SSL Handshake failures when enabling Proxy-protocol

Hello,

We use a HAProxy loadbalancer in TCP mode with behind it a HAProxy reverse proxy in HTTP mode. (HAProxy version 2.4.22-f8e3218 2023/02/14)

–>HAProxy-LBS—>HAProxy-RPX—>webserver

After enabling the proxy-protocol between the loadbalancer and reverse-proxy we see “SSL handshake failure” errors every 2 seconds(lbs alive check…) in the HAProxy log of the reverse-proxy.

Loadbalancer backend config

backend be_<vip_name>_443
    balance leastconn
    mode tcp
    server server1 10.0.0.1:10444 send-proxy-v2 check
    server server2 10.0.0.2:10444 send-proxy-v2 check

Reverse-proxy:

bind *:10444 ssl crt <some cert.pem< ca-file <ca-bundle.crt> verify optional accept-proxy

If I disable the proxy-protocol on the LBS and RPX machines the errors don’t appear anymore.

Any suggestions how to debug this issue or any solutions?

6 posts - 2 participants

Read full topic