find the service it proxies, and ...
0
votes
1answer
1k views

Haproxy “use_backend” match order

I have a problem with Haproxy, it's a snippet of my haproxy.cfg below, acl url_a path_beg /a acl dom_eye hdr_dom(host) -i www.mydomin.com use_backend eye1 if dom_eye use_backend ...
1
vote
0answers
39 views

haproxy how to acl to pass only list of ip's and domains need to be redirected to backends

I've one routed IP and haproxy is sitting there, haproxy has also lan ip to contact backends. I have few backends - each holding some nginx'es, sometimes few domains services on each one. I've come to ...
1
vote
1answer
54 views

is there a standard for chaining x-forwarded-for headers?

IETF RFC 2616 Section 4.2 allows a request to contain multiple headers with the same field-name as long as chronological order of insertion is preserved and their values can be converted into single ...
3
votes
1answer
3k views

HAProxy: Display a “BADREQ” | BADREQ's by the thousands

My HAProxy Configuration. #HA-Proxy version 1.3.22 2009/10/14 Copyright 2000-2009 Willy Tarreau <w@1wt.eu> global maxconn 10000 spread-checks 50 user haproxy group haproxy ...
28
votes
5answers
22k views

How can I remove balanced node from haproxy via command line?

I have haproxy running as my load-balancer and from the stats web interface that comes with haproxy, I can put a web server into maintenance mode (and bring it back out again) - which is great! ...
0
votes
1answer
61 views

Limit maximum requests / second for a specific path on HAProxy

I'm trying to achieve this scenario : On a specific path only, I receive a steady 9 requests/sec on the frontend. Everything is fine, use the regular Backend. I now receive 11 req/s, I want to reject ...
1
vote
1answer
21 views

Disable Haproxy Logging messages

I am having a problem with haproxy. Every time I turn off virtuoso, haproxy shows the following error message: Message from syslogd@master0 at Jul 9 14:39:18 ... haproxy[4403]: backend ...
1
vote
2answers
4k views

How do I match a wildcard host in ACL lists in HAproxy?

I have the following lines in my haproxy.conf: acl valid_domains hdr(Host) -i mysite.com images.mysite.com docs.mysite.com admin.mysite.com redirect location http://mysite.com/invalid_domain if ...
0
votes
1answer
2k views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy ...
1
vote
1answer
518 views

HAProxy and streaming server bottleneck concern

I am investigating into HAProxy to use as a load balancer for a number of nginx servers. Each server is streaming a static file (audio file) from it. Nginx will be using a symfony2 framework. In ...
2
votes
1answer
293 views

HAProxy but still single point of failure

I'm setting up a test cluster - Maria Galera Cluster on 3 physical nodes with HAProxy. Its working, but I've made some kind of beginner error which I can't seem to resolve - so hopefully someone can ...
-1
votes
1answer
56 views

HAproxy- Could not open configuration file: Permission denied

I am having some test with HAproxy as Load Balancer. I installed it and configured too, even the log with rsyslog. I checked the configuration with haproxy -c -f /etc/haproxy/haproxy.cnf and with ...
0
votes
1answer
45 views

RTMP load-balancing via HAProxy

I've got a little problem to solve: I need to find a way to load balance, bandwidth-wise, the incoming RTMP streams on my servers. I have 2 RTMP servers (nginx-rtmp), let's call them S1 and S2. The ...
0
votes
0answers
61 views

nginx behind reverse proxy 504 Gateway Time-out on form submit

I have a problem with nginx. When I use the site directly everything works fine but as soon as I setup a reverse proxy (doesn't matter if its another nginx or haproxy) I get 504 Gateway Time-out when ...
0
votes
0answers
16 views

HAProxy stats/limits by domain

I'm looking into setting up HAProxy to manage a small cluster for a few domains. I'd like to be able to monitor the stats of each domain/website independently and set limits based on the website, in ...
2
votes
3answers
7k views

Maximizing TCP connections on HAProxy load balancer

I am currently using HAProxy in order to load balance tcp connections from clients to my Erlang app server. The connection is persistent, which means I'm limited to roughly 64K clients on an optimized ...
1
vote
0answers
8 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...