HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

4
votes
0answers
619 views

Is it possible to load balance an XMPP server that is not using BOSH?

We currently have an XMPP server and am now starting to look at clustering. We will have 2 machines, each with an XMPP server. The interface is the standard XMPP connection (not BOSH). We have XMPP ...
4
votes
0answers
1k views

HAProxy stick table

I have an issue where I need the same RTMP TCP connection to hit the same server it connected with if it was http or https. The following works with http: frontend http mode http bind :80 ...
3
votes
0answers
328 views

Using haproxy in tcp mode to proxy mongo server causes mongo clients to fail about 25% of the time

I am trying to use haproxy in tcp mode in front of a mongo server. On the haproxy machine I have a mongo client to test with. When connecting from the haproxy machine directly to the mongo server ...
3
votes
0answers
174 views

How to Reduce Failover Interval in HAProxy?

I have setup HAProxy and it is working fine. I observed that when one of the node goes down HAProxy detects that immediately, but switch-over / redirect existing traffic to the rest of working nodes ...
3
votes
0answers
114 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
3
votes
0answers
50 views

Force disabled server selection when using cookie based session persistence?

Let's say I have an HTTP configuration block like so: listen testing bind 1.2.3.4:80 balance roundrobin use-server server1 if { urlp_val(force) eq 1 } use-server server2 if { urlp_val(force) ...
3
votes
0answers
390 views

Intermittent Connection Issues on High Traffic Servers

Some brief background: We've been getting reports of very intermittent connection issues from our users. Several times per day, users will have to reload the page they're on due to a connection ...
3
votes
0answers
537 views

HAProxy reload - old processes never terminated

I have HAProxy setup in TCP mode, with client/server/connect timeout of 120s. When I reload the configuration too fast, I sometime end up with multiple processes. By design, this is expected, so all ...
3
votes
0answers
334 views

haproxy: explicitly setting the gpc0 value within a frontend or backend section

I have something like this in my haproxy config backend myservice option httplog stick-table type string size 10 expire 10m store gpc0 stick store-request req.hdr(MYHDR) server ...
3
votes
0answers
1k views

HAProxy stats socket - incorrect values

One of my HAProxy monitoring script isn't working on a newly setup HAProxy box. I've tracked down the issue to the output of the stats socket rather than with the script itself. I'm getting values of ...
2
votes
0answers
34 views

How to set up authentication server before request reach API server using HAProxy?

I want a set up that would force all requests to be authenticated before reaching the application server. I'm seeing HAProxy support basic HTTP Authentication but I couldn't find any info about making ...
2
votes
0answers
28 views

HAProxy, why would a replaced HTTP header have a number at the end?

Can someone explain what the "X-Forwarded-Proto2" header is in this HAProxy frontend stanza?: frontend main *:443 ... reqirep ^(X-Forwarded-Proto:)(.*) X-Forwarded-Proto2:\2 ... I understand ...
2
votes
0answers
52 views

Haproxy and nginx rtmp

i am trying to use haproxy in front of rtmp nginx server it does connect but it does not play the video i have 2 servers 1 server is where rtmp nginx installed and second server where haproxy ...
2
votes
0answers
35 views

HAProxy frontend backend continuously starting and stopping

I am using an HAProxy 1.6.4 to load balance my traffic into different servers. As in now my haproxy runs inside a docker container. In my configuration i have different frontends and backends. As in ...
2
votes
0answers
42 views

HAProxy: replacing subdomains with paths

My previous question was too complicated and unclear. Hopefully this is more straight to the point... Currently I'm using subdomains to access application UIs externally. Some allow access via paths: ...
2
votes
0answers
147 views

HAProxy failing at random times (backend has no server available!)

I have a CentOS 7.1 (x64) droplet configured to load balance between 2 apache/php servers. I have it working perfectly, but randomly throughout the day it reports the following: haproxy[12947]: ...
2
votes
0answers
132 views

Haproxy Nginx/Naxsi to Web servers not working

I have a haproxy/nginx/naxsi setup for load balancing and security. Traffic is supposed to come into haproxy then to nginx/nasxi then finally to the web servers if they passed the WAF. We also have a ...
2
votes
0answers
303 views

how to use a request dependent acl as a condition in a stick match or stick response-store

In neo4j there's the transactional cypher endpoint. This allows the client to spawn a database transaction over multiple REST requests. The first request opens a new transaction and gets back the URL ...
2
votes
0answers
340 views

HAProxy ipv6 to ipv4 issue

I have setup a HaProxy node ver 1.5.3 on Ubuntu 14.04. The Ubuntu server has 1 nic. The nic has an IPv6 address and an ipv4 address. The IPv6 listens on port 80 for incoming internetconnections. The ...
2
votes
0answers
400 views

nginx try_files redirect using wrong scheme when behind SSL termination load balancer (haproxy)

I have an nginx 1.6.2 server running as a backend behind a load balancer that does SSL termination. All communication to the backend servers goes over HTTP. Diagram of what's going on: /--...
2
votes
0answers
114 views

HAProxy: Limmit concurrent connections based on HTTP header field

I try to limit the number of concurrent connections using HAProxy stick-tables based on HTTP header fields. I could find plenty of examples using IP addresses, but this doesn't work in my case. Our ...
2
votes
0answers
282 views

Clustering with Jboss EAP and Load balancing with Haproxy

I'm doing load balancing with HAProxy and use JBoss EAP as application servers. The Haproxy server is configured to route incoming requests to the application servers. How can I integrate Jboss EAP ...
2
votes
0answers
352 views

WordPress behind haproxy: $_POST being reset

So here's the sitch: Load balancer (haproxy) delivering to 3 web servers and a database server, 5 servers in total with memcache sessions being shared between the web servers. I can confirm that ...
2
votes
0answers
395 views

HAproxy drops data on the floor when client disconnects immediately after sending data

In order to gain fault tolerance, I'm running haproxy between Thruk and multiple nagios backends with the Livestatus plugin. Thruk has no connection timeout, so a "dead" backend causes Thruk to take ...
2
votes
0answers
767 views

Issues with nginx behind haproxy

I'm hosting an ajax site (AngularJS) and it's assets/partials reside on my static asset servers running nginx behind haproxy. My setup looks as follows: Web -> Haproxy -> App (custom) and ...
2
votes
0answers
104 views

HAProxy listen with two arguments?

I keep seeing HAProxy configuration examples with a two-argument syntax. Indeed, the default configuration file supplied with 1.4.18 contains this: listen appli1-rewrite 0.0.0.0:10001 cookie ...
2
votes
0answers
439 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
2
votes
0answers
772 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
2
votes
0answers
654 views

haproxy tcp transparent mode on the same box as service

I'd like to set up transparent HA Proxy for TCP protocol. It works flawlessly when HA Proxy is in front of the boxes that are running the service. But when I try to set up HA Proxy in transparent mode ...
2
votes
0answers
355 views

Is it possible to include one HAProxy backend in another?

We're running multiple sites on the same hardware, and we'd like to serve them using the same pool of application machines. However, one site periodically gets greatly-increased traffic, and so we'd ...
2
votes
0answers
241 views

HAProxy authentication for a specific path

I need to specify a path which, when hit, requires authentication. I've new to HAProxy and have been struggling with this for a while. Here is one attempt: acl auth_ok http_auth(site_users) ...
2
votes
0answers
343 views

Best way to debug haproxy errors?

I am looking for a useful way to debug haproxy errors.. I found the "log-separate-errors" option (nice feature, because we have thousands of request per second and do not want to log them all), but ...
1
vote
0answers
30 views

Capture and forward extended PKI cert attributes (e.g. UPN) using haproxy

I'm trying to pull an attribute from a client certificate in a mutual authentication scenario and set it as a HTTP header in the request to backend. See fig 1 below. fig1 [user with correct ...
1
vote
0answers
45 views

haproxy with SSL in front of apache for local development

I work on a web app that regularly makes AJAX calls to a REST server that (in production) is accessed via the same domain. While developing locally, I have been redirecting REST calls to a dev server ...
1
vote
0answers
105 views

AWS ELB with SSL backend adds proxy protocol inside SSL stream

Note, this has been also posted in http://thread.gmane.org/gmane.comp.web.haproxy/27737 we are trying to configure this architecture: ELB terminating SSL, using preconfigured certificates. (this ...
1
vote
0answers
33 views

haproxy process not releasing memory

After a reload, old haproxy process remains there and doesn't release memory (sometime it does but behaviour is not consistent). After killing the old process (several days old) the memory get ...
1
vote
0answers
84 views

Clustering of wildfly using apache and haproxy

There is a requirement from my boss to prepare a cluster of our application on wildfly application server. I have designed the architecture as two haproxy(for loadbalancing),two apache servers for (...
1
vote
0answers
22 views

MySQL proxy authentication options

I have a farm of production mysql servers that are currently protected by restricted passwords. I would prefer to restrict access to these systems at network level, but have to account for the fact ...
1
vote
0answers
110 views

Nginx proxy with varying source address

I have a working nginx configuration to proxy all requests to a server from a range of source IPs. I currently have 20 source IPs set up, and the configuration is quite massive. I removed the other 18 ...
1
vote
0answers
45 views

monit: add NOALERT in an IF construct

On debian jessie, I have configured monit to check for HAproxy particular port forwardings, and to restart it if failed like this: check process haproxy with pidfile /run/haproxy.pid group www-...
1
vote
0answers
524 views

Exchange 2013 MAPI over HTTP Load balancing HAProxy

We have successfully managed to deploy HAProxy as a Layer-4 load balancer for all our Exchange 2013 SP1 HTTP based traffic (Autodiscover, OWA, EXP, EWS, MAPI, etc.) For various reasons, however, we ...
1
vote
0answers
82 views

Varnish - behind, in front of, or instead of load balancer(HAProxy/nginx)

I intend to run a few tiny ARM "physical cloud" servers behind a load balancer(either HAProxy or nginx itself), but i can't decide where to put Varnish in the whole mess. I can either have it on each ...
1
vote
0answers
90 views

haproxy anonymous frontend, authorized backend with NTLM

Need to provide an anonymous readonly access to an svn repository AFAIK, haproxy cannot auth on backend by itself. There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
0answers
31 views

HAProxy qtime meaning

According to the HAProxy documentation the metric qtime represents the average queue time over the last 1024 requests. My question is, does this metric average ALL requests, or just those that have ...
1
vote
0answers
24 views

HAProxy HTTP Response “Other”

The HAProxy documentation lists the possibility of returning non-conforming HTTP status codes: hrsp_other [.FBS]: http responses with other codes (protocol error) Are these simply error codes ...
1
vote
0answers
113 views

Appending URL subdomain as URL path in HAProxy

I want to convert following URL: http://subdomain.example.com/a/b/c To this: http://example.com/subdomain/a/b/c In HAProxy. Thanks a lot
1
vote
0answers
196 views

Haproxy disable Secure Renegotiation

I want to disable secure renegotiation in HAproxy-1.5.2, but can not find anything about it on the official documentation: http://www.haproxy.org/download/1.5/doc/configuration.txt My SSL HAproxy ...
1
vote
0answers
231 views

Webdav through HAProxy

I am trying to connect to a WebDAV server through HAProxy. The goal is to direct all traffic through one port, 5443. My HAProxy server is bound to port 5443 with SSL. I have tried connecting to ...
1
vote
0answers
73 views

how do persistent http connections (http-keep-alive) affect the Tq value?

From what I understand, the Tq time is the time between the end of the TCP client handshake and the time that the last HTTP header is read. The haxproxy 1.4 manual describes Tq time as: Tq: ...
1
vote
0answers
50 views

varnish ignore haproxy session affinity cookie

I have HAproxy behind varnish and I need use session affinity based on cookies. In default configuration, varnish doesn't cache content when the cookie is present. Anyone knows, how to tell varnish ...