1
vote
2answers
29 views

HAProxy with SSL and sticky sessions

We're trying to set up HAProxy (v1.5.1) to use SSL. While we managed to do that, we're having some issues with the round robin settings: We do want to have stick sessions, but haproxy seems to send ...
1
vote
1answer
387 views

HAProxy isn't accepting reissued GeoTrust certificate

I requested a reissue of a GeoTrust certificate in light of the Heartbleed bug. We're using HAProxy 1.5-dev22 with OpenSSL enabled. I've updated OpenSSL on all affected instances. The PEM that ...
1
vote
1answer
433 views

Server Performance (HAProxy, Nginx, SSL)

I've been struggling recently with try to identify where the performance on our environment is bottlenecking. Environment (each server is Linux VM, 8 Cores, 32 GB RAM): Load Balance: 50 Web Servers ...
1
vote
0answers
36 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
3
votes
2answers
1k views

haproxy multihost with ssl acl

how can I use ACL rules in haproxy (1.5dev19) for server multiple hosts with own ssl certificate for each?? I have 3 backends with multiple domains all on one IP address. nodejs (http/https/ws/wss) ...
1
vote
0answers
72 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
0
votes
0answers
186 views

Squid proxy connect method for SSL connections not working with people who are running nginx

I have a system which looks like this: Tomcat Server (has haproxy installed and balances my proxy servers) >> squid proxy server >> outside. This is the connection flow. My tomcat instance stores ssl ...
0
votes
1answer
114 views

HAProxy SSL connection error

Brand new to setting up SSL with HAProxy and Litespeed load balancer, just generated my certificate using the .csr and am trying to have HAProxy terminate SSL before sending it to the web worker ...
1
vote
1answer
257 views

Logging client ip address from tcp connection from HAproxy to nginx

If internet traffic comes through an HAproxy load balancer on SSL and that is passed to an nginx web server, how can I log the clients ip address? I'm aware of methods like this: How can I use ...
1
vote
1answer
40 views

Running http checks over SSL with HAProxy

I'm trying to check my application (which runs on SSL) with haproxy. As I read the documentation, my options for health checks are: httpchk, which sends an HTTP request to a configurable URL ...
1
vote
1answer
1k views

Possible for HAProxy to perform a mix of SSL termination and passthrough?

I'm working on analyzing an intermittent load balancing failure in our application. Previously we had been using the AWS Elastic Load Balancer in the following configuration: HTTP 80 -> HTTP 80 ...
0
votes
1answer
351 views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
3
votes
1answer
6k views

How to horizontally scale SSL termination behind HAProxy load balancing?

I've been looking around and no one seems to be trying to scale SSL termination the way I am and I'm curious as to why my approach seems so uncommon. Here's what I want to do followed by why: ...
2
votes
1answer
765 views

SSL Termination with HAProxy and Nginx on Ubuntu

I've been following this tutorial: http://www.exratione.com/2012/12/websockets-over-ssl-haproxy-nodejs-nginx/ ...but I've been having problems connecting to Nginx through HAProxy via SSL. I'm ...
0
votes
1answer
320 views

SSL with HAProxy

Having a strange problem with Haproxy. I'm using it to frontend SSL connections to a few Joomla sites and the sites don't appear to be picking up on the https front end which is leading to javascript ...
0
votes
2answers
260 views

What steps i need to configure ssl on haproxy/iis

I have two web server and one haproxy load balancer in front of them. I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with ...
1
vote
1answer
2k views

Haproxy SSL offloading

I want to load balance 2 apache/php servers with haproxy Googling around I saw that since version 1.5 dev12, haproxy supports SSL offloading, which as I understand means that there is no need for any ...
8
votes
1answer
192 views

Set header key based on SSL ID

Is there a way to set a header key based on SSL ID value with HAProxy 1.5? We would like to use the SSL ID as the session ID for clients who do not support cookies.
2
votes
1answer
156 views

HAProxy crashes on all requests in 1.5-dev12

I'm having an issue where HAProxy is crashing with no explanation when I switch from 1.4.12 to 1.5-dev12. The reason I'm switching is for the SSL offloading. My config file doesn't have any errors, ...
2
votes
0answers
130 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
1
vote
2answers
546 views

haproxy + nginx: https trailing slashes redirected to http

I have a setup where HTTP(S) traffic goes from HAProxy to nginx. HAProxy nginx HTTP -----> :80 ----> :9080 HTTPS ----> :443 ----> :9443 I'm having troubles with implicit ...
1
vote
1answer
838 views

Issue with SSL using HAProxy and Nginx

I'm building a highly available site using a multiple HAProxy load balancers, Nginx web serves, and MySQL servers. The site needs to be able to survive load balancer or web servers nodes going offline ...
2
votes
2answers
673 views

Should I use an ssl terminator or just haproxy?

I'm trying to figure out how to set up my architecture for a socket.io app that will require both https and wss connections. I've found many tutorials on the web suggesting that you use something like ...
0
votes
2answers
253 views

Haproxy Acl in Https

In haproxy settings there is frontend which bind on 443. The problem is inside this frontend I need to use acl rules in order to distinguish traffic based on server_name. However, if I am understand ...
0
votes
3answers
737 views

HAProxy NGInx SSL setup

I've been looking around different setups for a server cluster supporting SSL and I would like to benchmark my idea with you. Requirements: All servers in the cluster should be under the same full ...
1
vote
1answer
449 views

Nginx + SSL + Rails + Juggernaut (Node.js) + Engineyard

I have two different applications on the same server. One of them is running on the 80 port (mydomain.com), another on the port 443 (sub.mydomain.com) and has wildcard certificate. The first ...
3
votes
1answer
438 views

HAProxy and Stunnel PCI Compliance

I am setting up HAProxy to load balance between two web servers. Some of the pages on the site require SSL. Stunnel is handling the https connections and passing them off to haproxy (Stunnel ...
16
votes
7answers
23k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
8
votes
4answers
5k views

haproxy + stunnel + keep-alive?

I'd like to put stunnel in front of haproxy 1.4 to handle HTTPS traffic. I also need stunnel to add the X-Forwarded-For header. This can be achieved by the "stunnel-4.xx-xforwarded-for.diff" patches ...
0
votes
3answers
573 views

Architecture question: adding SSL into the mix

Currently we have a configuration that at the highest level looks like this: [Traffic] -> Varnish (caching) -> HaProxy (load balancing) -> Apache (content and services) There are (obviously?) ...
2
votes
1answer
659 views

HTTPS Stunnel and Haproxy

I am trying to use stunnel infront of Haproxy for SSL support. SSL certificates are located according to stunnel configuration. I am also able to get the https connection, but every time I use https, ...
2
votes
3answers
1k views

haproxy SSL “fail whale” maintenance page

We're using haproxy's custom error page feature to show a "fail whale" maintenance page while we're doing deployments to our site. However, since haproxy cannot show SSL'd users the custom error ...
1
vote
3answers
2k views

OpenSource (Layer 4) Load Balancer that can pass through original client IP?

I am setting up a web application which uses SSL for all requests. It needs to have room for scaling and also be highly available. It seems that the "recommended" way to handle this is to setup a pair ...
1
vote
1answer
6k views

HAProxy not passing SSL traffic in TCP mode (unknown protocol)

I've got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully. I'm now trying to get SSL traffic to work (in TCP mode and on just one ...
3
votes
2answers
2k views

Is HAProxy able to pass SSL requests to Apache + mod_ssl?

Most of the documentation I've read regarding HAProxy and SSL seems to suggest that SSL must be handled before it reaches HAProxy. Most solutions focus on using stunnel, and a few suggest Apache + ...
1
vote
1answer
3k views

HaProxy - Http and SSL pass through config

I've currently got an HaProxy LB solution in place and everything is working fine however we are having an issue with a very few clients who cannot get to our site via HTTPS (SSL) they can browse our ...
2
votes
2answers
697 views

ssl offloader for websockets

im looking for a proxy which supports a massive load (like nginx or haproxy) and can handle websockets and ssl. i know only nginx which does not support websockets and haproxy which doesnt support ssl ...
7
votes
2answers
2k views

HAProxy SSL Farm Options

I am trying to figure out how to set up an SSL farm with haproxy and SSL reverse proxies and I am looking for some general advice: Is it possible to meet all of the following: Load balance requests ...
2
votes
1answer
1k views

Stunnel too many clients

I'm trying to hook up stunnel and haproxy to forward https connections through to some backend servers. I've got haproxy setup right, and I seem to have stunnel set up right. Trouble is that when I ...
6
votes
6answers
2k views

why no examples of horizontally scalable software load balancers balancing ssl?

I have a bunch of questions with respect to ssl, local sessions, and load balancing which seem to be interconnected, so I apologize in advance for the length of this question. I have a website which ...