Haproxy ssl termination and upstream forward proxy
@ja8zyjits wrote: Problem: Iam trying to build a forward proxy with ssl termination, further it upstreams to my proxy servers eg: TOR. My upstream proxy services are non-https. Client ->...
View ArticleClik here to view.
SSL handshake failure after heartbeat HAProxy 2.0
@djmdev wrote: I am working on a setup where there are two HAProxies behind an AWS Network load balancer. Behind the HAProxy are apache web servers. I am passing ssl traffic from the NLB to HAProxy...
View ArticleMoving from IPtables to HAProxy for NAT-ing
@jeunii wrote: 0 I currently have a solution that works well for doing NAT. Front end IP:Port (10.238.232.20:443)--------+-------- Back end IP:Port (172.22.0.42:443) | | eth0 +---------+ | | | NAT | |...
View ArticleHAProxy in `mode tcp` accepts HTTP with HTTPS backend
@pludikovsky wrote: I’m seeing a pretty strange behavior with one HAProxy setup using mode tcp trying to do pass-through to 2 HTTPS enabled servers. Relevant configuration: frontend front-ssl...
View ArticleHAProxy vs Apache modproxy
@surebalu wrote: Hi Folks, In my current organization we are using Apache modproxy for load balancing activities. One of our vendor suggested to use HAProxy for load balancing. I tried searching for...
View ArticleCalling a backup server as soon as a main server goes down, what's the ACL...
@shen wrote: (topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) Posts: 1 Participants: 1 Read full topic
View ArticleSsllab still complains about tls 1.0
@justauser wrote: Hello together, I try to achieve a good result on ssllabs.com, but I got a complain that my website uses tls v1.0 - I thought that I disabled it by this row in haproxy.cfg: bind...
View ArticleDoes the runtime api support adding new ssl certs?
@eyepulp wrote: Howdy - We’ve been anxiously awaiting the set ssl cert and commit ssl cert features under newer haproxy releases. During initial testing today we were getting an error:...
View ArticleHaproxy rewrite without a backend
@aarathy53 wrote: Hi Is there a way to set up haproxy rewrite without a backend ? Thanks in advance Posts: 1 Participants: 1 Read full topic
View ArticleDebugging "CD" state at disconnection flag
@zeff wrote: Hello, We see errors ending with “CD–” flags, with some requests ending with HTTP 200. According the the documentation, CD means that client ended the connection unexpectedly at the data...
View ArticleAre sticky sessions preserved on reloads?
@lzkill wrote: I’ve been using haproxy sticky sessions in front of a stateful application for some time now. Are these header based routing rules preserved if we restart/reload the service? How could...
View ArticleHelp with HAProxy-Lua-ACME
@spn wrote: Hello everyone. I need help with using the lua-acme to generate certificates. I followed this guide -> https://www.haproxy.com/de/blog/lets-encrypt-acme2-for-haproxy/ But it is not...
View ArticleCompile Pcre2 or pcre?
@simonuk1 wrote: Is there a reason to compile with pcre2 and pcre2jit over pcre ? Posts: 2 Participants: 2 Read full topic
View ArticleHaproxy path_reg compare number?
@khurshid-alam wrote: The paths are like this: https://example.com/10001/5235723gdh.jpg https://example.com/10007/836789370md.jpg We want to extract the number and compare. I tried with acl image1...
View ArticleHaproxy not switching backends by using path_reg
@egozkan wrote: Hello all, I want to use different backends by using regex but it is not working as expected. My configuration like as shown below. acl cons path_reg ^/(test)/([a-z-0-9]+/){0,1}$...
View ArticleHaproxy Logs are being written in two files with rsyslog config
@Vels456 wrote: I have a haproxy and rsyslog setup, I’m facing issue that haproxy logs are being written in 2 files /var/log/messages and /var/log/haproxy.log(I need this to be written only in this...
View ArticleMissing timeouts for backend warning message
@jmcclure wrote: HAProxy 2.1.3 Alpine 3.11.3 I’ve installed HAProxy and it works as expected. My question is, why I cannot get rid of this warning message and is my timeout configuration in the...
View ArticleConcurrent Connections over sessionid
@midas1989 wrote: Hello all I have a http frontend which goes via URL to a certain backend. Now I want to achieve that the backend only takes a certain number of clients and otherwise redirects to the...
View ArticleClient get connection timeout with HAProxy 1.5
@thanhnb wrote: I use HAProxy as LB for 3 backend web (Apache, same code). Sometime client on browser get ERROR connection timeout when connect to HAProxy. I have written a custom script CURL from...
View ArticleClik here to view.
Port mirror to two HA proxy server
@Howard wrote: My scenario is that through iptables TEE I mirror packet to two HA proxies, and the second proxy is for backup. However I don’t want the second proxy reply Ack but still could collect...
View Article