Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

-1
votes
1answer
27 views

haproxy to IIS servers

We have 2 IIS servers with multiple websites on them. I want to check for each website if the are still running on each server. If i do a simple port check the IIS will reply even when 19 of the 20 ...
1
vote
0answers
23 views

Log loadballancing using HAproxy

I'm trying to loadballance logs to a pool of rsyslog server using HAproxy but I'm failing to find a suitable solution when the source is a single client. HAproxy opens a session to one of the backend ...
0
votes
1answer
40 views

Haproxy healthcheck and backend section generation

I have a lot of sites and I want to do a http healthcheck for each one. Does it mean that I need to make a backend section for each site? If so, I need to generate it somehow. Can I achieve it with ...
0
votes
1answer
43 views

Will Windows NLB work better than Haproxy or Nginx on IIS? [on hold]

I'm a junior sysadmin and doing my internship, and I've been tasked to set up a high availability website cluster with two IIS-servers and loadbalancing. I've been googling for "IIS high ...
0
votes
0answers
24 views

Missing access token when using github oauth with Grafana

I am attempting to use github oauth with Grafana. The error in the grafana logs is msg=login.OAuthLogin(NewTransportWithCode) logger=context userId=0 orgId=0 uname= error="oauth2: server response ...
0
votes
2answers
40 views

HAProxy & Nginx SSL redirect issues

I have 2 websites, websitea.com and websiteb.com, these are hosted on two servers 10.0.0.8 and 10.0.0.12 for load balancer and I try to made it work with both HTTP,HTTPS protocol with this config. ...
0
votes
0answers
33 views

HAProxy as Docker container not routing as a reverse proxy

This HAProxy configuration should serve: the Google main web page when asking http://localhost:9000/google/ the Wikipedia main web page when asking for anything else hitting http://localhost:9000 I ...
-3
votes
0answers
27 views

Haproxy: How do i rewrite to a different host and keep query? [closed]

im trying to do a rewrite from https://example.domain.com/text?somestring=something&anothersomething=somethingelse to https://example2.domain2.com/example/foo/bar?somestring=something&...
0
votes
0answers
5 views

HaProxy Configurations Error while setting up multi proc environment

I want to achieve 6000/sec Requests and trying to setup HaProxy with muli proc Settings but Getting this Error. cpu-map expects a process number including 'all', 'odd', 'even', or a number from 1 ...
0
votes
0answers
10 views

HAPROXY-Weblogic, issue with https-ssl connection

Recently have been deployed a web page using Weblogic Cluster. The page inside the WL works properly. In front of the WebLogic Servers there are two servers with Apache, keepalived and HAPROXY ...
1
vote
1answer
29 views

Pacemaker fencing not triggered

I have 2 nodes : - patroni1 : 192.168.1.38 - patroni2 : 192.168.1.39 and Virtual IP : 192.168.1.40 I have HA-Proxy installed on both. Here is my pcs status when VIP is attached to patroni2 and ...
1
vote
1answer
20 views

Haproxy TLS configuration

I need to create haproxy with tls , although its working successfully with ssl certificate , i have done below configuration global log 127.0.0.1 local0 debug ssl-default-bind-options no-...
0
votes
0answers
8 views

Sudden spike in inbound bytes on HAProxy

I was watching the real time data on Google Analytics and I noticed that page views suddenly dropped by 50% for a small period of time. The drop occurred at 6.28PM. When I noticed this, I went into ...
-1
votes
0answers
58 views

HAProxy Config for Minio Object Storage

I keep getting connections reset by peer or broken pipes when writing/reading from minio. Setup: global log /dev/log local0 log /dev/log local1 notice spread-checks 5 max-spread-checks ...
0
votes
1answer
45 views

Nginx http to https redirect not working when listening to upstream loadbalancer

I currently have an HAProxy load balancer out front, without SSL termination, that routes traffic to a couple web servers. On the webserver, nginx terminates the SSL, and in theory provides http to ...
0
votes
0answers
14 views

How do I tarpit requests based on previous request patterns in HAProxy?

I've noticed a usage pattern of a webapp that I wish to block. Specifically, users requesting /api/:id/function1, with different IDs there but all only hitting 'function1'. I'd like to make it so ...
0
votes
0answers
30 views

Haproxy with unix domain socket backend not working

I have been trying to set up Haproxy (version 1.8.8) on my ubuntu 18.04 LTS desktop machine with a unix domain socket (streaming) in it's back-end. I have added following configuration: frontend ...
0
votes
0answers
24 views

HAProxy (or any lb) - can you redirect based on path without SSL termination?

I'm looking to decouple the marketing (logged out) portion of a website from the main logged-in app, without having to use subdomains. I believe I can do this with ACLs in HAProxy, and potentially ...
0
votes
1answer
30 views

Load balance PHP-FPM with HAProxy resulting in service unavailable

I need to load balance PHP-FPM with two backend servers with HAProxy (with Apache running on those backend servers as well). I have this frontend: frontend fr_fpm bind *:9000 mode tcp ...
1
vote
2answers
44 views

Using multiple conditionals in haproxy use_backend

Without brackets, seems it is not possible to have haproxy select use_backend based on true and (a or b) For example, I want to use_backend ClusterA if allowed_src and (method_a or path_b). ...
0
votes
1answer
54 views

haproxy hide backend url

Is it possible to hide the backend server's URL path, using haproxy? The backend server's URL path is https://backend:8443/backend_url(/.*) I would like to keep the URL path in the browser as always ...
0
votes
2answers
33 views

Stuck at setting up full proxy with HAProxy

I have gone through various answers on this forum and others and tried to debug my HAProxy configuration- alas no success. I am newbie at HAProxy and am facing challenges getting it to work the way I ...
0
votes
0answers
16 views

Haproxy API Facade Authentication

We're hoping to set up a series of internal services to be exposed via haproxy (probably with keepalived for redundancy). This would make, for example, http://x-1.site.com/api, http://x-2.site.com/...
0
votes
1answer
23 views

Receiving blank user agent requests from HAProxy?

My servers are receiving HTTP requests w/ blank user agents from my HAProxy load balancer. The request headers are all the same: Originating IP: Load Balancer IP User Agent: Blank Script: index.php ...
0
votes
0answers
43 views

Haproxy postgresql with patroni

I try to connect to my postgresql cluster using patroni and haproxy, in haproxy stats always i have two servers "DOWN" and when i connect from my pgadmin i have this message: server closed the ...
1
vote
1answer
45 views

haproxy how to process /.well-known before any redirects?

I want to create a haproxy configuration that listens on port 80 and: use_backend when the path starts with /.well-known/acme-challenge, regardless of domain redirect http to https for other paths ...
0
votes
0answers
25 views

Openshift clusters balancing on HAProxy (pfsense)

I'm using pfsense as a haproxy provider from external into internal side. Internally I have four clusters: lets assume there are: cluster1, cluster2, cluster3 and cluster4 Openshift (OKD) is using: ...
0
votes
0answers
28 views

HAProxy HTTP Check JSON Response is not Working

I'm doing a HAProxy http check for my backend, the healthcheck URL generates a json response like this: {"healthCheckMongoDb":{"healthy":true},"healthCheckSolr":{"healthy":true}} This is my backend ...
0
votes
1answer
57 views

Load balancer methods understanding(DNS and anycast)

I wish to understand the idea of anycast /dns based load balancing. Let us assume situation is as follows Website is www.aaa.example There are 3 datacenters in Europe/Asia/america that I wish to ...
0
votes
0answers
19 views

Migrate Apache RewriteRule to haproxy http-request redirect

We have a lot RewriteRules in our Apache config files. Now we have to migrate these rules to haproxy. For Example: RewriteCond %{HTTP_HOST} ^app.mydomain.com* RewriteRule ^/$ https://app.mydomain....
0
votes
1answer
92 views

Configure Haproxy and docker to solve port exhaustion on linux

I have an TCP server and haproxy running in a docker container on Debian in docker's bridged network mode. I have increased the ephermeral port range so that I can connect around 50k clients per IP. ...
0
votes
1answer
29 views

Is it possible to persist stick-tables across server reloads in Haproxy

I have read https://github.com/haproxy/haproxy/blob/master/examples/seamless_reload.txt on how to set up persisting the server state when you reload, but this does not save/load the contents on stick-...
0
votes
0answers
46 views

PFSense with HAProxy: Serving simple http page and OpenVpn

I've setup my PFSense with HAProxy as reverse proxy using a single public IP address, in order to serve my http app, that listen on the port 80, everything works fine, but when i try to setup a TCP ...
2
votes
2answers
97 views

CentOS 7: PCS Pacemaker Corosync Active/Active HAProxy dependency

I am trying to setup PCS for HAProxy on CentOS7 in an active/active configuration. I've done active/active before, but I am not familiar with constraints and dependency groups. So far so good: 2 ...
0
votes
1answer
56 views

Haproxy to redirect Mysql with ssl

Im looking If is possible to use haproxy to balance mysql servers with ssl. Only Im finding how to use with http but in this case we need to enable this option. For now specific config is listen ...
2
votes
0answers
23 views

BAD REQ 400 when trying to enable HAProxy ssl?

http works but can't connect via secure connection. The haproxy log file error: {} <BADREQ> 400 mainssl/<NOSRV> <ip> 187 -1 output of socket show errors: frontend mainssl (#3): ...
0
votes
0answers
14 views

Assign Swarm worker node to specific dns address

We want worker nodes in our swarm cluster to be assigned to specific dns addresses. We require a single container of a our backend to run on a single node using mode: global as opposed to replicas in ...
0
votes
0answers
62 views

How to configure haproxy in OPNsense with different TLS versions

Currently we have different services running behind our OPNsense box like otrs, mattermost, svn, website aso. Only one website is currently running on port 443, all other sites use different ports. ...
1
vote
1answer
63 views

What is the meaning of these HAProxy configuration lines?

I've seen several examples (see below) of HAProxy logging configuration that all look like this: /etc/haproxy/haproxy.cfg global log /dev/log local0 log /dev/log local1 notice ...
0
votes
1answer
86 views

How can I configure haproxy to put two frontends to access owa online?

I am facing a problem with HAPROXY on an Ubuntu 16.04 server when redirecting to show OWA on the internet. I have a domain, and I installed exchange server 2013 on windows server 2012 r2. I need to ...
0
votes
0answers
24 views

Not able to call lua script from haproxy cfg

I am just a beginner. Started learning basics with lua and haproxy. I get below error while calling lua script from haproxy.cfg. [ALERT] 289/151738 (4209) : parsing [/usr/local/etc/haproxy.cfg:25] : ...
2
votes
1answer
80 views

haproxy does not add headers conditionally

I have the following config, it's under the frontend section for tls connection and haproxy terminates https connections: acl domain-acl-host hdr(host) -i domain.tld rspadd X-Foo:\ bar if domain-acl-...
0
votes
1answer
32 views

URL path Redirection in Haproxy.cfg

I have https://www.mysites/v1/pages and I want that to redirect to https://www.mysites/v2/pages I have added the following config on HAproxy config but not forward. redirect location https://...
-1
votes
1answer
244 views

Rewrite host header in HAProxy

Trying to rewrite the host header in HAProxy, but can't figure how to do it right. I need the to rewite to another domain. Users access the webpage on URI: site1.dev.example.com and I need to ...
2
votes
1answer
103 views

Enable HTTP Strict Transport Header globally in HAProxy

I want to enable HTTP Strict Transport Security (HSTS) Headers globally for all my backends in HAProxy v1.5. Following the instructions from https://www.haproxy.com/blog/haproxy-and-http-strict-...
0
votes
1answer
40 views

HAProxy doesn't automatically reload DNS

I've installed HAProxy 1.7.5-2 on a Debian Stretch (9) for a blue/green deployment infrastructure. HAProxy is setup in TCP mode and reloads DNS every 5 seconds but it doesn't. global log 127.0.0....
0
votes
0answers
42 views

Haproxy rabbitmq proxy isn't working on any other ports

I'm trying to make an haproxy that routes traffic to three different rabbitmqs global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid ...
0
votes
0answers
14 views

HAProxy using basic auth doesn't always match user

Current Configuration: userlist users user user insecure-password password frontend http bind *:80 acl auth_matches http_auth(users) http-request auth realm draw unless ...
0
votes
0answers
33 views

Why do my HAProxy logs contain many entries with session termination state 'CD'?

I have an HAProxy instance in front of Nginx. HAProxy is listening in TCP mode so that Nginx can do SSL termination. In my logs I'm seeing lots of entries like this: x.x.x.x:37770 [03/Oct/2018:21:19:...
1
vote
0answers
42 views

HaProxy randomly returning 503 for static files when servers are available

HaProxy is randomly returning 503 even though there definitely are backend servers available. The backend is serving the files correctly, as it's access log shows it always returning a 200 or 304. I'm ...