Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,127
questions
0
votes
0
answers
18
views
HAPROXY 2.8 drain mode is not working
I'm running HAPROXY 2.8 on ubuntu 22.02.4 LTS,
I want to put "svr01" in drain mode, I tried all of the following commands but it didn't work!
echo "set server app/svr01 state drain"...
0
votes
0
answers
29
views
Using haproxy for websockets
I have a number of websocket servers with and without SSL and with and without path. I need to put a haproxy in front of them and round robin over them. I tried various configurations and none of them ...
0
votes
0
answers
64
views
Website's file types all set as HTML when going through HaProxy
When I open "my-website.com", the full page never loads because the .css and .js files seem to be served as html. This only happens when accessing the website through my loadbalencer.
I have ...
0
votes
0
answers
30
views
haproxy: inline acl with variable in statement condition
Let's have following backend configuration:
HAProxy version 2.4.24-0ubuntu0.22.04.1 2023/10/31 - https://haproxy.org/
backend back-test
http-request set-var(req.instance) hdr(X-Instance-Name)
...
0
votes
1
answer
91
views
HAProxy always returns 502 Bad Gateway but the backend responds
I have a HAProxy 2.8.4 which is used to proxy multiple HTTPS services on multiple URL paths and several different backends, and also a PostgreSQL cluster over TCP. This is the full haproxy -vvv output:...
0
votes
0
answers
38
views
What is the proper way to setup Rados Gateway (RGW) under Ceph using Cephadm?
I have setup a 'reef' Ceph Cluster using Cephadm and Ansible in a lab environment. I have buckets and pools already setup. The ceph.io site is confusing on how to setup the Rados Gateway (radosgw) ...
0
votes
1
answer
85
views
How to configure HAproxy to a different backend based on path?
The problem is that, I have haproxy configured for multiple domains with backends respectively. The intended behaviour is to redirect a specific request such as myfirstdomain.com/alerts to backend2 ...
0
votes
1
answer
193
views
Django uwsgi behind haproxy: http or http-socket?
I've a Django app inside a docket that uses uwsgi.
Since we have several Dockers running on different machines we have haproxy as load balancer.
My question is: should I use uwsgi with http or http-...
0
votes
1
answer
43
views
haproxy kills external-check process before script ends
I have a docker container running haproxy:2.8-lts, which does a check to the backend, but my script gets killed before it can finish resulting in a failed check and accumulated alot of processes in ...
0
votes
3
answers
161
views
Postfix/Dovecot relay or proxy?
I'm trying to figure it out how to reverse proxy based on condition email servers or how to deal with sending/receiving emails from different servers on only 1 public IP address?
My current ...
0
votes
0
answers
54
views
OPNsense + HAProxy behind NAT
I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved.
So in short words trying to achieve this kind of logic:
Dedicated Server (Proxmox ...
0
votes
1
answer
108
views
Client 443/HTTPS -> Virtual IP -> HA Proxy 80/HTTP and 443/HTTPS SSL terminaison -> Varnish 81/HTTP -> 82/HTTPS and 442/HTTPS Apache
I posted the same question on stackoverflow but someone adviced to post it here.
https://stackoverflow.com/questions/77885246/client-443-https-virtual-ip-ha-proxy-80-http-and-443-https-ssl-terminaison
...
0
votes
0
answers
15
views
Health Check Failures and 502 Errors with HAProxy and Golang Fiber Instances
I have a setup where Server A acts as the client, communicating with Server B through HAProxy. Server B runs four similar Golang Fiber instances, each with Prefork enabled on an EC2 t3xlarge instance. ...
0
votes
0
answers
47
views
gRPC proxied through pfSense with HAProxy plugin
I am trying to make a gRPC server available through pfSense with HAProxy running as a plugin.
I have ssl termination at HAProxy and it works fine for a number of hosts.
But trying to set the gRPC ...
0
votes
0
answers
87
views
haproxy not load balancing between 2 servers
I have two ports open on my backend servers, one for https requests and one for websocket requests. The websockets will use http, not https. I would like my haproxy instance to send an http 301 ...
0
votes
0
answers
38
views
IIS in windows 2019 HAproxy 504 gateway issue
We have an haproxy device that load balances a number of devices. However starting 1/18 two windows 2019 IIS servers have intermittently started responding to haproxy with a 504. This setup has been ...
0
votes
0
answers
86
views
How to log TLS session keys in HAProxy ala SSLKEYLOGFILE
I'm trying to avoid using an LD_PRELOAD-based solution, and the haproxy documentation seems to imply it's possible to make an sslkeylog file without actually saying how.
I know the information can be ...
1
vote
0
answers
216
views
ssh bad packet length when haproxy offloads ssl
Haproxy has been configured to offload SSL to access SSH , but randomly or when more interaction happen , the SSH session is disconnected
Bad packet length 468396411.
ssh_dispatch_run_fatal: ...
0
votes
2
answers
146
views
Forward HTTPS Traffic to a proxy server
I have a smart-dns setup, Using dnsmasq as the dns server, which always resolves to my server ip address, for a given list of domains.
I want to configure either a webserver or proxy program to listen ...
0
votes
2
answers
81
views
Way to keep over 65k TCP connect to a server
As a programmer and a newcomer to network and infrastructure,
I've developed a server program capable of handling over 100,000 connections concurrently.
During testing in a local network with 20,000 ...
0
votes
1
answer
308
views
HAPROXY SSL handshake failure - debugging process?
My HAPROXY 2.8.1 terminates SSL connections and does clear text with the backend servers.
When I test using my PC, there are no errors, however it fails when my customers' devices try to communicate. ...
0
votes
0
answers
114
views
High availability cluster bandwidth bottleneck
I want to setup a service with a lot of file transfer for thousands of users.
For now, my idea is to go with k8s + HAProxy with 3 masters (with VIP) and as
many slaves as needed.
So basically:
...
0
votes
0
answers
107
views
Configuring Nginx as a reverse proxy for any domain
Currently i have a setup, where dnsmasq is used as a dns server, which resolves an dns lookup, to my own servers IP address. Where SNIPORXY is listening on port 80 and 443 The configuration of the ...
0
votes
1
answer
216
views
Outbound proxy with multiple public IPs in Azure
For services where the outgoing (client) public IP address is important, such as email delivery - an HAProxy setup is often used to host the IPs, with MTAs driving the IP selection via Proxy Protocol.
...
0
votes
0
answers
32
views
What number I'm able to use to notify about haproxy issue?
I have task to monitor Haproxy problems, and one of them is disappearing the field I recently used to get value from show stat output.
Firstly I've wanted to output -1 if there's no field that ...
0
votes
0
answers
77
views
HAPROXY http response 200 but response data missing
I have been working on troubleshooting mobile application issue, each and every request from mobile application will hit to domain lets say https://example.com with request payload in post body, this ...
-1
votes
1
answer
56
views
Accessibility Issue with HAProxy Load Balancer, VIP, and Keepalived Setup
I'm using 2 HAProxy servers with a Virtual IP (VIP) and Keepalived. While I can access the active HAProxy1 server, I face accessibility problems when HAProxy2 is active. How can I resolve the access ...
0
votes
1
answer
34
views
HaProxy custom ports
I need to load balancing one of our customers application portal. The flow works as follow:
The enduser reach the portal through the URL example.net:3000/login page;
The enduser will choose one of ...
0
votes
1
answer
180
views
How to configure HAProxy to access K8S cluser?
I have setup K8S cluster, it is up and running
5 control planes
8 worker nodes
I have setup HAproxy working OK
2 nodes
1 virtaul IP
I can access the clustre from a client by using admin.conf file ...
0
votes
0
answers
45
views
haproxy stick table entry length
I'm using string stick table:
not specifying entry length (default 32 characters for len is exactly what i need)
there is a note for store keyword stating: "For each
item specified here, the ...
2
votes
1
answer
301
views
haproxy.cfg errors in configuration file. Help needed
Trying to follow these indications:
https://github.com/kubernetes/kubeadm/blob/main/docs/ha-considerations.md#haproxy-configuration
and these indications:
HAProxy use urls in server config?
I'm trying ...
0
votes
0
answers
179
views
HA-Proxy Layer4 connection, info: “Connection refused”
I'm having difficulty in understanding how to properly configure haproxy
root@k8s-eu-1-control-plane-node-1:~# sudo systemctl status haproxy
● haproxy.service - HAProxy Load Balancer
Loaded: ...
0
votes
0
answers
38
views
HA Cluster initialization issues
During the initialization of the very first control-plane-nodes (3 control-plane-nodes + 3 worker-nodes) I'm getting these errors :
root@k8s-eu-1-control-plane-node-1:~# sudo kubeadm init --control-...
0
votes
0
answers
50
views
HAproxy : backend apiserverbackend has no server available!
I'm getting this output :
root@k8s-eu-1-control-plane-node-1:~# sudo systemctl status haproxy.service
○ haproxy.service - HAProxy Load Balancer
Loaded: loaded (/lib/systemd/system/haproxy....
0
votes
0
answers
255
views
timed out waiting for the condition during Kubernetes Cluster Initialization with --control-plane-endpoint
Following the indications found here: https://github.com/kubernetes/kubeadm/blob/main/docs/ha-considerations.md#keepalived-and-haproxy I'm trying to initiate the very first control-plane-node , but I'...
0
votes
1
answer
160
views
only allow traffic from one FQDN
I have a docker container running a Flask app and then frontending it with an Nginx proxy. The Nginx container is running on port 80 and then I am using an HAProxy for SSL offloading. This setup ...
0
votes
0
answers
446
views
How to SSL Passthrough on HAProxy while routing based on full URL?
I'm new to HAProxy admin so it may be a stupid question. So I wanted to do SSL pass though on our HAProxy load balancer. The diagram look like this:
client -> HAProxy -> server
where, all ...
0
votes
0
answers
45
views
HAProxy path-based routing a webpage; webpage resources cannot load
I have the following haproxy.cfg:
global
stats socket /var/run/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners
log stdout format raw local0 info
defaults
mode http
...
0
votes
0
answers
34
views
HAProxy add header on response doesn't work
frontend http-in
bind *:8080
default_backend proxies
backend proxies
timeout connect 5s
timeout server 30s
balance roundrobin
http-response set-header X-Server-Data %s
...
0
votes
0
answers
12
views
HAproxy gpt0 does not trigger backend selection
I have a frontend definition that looks like this:
frontend fe_imap from defaults_1
mode tcp
bind 127.0.0.1:143
bind [::1]:143
bind x.x.x.x:143
stick-table type ip size 100k expire 24h store ...
0
votes
1
answer
146
views
Mariadb active passive failover doesn't work with HAProxy
What is wrong with my HAProxy config?
This thread kind of similar, but still not the same: Haproxy mysql failover load balancing
I have an active-passive Mariadb galera cluster.
Today on the master ...
0
votes
1
answer
66
views
Tomcat 9 - does gracefulStopAwaitMillis *properly* wait for requests to finish when using non-blocking IO connector?
How does Tomcat 9.0.80+ handle graceful shutdown when using the NIO connector?
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
...
0
votes
0
answers
63
views
How to route requests with the same query parameter to the same backend servers?
I have three Nginx reverse proxy servers with ModSecurity installed acting as WAF servers which route requests to my Kubernetes Cluster ingress-nginx, Istio service mesh is installed on the Kubernetes ...
0
votes
1
answer
35
views
Munin haproxy plugin is not getting data even though munin-run show data and other plugins work fine
I have a Munin server (2.72) monitoring a lot of servers fine.
I have a haproxy server with munin-node (2.0.73) running fine for every plugin except haproxy_* (haproxy_sessions_frontend, ...
1
vote
0
answers
182
views
haproxy sni for http/3 quic (udp)
I've got haproxy doing sni routing for a bunch of sites without issue. HTTP/2 works great. Is there a way to setup sni type routing for HTTP/3 (quic) without having any certs installed in haproxy?
0
votes
2
answers
117
views
KeepAlived and HAProxy VIP Appears Twice
Linux Distribution: CentOS 9 Stream
Version of HA Proxy: HAProxy version 2.4.22-f8e3218
Version of KeepAlived: Keepalived v2.2.8 (04/04,2023
I'm protecting 2x HAProxy load-balancers using keepalived ...
0
votes
0
answers
89
views
HAproxy, nginx and HTTP/2
I have few servers and for all of them:
HAproxy sometimes is giving SSL certs for connection
Sometimes nginx is giving SSL certs
I need to set up HTTP/2 connections, where currently all are HTTP/1.1....
0
votes
0
answers
200
views
Enable keepalive or connection reuse in forward proxy
I need to setup a forward proxy in this way:
application server ---> forward proxy ---> internet (every site from internet)
For example: curl --proxy http:my-proxy.com:8080 https://google.com
It ...
0
votes
1
answer
422
views
Reverse TCP proxy ports 80 and 443 by server hostname [duplicate]
I have one public IP address. I am trying to allow access via the public IP on ports 80 and 443 to multiple services, differentiated by requested server name.
HOWEVER, one service requires a TCP ...
0
votes
1
answer
345
views
HAProxy backend - How to connect to remote server?
Good afternoon everyone,
I am a newbie in web hosting and still feel like I am learning to swim in the middle of the ocean. What I want to do is setup HAproxy to forward a request to a remote server ...