Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

1
vote
0answers
20 views

OpenSSL/HAProxy verify client certificates using a non-CA certificate

I am facing a problem while configuring a HAProxy instance (v1.8.13) with compiled OpenSSL support to only accept client certificates which have been signed by a non-CA certificate. In particular, I ...
-1
votes
0answers
11 views

how to pass bandwith with haproxy

quick question about haproxy , i have 3 vps , 1 is use for haproxy and the other 2 for web server , i managed to install with letsecrypt and everything work fine , until i notice that haproxy does ...
1
vote
2answers
48 views

Haproxy - stop traffic to node under maintenance

We've 2 active hosts for load balancing using haproxy. Haproxy is running on both the hosts. Due to maintenance we need to stop services on Host 1. During the maintenance window we want haproxy ...
3
votes
1answer
36 views

Load Balancing And Sticky Sessions

According to what I understand , the use of sticky-sessions is to route user to the same backend so they won't have to for example login again each time they are re-routed or if they have a shopping ...
0
votes
1answer
21 views

HAProxy sees Exchange ports 587 and 465 as unreachable, and is unable to forward traffic

I am unable to get HAProxy to balance SMTPS This is my configuration: frontend SMTPS_465 bind 10.1.1.232:465 name smtpssl ssl crt /home/exchange.pem mode tcp option tcplog ...
0
votes
0answers
20 views

HAProxy: How to match on hostname instead of the IP address

I am trying to match the host request header and use appropriate backend to route the request. This is what I want to match on (which does not work): acl from_external_url req.hdr(Host) -i mydomain....
0
votes
1answer
40 views

How to get haproxy and keepalived working on the same device as an emqx broker

I'm rather new to this, so please be patient. My setup is essentially thre devices using mqtt, connecting through two brokers both running emqx. Both emqx brokers are also supposed to be set up as ...
0
votes
1answer
57 views

Issue with HAProxy and Exchange 2016 with certificate based authentication

I have an Exchange 2016 as a backend that requires client certificates for accessing OWA and HAProxy as a reverse proxy. When I try to open OWA from Exchange directly everything is fine: I get a ...
0
votes
0answers
28 views

Forward proxy with squid or anything else

i have a server with few thousands of IPv6s i want to create a forward proxy server with it which do the following: port forwarding (X.X.X.25:PORT -> IPV6 outgoing traffic) basic username/password ...
0
votes
0answers
22 views

Haproxy requests per seconds dropped after enabling SSL

I am using Apache Benchmark for load testing with the same backend, for ssl I am using a self signed 2048 key http ab -n 10000 -c 10 http://127.0.0.1:80/ Requests per second: 1185.35 [#/sec] (...
1
vote
1answer
37 views

haproxy http check with a backup server shows 503 at main server down

I have been trying to setup a forward with haproxy. listen POC-2019-02-03 bind 0.0.0.0:8083 timeout connect 14000 timeout client 180000 timeout server 180000 mode http ...
0
votes
1answer
35 views

HAProxy reverse proxy config - selecting backends based on subdomain

I'm having the darndest time trying to make a simple reverse proxy select the backend based on the URL. I keep getting a 503 Service Unavailable. No server is available to handle this request. error ...
0
votes
0answers
16 views

Haproxy - How to only accept requests for known URL parameters

I'm using HAProxy 1.8.17 as endpoint for https connections. Now I would like to accept requests only if the URL parameters are valid (i.e. all specified parameters are known and have valid values). ...
0
votes
0answers
24 views

HAProxy: rewrite header keeping the original sub-domain, if available

I'm sort of new to ha-proxy and trying to rewrite the host_header, keeping the sub-domain intact and this is my first attempt to achieve that: http-request set-var(req.get_sub) req.hdr(host),lower,...
0
votes
0answers
48 views

haproxy redirect URL path to another path

haproxy version 1.5.18 I want to redirect: /document/(.*)/(.*)/somefile => /anotherPath/somefile For example: redirect /document/20181/20182/a_good_pic.jpg => /anotherPath/a_good_pic.jpg ...
1
vote
0answers
19 views

haproxy tcp retransmission during tls handshake

I'm setting up a TLS 1.2 endpoint with client authentication using HAProxy 1.8.17 (with openssl 1.1.1) from Debian testing. With wireshark I observe a retransmission of the TCP packet that contains ...
2
votes
1answer
19 views

Proxy entire url path to haproxy from nginx

I have nginx in entry point to server. which handle SSL connection and send HTTP request in /api/v1/ to HAproxy for balancing. this is my nginx config: location /api/v1/ { proxy_pass http:...
0
votes
0answers
28 views

Trying to configure letsencrypt auto renewal with HAProxy

I'm trying to get the letsencrypt auto renewal working with haproxy. I've followed these instructions: https://www.digitalocean.com/community/tutorials/how-to-secure-haproxy-with-let-s-encrypt-on-...
1
vote
1answer
35 views

haproxy tls alert decrypt error

I'm using haproxy 1.8.17 and openssl 1.1.1a from Debian testing to serve TLS 1.2 connections with client authentication. In wireshark I observe the usual TLS messages: client->server: Client Hello ...
0
votes
1answer
54 views

Use HAProxy as https forward proxy and ssl termination

I'm trying to do something like this: Clients send HTTP request to HAProxy. HAProxy does the TLS stuff to convert the request into https and forward to a server. HTTP to the client. The server sends ...
3
votes
2answers
88 views

Route Docker container traffic through another container

I'm trying to route tcp traffic of container B (10.10.1.2, custom binary using mysql and running on port 4242) through container A (10.10.1.3, haproxy, setup in transparent proxy mode) to the outside ...
2
votes
0answers
29 views

HAProxy prevent automatic failback on active/passive backend not working

I am attempting to do an haproxy setup with one frontend VIP and two backend web servers. I want the backend to be active/passive so that all requests go to server #1 unless server #1 is down, then ...
2
votes
2answers
95 views

Pass-through SSL with HAProxy and vhosts on same IP

Can i pass-through SSL with HAProxy to a vhost that shares ip with other vhosts? I try frontend https bind *:443 #ssl mode tcp default_backend port_443 backend port_443 mode tcp server web42 www....
0
votes
1answer
45 views

haproxy tls hash algorithm

I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections. Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
2
votes
0answers
25 views

TCP KeepAlives with NAT?

We have a Network set up like this: MQTT Client -- TCP Forward (Netscaler) -- TLS Termination + TCP Forwarding (HAProxy) -- MQTT Server For several reasons we needed to turn on TCP KeepAlives in ...
0
votes
1answer
57 views

Haproxy: trouble using reqrep & use-server rules together

I am trying to consolidate several backend blocks into one using use-server rules. I have requests for webadmin.example.org with various URL paths going to the same backend, & am trying to get ...
0
votes
0answers
32 views

HAProxy rate limiting per URL, with client IP in custom header set by reverse proxy

In our current setup CloudFlare is used as a DNS level load balancer, in front of our HAProxy load balancers, which further route requests to our NginX application servers. We only server dynamic ...
0
votes
0answers
42 views

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate ...
0
votes
0answers
22 views

HAProxy and Keepalived IP assignment

As per the figure below, suppose there are two load balancers bundled together using Keepalived. My question is: does each LB have to get public IPs (namely 10.0.0.3 and .4) assigned to their public ...
0
votes
0answers
10 views

Connecting DNS service provider to Keepalived virtual IP

I'm trying to create the following infrastructure to create a highly available data service (accessible via web) which has two webservices behind two haproxies: Now as noted in red: What IP address ...
0
votes
2answers
41 views

HAProxy source IP using wrong interface/IP

I have a small Haproxy server set up with 2 NICs. The OS is CentOS7 and I have configured both NICs on the same subnet per CentOS documentation. — 192.168.0.1, 192.168.0.2 ---- both on 192.168.0.0/24 ...
0
votes
0answers
41 views

Can I capture full TCP packet content with haproxy without knowing length of the packet?

I know I can capture 6 bytes length packet using this config: global log /dev/log local0 debug log /dev/log local1 notice chroot /var/lib/haproxy stats socket /...
0
votes
0answers
23 views

HAProxy Stats Page Error

HAProxy is running fine. Stats page shows 0 req/resp errors for all of my servers. However the stats section (see screenshot) shows 167 Errors under the Stats sections "backend". As you can see there ...
0
votes
2answers
26 views

How does HAProxy choose which certificate to serve?

I've got a HAProxy 1.5.9 server that will serve either a certificate signed by a self signed CA or a Let's Encrypt certificate depending on which 'servername' is provided. This is my configuration ...
1
vote
2answers
29 views

Transparent HAproxy on ubuntu (amazon EC2)

I am trying to setup a transparent HAproxy load balancer using ubuntu 18.04 on amazon EC2. I got the HAproxy to work on a non-transparent mode, so now I am trying to add the changes required for the ...
0
votes
0answers
29 views

Serving files from nginx if apache returns 404

I'm new with nginx and apache so please forgive me if my question is difficult to understand. Currently I have passenger on apache serving the assets needed for my application, however, I also have ...
0
votes
0answers
44 views

Kibana 6.5 behind a Haproxy : No response from kibana

First of all I'm pretty new to the Kibana world and Haproxy. Installation : Centos 7 Haproxy 1.5.18 : installed through yum install haproxy. Kibana : 6.5 latest release. It's an 'In the box ...
0
votes
1answer
268 views

Haproxy with multiple ports on fronent and backend

I have a task to configure haproxy that proxies inbound traffic on multiple ports. This is what I did after some googling: I easily figured out how to bund tho ports on frontend as the internet is ...
0
votes
0answers
40 views

URL redirection and ACL conditions in Haproxy

I would like to check and compare the maxconn and conn_cur in haproxy. If the conn_cur value greater than maxconn, the url needs to be redirected. URL redirection is working, but the maxconn & ...
0
votes
0answers
16 views

HAProxy not sending correct URL to LXD container

HAProxy not sending correct URL to LXD container I want to have the following behaviour: In one virtual machine I have three LXD containers: One with HAProxy, another with a LDAP server, and the ...
1
vote
1answer
58 views

Kolla OpenStack deployment fails with “haproxy : Waiting for virtual IP to appear”

I'm trying to deploy OpenStack Queens with kolla-ansible (7.0.0) on Ubuntu hosts, following the official guide. After successful bootstrap-servers and precheck the deploy command fails: RUNNING ...
-1
votes
1answer
87 views

haproxy to IIS servers

We have 2 IIS servers with multiple websites on them. I want to check for each website if the are still running on each server. If i do a simple port check the IIS will reply even when 19 of the 20 ...
1
vote
0answers
30 views

Log loadballancing using HAproxy

I'm trying to loadballance logs to a pool of rsyslog server using HAproxy but I'm failing to find a suitable solution when the source is a single client. HAproxy opens a session to one of the backend ...
0
votes
1answer
61 views

Haproxy healthcheck and backend section generation

I have a lot of sites and I want to do a http healthcheck for each one. Does it mean that I need to make a backend section for each site? If so, I need to generate it somehow. Can I achieve it with ...
0
votes
0answers
57 views

Missing access token when using github oauth with Grafana

I am attempting to use github oauth with Grafana. The error in the grafana logs is msg=login.OAuthLogin(NewTransportWithCode) logger=context userId=0 orgId=0 uname= error="oauth2: server response ...
0
votes
2answers
67 views

HAProxy & Nginx SSL redirect issues

I have 2 websites, websitea.com and websiteb.com, these are hosted on two servers 10.0.0.8 and 10.0.0.12 for load balancer and I try to made it work with both HTTP,HTTPS protocol with this config. ...
0
votes
0answers
136 views

HAProxy as Docker container not routing as a reverse proxy

This HAProxy configuration should serve: the Google main web page when asking http://localhost:9000/google/ the Wikipedia main web page when asking for anything else hitting http://localhost:9000 I ...
0
votes
0answers
10 views

HaProxy Configurations Error while setting up multi proc environment

I want to achieve 6000/sec Requests and trying to setup HaProxy with muli proc Settings but Getting this Error. cpu-map expects a process number including 'all', 'odd', 'even', or a number from 1 ...
0
votes
1answer
28 views

HAPROXY-Weblogic, issue with https-ssl connection

Recently have been deployed a web page using Weblogic Cluster. The page inside the WL works properly. In front of the WebLogic Servers there are two servers with Apache, keepalived and HAPROXY ...
1
vote
1answer
74 views

Pacemaker fencing not triggered

I have 2 nodes : - patroni1 : 192.168.1.38 - patroni2 : 192.168.1.39 and Virtual IP : 192.168.1.40 I have HA-Proxy installed on both. Here is my pcs status when VIP is attached to patroni2 and ...