HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

4
votes
0answers
478 views

Configure haproxy to return a 204 for a certain ACL match

I want to return a HTTP 204 error code if anyone tries to access a particular path on my web server. I could set one of my webservers to return a 204 error and point haproxy to it as a backend. ...
3
votes
0answers
151 views

HAProxy switch to backup on 500 errors and/or server down

I'm setting up an HAProxy in front of only 2 backend servers, with a particular configuration: any request should go to server A; but, if server A returns a 5xx error code, all request should go to a ...
3
votes
0answers
223 views

HAProxy URL rewrite on 404 error

How to make HAProxy rewrite to a different back-end when the first is missing the file? What I need is errorloc but making a rewrite instead of redirect, so the client is not aware of redirect. We ...
3
votes
0answers
789 views

HAproxy for load balancing vsFTPd servers

I have successfully set up a load balancing environment using HAProxy and 2 FTP servers running vsftpd. This is what the setup looks so far: Proxy: ftp00 | 192.168.2.135 (public, eth0) | 10.11.130.1 ...
3
votes
0answers
494 views

Haproxy: reject traffic by user agent from file

I am trying to reject connections from specific user agents (by matching a substring of the user-agent header) using an haproxy ACL with -f option to read from a file. However it is not working, it ...
3
votes
0answers
454 views

Is it possible to load balance an XMPP server that is not using BOSH?

We currently have an XMPP server and am now starting to look at clustering. We will have 2 machines, each with an XMPP server. The interface is the standard XMPP connection (not BOSH). We have XMPP ...
2
votes
0answers
143 views

Intermittent Connection Issues on High Traffic Servers

Some brief background: We've been getting reports of very intermittent connection issues from our users. Several times per day, users will have to reload the page they're on due to a connection ...
2
votes
0answers
67 views

HAProxy: Limmit concurrent connections based on HTTP header field

I try to limit the number of concurrent connections using HAProxy stick-tables based on HTTP header fields. I could find plenty of examples using IP addresses, but this doesn't work in my case. Our ...
2
votes
0answers
186 views

WordPress behind haproxy: $_POST being reset

So here's the sitch: Load balancer (haproxy) delivering to 3 web servers and a database server, 5 servers in total with memcache sessions being shared between the web servers. I can confirm that ...
2
votes
0answers
151 views

haproxy: explicitly setting the gpc0 value within a frontend or backend section

I have something like this in my haproxy config backend myservice option httplog stick-table type string size 10 expire 10m store gpc0 stick store-request req.hdr(MYHDR) server ...
2
votes
0answers
439 views

Issues with nginx behind haproxy

I'm hosting an ajax site (AngularJS) and it's assets/partials reside on my static asset servers running nginx behind haproxy. My setup looks as follows: Web -> Haproxy -> App (custom) and ...
2
votes
0answers
427 views

How can I whitelist oubound-from-private-subnet traffic to S3 on the NAT instance of an EC2 VPC?

I'm researching privacy-compliant high-security deployment options for AWS VPC. I'm looking for a method of tightening outbound traffic from the private subnets at the NAT instance. For example, how ...
2
votes
0answers
281 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
2
votes
0answers
430 views

What is HAProxy appsession request-learn?

I'm reading the HAProxy manual and there is a part that I'm not understanding: request-learn If this option is specified, then haproxy will be able to learn the cookie ...
2
votes
0answers
562 views

haproxy tcp transparent mode on the same box as service

I'd like to set up transparent HA Proxy for TCP protocol. It works flawlessly when HA Proxy is in front of the boxes that are running the service. But when I try to set up HA Proxy in transparent mode ...
2
votes
0answers
201 views

HAProxy authentication for a specific path

I need to specify a path which, when hit, requires authentication. I've new to HAProxy and have been struggling with this for a while. Here is one attempt: acl auth_ok http_auth(site_users) ...
2
votes
0answers
866 views

HAProxy stats socket - incorrect values

One of my HAProxy monitoring script isn't working on a newly setup HAProxy box. I've tracked down the issue to the output of the stats socket rather than with the script itself. I'm getting values of ...
2
votes
0answers
996 views

HAProxy stick table

I have an issue where I need the same RTMP TCP connection to hit the same server it connected with if it was http or https. The following works with http: frontend http mode http bind :80 ...
1
vote
0answers
3 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
1
vote
0answers
46 views

HAProxy stick-table

in HAProxy I'm trying to track connections to a certain page with a random key value. The configuration I'm using is: stick-table type string size 200 store gpc0 acl test_page url_reg -i test.php ...
1
vote
0answers
30 views

Key management for HAProxy instances in OpsWorks

I'm trying to use client certificate verification in an OpsWorks HAProxy instance. The question I'm running into, and it's probably a noob issue, is how am I supposed to deploy my ssl private key to ...
1
vote
0answers
56 views

HAProxy ipv6 to ipv4 issue

I have setup a HaProxy node ver 1.5.3 on Ubuntu 14.04. The Ubuntu server has 1 nic. The nic has an IPv6 address and an ipv4 address. The IPv6 listens on port 80 for incoming internetconnections. The ...
1
vote
0answers
39 views

Redis Sentinel false failovers

I'm having problems with Redis. I have 3 servers. Each server have 10 Redises working on different port. Also, each server has one Sentinel instance. Also, there are 5 application servers. Each ...
1
vote
0answers
123 views

nginx try_files redirect using wrong scheme when behind SSL termination load balancer (haproxy)

I have an nginx 1.6.2 server running as a backend behind a load balancer that does SSL termination. All communication to the backend servers goes over HTTP. Diagram of what's going on: ...
1
vote
0answers
105 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
209 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
1
vote
0answers
63 views

HAproxy freeze / crash / stops accepting cottections

I've seen similar posts for my issue but none of them seem to be relevant for my case. I've had my HAproxy configured for the past 3 months roughly the same and did not encounter any issues. The ...
1
vote
0answers
190 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
1
vote
0answers
126 views

Clustering with Jboss EAP and Load balancing with Haproxy

I'm doing load balancing with HAProxy and use JBoss EAP as application servers. The Haproxy server is configured to route incoming requests to the application servers. How can I integrate Jboss EAP ...
1
vote
0answers
189 views

HAProxy reload - old processes never terminated

I have HAProxy setup in TCP mode, with client/server/connect timeout of 120s. When I reload the configuration too fast, I sometime end up with multiple processes. By design, this is expected, so all ...
1
vote
0answers
57 views

HTTP Proxy with transparent copy

I've got the following: Client -> HAProxy --> backend_service_1 --> backend_service_2 It's a basic HAProxy Load Balancing config with 2 backend services. I'm hoping that ...
1
vote
0answers
534 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
1
vote
0answers
145 views

Configuring HAProxy for RPC, only one host

I've tried several ideas on how to get this to work, including Squid, Pound, and now HAProxy, which seems to be the closest yet, so far. I have an NGinx server which I have set to be the primary web ...
1
vote
0answers
1k views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
0answers
102 views

haproxy : Limit WebSocket payload length

My server is distributing websocket client connections over 4 local websocket servers and I need to prevent these websocket servers to get flooded with big chunks of data. Question: Is it possible ...
1
vote
0answers
55 views

is it possible to have reqrep for each server in haproxy loadbalancer?

There are 3 servers in a load balanced HAProxy setup. server serv1 192.168.1.101:8080 check inter 2000 rise 1 fall 1 server serv2 192.168.1.102:8080 check inter 2000 rise 1 fall 1 #The ...
1
vote
0answers
34 views

How to specify alternate errorfiles for a given backend?

We currently use errorfiles to send various 40x/59x error messages to the client on encountering errors. Currently these errorfiles are in html format but I'd like to switch them based on a format ...
1
vote
0answers
179 views

Haproxy load balancing TPS lower than single node

I have 2 apache2 servers running in the back end and have a haproxy between them and the clients. If I bench tested anyone of these apache2 severs with ab i get north of a 1500TPS however when I bench ...
1
vote
0answers
184 views

LVS + HA Proxy for L4 to L7 load balancing

Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA. ...
1
vote
0answers
188 views

HAproxy drops data on the floor when client disconnects immediately after sending data

In order to gain fault tolerance, I'm running haproxy between Thruk and multiple nagios backends with the Livestatus plugin. Thruk has no connection timeout, so a "dead" backend causes Thruk to take ...
1
vote
0answers
278 views

Bootstrapping Galera Cluster

We would like to use a MariaDB Galera cluster for our project. The Galera cluster works and seems to work fine. If some nodes of cluster are down the cluster continues to work. But after a complete ...
1
vote
0answers
259 views

Why would HAProxy reject traffic from one location but not another?

I am able to access all of the sites with no issues and our customers are placing orders without any difficulty but at one of our locations where we have a lot of users constantly hitting the site, ...
1
vote
0answers
53 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
1
vote
0answers
171 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
1
vote
0answers
59 views

HAProxy listen with two arguments?

I keep seeing HAProxy configuration examples with a two-argument syntax. Indeed, the default configuration file supplied with 1.4.18 contains this: listen appli1-rewrite 0.0.0.0:10001 cookie ...
1
vote
0answers
177 views

Any way to route MSMQ messages based on label?

I have a system with one MSMQ sender (generates about 10k messages/sec) and one MSMQ receiver (2k messages/sec). Generating and sending messages is fast, reading and processing is slow. Hence I want ...
1
vote
0answers
200 views

How to block trafic from anonymous proxy to my site?

some scammers are trying to reach my site using anonymous proxy. Is there a way to block connexions from anonymous proxy with haproxy or nginx? Thanks
1
vote
0answers
745 views

Puppet + HAProxy Configuration

I am trying to get HAProxy running. I have the puppet master setup serving configurations to two agents. One is the HAproxy server and the other is a simple web server (certname=webserver2). HAproxy ...
1
vote
0answers
828 views

Haproxy multiple backend servers & ports

I am a newbie to haproxy and was wondering if someone can confirm that the following config is valid? Effectively I would like to load balanced two servers on multiple ports. <snippet> Listen ...
1
vote
0answers
76 views

HAproxy request redirecting to multiple backends

I wonder if it is possible to send an HTTP request matching a particular ACL can be redirected to multiple backends in HAProxy. I want to send a copy of the request to another backend as well.