HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

4
votes
0answers
170 views

HAProxy switch to backup on 500 errors and/or server down

I'm setting up an HAProxy in front of only 2 backend servers, with a particular configuration: any request should go to server A; but, if server A returns a 5xx error code, all request should go to a ...
4
votes
0answers
246 views

HAProxy URL rewrite on 404 error

How to make HAProxy rewrite to a different back-end when the first is missing the file? What I need is errorloc but making a rewrite instead of redirect, so the client is not aware of redirect. We ...
4
votes
0answers
945 views

HAproxy for load balancing vsFTPd servers

I have successfully set up a load balancing environment using HAProxy and 2 FTP servers running vsftpd. This is what the setup looks so far: Proxy: ftp00 | 192.168.2.135 (public, eth0) | 10.11.130.1 ...
4
votes
0answers
548 views

Haproxy: reject traffic by user agent from file

I am trying to reject connections from specific user agents (by matching a substring of the user-agent header) using an haproxy ACL with -f option to read from a file. However it is not working, it ...
4
votes
0answers
466 views

Is it possible to load balance an XMPP server that is not using BOSH?

We currently have an XMPP server and am now starting to look at clustering. We will have 2 machines, each with an XMPP server. The interface is the standard XMPP connection (not BOSH). We have XMPP ...
3
votes
0answers
1k views

HAProxy stick table

I have an issue where I need the same RTMP TCP connection to hit the same server it connected with if it was http or https. The following works with http: frontend http mode http bind :80 ...
2
votes
0answers
158 views

Intermittent Connection Issues on High Traffic Servers

Some brief background: We've been getting reports of very intermittent connection issues from our users. Several times per day, users will have to reload the page they're on due to a connection ...
2
votes
0answers
72 views

HAProxy: Limmit concurrent connections based on HTTP header field

I try to limit the number of concurrent connections using HAProxy stick-tables based on HTTP header fields. I could find plenty of examples using IP addresses, but this doesn't work in my case. Our ...
2
votes
0answers
194 views

WordPress behind haproxy: $_POST being reset

So here's the sitch: Load balancer (haproxy) delivering to 3 web servers and a database server, 5 servers in total with memcache sessions being shared between the web servers. I can confirm that ...
2
votes
0answers
165 views

haproxy: explicitly setting the gpc0 value within a frontend or backend section

I have something like this in my haproxy config backend myservice option httplog stick-table type string size 10 expire 10m store gpc0 stick store-request req.hdr(MYHDR) server ...
2
votes
0answers
467 views

Issues with nginx behind haproxy

I'm hosting an ajax site (AngularJS) and it's assets/partials reside on my static asset servers running nginx behind haproxy. My setup looks as follows: Web -> Haproxy -> App (custom) and ...
2
votes
0answers
285 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
2
votes
0answers
437 views

What is HAProxy appsession request-learn?

I'm reading the HAProxy manual and there is a part that I'm not understanding: request-learn If this option is specified, then haproxy will be able to learn the cookie ...
2
votes
0answers
570 views

haproxy tcp transparent mode on the same box as service

I'd like to set up transparent HA Proxy for TCP protocol. It works flawlessly when HA Proxy is in front of the boxes that are running the service. But when I try to set up HA Proxy in transparent mode ...
2
votes
0answers
203 views

HAProxy authentication for a specific path

I need to specify a path which, when hit, requires authentication. I've new to HAProxy and have been struggling with this for a while. Here is one attempt: acl auth_ok http_auth(site_users) ...
2
votes
0answers
885 views

HAProxy stats socket - incorrect values

One of my HAProxy monitoring script isn't working on a newly setup HAProxy box. I've tracked down the issue to the output of the stats socket rather than with the script itself. I'm getting values of ...
1
vote
0answers
36 views

haproxy how to acl to pass only list of ip's and domains need to be redirected to backends

I've one routed IP and haproxy is sitting there, haproxy has also lan ip to contact backends. I have few backends - each holding some nginx'es, sometimes few domains services on each one. I've come to ...
1
vote
0answers
7 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
1
vote
0answers
80 views

HAProxy stick-table

in HAProxy I'm trying to track connections to a certain page with a random key value. The configuration I'm using is: stick-table type string size 200 store gpc0 acl test_page url_reg -i test.php ...
1
vote
0answers
39 views

Key management for HAProxy instances in OpsWorks

I'm trying to use client certificate verification in an OpsWorks HAProxy instance. The question I'm running into, and it's probably a noob issue, is how am I supposed to deploy my ssl private key to ...
1
vote
0answers
77 views

HAProxy ipv6 to ipv4 issue

I have setup a HaProxy node ver 1.5.3 on Ubuntu 14.04. The Ubuntu server has 1 nic. The nic has an IPv6 address and an ipv4 address. The IPv6 listens on port 80 for incoming internetconnections. The ...
1
vote
0answers
44 views

Redis Sentinel false failovers

I'm having problems with Redis. I have 3 servers. Each server have 10 Redises working on different port. Also, each server has one Sentinel instance. Also, there are 5 application servers. Each ...
1
vote
0answers
162 views

nginx try_files redirect using wrong scheme when behind SSL termination load balancer (haproxy)

I have an nginx 1.6.2 server running as a backend behind a load balancer that does SSL termination. All communication to the backend servers goes over HTTP. Diagram of what's going on: ...
1
vote
0answers
124 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
237 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
1
vote
0answers
73 views

HAproxy freeze / crash / stops accepting cottections

I've seen similar posts for my issue but none of them seem to be relevant for my case. I've had my HAproxy configured for the past 3 months roughly the same and did not encounter any issues. The ...
1
vote
0answers
204 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
1
vote
0answers
137 views

Clustering with Jboss EAP and Load balancing with Haproxy

I'm doing load balancing with HAProxy and use JBoss EAP as application servers. The Haproxy server is configured to route incoming requests to the application servers. How can I integrate Jboss EAP ...
1
vote
0answers
225 views

HAProxy reload - old processes never terminated

I have HAProxy setup in TCP mode, with client/server/connect timeout of 120s. When I reload the configuration too fast, I sometime end up with multiple processes. By design, this is expected, so all ...
1
vote
0answers
60 views

HTTP Proxy with transparent copy

I've got the following: Client -> HAProxy --> backend_service_1 --> backend_service_2 It's a basic HAProxy Load Balancing config with 2 backend services. I'm hoping that ...
1
vote
0answers
561 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
1
vote
0answers
154 views

Configuring HAProxy for RPC, only one host

I've tried several ideas on how to get this to work, including Squid, Pound, and now HAProxy, which seems to be the closest yet, so far. I have an NGinx server which I have set to be the primary web ...
1
vote
0answers
1k views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
0answers
111 views

haproxy : Limit WebSocket payload length

My server is distributing websocket client connections over 4 local websocket servers and I need to prevent these websocket servers to get flooded with big chunks of data. Question: Is it possible ...
1
vote
0answers
57 views

is it possible to have reqrep for each server in haproxy loadbalancer?

There are 3 servers in a load balanced HAProxy setup. server serv1 192.168.1.101:8080 check inter 2000 rise 1 fall 1 server serv2 192.168.1.102:8080 check inter 2000 rise 1 fall 1 #The ...
1
vote
0answers
34 views

How to specify alternate errorfiles for a given backend?

We currently use errorfiles to send various 40x/59x error messages to the client on encountering errors. Currently these errorfiles are in html format but I'd like to switch them based on a format ...
1
vote
0answers
188 views

Haproxy load balancing TPS lower than single node

I have 2 apache2 servers running in the back end and have a haproxy between them and the clients. If I bench tested anyone of these apache2 severs with ab i get north of a 1500TPS however when I bench ...
1
vote
0answers
192 views

LVS + HA Proxy for L4 to L7 load balancing

Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA. ...
1
vote
0answers
199 views

HAproxy drops data on the floor when client disconnects immediately after sending data

In order to gain fault tolerance, I'm running haproxy between Thruk and multiple nagios backends with the Livestatus plugin. Thruk has no connection timeout, so a "dead" backend causes Thruk to take ...
1
vote
0answers
290 views

Bootstrapping Galera Cluster

We would like to use a MariaDB Galera cluster for our project. The Galera cluster works and seems to work fine. If some nodes of cluster are down the cluster continues to work. But after a complete ...
1
vote
0answers
266 views

Why would HAProxy reject traffic from one location but not another?

I am able to access all of the sites with no issues and our customers are placing orders without any difficulty but at one of our locations where we have a lot of users constantly hitting the site, ...
1
vote
0answers
54 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
1
vote
0answers
178 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
1
vote
0answers
64 views

HAProxy listen with two arguments?

I keep seeing HAProxy configuration examples with a two-argument syntax. Indeed, the default configuration file supplied with 1.4.18 contains this: listen appli1-rewrite 0.0.0.0:10001 cookie ...
1
vote
0answers
183 views

Any way to route MSMQ messages based on label?

I have a system with one MSMQ sender (generates about 10k messages/sec) and one MSMQ receiver (2k messages/sec). Generating and sending messages is fast, reading and processing is slow. Hence I want ...
1
vote
0answers
207 views

How to block trafic from anonymous proxy to my site?

some scammers are trying to reach my site using anonymous proxy. Is there a way to block connexions from anonymous proxy with haproxy or nginx? Thanks
1
vote
0answers
772 views

Puppet + HAProxy Configuration

I am trying to get HAProxy running. I have the puppet master setup serving configurations to two agents. One is the HAproxy server and the other is a simple web server (certname=webserver2). HAproxy ...
1
vote
0answers
904 views

Haproxy multiple backend servers & ports

I am a newbie to haproxy and was wondering if someone can confirm that the following config is valid? Effectively I would like to load balanced two servers on multiple ports. <snippet> Listen ...
1
vote
0answers
80 views

HAproxy request redirecting to multiple backends

I wonder if it is possible to send an HTTP request matching a particular ACL can be redirected to multiple backends in HAProxy. I want to send a copy of the request to another backend as well.
1
vote
0answers
59 views

Haproxy Server Statistics page reads server DOWN

Haproxy's stats page show's that I have server that isn't functioning that is connected to the services. I'm unclear through me search on how to kick the problem server off. Any help would be much ...