Questions tagged [haproxy]
HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.
2,128
questions
2
votes
1
answer
5k
views
haproxy not working when upgrading to version 2.2 (reqadd doesn't exist any more)
[I erronously had posted this question on stackoverflow]
On my debian buster server I had a perfecly working haproxy (v1.8), which I use for managing certificates for my web sites.
haproxy listens to ...
- 251
1
vote
1
answer
2k
views
HAProxy is not working with SNI and ACLs
I am trying to get haproxy to use acls with SNI and it ain't cooperating. It presents the correct cert so SNI must be working. However, I cannot get it to select a backend based on the hostname in ...
- 51
0
votes
2
answers
1k
views
haproxy: close or change port 80 of stats page
The http-port has to be available for another usage.
Port 80 of the stats-page has to be closed or moved to another port.
Removing mode http in the default section disables the page.
echo >/dev/tcp/...
- 3
0
votes
1
answer
3k
views
HAPROXY SNI SSL pass through or termination
I would like to set up HAProxy to terminate SSL or pass through connection depends from hostname, exposing only one public IP address. For example
Internet -> domain web1.example.com (10.10.10.1) ...
- 1
0
votes
1
answer
2k
views
Allow docker containers on the bridge network to connect to the host using iptables
I have recently tried deploying iptables to only expose relevant ports.
I'm dropping every incoming connection using
iptables -P INPUT DROP
and later on allowing access to relevant ports.
This does ...
- 1
1
vote
1
answer
734
views
HAProxy goes to the same website even though they have different sub-domains
I have an issue with HAProxy where it goes to the same website even though they have different sub-domains.
For example, I go to foo.domain.com then on another tab I go to bar.domain.com and another ...
- 11
0
votes
1
answer
1k
views
HAproxy finds no backend when different port is used
I have two backends that are the same server running two of the same Docker image, but each with a different port. That is, on the backend server, the only different between the two is the port ...
- 129
0
votes
1
answer
3k
views
How to access X-Forwarded-For header on HAProxy behind AWS Loadbalancer
On HAProxy instances running on K8S I need to block certain IP addresses manually on HAProxy. Currently I am failing already to log them. Per the AWS docs the loadbalancers set the X-Forwarded-For ...
- 85
0
votes
0
answers
798
views
Set up HAProxy load balancer in docker for a docker RabbitMQ cluster
I've set up a 3 node RabbitMQ cluster in docker using the following,
docker run -d --rm --net rabbits `
-v ${PWD}/config/rabbit-1/:/config/ `
-e RABBITMQ_CONFIG_FILE=/config/rabbitmq `
-e ...
- 99
0
votes
0
answers
902
views
HAProxy multiple backends TCP/HTTP mode works only for one backend
listen mqtt-ssl
bind *:8883 ssl no-sslv3 crt /my.pem verify required ca-file /my/pem/all_cas.pem crl-file /my/pem/all_crls.pem
mode tcp
option tcplog
log global
maxconn 50000
...
- 101
0
votes
1
answer
261
views
HAProxy - http log and TTFB discrepency
I am noticing a large discrepancy between TTFB in my browser networking tool and the HAProxy logs. HAProxy will say the request returned in 29 ms for example, but the browser reports anywhere from 50-...
- 123
0
votes
1
answer
56
views
Unable access to webex desktop app using tcp mode
I'm running haproxy 2.4 and when the haproxy is configured in http mode, i can't access to webex desktop app, says connecting but instead pass to logon page, back to "select webex website".
...
0
votes
0
answers
699
views
High cpu usage over TCP
I'm running haproxy 2.4 and when the haproxy is configured in tcp mode i get a high cpu usage.
Example:
Running the stress tool to generated arround 30k connections:
./pst -c 100000 -r 100000 -u ...
1
vote
0
answers
564
views
Load Balancing HTTP/2 GRPC persistent connections
Let's take a look at this scenario.
In a traditional LB model, we would have the LB (wether a reverse proxy or not) farm out req/rep to application level servers. This model is fine for the generic ...
- 111
1
vote
2
answers
2k
views
HAProxy APIs - Reload Config
I notice there are two APIs for HaProxy. DataPlane and Runtime.
I don't see anything obvious that will just tell the system to reload and parse the .cfg file.
Seems like a no brainer thing to want to ...
- 111
0
votes
0
answers
344
views
Upgrading HAProxy 2.0.13 to 2.4.10 (Ubuntu 20.04) -- performance & issues?
My company is currently using HAProxy 2.0.13 (from Ubuntu repository).
Since latest HAProxy (just released last month) is 2.5, we think HAProxy 2.0.13 is a bit "long in the tooth". Also, (...
- 5,138
0
votes
0
answers
23
views
How to use multiple SSL certificates in HA Proxy [duplicate]
I currently have HA Proxy working with domain1.com, and am looking to add a domain2.com, I'm having a hard time finding documentation to support the adding of a second SSL certificate for SSL ...
- 13
0
votes
1
answer
1k
views
HAProxy Combined Acls
I'm trying to make a combined acl in the haproxy config.
Is this kind of thing possible ??
acl bare-dom1 hdr(host) -m reg -i domain1.org(:[0-9]+)?$
acl bare-dom2 hdr(host) -m reg -i domain2.org(:[...
- 111
0
votes
1
answer
1k
views
How to clear 'sticky' HAProxy sessions?
So, originally my haproxy.cfg looks like this (snippet):
frontend https_in
mode http
option httplog
option forwardfor
bind 192.168.150.2:443 ssl crt /etc/haproxy/ssl_cert/...
- 5,138
1
vote
0
answers
819
views
Websocket from one HAProxy backend to another backend fails
I have two backends (b1, b2) sitting behind the same frontend (f1) in HAProxy, routing based on host name. I can establish websocket to both b1 and b2 from my laptop, however if I try to establish ...
- 197
0
votes
1
answer
284
views
HAproxy ACLs to Allow ssh git operations to only selected git repositories / project urls ( block all other repos)
I have Bitbucket Server serving SSH git traffic on port 7999 and it has an HAProxy for SSH port forwarding ( HAProxy is only for a set of users from a secure n/w).
The requirement is to Allow only ...
- 11
1
vote
0
answers
126
views
Why doesn't throughput improve from adding additional web servers?
I have a load balancer with a dedicated cpu that distributes traffic to two linodes with shared cpus. I'm testing a template website with 9 lazy loaded images, no database queries, that's been ...
- 111
0
votes
1
answer
598
views
Is that possible to encrypt the traffic which is between internal webservers by using Load Balancer [closed]
I am currently using Let's Encrypt to obtain server certificates for approximately 100+ backend servers. Every 90 days I have to work with other teams to renew my certs via the DNS-01 challenge. I ...
- 171
0
votes
1
answer
438
views
Half of data lost between HAProxy and backend server
I have a setup like this on Ubuntu
Browser --> HAProxy --> Backend server
The backend server is an ASP.NET Core web application.
It works 99.9% of the time except when a binary file is being ...
- 131
0
votes
1
answer
370
views
HAProxy downloads PHP files instead of displaying in browser
I have nginx and php-fpm running on Docker. When using the hostname of my Docker system (docker1.freekb.net), the phpinfo.php page displays in the browser, thus I know that I have nginx and php-fpm ...
- 423
0
votes
1
answer
472
views
Haproxy monitor request response codes
Is there a way to monitor Haproxy response stats in the Browser.
For example curl -x 127.0.0.1:4444 http://ifconfig.me —>response 200
Is there a way to monitor the request response codes in the ...
- 11
1
vote
1
answer
701
views
Accessing Kubernetes services in the cluster from outside of the local network - Bare Metal
I'm running a simple bare-metal multi-master "high availability" enviroment with 2 masters and 2 workers, as well as another VM with HAProxy serving as external Load Balancer.
My question is:...
- 13
1
vote
0
answers
289
views
HAPROXY - redirect URL and keep the same URI
Im using haproxy to do redirections. Basically I have a URL ( https://google.com// ) and I want to keep the same URI and just redirect only the base url ( https://test.com//). For HAPROXY it has to be ...
- 113
0
votes
1
answer
2k
views
How to setup HAProxy for more than 500,000 connections running inside a Docker Container on a Linux host?
I'd like my HAProxy Load Balancer to be able to handle at least 1M connections. I need this to deploy a stress test.
I tried setting:
maxconn 1000000
in my haproxy.cfg but HAProxy failed to start ...
- 103
0
votes
1
answer
600
views
HAProxy mixture of wildcard and specific url's to different backends
I have the following two frontend configuration statements in HAProxy.
acl auth_domain hdr(host) -m reg -i ^auth\.web\.simoncarr\.co\.uk$
acl k8s_domain hdr(host) -m reg -i ^[^\.]+\.web\.simoncarr\.co\...
- 235
2
votes
0
answers
828
views
AWS ALB and HAProxy Keep-Alive header
Has any one come across this behavior?
AWS ALB is sending traffic to HaProxy.
HaProxy sets keep-alive header to 29 seconds.
Client connected to ALB does not see this header.
It can only see "...
- 228
0
votes
1
answer
2k
views
logs are not going into log file even after having rsyslog config
I am facing problem. I have two different harpxoy linux servers (in diff network range). In one server, i can see logs are getting generated in log file but on other server, the logs are not getting ...
- 11
0
votes
1
answer
553
views
Troubleshooting Handshake Failure Between Application and External API
This might be a bit of a long shot, but I'm hoping someone here can help me. I have a java application running on a jboss backend in a debian linux server. Incoming communications are routed to the ...
- 171
0
votes
1
answer
3k
views
HAProxy - Cannot chroot /var/lib/haproxy
I am trying to run haproxy in docker by following this article from the haproxy blog. https://www.haproxy.com/blog/haproxy-on-docker-swarm-load-balancing-and-dns-service-discovery/
I am getting the ...
- 101
0
votes
1
answer
288
views
Haproxy: Is there a way of testing for two occurrences of a character in path without resorting to regex?
I'm trying to write an ACL rule for haproxy. I want it to be true for paths that contain two or more forward slashes. Ie:
/ -> false
/test -> false
/test/test -> true
Is there a way of ...
- 1,638
3
votes
1
answer
557
views
Is there any limit on number of ports at which HAProxy can listen?
I want to configure a HAPRoxy that can listen on 200 ports. Is there any limit on number of ports it can bind to? Also, will there be any performance degradation if it is listening on 200 ports?
- 31
0
votes
1
answer
2k
views
How to force a specific routing based on SNI in HAProxy?
I have the following HAProxy configuration:
listen sni-443
bind *:443
mode tcp
timeout connect 4s
timeout client 3m
timeout server 3m
tcp-request inspect-delay 5s
tcp-...
- 288
0
votes
0
answers
26
views
How to encode url in haproxy [duplicate]
I am new to haproxy and I wanted to know the best way to encode the URL in haproxy.
http-request redirect code 302 location https://testservice.com/login?service=abc&redirect_uri=https://login....
- 111
2
votes
1
answer
2k
views
SQL Server Load Balancing Splitting Read/Write Operations
Hello We have 3 nodes of SQL Server 2014 Standard Edition one of them as primary and the other one as Replication of the Primary using Transactional Replication database
We want to use the other 2 ...
- 21
0
votes
1
answer
92
views
How to redirect to on premise node not on vpn
I have haproxy server running on linode port 80
that redirects traffic to on premise haproxy port 8082
--- linode node,
|
VPN
|
--- onpremise haproxy node
and I have another node on premise that ...
- 132
0
votes
1
answer
548
views
Troubleshooting LDAPS/TLS/HAproxy, wrong SSL cert being used
Ok so I've got two servers.. one old (Ubuntu 16) and one new (Ubuntu 20).
They both Have Haproxy and within the config they are bound to the same port and same .PEM cert. When I test the SSL cert ...
- 110
1
vote
1
answer
1k
views
Proxy www-out reached process FD limit (maxsock=4168). Please check 'ulimit-n' and restart
I've compiled haproxy to apply special LUA filters and now haproxy keeps running into the max file open limit. It runs happily along and then suddenly the logs show the following message:
Proxy www-...
- 1,414
1
vote
0
answers
660
views
Haproxy: Restrict access to untrusted IPs only to sub url
I would like to restrict access to my pastebin server (I'm using zerobin) so that untrusted IPs can only open secrets, but not create them.
(note that the url https://fakepastebin.com below is just an ...
- 65
1
vote
0
answers
205
views
HAproxy single-arm loadbalancing
I am trying to setup a loadbalancing lab for HAproxy in single-arm mode (when actual frontend IP and backend servers reside in same subnet, while actual clients are always remote). Another request is ...
- 11
1
vote
0
answers
533
views
HAProxy 2.0 - retrying some of the requests based on URL
I have HAProxy version 2.0.14 installed, and I'm looking for a peculiar use-case which I haven't yet managed to configure correctly.
Basically I have a frontend which listens on a port, and two ...
- 115
0
votes
1
answer
186
views
HA Proxy TCP Content Rejection
I am looking for an option or a work around where I can accept or reject the TCP Content based on the the size of a file which is getting uploaded This settings is required on TCP IP layer only also ...
0
votes
0
answers
215
views
How to set header in request for HAProxy based on script output?
I have haproxy which runs fine, but we have backend, which validate token against our identity service.
I want to move that logic to HAProxy, where we can run some python or sh script, and get the ...
- 255
0
votes
1
answer
2k
views
How do I define multiple routes in OpenVPN?
I'm trying to set up a server to act as a gateway - basically it will deal with connections coming from a k8s cluster to the external world (mainly databases behind VPNs).
So I have the following ...
- 101
1
vote
2
answers
3k
views
Haproxy set Host Header per origin Server
We are trying to set host header per origin server, we can set per back end, but we are using default names on Azure app services, and as such the service will only respond to its own hostname, for ...
- 11
0
votes
1
answer
718
views
Load Balancing Endpoints Outside of Google Cloud using GCP HTTP(S) or TCP/UDP Load Balancer
I have a requirement to load balance to endpoints https://api1.app.com and https://api2.app.cpm that are currently outside GCP.
GCP provides Internet NEGs to plugin endpoints external to GCP to the ...
google-cloud-platform