Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

Filter by
Sorted by
Tagged with
1
vote
1answer
16 views

Haproxy acl based on URL param existence

I am trying to route requests to different backends based on the existence of an URL param. I tried the following, but it never matches, even if my request contains a host param, e.g. POST http://127....
1
vote
0answers
10 views

haproxy 2.2.x - acl url_reg wont work anymore

I try to udate from haproxy 1.8.25 to 2.2.9. Everything is fine so far, but all may acl for url filtering to route some traffic to diffrent backends wont work anymore. Example: this request https://...
-1
votes
0answers
25 views

Where to put frontend in load balancing configuration

I have a tomcat spring backend and a angular frontend. I want to implement load balancing with the following resources: 4 vCPU, 12 GB RAM, 300 GB Storage ---> 2 application VM 8 vCPU, 16 GB RAM, ...
1
vote
0answers
27 views

Multiple forwardfor commands in HAProxy config

In HAProxy, I would like to forwardfor everything except a few networks like below (multiple networks) frontend main bind myip:5356-60000 mode http option ...
0
votes
1answer
32 views

HAProxy 301 Re-Direct non www to www for root domain

I am trying to setup HAProxy in a way that when a user goes to example.com, they are 301'ed to www.example.com, while keeping intact the users ability to go to sub1.example.com, sub2.example.com, etc, ...
0
votes
0answers
14 views

Combining several ACLs to make an alias

I was wondering if it is possible to combine two ACLs to reduce repeating myself in my HAProxy config. Example: acl prod hdr_beg(host) -i example.com acl beta hdr_beg(host) -i beta.example.com acl ...
0
votes
0answers
17 views

nftable - forward UDP traffic to IP

I'm setting up a load balancer using HAPROXY for IOT devices sending in sensor data As HAproxy only supports TCP traffic, i need to forward a small amount of UDP traffic from the IOT devices to one of ...
0
votes
0answers
16 views

HAProxy SSL Pass Through with two backends having individual hostnames

I am trying to setup HAProxy server for SSL Pass Through. Requirement is, I will be getting requests e.g. api.mydomain.com, web.mydomain.com, in HAProxy I would like to receive the requests and based ...
0
votes
1answer
30 views

How to get around the frustrating XFF behavior in HAProxy

tl;dr; how to APPEND (replace-value or replace-header) to the X-Forwarded-For header when it is received by HAProxy as a comma separated list from downstream? By default HAProxy does not append to the ...
1
vote
1answer
38 views

HAProxy stick table rate expiration

I am using HAProxy on Ubuntu to perform some rate limiting. Here are the most important fragments from my config: global stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd ...
1
vote
1answer
29 views

haproxy & complex redirects: am I missing anything?

I have a complex Apache config that mostly just does ProxyPassReverse, and that seems pretty silly so I've been converting it to haproxy. Mostly this has led to things being much, much simpler and ...
0
votes
1answer
47 views

How to deliver certificate randomly to browser, according to the backend IP/server picked by HAProxy?

I am a beginner in HAProxy and I was trying to achieve this. I have 4 VMs, one having HAProxy server and Apache httpd server in other 3 VMs. I have test.html on all three servers. When user hit https:/...
1
vote
1answer
36 views

Why browser is always showing certificate of only one server even if multiple certificates are configured in HAProxy?

I am a beginner in HAProxy. I have four VMs, with HAProxy in one and Apache httpd in other three. What I am trying to achieve is, when user connect to HAProxy IP using https, the connection should be ...
0
votes
0answers
43 views

mysql not answering haproxy calls

I have to build a fallback system, if the main mysql server fails. So, i wanted to do this with the haproxy, instead of implementing it into the software (because via proxy it should be much easier) ...
0
votes
0answers
16 views

Is it possible to update the default backend of a frontend via socketcli

We have a very dynamic environment and we keep adding backends to our config, so every time we add a new server group, we need to change the haproxy frontend accordingly and reload the process. This ...
0
votes
0answers
21 views

How to use HAProxy to override 25 Certificates per Application Load Balancer limit in AWS?

I use AWS to run a web application, which supports custom domains and subdomains. I am using AWS certificate manager to generate and manage certificates. Well, say my application is available under ...
0
votes
1answer
27 views

How to forward client ip to App server via Haproxy TCP/IP loadbalancer?

I have configured HAproxy for TCP/IP loadbalancing but in app server I am not getting IP address of source instead of that I'm getting haproxy IP address as client ip address. I searched on google and ...
0
votes
0answers
74 views

HAProxy reverse proxy connecting to Kubernetes nginx-ingress controller issue

Background: I've got a one node K8s cluster via kubeadm with the default nginx-ingress controller deployed. I'm trying to get the default nginx web server deployment accessible to test successful node ...
0
votes
1answer
46 views

HA-Proxy errors in configuration file

Below is the configuration file for my haproxy in which i want to setup the varnish as backend & in frontend want to configure the Port-80 for http & for the port-443 for https global log /dev/...
0
votes
1answer
29 views

Disable failover in HaProxy

I would like to have two (or more) jetty servers behind a HaProxy that is sticky on JSESSION. I would however like to disable failover, such that clients are not moved from Server1 to Server2 in the ...
0
votes
1answer
35 views

HAProxy send-proxy to Nginx

I am trying to reverse proxy clients to a web server through HAProxy and Nginx with SSL traffic using SNI. With the standard configuration, the web server sees the HAProxy IP and connects. When ...
0
votes
0answers
17 views

HAProxy not failing over

Simple question. I have 2 application servers (s1,s2) and a server that has HAProxy installed. (www) when I go to www I get redirected to s1 or s2, just like it should. But I think I have ...
0
votes
0answers
34 views

HAProxy for SSL uses backend certs

I have two servers, s1 and s2. I have a separate server that HAProxy is on. Servers are set up the same. s1.me.com and s2.me.com both have apache listening on 443, with regular (not self signed) ...
0
votes
0answers
26 views

Need help setting up HAProxy with two backends

I'm very unfamiliar with HAProxy, but I'm trying to set it up to proxy different backend targets based on the hostname. For example, if someone tries to access https://managementserver.domain.com for ...
1
vote
0answers
39 views

How can I get HAProxy to override / standardise the assignment of a cookie across multiple backends?

I am running HAProxy version 2.0.12 2019/12/21 - It hosts multiple backends. In the web layer, I have a persistent cookie which just contains a GUID and is meant to be super-long lived (50 years, but ...
0
votes
0answers
18 views

Haproxy and IIS applications using Windows Authentication and the HTTPS protocol

I have two app servers 172.17.128.94 DP-KKM-prod.domen.com 172.17.128.101 DP-KKM-prod2.domen.com and one load balancer server 172.17.128.97 DP-KKM-balance.domen.com Both app servers are running two ...
0
votes
1answer
49 views

Only require a minimum version of TLS (1.2) when a specific backend is used in HaProxy

I have a single frontend, but multiple backends. I'm upgrading security on some backends, and as a part of that, i want to only allow TLS1.2 or higher, when getting requests to those specific backends....
0
votes
0answers
22 views

UWSGI: uwsgi_response_write_body_do() TIMEOUT

I've HA UWSGI Django When I've a large file in a streaming response, if the client is slow the connection stops and i see that log in the messages uwsgi_response_write_body_do() TIMEOUT !!! OSError: ...
0
votes
0answers
30 views

mTLS connection terminated due to missing client certifcate

We are getting intermittent (~100 every 2 to 3 hour) SSL handshake failure errors and packet capture shows that client certificate is missing in such cases. Please see attached screenshot. Client is ...
0
votes
0answers
20 views

Working with HAPROXY MAPS as acl parameter

I have a file (EG token.map) where I have set key,value. Key is token and value is limit. Sample token.map :- 123A 10 456V 20 678M 30 Current acl line looks like :- acl exceeds_limit hdr_reg(token),...
0
votes
0answers
65 views

Multicast/Broadcast with UDP Reverse Proxy

I have a UDP stream from IoT devices that I need to recast/duplicate to multiple destinations. My use case is for duplicating the production traffic from the IoT devices to our integration ...
0
votes
0answers
54 views

haproxy logs in a container

I’m struggling to get access and health check logs from haproxy when I run it inside a container, so I’ve followed the instructions in the docs (Setting up logs using Docker | HAProxy Enterprise 2.2r1)...
0
votes
0answers
53 views

Configure rsyslog on a haproxy1.7 container

I'm using HAProxy 1.7 which needs rsyslog to push logs to stdout. Once the container writes logs to stdout, programs like filebeat or fluentd will pickup. Docker container has: Ubuntu 20.04, HAProxy ...
0
votes
0answers
130 views

Unable to receive gRPC error during a response streaming call using HAProxy in HTTP mode

I'm working on a gRPC application that will be served behind HAProxy using the http mode. If the server application immediately (ie. before sending any responses) aborts the response streaming call ...
0
votes
1answer
177 views

haproxy forcing a redirect to login and redirect back

I have a website http://blahblah.com I want to add a login page before anything from http://blahblah.com . I have written some simple login code in php. The issue is that I can't modify the code in ...
0
votes
1answer
140 views

Haproxy multiple frontend/IP wrong backend

I am facing some logical error when using the following configuration. In the configuration, I am trying to integrate a single haproxy server servicing for both Microsoft Exchange as well as the ...
0
votes
0answers
208 views

Load balancing with OPNSense, relayd or haproxy?

There is two main options for load-balancing in OPNsense (and pfSense): relayd and haproxy. pfSense has removed relayd in favour of haproxy [1,2], but OPNsense still supports it. In what usecases we ...
0
votes
1answer
94 views

Wrong client IP passed to Apache from Varnish and HAProxy

I have a setup where I am using Varnish/Hitch >> HAProxy >> Apache. It works except for a problem where the client IP address isn't being passed correctly to the backend Apache server. ...
0
votes
0answers
28 views

Server architecture for high traffic system [duplicate]

we are working on the online exam system, which supposed to have much traffic at the same times, more than 15000 students will log in and make an exam at the same time, we are developing this system ...
1
vote
1answer
141 views

HAproxy with failover to a sorry page

My use case is as follows: In the config I have one frontend that listens on HTTPS and serves to a backend The backend has one or more servers. When all of the backend servers are down, I want to ...
-1
votes
1answer
32 views

Complete Load Balancing solution

I have a Laravel web application based on MariaDB, PHP, Nginx, and ubuntu 20.04. To ensure that my website is always online under heavy traffic, I decided to establish load balancing between my ...
0
votes
0answers
28 views

nginx behind haproxy - pages randomly loading regardles of submited domain

I currently have one web server (10.0.0.77) running nginx with multipple vhosts (couple of wordpress sites and nextcloud installation) all running on 1 IP address and everything is secured with a ...
1
vote
0answers
37 views

haproxy peers as swarm deployment

I am trying to set up an active-active cluster with swarm and haproxy. I am struggling with the peers definition as it takes hostname and IP address into account. With swarm this can be a bit tricky. ...
1
vote
0answers
295 views

URL redirection and TCP proxy in haproxy

In a server with only one ipv4 and running haproxy, i want to redirect an url and proxy another in TCP level, for ssl passthrough purpose. frontend https-frontend bind *:443 mode tcp option ...
0
votes
0answers
19 views

Do we need any special steps for haproxy(https) forward to backend(https) servers

both of the https configuration are using self-signed certificates. if i use ssl verify none , i can foward the traffice to the backend server, but i can’t detect the health for the backend servers ...
0
votes
0answers
52 views

Sticky TCP sessions with IOT sensors

Can anyone help with the correct HA PROXY configuration for TCP IOT Sensors Each IOT sensor has a sim card, and reports as IP:port So most sensors look like they are on same IP but different port (...
0
votes
0answers
198 views

I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places

I will post my private key in its entirety because it is an example for development and debugging purposes. This is the process by which I have created my PEM file: https://serversforhackers.com/c/...
0
votes
1answer
30 views

HA proxy is really needed?

I have the following infra : 3 servers which handle micros services. In front, I have one single proxy server which exposes services or website following the domain name. I would to improve this with ...
0
votes
0answers
31 views

use_backend if url_param exist in stick-table

so, here's the scenario. I have three backends. PH, Singapore and US Server. I'm using ip range to load balance them which is working. Here's the thing: User A (Philippines) visit my website he will ...
0
votes
0answers
35 views

HAPROXY Logging

Im running a containered haproxy service and im unable to change the log level to only "err" it keeps throwing alerts and notices when looking at "docker logs haproxy" my current ...

1
2 3 4 5
40