Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

Filter by
Sorted by
Tagged with
0 votes
0 answers
5 views

How to check in what request-response mode my HAProxy is operating in?

I have read that Load balancers/reverse proxies usually have 2 operation modes. In the first one, the requests from the clients are forward to one of the backends as is if they come directly from the ...
user avatar
0 votes
1 answer
6 views

redundant load balancer for Tomcat

I have three Tomcat webservers in a VMWare cluster. In the first place we thought of using Apache as a load balancer in physical server but this would be a SPOF. I have searched around and I found ...
user avatar
0 votes
0 answers
11 views

ACL to block certain vcloud pages unless from certain IPs

I have a need to block a tenant URL in vcloud and have managed to do this for the direct attempts, ie vcloudaddress.com/tenant/tenantname, but I can't seem to block the /login/?service=tenant:...
user avatar
0 votes
0 answers
9 views

I am trying to connect to RDS (mysql) with haproxy, but sometimes I can't connect

I have mysql built on AWS. Sometimes I get the following error when connecting via haproxy. ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: ...
user avatar
  • 1
0 votes
0 answers
7 views

HA-Proxy - trying to create different paths for my docker containers but only default_backend works

I have my haproxy container called 'proxy_container' running on port 80 on my localhost. With two other containers called 'client_container' which is just an html file, and 'server_container' which is ...
user avatar
  • 1
1 vote
1 answer
14 views

KeepAlived service running but does not executes the check haproxy script

I have configured a failover load balancer, so that it acts as a backup whenever my primary goes down. So I have setup Keepalived that switches the floating virtual IP address to the other machine ...
user avatar
0 votes
0 answers
23 views

Is it possible to terminate ssl between servers behind haproxy, using the existing haproxy's ssl termination

I have an haproxy server doing SSL termination for traffic from the internet and a domain name GitLab.private pointing to it(orange path in the picture). The problem I'm facing is when I want to ...
user avatar
0 votes
1 answer
11 views

How to persist configuration changes made to HAProxy via its API?

I've been playing with HAProxy's APIs to disable servers and health checks. My plan is to eventually be able to add servers without restarting HAProxy. But what happens if the server that runs HAProxy ...
user avatar
  • 195
0 votes
0 answers
10 views

Binding multiple IP on single listen throws error in HAProxy

I have a LB which is redirecting request in a round robin mechanism to my 4 servers configured. I have assigned a floating IP address(LOADBALANCERFLOATINGIPADDRESS) to the machine. Now I want my LB to ...
user avatar
0 votes
2 answers
24 views

Unable to access web service with floating IP address assigned to my machine

I have a machine for which I have assigned a floating IP address. That machine is also my load balancer. I can access my service easily using the IP address of load balancer. However I am unable to ...
user avatar
0 votes
1 answer
21 views

In Using pfSense HAProxy - to check the url if it has a sub domain name

I have a wildcard Cert and need to direct any sub domain name that does not exist to a custom 503 error page and don’t want to use the Frontend’s Error files feature nor its default 503 page. I want ...
user avatar
0 votes
0 answers
14 views

docker swarm - highly available database

I am using high availability on two servers, where I use docker swarm with two manager nodes (one is the leader) with their respective applications (backend and frontend) and I use haproxy to redirect ...
user avatar
0 votes
1 answer
27 views

Is HAProxy in front of Stunnel with SNIs possible?

I have a working SSL Termination with STunnel in front of HAproxy. Recently, the matter of adding support for HTTP/2 was thrown my way. That is easy with HAProxy, but, as a constraint, STunnel must ...
user avatar
  • 3
0 votes
0 answers
22 views

HAProxy Timeouts and Streaming Backend - Hangs Forever

I have a backend behind haproxy that streams a file to the client using a CGI script. I'm trying to set a timeout for my backend servers. All works fine, except for this timeout. When I set the "...
user avatar
  • 41
0 votes
1 answer
29 views

Simple haproxy TCP passthrough results in very slow network transfer speed

I've setup a simple haproxy instance on a clean install of Debian 10 Buster. I've added some simple necessary config to enable the passthrough to the IP address in question (which has been redacted in ...
user avatar
0 votes
0 answers
9 views

Send traffic to only one Ingress Controller Pod

I am using HA Proxy as my Ingress Controller. It is setup with 2 replicas. Meaning traffic reaching the Ingress Controller LB service can be routed to 2 pods. My end user application has 3 replicas. ...
user avatar
1 vote
0 answers
38 views

How to add custom SSL certificates to cluster Kubernetes

I have a Kubernetes cluster with 2 master and 3 worker nodes also I have a separate Haproxy server with public IP. By default, kubeadm generates all the certificates required for the cluster and ...
user avatar
  • 11
0 votes
0 answers
19 views

haproxy not accepted my full URL

I install and configure haproxy v1.4 on solaris machine i sessufuly add two weblogic servers and i can see the uptime and downtime on mangement. my quastion is i give my weblogic url http://192.168....
user avatar
  • 1
0 votes
1 answer
84 views

Freeipa web interface behind HAProxy

I am trying to configure the FreeIPA web interface to work behind my HAProxy instance. I found an old GitHub Gist for the configuration (https://gist.github.com/m4ce/d081ab39654c3e13bbe8b150986526a3) ...
user avatar
0 votes
1 answer
70 views

HAProxy with same request sometimes responding with NOSRV while backend is up

Im making the same request(POST /user/oauth) to haproxy but sometimes i get 503, sending requests directly to the backend always works here is the logs: local_server~ app/s2 0/0/0/100/100 200 813 - - ...
user avatar
  • 101
0 votes
1 answer
128 views

haproxy SSL/TLS Passthrough Proxy not working?

I want to setup haproxy as simple tcp-proxy. Below is my configuration. When I try to send e-mail via Thunderbird(pointing smtp to ip_of_my_host:8123) or simple python script I get an error about not ...
user avatar
  • 1
0 votes
0 answers
32 views

Using environment file in haproxy container

Im trying, unsuccessfully, to run the official haproxy container (https://hub.docker.com/_/haproxy) with an environment file per (something like this https://www.loadbalancer.org/blog/how-to-install-...
user avatar
  • 146
0 votes
1 answer
44 views

HAProxy path_beg error - 503 service unavailable

Given a backend that running on: 172.18.1.125:8888 curl tested: curl --location --request GET "http://172.18.1.125:8888/oauth/sign-key" sample_response //>> HERE IS RESPONSE On ...
user avatar
  • 103
0 votes
0 answers
24 views

haproxy resolving dns name after the fact

I"m getting a nosrv error. In this case its expected, since the drone address can't be resolved. Its from a docker network. gateway_1 | [WARNING] (1) : parsing [/usr/local/etc/haproxy/...
user avatar
0 votes
0 answers
15 views

Haproxy rate limit monitoring

I’m using rate limiting with my haproxy18 and I’d like to somehow squeeze out metrics from it based on ip addresses, who is close to the limit or how the users are hitting the limits. This is my ...
user avatar
  • 15
0 votes
1 answer
27 views

I have load balancer configured on Haproxy. Can load balancer redirect traffic from port 1 backend to port 2 backend if port 1 is busy this moment

In ha-proxy I separated my traffic to two frontend ports and created two backends. Port-1 traffic is directed both backend and port 2 traffic is directed two backend-2. I want to create a smart load ...
user avatar
0 votes
1 answer
57 views

Using HAproxy to redirect incoming traffic to docker

We are currently using HAproxy to redirect incoming traffic to our domain example.domain to our containers, which are only accessible via the local interface (e.g. 127.0.0.1:12000:8080 To achieve this ...
user avatar
0 votes
2 answers
38 views

proxing everything with Haproxy

is it possible to not define backend in Haproxy configuration to make a proxy for every TCP connection? So if I will try to connect from host A(sftp,ssh,smtp) through HAproxy it will always reach ...
user avatar
0 votes
0 answers
30 views

Experiencing latency with haproxy load balancer

I'm experiencing high latency with haproxy load balancer when backend configuration uses private network IP addresses. But when I replace backend server addresses with public IP address or Reverse DNS ...
user avatar
  • 1
0 votes
1 answer
86 views

Multi gateway work with HAProxy and VPN?

We have a situation where we will have two physical router gateways on the network, each connected to its own ISP. Due to business requirements, we cannot merge the two WANs onto a single router, thus ...
user avatar
0 votes
0 answers
35 views

HAProxy: Defer TCP connection to backend only after first data arrives

I'm trying to understand if haproxy 2.2 or greater has a specific configuration that allows to defer opening the tcp connection to backend servers only after the first data segment is transmitted from ...
user avatar
0 votes
0 answers
56 views

Haproxy help for https requests on custom ports

We would like to use haproxy ingress 1.7 on kubernetes to listen on 55560 port for https connection. Could you please assist in this regard? Here is my haproxy.cfg file. When trying to access, getting ...
user avatar
  • 1
0 votes
0 answers
16 views

HAProxy sticky cookie subdomains + deterministic balance

I have multiple subdomains (www.example.com and api.example.com, pretty standard I reckon), and I want to configure HAProxy to use sticky session cookie. balance roundrobin cookie NODE insert indirect ...
user avatar
0 votes
0 answers
70 views

Keepalived: Transitioning to backup node not happening when check script on master server finds service is down for an applicaiton

I am trying to configure keepalived in such a way that if any application or service running on master node fails, keepalived should consider it as fault and backup node should act as master and take ...
user avatar
0 votes
1 answer
236 views

haproxy not working when upgrading to version 2.2 (reqadd doesn't exist any more)

[I erronously had posted this question on stackoverflow] On my debian buster server I had a perfecly working haproxy (v1.8), which I use for managing certificates for my web sites. haproxy listens to ...
user avatar
1 vote
1 answer
169 views

HAProxy is not working with SNI and ACLs

I am trying to get haproxy to use acls with SNI and it ain't cooperating. It presents the correct cert so SNI must be working. However, I cannot get it to select a backend based on the hostname in ...
user avatar
0 votes
2 answers
51 views

haproxy: close or change port 80 of stats page

The http-port has to be available for another usage. Port 80 of the stats-page has to be closed or moved to another port. Removing mode http in the default section disables the page. echo >/dev/tcp/...
user avatar
  • 3
0 votes
1 answer
217 views

HAPROXY SNI SSL pass through or termination

I would like to set up HAProxy to terminate SSL or pass through connection depends from hostname, exposing only one public IP address. For example Internet -> domain web1.example.com (10.10.10.1) ...
user avatar
0 votes
1 answer
130 views

Allow docker containers on the bridge network to connect to the host using iptables

I have recently tried deploying iptables to only expose relevant ports. I'm dropping every incoming connection using iptables -P INPUT DROP and later on allowing access to relevant ports. This does ...
user avatar
0 votes
0 answers
10 views

Mutidomain config with ssl in HAproxy

I have the following domains with three websites: mydomain1.com sub.mydomain1.com mydomain2.com All of them with its webserver in the same host. I would like to get this goals: Requests should be ...
user avatar
  • 101
1 vote
0 answers
40 views

HAProxy goes to the same website even though they have different sub-domains

I have an issue with HAProxy where it goes to the same website even though they have different sub-domains. For example, I go to foo.domain.com then on another tab I go to bar.domain.com and another ...
user avatar
  • 11
0 votes
1 answer
65 views

HAproxy finds no backend when different port is used

I have two backends that are the same server running two of the same Docker image, but each with a different port. That is, on the backend server, the only different between the two is the port ...
user avatar
0 votes
1 answer
407 views

How to access X-Forwarded-For header on HAProxy behind AWS Loadbalancer

On HAProxy instances running on K8S I need to block certain IP addresses manually on HAProxy. Currently I am failing already to log them. Per the AWS docs the loadbalancers set the X-Forwarded-For ...
user avatar
0 votes
0 answers
13 views

HAProxy NOSRV without any Queue entry before?

I occationally observe NOSRV log lines. I'd expect that the stats UI shows me some value under Queue-Max for that backend. Is my assumption wrong? (That backend is configured with a cache, if that ...
user avatar
0 votes
0 answers
34 views

HAproxy: per-client queue for rate limiting?

I’d like to put a rate limit on incoming HTTP requests, but without sending 429 errors. Instead, requests beyond the limit should be put into a queue from which they are processed at a speed that ...
user avatar
  • 1
0 votes
0 answers
150 views

Set up HAProxy load balancer in docker for a docker RabbitMQ cluster

I've set up a 3 node RabbitMQ cluster in docker using the following, docker run -d --rm --net rabbits ` -v ${PWD}/config/rabbit-1/:/config/ ` -e RABBITMQ_CONFIG_FILE=/config/rabbitmq ` -e ...
user avatar
0 votes
0 answers
120 views

HAProxy multiple backends TCP/HTTP mode works only for one backend

listen mqtt-ssl bind *:8883 ssl no-sslv3 crt /my.pem verify required ca-file /my/pem/all_cas.pem crl-file /my/pem/all_crls.pem mode tcp option tcplog log global maxconn 50000 ...
user avatar
0 votes
0 answers
19 views

haproxy regrep usage to insert to path

I have a haproxy service running on localhost:8090 with a backend service running on localhost:8080 and I want to transform GET request such as: curl http://127.0.0.1:8090/api/v1/pods (received by ...
user avatar
0 votes
0 answers
23 views

redirecting to a different domain via haproxy

Using haproxy 2.1.4 I am having an issue with ACL's and redirect. I want to ACL on ww.abcdomain.com/x/aa and redirect that to www.defdomain.com/aa Apart from these, there are the following operations: ...
user avatar
0 votes
1 answer
46 views

HAProxy - http log and TTFB discrepency

I am noticing a large discrepancy between TTFB in my browser networking tool and the HAProxy logs. HAProxy will say the request returned in 29 ms for example, but the browser reports anywhere from 50-...
user avatar
  • 123

1
2 3 4 5
41