SSL Redirect - Chained Proxies via Proxy Protocol

Hello,

iam running two haproxy instances which talk over the proxy procol.
(Proxy-A and Proxy-B).

If the request was made via http i want to redirect the request on Proxy-B.

http-request redirect scheme https code 301 if domain_name !{ ssl_fc } 

The problem is now that this config piece does not work when i include the !{ ssl_fc } parameter. If i remove this one the redirect works but it of course ends in a redirect loop.

My thoughts are that this is because of the proxy protocol or the chained proxy scenario.

Config Proxy-A

frontend proxy_a
    bind 0.0.0.0:80
    bind 0.0.0.0:443 ssl crt /usr/local/etc/haproxy/ssl/ alpn h2,http/1.1
    mode http
    use_backend domain_a if { hdr(host) domain-a.net }

backend domain_a
    server domain_a_server server:2400 check ssl verify none send-proxy init-addr last,libc,none 

Config Proxy-B

frontend domain_a
    bind 0.0.0.0:2400 ssl crt /usr/local/etc/haproxy/ssl/ accept-proxy

    # Domains ACL match to Host Header
   acl domain_a hdr(host) -i domain-a.net
   http-request redirect scheme https code 301 if domain_a !{ ssl_fc }

1 post - 1 participant

Read full topic