Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [haproxy]

HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

0
votes
1answer
23 views

How can I configure haproxy to put two frontends to access owa online?

I am facing a problem with HAPROXY on an Ubuntu 16.04 server when redirecting to show OWA on the internet. I have a domain, and I installed exchange server 2013 on windows server 2012 r2. I need to ...
0
votes
0answers
6 views

Not able to call lua script from haproxy cfg

I am just a beginner. Started learning basics with lua and haproxy. I get below error while calling lua script from haproxy.cfg. [ALERT] 289/151738 (4209) : parsing [/usr/local/etc/haproxy.cfg:25] : ...
2
votes
1answer
43 views

haproxy does not add headers conditionally

I have the following config, it's under the frontend section for tls connection and haproxy terminates https connections: acl domain-acl-host hdr(host) -i domain.tld rspadd X-Foo:\ bar if domain-acl-...
0
votes
1answer
14 views

URL path Redirection in Haproxy.cfg

I have https://www.mysites/v1/pages and I want that to redirect to https://www.mysites/v2/pages I have added the following config on HAproxy config but not forward. redirect location https://...
-1
votes
1answer
79 views

Rewrite host header in HAProxy

Trying to rewrite the host header in HAProxy, but can't figure how to do it right. I need the to rewite to another domain. Users access the webpage on URI: site1.dev.example.com and I need to ...
2
votes
1answer
32 views

Enable HTTP Strict Transport Header globally in HAProxy

I want to enable HTTP Strict Transport Security (HSTS) Headers globally for all my backends in HAProxy v1.5. Following the instructions from https://www.haproxy.com/blog/haproxy-and-http-strict-...
0
votes
1answer
21 views

HAProxy doesn't automatically reload DNS

I've installed HAProxy 1.7.5-2 on a Debian Stretch (9) for a blue/green deployment infrastructure. HAProxy is setup in TCP mode and reloads DNS every 5 seconds but it doesn't. global log 127.0.0....
0
votes
0answers
15 views

Haproxy rabbitmq proxy isn't working on any other ports

I'm trying to make an haproxy that routes traffic to three different rabbitmqs global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid ...
0
votes
0answers
8 views

HAProxy using basic auth doesn't always match user

Current Configuration: userlist users user user insecure-password password frontend http bind *:80 acl auth_matches http_auth(users) http-request auth realm draw unless ...
0
votes
0answers
12 views

Why do my HAProxy logs contain many entries with session termination state 'CD'?

I have an HAProxy instance in front of Nginx. HAProxy is listening in TCP mode so that Nginx can do SSL termination. In my logs I'm seeing lots of entries like this: x.x.x.x:37770 [03/Oct/2018:21:19:...
1
vote
0answers
13 views

HaProxy randomly returning 503 for static files when servers are available

HaProxy is randomly returning 503 even though there definitely are backend servers available. The backend is serving the files correctly, as it's access log shows it always returning a 200 or 304. I'm ...
0
votes
0answers
13 views

How to use HAProxy as a load balancer for LXC containers running nginx for HTTP and HTTPS requests?

Ok so i'm running two different sites one on the main domain xyz.com and test.xyz.com i want xyz.com to use https and i want test.xyz.com to run on simple http. I'm running each site on different lxd ...
0
votes
0answers
14 views

Log Client Ciphersuite in HAProxy

We know of log configurations that can log negotiated cipher-suite info in successful connections. But what we need to do is to log the client cipher-suite info that HAProxy gets hold of during TLS ...
0
votes
0answers
23 views

Receiving BADREQ 400 errors on HaProxy?

I have been getting a sizeable number of BADREQ entries in my HAProxy log (10+ per minute). Example: Oct 1 19:46:00 LB haproxy[19022]: 69.171.251.8:57356 [01/Oct/2018:19:46:00.903] sitename ...
-1
votes
1answer
19 views

Need help installing ejabberd on Centos/RHEL7 with SELinux and reverse proxy

I've been trying to get a web client to use EJabberd on the recommended port (5281) through a reverse proxy (HAProxy) on Centos7 with SELinux enabled. I am not familiar with SELinux context rules. ...
0
votes
0answers
12 views

Force HaProxy to use same sticky session cookie across subdomains

I have a site with multiple subdomains. example.com img.example.com etc. They all point to the same HaProxy load balancer, which uses sticky sessions. Behind the load balancer, I have a number of ...
-1
votes
1answer
12 views

haproxy and certificates mismatch

I have been wrestling with Haproxy for a few hours now and I am probably missing something in my limited know-how. I have two servers (ha1.domain.com and ha2.domain.com), both with keepalived and ...
0
votes
1answer
36 views

How to split vpn traffic from https traffic on the same port using haproxy?

I have a following goal: Running softhether vpn and web applications both on port 443. I want all traffic to come to haproxy, which sends vpn to one container, and the rest to another container (...
0
votes
0answers
22 views

For many different TCP hosts, how can I differentiate and route them from the same external IP?

I realize I may be asking the impossible here -- At the moment I use too many elastic IPs, and they cost money. Not only do they cost money...but in a disaster scenario, it takes time to reattach 25 -...
0
votes
0answers
13 views

HAProxy: Creating an HTTP request-only log file

I'm trying to split my HAProxy (v1.6.12) logs so that one file only contains the HTTP request logs, while the other contains only start/stop/etc logs. I have this in my config: global log 127.0.0....
0
votes
0answers
66 views

HAProxy reverse proxy - multiple sites

I have configured HAProxy as reverse proxy - with single SharePoint site, server and it's working (SSL pass-through on IIS), but when I'm trying to configure two compeletly different SharePoint sites ...
0
votes
1answer
40 views

How to prevent nmap from fingerprinting HAProxy

In our periodic security scans, our HAProxy instances are always reported as a version disclosure vulnerability. On further inspection, it appears that there are no version banners in any responses ...
0
votes
1answer
62 views

HAProxy does not perform SNI lookup

HAProxy v.1.5.18, 1.7.11, listening on a single IP address with a wildcard SSL certificate, I need to specify several backends with SNI lookup. There's a ton of config-files that all say req_ssl_sni -...
0
votes
1answer
28 views

HAProxy: Use saved state to restore backend IPs possible?

We are using HAProxy 1.8.13 on Centos 7 with dynamically assigned backends (backend IPs and ports assigned over stats socket). This works fine. We need a method to make the dynamically assigned ...
0
votes
2answers
136 views

SharePoint - HAProxy reverse-proxy (issue with SSL)

UPDATE BELOW I decided to use HAProxy as reverse-proxy for SharePoint sites and without SSL everything works fine, but with SSL I can't start haproxy.service. I was trying with many configurations, ...
0
votes
0answers
16 views

How can you prevent X-Forwarded-For spoofing on haproxy? [duplicate]

Is there a way to prevent the X-Forwarded-For from being spoofed in haproxy? i.e. Can I rename that header to something else? Or is there another way to forward on the correct IP address of the ...
0
votes
1answer
298 views

HAProxy: Run external-check command every 30 seconds

I have HAPproxy configuration with two servers: listen 10.10.10.10 bind *:1234 mode tcp option tcplog balance roundrobin timeout client 5h timeout ...
0
votes
1answer
27 views

Unable to access mongodb from my desktop

I'm trying new GUI of MongoDB called Compass. However, my MongoDB server is on the Azure virtual machine which has private IP only. All Azure servers in our virtual subnet are accessible via one ...
0
votes
1answer
30 views

HAproxy + Varnish

As seen on the picture below, this is my current planned setup, I need to tell HAproxy to send users to the Varnish, if HAproxy detects a cache-miss, or dynamic/pseudo-dynamic content, it will send ...
0
votes
1answer
128 views

HAProxy 504 Gateway Time-out Exchange 2016

I have been trying to use HAProxy as a proxy and load balancer for my 2 Exchange 2016 mail servers. Whenever I hit the IP of the HAProxy server I get a "504 Gateway Time-out" error. I have tried ...
0
votes
0answers
14 views

My Haproxy LB not show real statistic

i have issue with statistic of haproxy loadbalancer. i have four backend servers with one load balancer. after a few hours from restart services in haproxy load balancer, statistic from the haproxy ...
0
votes
0answers
42 views

HAProxy configure TLS 1.2 signature algorithms extension

We have a quite strange TLS setup where clients perform a handshake with SHA-512 but can only handle SHA-256 in the cryptographic lib behind it. Therefore we need to configure HAProxy not to offer a ...
0
votes
1answer
54 views

HAProxy dynamic server address based off of variable

I want to dynamically route to a server by making use of a request variable ssl_fc_sni. Is it possible to configure haproxy server statement to use a variable for address and/or port? Example backend ...
0
votes
1answer
73 views

How to use “Set weight” in HAProxy

Hi I have configured an HAProxy server in haproxy.cfg to balance the traffic flow between two servers, say server web1 10.10.10.10 weight 50 server web2 10.10.10.11 weight 50 For testing purpose we ...
0
votes
0answers
12 views

AD authentication for HAProxy on Linux

How to configure HAProxy server in Linux to receive the web access request for the users from internet after successful AD authentication for the users.
0
votes
0answers
30 views

HAProxy logs show client_IP to be the IP of the server

I'm running HA-Proxy version 1.5.18 2016/05/10 in TCP mode. Config: defaults option forwardfor header X-Client mode http log global option ...
0
votes
1answer
110 views

serve static file when response status 404 HAproxy

I want to serve a static file like errorfile when the response status is 500. I have to use this config in the backend section.
0
votes
1answer
16 views

Regex to Identify an URL Parameter Not Knowing Which Parameter It Will Be

So I've been working on building out an haproxy cluster (1.5.x) and hit a snag where for a particular webapp I'm wanting to pitch API GETs to a read-only app cluster and the PUTs into a much smaller ...
0
votes
1answer
167 views

TCP passthrough for HTTP connection with haproxy

I have done passthrough for HTTPS/SSL connections using SNI, but Id don't know if I can do the same for HTTP using host header? is there any way I can use passthrough (tcp mode) in stead of reverse-...
0
votes
0answers
32 views

SPOE and modsecurity contrib Failed to decode HELLO frame

I'm compile modsec as described in the instructions contib/modsec/README, but have the next errors: # /usr/local/bin/modsecurity -n 4 -d -f /etc/haproxy/waf/modsecurity.conf 1534409877.286475 [00] ...
0
votes
1answer
52 views

Add LimitNOFILE on haproxy init script

I want to add open files limit to HAProxy 1.8 process to 1024576. But since I use version 1.8, I cannot add LimitNOFILE to init scripts, instead of systemd file. How can I add limitNOFILE to those ...
0
votes
0answers
33 views

TCP HaProxy Error 400

I set up a syslog generator to send logs using 514 and received via rsyslog (10.1.1.1) then using same host but diff port to set up HaProxy (10.1.1.1:1936) and from HaProxy to forward those logs to 2 ...
0
votes
0answers
91 views

haproxy “no server available” but backends are reachable

I've got haproxy serving two backends for my servers with this configuration: frontend a_prod maxconn 500000 bind 0.0.0.0:1234 mode tcp option tcplog log ...
0
votes
0answers
40 views

Running HAProxy in front of sonarqube on localhost as docker containers (enable HTTPS)

I am trying to enable HTTPS for sonarqube using HAProxy on my local ubuntu PC. I am running both sonarqube and HAProxy as docker containers based on: https://hub.docker.com/_/haproxy/ https://hub....
0
votes
1answer
62 views

haproxy ssh path based routing

I have a use case where I want to use haproxy to forward ssh requests to different back end servers. I want a user to be able to ssh to proxy.example.com/server1 and haproxy forwards the request on ...
0
votes
1answer
90 views

API Connect 2018 Developer portal installation failure

Good day. I was installed API Connect 2018 management and portal hosts (version 2018.2.10) using Install Assist utility (apicup). Management server started ok, i see APIConnect is UP after 'apic ...
0
votes
2answers
160 views

Modify http headers for specific URL’s with HAProxy

For a specific URL, I'd like to set cache-control headers for static assets such as /images/*, /js/*, etc. that tells the browser to use the local cache for lets say 30 days instead of fetching a new ...
0
votes
1answer
93 views

haproxy http request <NOSRV> reponse

I have following configuration in /etc/haproxy/haproxy.cfg > frontend LB > bind *:80 > reqadd X-Forwarded-Proto:\ http > default_backend LB > > frontend LBS ...
0
votes
1answer
41 views

DDOS attack protection HAPROXY SSL

I'm trying to protect my server from DDOS attacks, my server always have a redirection to the SSL/HTTPS protocol. but I'm using the next configuration and it's not working frontend http-in bind *...
0
votes
2answers
452 views

HAproxy health check for https backend

I have haproxy configuration that works perfect for vault server in the backend with http configuration and it load balance based on unsealed and active vault server using 200 OK code. This works for ...