Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,096
questions
0
votes
0
answers
17
views
HAProxy load balancing check
I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
0
votes
0
answers
17
views
HAProxy LaodBalancer [closed]
I have 2 web application running on different servers
Can I configure load balancing in one haproxy server ?
EG
webapplication 1
server Node A
server Noad B
WebApplication 2
Server Node C
Server Nod ...
0
votes
0
answers
25
views
Letsencrypt + HAProxy SSL Offloading
I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported.
Does anyone have a recipe that has been working in ...
- 239
0
votes
0
answers
18
views
Why HAProxy session cookie is changing?
I run two containers of an app behind an Haproxy and use sticky sessions. I configured it with a cookie as follow :
cookie SERVER insert indirect nocache
server app1 app-1:443 check ssl verify none ...
- 1
0
votes
0
answers
35
views
HaProxy - Add authorization header per backend
I want to add an autorization header per backend, it's possible?
I already try this but is not working
backend default_ad_agent
mode http
http-request add-header Authorization "...
0
votes
0
answers
70
views
curl: (7) Failed connect to 192.168.169.128:80; Connection refused, how to fix?
Why is my haproxy load balancer not working?
I'm on centos 7.
I've set up 2 servers "nginx-node01" and "nginx-node02". As the name implies these 2 servers are of nginx. They're up ...
0
votes
0
answers
47
views
Real IPV6 IP address in haproxy
We have a haproxy configuration with IPv6 frontend and backend. Its configured in TCP mode. When traffic is coming from an IPv6 ip address, in haproxy logs, its showing correct IPv6 IP address but in ...
- 1
0
votes
1
answer
27
views
How to use DSR load balnce from two different network?
I have a server (A) which clients connect to it throw internet and its ip is 195.45.10.2 it route trafic to server (B) and its ip is 85.10 20.2 . So now I want to use some thing like dsr to let server ...
0
votes
0
answers
15
views
HAProxy stats page does not update when new server is added/removed via dataplane API
I am using dataplane api to dynamically add/remove backend servers. I was expecting haproxy stats to update accordingly with new haproxy config version generated by dataplane API. Am i missing ...
1
vote
1
answer
51
views
Why haproxy can not set custom header for ingress-nginx
I have config haproxy.cfg like bellow
...
frontend app
bind *:443
mode tcp
option tcplog
option forwardfor
http-request set-header X-AONE-IP 10.0.0.1
...
- 11
0
votes
0
answers
150
views
Direct Server Return software and configuration for mesh network of raspbery pi servers
I don't know much about DSR technology but as I am aware both load balancer and servers need to be behind same router because of virtual IP addresses.
I need solution to have cloud-based geo-based ...
- 133
0
votes
0
answers
71
views
HAProxy backend with different path prefix per server
Is it possible to configure an HAProxy backend with multiple servers and different path prefix for each server? I want something like this:
backend mybackend
server node1 server1.example.com/...
- 370
0
votes
1
answer
183
views
Haproxy as a mail protocols reverse proxy with SSL termination
Looking for guidance of how to configure haproxy 2.4 in a container, to proxy for a mail server (all protocols, imap/s, smtp/s, pop3/s, http/s) and having haproxy doing ssl termination, but also ...
- 239
0
votes
0
answers
79
views
HaProxy Configuration For Microsoft Graph API and OAuth Token
I am not an expert with HA proxy, that can be the first reason for my requests getting failed.
I have a Java application that is on a server which dont have access to Internet. Access is only ...
- 51
0
votes
0
answers
203
views
Multi master kubernetes cluster with haproxy LB, cluster is not working after master node restart(Unable to execute kubectl cmds)
I have installed multi master cluster, referring to the guide Setting up k8 multi master cluster
Setup details as following.
Load balancer: Haproxy LB
frontend kubernetes-frontend
bind 192.168.1....
1
vote
0
answers
128
views
Haproxy deny domain and path with map
I would like to make deny for specific domains + path preferably using maps or text file in haproxy.
For example, I would like to define file with domain:
example.com/test-path
example2.com/another-...
- 11
0
votes
1
answer
66
views
HA Proxy fails ssl validation
We are using a Godaddy wild card certificate on HA (Wildcard.pem) and custom CA certs on the backends. The in-house CA is trusted by HA and all servers. I can access all backend servers individually ...
- 103
0
votes
1
answer
792
views
How to support TLS 1 and TLS 1.1 with haproxy 2.4 and OpenSSL 3?
I am trying to support TLSv1.0 and TLSv1.1 with haproxy 2.4.18 (and OpenSSL 3.0.2) on Ubuntu 22.04.
I have followed Mozilla SSL Configuration Generator, "Old" configuration, slightly ...
- 101
0
votes
0
answers
85
views
proxy hlds from subdomain to docker conatiner
There are several docker containers with different hlds servers. There are several subdomains for them. How to combine them, to make, for example, map subdomain.domain.com to some container udp port, ...
0
votes
1
answer
280
views
Haproxy Stats page not working with TCP mode
Haproxy experts,
I'm unable to get haproxy stats page to work with TCP mode for the backends.
global
log 127.0.0.1 local2
chroot /var/lib/haproxy
pidfile /var/run/haproxy....
- 3
1
vote
1
answer
40
views
cURL to OWA not working from newly-installed RHEL server but working from Ubuntu server
I have two Linux servers acting as a reverse proxy between my Exchange server and the internet. The newest server is RHEL 8.7.
When I attempt to cURL to OWA from the RHEL server I am getting the ...
- 211
0
votes
1
answer
463
views
HAProxy and postgres
My haproxy configuration is as below, in the backend there is pg_autoctl cluster, another VM (bunty4) hosts the monitor and haproxy is installed on it.
global
maxconn 100
defaults
log global
...
- 23
0
votes
0
answers
34
views
HAproxy as fowarding server?
I am trying to forward requests, locally to haproxy. I cant seem to get it working, I have a script which calls this end point every n sec, and even though i have it set on etc/hosts it doesn't get ...
- 101
0
votes
1
answer
319
views
Haproxy will not load balance smtp
I have been struggling with Haproxy for a long time now to configure smtp load balancing. Whatever I do, the server responds with a black screen and no possibility to try out smtp commands to test. ...
- 1
0
votes
0
answers
68
views
Configuring HAProxy on EC2 to listen on 0.0.0.0 then using security group to whitelist IPs to DB in private subnet
Right now I have a VPC with an EC2 instance in a public subnet and a Redshift DB in a private subnet, allowing traffic inbound from the EC2 instance. My company does not use a traditional intranet ...
- 101
0
votes
0
answers
137
views
Can't get the users public IP from within a docker container for a whitelist
I'm using docker-compose for context. So I have a docker container 'proxy' which as you may have guessed, acts as a proxy to other containers. It does this based on the subdomain used.
x.localhost ...
- 111
0
votes
0
answers
27
views
HAProxy balance API
I have use many hour to search and learn the HAProxy config but i can't make the desired result in any way.
I'll explain my scenario.
I have three different server:
api1.test.eu 10.20.30.130:8764
api2....
- 1
0
votes
0
answers
66
views
Most lightweight manner (healthcheck) without logging to see if a Linux/macOS system is up?
I've been setting up a HAproxy before two systems that both run postfix and dovecot. As I have it now, I have three public services (one for each port: 25, 587, 993) behind which there are three ...
- 161
0
votes
0
answers
42
views
Any way to use multiple frontends for each port(443) for multiple domains, for Haproxy?
I have about 20+ domains to load balance using single haproxy. to differnt backend. i want all of them to route from haproxy but have isolation of each frontend too.
when i tried to use each domain ...
- 4,279
0
votes
0
answers
56
views
haproxy between http-only client and websockets only backend
odd request maybe, but I have a need to proxy between a HTTP-only client and a WebSocket-only server. these are not long-lived connections; the client does a POST with some binary data that needs to ...
- 1
0
votes
1
answer
103
views
socat is missing commands for haproxy on ubuntu 20.04
I have installed haproxy 2.6.6, socat 1.7.4.1 and have a working load balancer for Exchange. I want to be able to turn off a node for maintenance and have unsuccessfully tried to use socat to do this.
...
- 1
0
votes
0
answers
41
views
haproxy "max open files" reduces automatically after startup
I was trying to fix the following error being logged by haproxy...
Proxy https-in reached process FD limit at 544. Please check 'ulimit-n' and restart
...and added LimitNOFILE=1024 in haproxy's ...
- 479
0
votes
0
answers
24
views
What is the difference between Administrative State and Operational State in HaProxy?
Searching for "administrative" in the manual of HaProxy results in very few matches, none of them much helpful.
I need to understand this because I had a server in maint state and ubuntu ...
- 205
0
votes
1
answer
206
views
HaProxy - Does prefer-client-ciphers mean the client can choose a cipher not supported by a server?
Considering a setup like this:
global
# intermediate configuration
ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-...
- 75
0
votes
1
answer
289
views
Can't use external-check in Haproxy
I'm trying to use the option external-check in haproxy, but after service restart in log I see:
Dec 30 10:41:34 1 haproxy[89540]: [WARNING] (89540) : config : 'external-check command' will be ignored ...
- 1
1
vote
1
answer
632
views
Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?
I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
- 100
0
votes
0
answers
68
views
HA-Proxy http-request deny for several ACLs
I want to restrict access to some domains in my HAProxy, actually, I already did but I want to improve the settings. This what I have:
acl network_allowed src 22.33.44.55/32
acl acl-public-domain hdr(...
- 101
0
votes
0
answers
79
views
https only working for login page on kubernetes
I have an EKS cluster that I upgraded to 1.23. The cluster was working prior to the upgrade. I am using an ELB loadbalancer which points to an nginx-ingress controller. The ingress-controller I had ...
- 1
0
votes
0
answers
32
views
How to get URI and request method information in statistics HAProxy
I'm using haproxy for basic load balancing for my web application servers.
I have configured haproxy stats page to get information about the request. But it lacks the data like source IP, URI, the ...
0
votes
0
answers
219
views
use HAproxy to route IPv4 address to IPv6
I wish to direct all http traffic on port 4000 on an IPv4 server, to another server that only accepts IPv6. socat works for fine for http (but not https) as follows:
sudo socat TCP4-LISTEN:4000,fork ...
0
votes
1
answer
575
views
HaProxy redirect to internal URL
I have a configuration with two backend servers I need to redirect 301 to each server with an internal URL on HTTP. It's hard to use SSL because I can't install SSL on the Report Server in that ...
- 1
0
votes
0
answers
613
views
nginx-ingress displays 404 page
I have an EKS cluster that I inherited (no documentation). The cluster hadnt been upgraded in years. I was tasked to upgrade it. The version on nginx-ingress was from quay.io which is no longer ...
- 1
2
votes
1
answer
1k
views
How to setup haproxy to connect to backend server using HTTP/3 QUIC?
I am able to configure HAProxy to to present itself as an HTTP/3 server by following instruction here: https://www.haproxy.com/blog/announcing-haproxy-2-6/
bind :443 ssl crt server.pem alpn h2,http/1....
- 181
0
votes
0
answers
49
views
Adding new servers with SSL certificates using HAProxy APIs?
Using HAProxy APIs, can we add a new server configuration with a SSL certificate installed so that we can serve the new domains via https ?
Is this possible to achieve using HAProxy APIs only ? or a ...
- 150
1
vote
1
answer
446
views
Why is "tcp-request content accept" frontend instruction is required for proper HAProxy SNI-based routing?
I've recently tried to set up SNI-based routing on HAProxy for mongodb mongodb+srv protocol connection.
I made it working, but it wasn't until I put
tcp-request inspect-delay 5s
tcp-request content ...
- 41
0
votes
1
answer
153
views
Why do i see ipv6 addresses on haproxy logs?
We have received complaints that some users cannot access the site during the day. Somehow they see maintanence page. When we examined the haproxy logs, we saw that all 503 error's requests' source ...
- 1
0
votes
0
answers
124
views
HAProxy with PfSense - servers not resolving to HAProxy IP
Trying to set up HAProxy so that I can access my NAS externally via SSL.
From what I understand, when doing a DNS lookup on the NAS, it must resolve to HAProxy's IP. If this is the case, how do I ...
- 101
0
votes
1
answer
102
views
Check response of one backend before proxying to another
I have two backends in two locations behind an Nginx frontend. Backend A implements authentication with OAuth. Backend B doesn't.
I think a lazy way of adding authentication for location B would be to ...
- 103
0
votes
1
answer
475
views
Patroni Haproxy and pg-bouncer architecture
I'm building a patroni postgres cluster, however, I can't decide which is better architecture
App > HAproxy > Pgbouncer > PostgreSQL (patroni)
App > PGBouncer > HAproxy > PostgreSQL (...
0
votes
0
answers
143
views
HAProxy inside Kubernetes proxying to MariaDB Galera Cluster VMs having intermittent connectivity if more than one pod
My project at work is having applications running on Kubernetes that connect to MariaDB Galera cluster running on VMs. To manage the connections to the MariaDB, I'm using HAProxy running as pods ...
- 186