Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,128
questions
0
votes
1
answer
363
views
HAProxy backend - How to connect to remote server?
Good afternoon everyone,
I am a newbie in web hosting and still feel like I am learning to swim in the middle of the ocean. What I want to do is setup HAproxy to forward a request to a remote server ...
0
votes
0
answers
78
views
How can I create a condition with OR and AND in HAPROXY
I need to create a silent drop rule.
If packet not from example_lan_allowed to path_beg /api/ or path_beg /swagger-ui/ has been received by HAPROXY, it should be passed, but other packets to ...
2
votes
0
answers
160
views
Looking for a good beginners guide for SSO and HAProxy (keyloak, authelia..)
Im using haproxy now for several years and im very happy... (After i experienced with traefik...) Now i want to put some of my docker-microservices (hedgedoc etc) in the internet. But i want to have ...
0
votes
0
answers
87
views
Haproxy cannot read full URL
I am using 2 types of proxies in my system one is for static files and images, other is for other files.
I want to create a ACL rule for .png .jpeg etc. and route those to my other cheap proxy. My ...
2
votes
0
answers
607
views
Can any help me to understand HAProxy DDoS attack protection configuration?
I'm using HAP on and off for a bit now and now I'm trying confgure DDoS protection per frontend, to block a connection for 5 mints, if it receives more than 200 requests per second from the same ...
0
votes
2
answers
169
views
HAPROXY: How to ensure all clients are connected to one server only?
I have 3 servers setup: 1 primary, 2 backups. I used the following configuration:
backend pg_production_backend
option pgsql-check user pg_user
server primary pghost.primary:5432 check on-...
1
vote
0
answers
57
views
Haproxy blocking more TCP requests than expected
In short HAproxy is blocking my TCP requests while I expect not to be and found nothing in logs.
Here the interesting part of my haproxy file :
global
log /dev/log local0 debug
log /...
0
votes
0
answers
263
views
Forward local generated Secure Websocket traffic (wss) through an HTTP/HTTPS proxy to reach internet
I have a python webex_bot application (https://github.com/fbradyirl/webex_bot) which uses websockets for webex cloud communication. The problem is that the server in which the bot is being hosted on, ...
0
votes
0
answers
217
views
HAProxy closes connection on exact client timeout, even though there was data flowing in the middle of that period
I'd like to have long lived connections(if possible infinite), from app containers to RabbitMQ behind HAProxy 2.8.1.
The problem is that the HAProxy severs the connection at exact client timeout, even ...
0
votes
0
answers
145
views
PfSense - Ha proxy Wan Ip timeout when outside network requests
Currently I'm setting up a home lab and I've the following architecture
Architecture
I've setup my ISP provider to redirect any 80 requests to my pfsense firewall.
Created a rule allowing any requests ...
0
votes
1
answer
325
views
haproxy on pfsense fw to guac
I am having some issues with setting up a publicly accessible guacamole server thru my pfsense, which is running haproxy.
Internet > pfsense
\ haproxy > guac
I have my domain DNS thru ...
0
votes
0
answers
228
views
HAProxy transparent TCP proxy fails when source 0.0.0.0 usesrc clientip is set
I have a setup where I want a transparent TCP proxy in front of some HTTPS services. The services themselves deal with certificates so I'm trying to avoid a HTTP proxy here. I also need the services ...
0
votes
1
answer
486
views
HAProxy setting variables for logging
Goal
I am trying to output the full payload of the request as part of an error message, because I believe the requester is giving me a garbage payload. The original, working log was
setenv TCP_LOG &...
2
votes
1
answer
1k
views
Adding custom headers on error responses from haproxy
I have the following haproxy config that adds the access-control-allow-origin header on successful 200 requests with the below config. My problem is, when I hit timeouts or haproxy itself (not my ...
0
votes
1
answer
430
views
How to configure Keepalived to act as L4 load balancer via direct routing method
Trying to achieve L4 load balancing via Keepalived in front of HAProxy that will act as L7 load balancer. Both Keepalived and HAProxy are on separate machines. I managed to get everything in the below ...
-1
votes
1
answer
833
views
How can I get haproxy to completely ignore SSL handshake errors?
Scenario:
I have an old hp dl360 g7 with iLO 3. Modern browsers can't access it because it uses ancient ciphers.
On my internal network, I'd like to have haproxy talk to it and eat the SSL errors and ...
0
votes
1
answer
377
views
Why doesn't this HAProxy ACL match the HTTP method from returned from a map?
I'm trying to configure HAProxy to allow a specific set of HTTP methods to a specific set of paths, stored in a map.
For example, I have a haproxy map file which contains the following:
/api/...
0
votes
1
answer
441
views
Change request without change url on browser HAProxy
I've configured haproxy, when i type test.example.com it redirects me to example.com/test
This is what I want, but the problem is that I want this happen without changing the url on the browser, I ...
0
votes
0
answers
106
views
HAProxy load balancing check
I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
0
votes
0
answers
66
views
Letsencrypt + HAProxy SSL Offloading
I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported.
Does anyone have a recipe that has been working in ...
0
votes
0
answers
175
views
Why HAProxy session cookie is changing?
I run two containers of an app behind an Haproxy and use sticky sessions. I configured it with a cookie as follow :
cookie SERVER insert indirect nocache
server app1 app-1:443 check ssl verify none ...
0
votes
0
answers
300
views
HaProxy - Add authorization header per backend
I want to add an autorization header per backend, it's possible?
I already try this but is not working
backend default_ad_agent
mode http
http-request add-header Authorization "...
0
votes
0
answers
3k
views
curl: (7) Failed connect to 192.168.169.128:80; Connection refused, how to fix?
Why is my haproxy load balancer not working?
I'm on centos 7.
I've set up 2 servers "nginx-node01" and "nginx-node02". As the name implies these 2 servers are of nginx. They're up ...
0
votes
1
answer
184
views
How to use DSR load balnce from two different network?
I have a server (A) which clients connect to it throw internet and its ip is 195.45.10.2 it route trafic to server (B) and its ip is 85.10 20.2 . So now I want to use some thing like dsr to let server ...
0
votes
0
answers
117
views
HAProxy stats page does not update when new server is added/removed via dataplane API
I am using dataplane api to dynamically add/remove backend servers. I was expecting haproxy stats to update accordingly with new haproxy config version generated by dataplane API. Am i missing ...
1
vote
1
answer
201
views
Why haproxy can not set custom header for ingress-nginx
I have config haproxy.cfg like bellow
...
frontend app
bind *:443
mode tcp
option tcplog
option forwardfor
http-request set-header X-AONE-IP 10.0.0.1
...
0
votes
0
answers
157
views
Direct Server Return software and configuration for mesh network of raspbery pi servers
I don't know much about DSR technology but as I am aware both load balancer and servers need to be behind same router because of virtual IP addresses.
I need solution to have cloud-based geo-based ...
1
vote
0
answers
611
views
HAProxy backend with different path prefix per server
Is it possible to configure an HAProxy backend with multiple servers and different path prefix for each server? I want something like this:
backend mybackend
server node1 server1.example.com/...
0
votes
1
answer
2k
views
Haproxy as a mail protocols reverse proxy with SSL termination
Looking for guidance of how to configure haproxy 2.4 in a container, to proxy for a mail server (all protocols, imap/s, smtp/s, pop3/s, http/s) and having haproxy doing ssl termination, but also ...
0
votes
0
answers
146
views
HaProxy Configuration For Microsoft Graph API and OAuth Token
I am not an expert with HA proxy, that can be the first reason for my requests getting failed.
I have a Java application that is on a server which dont have access to Internet. Access is only ...
0
votes
0
answers
789
views
Multi master kubernetes cluster with haproxy LB, cluster is not working after master node restart(Unable to execute kubectl cmds)
I have installed multi master cluster, referring to the guide Setting up k8 multi master cluster
Setup details as following.
Load balancer: Haproxy LB
frontend kubernetes-frontend
bind 192.168.1....
1
vote
0
answers
432
views
Haproxy deny domain and path with map
I would like to make deny for specific domains + path preferably using maps or text file in haproxy.
For example, I would like to define file with domain:
example.com/test-path
example2.com/another-...
0
votes
1
answer
852
views
HA Proxy fails ssl validation
We are using a Godaddy wild card certificate on HA (Wildcard.pem) and custom CA certs on the backends. The in-house CA is trusted by HA and all servers. I can access all backend servers individually ...
1
vote
1
answer
3k
views
How to support TLS 1 and TLS 1.1 with haproxy 2.4 and OpenSSL 3?
I am trying to support TLSv1.0 and TLSv1.1 with haproxy 2.4.18 (and OpenSSL 3.0.2) on Ubuntu 22.04.
I have followed Mozilla SSL Configuration Generator, "Old" configuration, slightly ...
0
votes
1
answer
1k
views
Haproxy Stats page not working with TCP mode
Haproxy experts,
I'm unable to get haproxy stats page to work with TCP mode for the backends.
global
log 127.0.0.1 local2
chroot /var/lib/haproxy
pidfile /var/run/haproxy....
1
vote
1
answer
81
views
cURL to OWA not working from newly-installed RHEL server but working from Ubuntu server
I have two Linux servers acting as a reverse proxy between my Exchange server and the internet. The newest server is RHEL 8.7.
When I attempt to cURL to OWA from the RHEL server I am getting the ...
0
votes
1
answer
2k
views
HAProxy and postgres
My haproxy configuration is as below, in the backend there is pg_autoctl cluster, another VM (bunty4) hosts the monitor and haproxy is installed on it.
global
maxconn 100
defaults
log global
...
0
votes
1
answer
832
views
Haproxy will not load balance smtp
I have been struggling with Haproxy for a long time now to configure smtp load balancing. Whatever I do, the server responds with a black screen and no possibility to try out smtp commands to test. ...
0
votes
0
answers
72
views
haproxy between http-only client and websockets only backend
odd request maybe, but I have a need to proxy between a HTTP-only client and a WebSocket-only server. these are not long-lived connections; the client does a POST with some binary data that needs to ...
0
votes
1
answer
292
views
socat is missing commands for haproxy on ubuntu 20.04
I have installed haproxy 2.6.6, socat 1.7.4.1 and have a working load balancer for Exchange. I want to be able to turn off a node for maintenance and have unsuccessfully tried to use socat to do this.
...
0
votes
1
answer
818
views
HaProxy - Does prefer-client-ciphers mean the client can choose a cipher not supported by a server?
Considering a setup like this:
global
# intermediate configuration
ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-...
0
votes
1
answer
1k
views
Can't use external-check in Haproxy
I'm trying to use the option external-check in haproxy, but after service restart in log I see:
Dec 30 10:41:34 1 haproxy[89540]: [WARNING] (89540) : config : 'external-check command' will be ignored ...
1
vote
1
answer
2k
views
Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?
I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
0
votes
1
answer
2k
views
HaProxy redirect to internal URL
I have a configuration with two backend servers I need to redirect 301 to each server with an internal URL on HTTP. It's hard to use SSL because I can't install SSL on the Report Server in that ...
0
votes
0
answers
756
views
nginx-ingress displays 404 page
I have an EKS cluster that I inherited (no documentation). The cluster hadnt been upgraded in years. I was tasked to upgrade it. The version on nginx-ingress was from quay.io which is no longer ...
2
votes
1
answer
3k
views
How to setup haproxy to connect to backend server using HTTP/3 QUIC?
I am able to configure HAProxy to to present itself as an HTTP/3 server by following instruction here: https://www.haproxy.com/blog/announcing-haproxy-2-6/
bind :443 ssl crt server.pem alpn h2,http/1....
3
votes
1
answer
2k
views
Why is "tcp-request content accept" frontend instruction is required for proper HAProxy SNI-based routing?
I've recently tried to set up SNI-based routing on HAProxy for mongodb mongodb+srv protocol connection.
I made it working, but it wasn't until I put
tcp-request inspect-delay 5s
tcp-request content ...
0
votes
1
answer
340
views
Why do i see ipv6 addresses on haproxy logs?
We have received complaints that some users cannot access the site during the day. Somehow they see maintanence page. When we examined the haproxy logs, we saw that all 503 error's requests' source ...
0
votes
1
answer
192
views
Check response of one backend before proxying to another
I have two backends in two locations behind an Nginx frontend. Backend A implements authentication with OAuth. Backend B doesn't.
I think a lazy way of adding authentication for location B would be to ...
0
votes
1
answer
1k
views
Patroni Haproxy and pg-bouncer architecture
I'm building a patroni postgres cluster, however, I can't decide which is better architecture
App > HAproxy > Pgbouncer > PostgreSQL (patroni)
App > PGBouncer > HAproxy > PostgreSQL (...