Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

Filter by
Sorted by
Tagged with
0 votes
1 answer
363 views

HAProxy backend - How to connect to remote server?

Good afternoon everyone, I am a newbie in web hosting and still feel like I am learning to swim in the middle of the ocean. What I want to do is setup HAproxy to forward a request to a remote server ...
Nikolaos Hatzistelios's user avatar
0 votes
0 answers
78 views

How can I create a condition with OR and AND in HAPROXY

I need to create a silent drop rule. If packet not from example_lan_allowed to path_beg /api/ or path_beg /swagger-ui/ has been received by HAPROXY, it should be passed, but other packets to ...
Vladimir Fomin's user avatar
2 votes
0 answers
160 views

Looking for a good beginners guide for SSO and HAProxy (keyloak, authelia..)

Im using haproxy now for several years and im very happy... (After i experienced with traefik...) Now i want to put some of my docker-microservices (hedgedoc etc) in the internet. But i want to have ...
mylan's user avatar
  • 51
0 votes
0 answers
87 views

Haproxy cannot read full URL

I am using 2 types of proxies in my system one is for static files and images, other is for other files. I want to create a ACL rule for .png .jpeg etc. and route those to my other cheap proxy. My ...
bibi's user avatar
  • 1
2 votes
0 answers
607 views

Can any help me to understand HAProxy DDoS attack protection configuration?

I'm using HAP on and off for a bit now and now I'm trying confgure DDoS protection per frontend, to block a connection for 5 mints, if it receives more than 200 requests per second from the same ...
MacUsers's user avatar
  • 479
0 votes
2 answers
169 views

HAPROXY: How to ensure all clients are connected to one server only?

I have 3 servers setup: 1 primary, 2 backups. I used the following configuration: backend pg_production_backend option pgsql-check user pg_user server primary pghost.primary:5432 check on-...
Duy Vu's user avatar
  • 1
1 vote
0 answers
57 views

Haproxy blocking more TCP requests than expected

In short HAproxy is blocking my TCP requests while I expect not to be and found nothing in logs. Here the interesting part of my haproxy file : global log /dev/log local0 debug log /...
Arnaud F.'s user avatar
  • 133
0 votes
0 answers
263 views

Forward local generated Secure Websocket traffic (wss) through an HTTP/HTTPS proxy to reach internet

I have a python webex_bot application (https://github.com/fbradyirl/webex_bot) which uses websockets for webex cloud communication. The problem is that the server in which the bot is being hosted on, ...
panchis's user avatar
0 votes
0 answers
217 views

HAProxy closes connection on exact client timeout, even though there was data flowing in the middle of that period

I'd like to have long lived connections(if possible infinite), from app containers to RabbitMQ behind HAProxy 2.8.1. The problem is that the HAProxy severs the connection at exact client timeout, even ...
cmicma cmicma's user avatar
0 votes
0 answers
145 views

PfSense - Ha proxy Wan Ip timeout when outside network requests

Currently I'm setting up a home lab and I've the following architecture Architecture I've setup my ISP provider to redirect any 80 requests to my pfsense firewall. Created a rule allowing any requests ...
Vinicius Andrade's user avatar
0 votes
1 answer
325 views

haproxy on pfsense fw to guac

I am having some issues with setting up a publicly accessible guacamole server thru my pfsense, which is running haproxy. Internet > pfsense \ haproxy > guac I have my domain DNS thru ...
nepher ki3den's user avatar
0 votes
0 answers
228 views

HAProxy transparent TCP proxy fails when source 0.0.0.0 usesrc clientip is set

I have a setup where I want a transparent TCP proxy in front of some HTTPS services. The services themselves deal with certificates so I'm trying to avoid a HTTP proxy here. I also need the services ...
Rablet's user avatar
  • 1
0 votes
1 answer
486 views

HAProxy setting variables for logging

Goal I am trying to output the full payload of the request as part of an error message, because I believe the requester is giving me a garbage payload. The original, working log was setenv TCP_LOG &...
jeremysprofile's user avatar
2 votes
1 answer
1k views

Adding custom headers on error responses from haproxy

I have the following haproxy config that adds the access-control-allow-origin header on successful 200 requests with the below config. My problem is, when I hit timeouts or haproxy itself (not my ...
user avatar
0 votes
1 answer
430 views

How to configure Keepalived to act as L4 load balancer via direct routing method

Trying to achieve L4 load balancing via Keepalived in front of HAProxy that will act as L7 load balancer. Both Keepalived and HAProxy are on separate machines. I managed to get everything in the below ...
Mo Ali's user avatar
  • 101
-1 votes
1 answer
833 views

How can I get haproxy to completely ignore SSL handshake errors?

Scenario: I have an old hp dl360 g7 with iLO 3. Modern browsers can't access it because it uses ancient ciphers. On my internal network, I'd like to have haproxy talk to it and eat the SSL errors and ...
Matt's user avatar
  • 151
0 votes
1 answer
377 views

Why doesn't this HAProxy ACL match the HTTP method from returned from a map?

I'm trying to configure HAProxy to allow a specific set of HTTP methods to a specific set of paths, stored in a map. For example, I have a haproxy map file which contains the following: /api/...
JamesHannah's user avatar
  • 1,731
0 votes
1 answer
441 views

Change request without change url on browser HAProxy

I've configured haproxy, when i type test.example.com it redirects me to example.com/test This is what I want, but the problem is that I want this happen without changing the url on the browser, I ...
Fabio's user avatar
  • 1
0 votes
0 answers
106 views

HAProxy load balancing check

I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
Halcoaching's user avatar
0 votes
0 answers
66 views

Letsencrypt + HAProxy SSL Offloading

I am using HAProxy for SSL offloading and letsencrypt certificates. Previously, I was using the tls-sni-01-port flag - which is no longer supported. Does anyone have a recipe that has been working in ...
Aaron A's user avatar
  • 249
0 votes
0 answers
175 views

Why HAProxy session cookie is changing?

I run two containers of an app behind an Haproxy and use sticky sessions. I configured it with a cookie as follow : cookie SERVER insert indirect nocache server app1 app-1:443 check ssl verify none ...
Wapax's user avatar
  • 1
0 votes
0 answers
300 views

HaProxy - Add authorization header per backend

I want to add an autorization header per backend, it's possible? I already try this but is not working backend default_ad_agent mode http http-request add-header Authorization "...
André Bolinhas's user avatar
0 votes
0 answers
3k views

curl: (7) Failed connect to 192.168.169.128:80; Connection refused, how to fix?

Why is my haproxy load balancer not working? I'm on centos 7. I've set up 2 servers "nginx-node01" and "nginx-node02". As the name implies these 2 servers are of nginx. They're up ...
achhainsan's user avatar
0 votes
1 answer
184 views

How to use DSR load balnce from two different network?

I have a server (A) which clients connect to it throw internet and its ip is 195.45.10.2 it route trafic to server (B) and its ip is 85.10 20.2 . So now I want to use some thing like dsr to let server ...
Ehsan Hosseini's user avatar
0 votes
0 answers
117 views

HAProxy stats page does not update when new server is added/removed via dataplane API

I am using dataplane api to dynamically add/remove backend servers. I was expecting haproxy stats to update accordingly with new haproxy config version generated by dataplane API. Am i missing ...
Akshay Lakhe's user avatar
1 vote
1 answer
201 views

Why haproxy can not set custom header for ingress-nginx

I have config haproxy.cfg like bellow ... frontend app bind *:443 mode tcp option tcplog option forwardfor http-request set-header X-AONE-IP 10.0.0.1 ...
bkit07's user avatar
  • 11
0 votes
0 answers
157 views

Direct Server Return software and configuration for mesh network of raspbery pi servers

I don't know much about DSR technology but as I am aware both load balancer and servers need to be behind same router because of virtual IP addresses. I need solution to have cloud-based geo-based ...
Dejan Milosevic's user avatar
1 vote
0 answers
611 views

HAProxy backend with different path prefix per server

Is it possible to configure an HAProxy backend with multiple servers and different path prefix for each server? I want something like this: backend mybackend server node1 server1.example.com/...
EM0's user avatar
  • 329
0 votes
1 answer
2k views

Haproxy as a mail protocols reverse proxy with SSL termination

Looking for guidance of how to configure haproxy 2.4 in a container, to proxy for a mail server (all protocols, imap/s, smtp/s, pop3/s, http/s) and having haproxy doing ssl termination, but also ...
Unpossible's user avatar
0 votes
0 answers
146 views

HaProxy Configuration For Microsoft Graph API and OAuth Token

I am not an expert with HA proxy, that can be the first reason for my requests getting failed. I have a Java application that is on a server which dont have access to Internet. Access is only ...
Rehan Azher's user avatar
0 votes
0 answers
789 views

Multi master kubernetes cluster with haproxy LB, cluster is not working after master node restart(Unable to execute kubectl cmds)

I have installed multi master cluster, referring to the guide Setting up k8 multi master cluster Setup details as following. Load balancer: Haproxy LB frontend kubernetes-frontend bind 192.168.1....
kaushal47's user avatar
1 vote
0 answers
432 views

Haproxy deny domain and path with map

I would like to make deny for specific domains + path preferably using maps or text file in haproxy. For example, I would like to define file with domain: example.com/test-path example2.com/another-...
kzn's user avatar
  • 11
0 votes
1 answer
852 views

HA Proxy fails ssl validation

We are using a Godaddy wild card certificate on HA (Wildcard.pem) and custom CA certs on the backends. The in-house CA is trusted by HA and all servers. I can access all backend servers individually ...
LinuxN00b's user avatar
  • 103
1 vote
1 answer
3k views

How to support TLS 1 and TLS 1.1 with haproxy 2.4 and OpenSSL 3?

I am trying to support TLSv1.0 and TLSv1.1 with haproxy 2.4.18 (and OpenSSL 3.0.2) on Ubuntu 22.04. I have followed Mozilla SSL Configuration Generator, "Old" configuration, slightly ...
Óscar's user avatar
  • 111
0 votes
1 answer
1k views

Haproxy Stats page not working with TCP mode

Haproxy experts, I'm unable to get haproxy stats page to work with TCP mode for the backends. global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy....
Lamboo's user avatar
  • 3
1 vote
1 answer
81 views

cURL to OWA not working from newly-installed RHEL server but working from Ubuntu server

I have two Linux servers acting as a reverse proxy between my Exchange server and the internet. The newest server is RHEL 8.7. When I attempt to cURL to OWA from the RHEL server I am getting the ...
user1913559's user avatar
0 votes
1 answer
2k views

HAProxy and postgres

My haproxy configuration is as below, in the backend there is pg_autoctl cluster, another VM (bunty4) hosts the monitor and haproxy is installed on it. global maxconn 100 defaults log global ...
uozzyy's user avatar
  • 33
0 votes
1 answer
832 views

Haproxy will not load balance smtp

I have been struggling with Haproxy for a long time now to configure smtp load balancing. Whatever I do, the server responds with a black screen and no possibility to try out smtp commands to test. ...
02dag's user avatar
  • 1
0 votes
0 answers
72 views

haproxy between http-only client and websockets only backend

odd request maybe, but I have a need to proxy between a HTTP-only client and a WebSocket-only server. these are not long-lived connections; the client does a POST with some binary data that needs to ...
Marvin's user avatar
  • 1
0 votes
1 answer
292 views

socat is missing commands for haproxy on ubuntu 20.04

I have installed haproxy 2.6.6, socat 1.7.4.1 and have a working load balancer for Exchange. I want to be able to turn off a node for maintenance and have unsuccessfully tried to use socat to do this. ...
02dag's user avatar
  • 1
0 votes
1 answer
818 views

HaProxy - Does prefer-client-ciphers mean the client can choose a cipher not supported by a server?

Considering a setup like this: global # intermediate configuration ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-...
KoenDG's user avatar
  • 97
0 votes
1 answer
1k views

Can't use external-check in Haproxy

I'm trying to use the option external-check in haproxy, but after service restart in log I see: Dec 30 10:41:34 1 haproxy[89540]: [WARNING] (89540) : config : 'external-check command' will be ignored ...
Qcur's user avatar
  • 1
1 vote
1 answer
2k views

Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?

I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
Martin Braun's user avatar
0 votes
1 answer
2k views

HaProxy redirect to internal URL

I have a configuration with two backend servers I need to redirect 301 to each server with an internal URL on HTTP. It's hard to use SSL because I can't install SSL on the Report Server in that ...
Dr.Fr05t's user avatar
0 votes
0 answers
756 views

nginx-ingress displays 404 page

I have an EKS cluster that I inherited (no documentation). The cluster hadnt been upgraded in years. I was tasked to upgrade it. The version on nginx-ingress was from quay.io which is no longer ...
zerobit's user avatar
2 votes
1 answer
3k views

How to setup haproxy to connect to backend server using HTTP/3 QUIC?

I am able to configure HAProxy to to present itself as an HTTP/3 server by following instruction here: https://www.haproxy.com/blog/announcing-haproxy-2-6/ bind :443 ssl crt server.pem alpn h2,http/1....
some user's user avatar
  • 181
3 votes
1 answer
2k views

Why is "tcp-request content accept" frontend instruction is required for proper HAProxy SNI-based routing?

I've recently tried to set up SNI-based routing on HAProxy for mongodb mongodb+srv protocol connection. I made it working, but it wasn't until I put tcp-request inspect-delay 5s tcp-request content ...
Pavel Klimov's user avatar
0 votes
1 answer
340 views

Why do i see ipv6 addresses on haproxy logs?

We have received complaints that some users cannot access the site during the day. Somehow they see maintanence page. When we examined the haproxy logs, we saw that all 503 error's requests' source ...
tazemeta's user avatar
0 votes
1 answer
192 views

Check response of one backend before proxying to another

I have two backends in two locations behind an Nginx frontend. Backend A implements authentication with OAuth. Backend B doesn't. I think a lazy way of adding authentication for location B would be to ...
Daniel Darabos's user avatar
0 votes
1 answer
1k views

Patroni Haproxy and pg-bouncer architecture

I'm building a patroni postgres cluster, however, I can't decide which is better architecture App > HAproxy > Pgbouncer > PostgreSQL (patroni) App > PGBouncer > HAproxy > PostgreSQL (...
Nullyinthesky's user avatar

1
2
3 4 5
43