Quantcast
Channel: HAProxy community - Latest topics
Viewing all articles
Browse latest Browse all 4841

SSL requests pass through although check is off

$
0
0

Hi,

I have following configuration which works good for http connections but have some issues for https.
If client establishes keep-alive connection and I disable httpchk endpoint, https requests are still coming to node (other endpoint) until I kill whole api. There is mode tcp for https. Https checks are on http port because client certificate is required (I don’t want this on haproxy). If there is a new or recreated connection check works fine for https and no tasks are assigned to that server.
Can one advise on this? Is this problem/feature of tcp mode?

defaults
retries 5
option redispatch
balance leastconn
option httpchk GET /api/status
http-check expect status 200

listen http
mode http
bind 0.0.0.0:8080
option http-server-close
option httplog
option forwardfor
server srv1 srv1:8888 check
server srv2 srv2:8888 check

listen https
mode tcp
bind 0.0.0.0:8081
option tcplog
option http-server-close
server srv1 srv1:9999 check port 8888
server srv2 srv2:9999 check port 8888

1 post - 1 participant

Read full topic


Viewing all articles
Browse latest Browse all 4841

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>