Server-template still keeps out-of-date server not in SRV any more
Hi, server-template is a great feature for Kubernetes haproxy users, but we are suffering a problem with haproxy 2.0.14 (it is the only version we’ve ever tried) with server-template as the backend...
View ArticleHaproxy log file with pfsense
Hello, I am trying to read the /var/log/haproxy.log file with the command: clog -f haproxy.log but nothing happens. No window opens. How do I see my error log? I’m on pfsense. Thank you so much! 1...
View ArticleERR_SSL_PROTOCOL_ERROR after switching to SSL passthrough
Hello community! I’m posting here as I came across an issue that I’m not able to resolve and I’ve been searching around for a while now. I had a working config using SSL termination with 1 single...
View ArticleSNI and SSL offloading/termination with multiple domains
Hi, I fail in setting up haproxy for SNI and SSL offloading/termination with multiple domains. I tried this: frontend Frontend mode http option httplog option dontlognull option http-keep-alive option...
View ArticleDomai.com/uri gives 500 error while ip:port/uri gives 200
HI, I have configured a lb rule on HAproxy and while doing curl -kv http://domain.co/some/uri gives 500 response code while curl -kv http://ip:port/some/uri gives 200. Could some one please suggest...
View ArticleClik here to view.
Wordpress site behind HAProxy
Hello, I’ve been using HAProxy for basic redirections since many months now, with one domain name. What I want achieve now is to setup another redirection for a second domain name toward my Wordpress...
View ArticleHow to delete account
Hello, I wish to delete my account on discourse.haproxy.org but it does not seems possible through the interface. As far as I know, since the GDPR has been set, this is illegal. please kindly provides...
View ArticleHAProxy as a failover only without load balancing - is not redirecting...
I’m trying to use HAProxy as a failover TCP solution in case our primary server goes down. However it simply does not seem to work. haproxy.cfg frontend haproxy_sync bind *:8090 mode tcp option tcplog...
View ArticleDDoS attack & infrastructure disclosing thru unencoded cookie
Hi HAproxy gurus! Some time ago I read about possibility to obtain backend servers IPs, infrastructure disclosing (and possible attacks like DDoS) by using simple operation to decoding session...
View ArticlePhp application slow where use haproxy
Greeting for day! In my php application when i use mysql direct connection it work perfectly . But when i use haproxy ip for ha , its take too long for retrieve result. Ha proxy configuration as...
View ArticleHow to create bind policy for requests with or without proxy-protocol header
I have a HAProxy, which listens on port 443. There are 2 types of requests coming to port 443: 1) normal API request which contains proxy-protocol v2 header ( so I need "Accept-proxy, for such...
View ArticleLua tcp-request content action timeout on core.sleep()
Hi, I’m trying to read the first bytes (below 500 bytes) of a custom protocol to extract and log session identifying information. Since the client might be extremely slow to send the initial bytes I...
View ArticleLogging "everything"
How to configure logging so everything gets logged what gets displayed when haproxy is running in forground? 1 post - 1 participant Read full topic
View ArticleTraffic getting to server but Haproxy is not responding to requests
Hello All and thank you for your assistance in advance. I have an office that is connecting to Haproxy server via a IPsec tunnel. I have several clients that are connecting into the office via an...
View ArticleBad request returned for unencoded characters
I recently moved a domain into HAProxy. Most of the HTTP requests go through fine but some requests that have un-encoded characters in their URL are thrown with 400 Bad Request an example of such a...
View ArticleClik here to view.
Small help for the n00b - Dynamic rule
I want to have a dynamic rule that takes subdomain and uses that value to form a backend name connection; example 123.foo.bar = use backend 123_backend 234.foo.bar = use backend 234_backend … even...
View ArticleDeny access for URI
I want to deny access for few URI for eg:- /info/some. below is the config i am using but still getting 200 when doing curl. acl bl_info path,url_dec -m beg -i /info/some acl bl_para path,url_dec -m...
View ArticleUse set ssl cert with cert directory
I struggled quite a bit trying to figure out how to use the new directive to dynamically update certificates with HAProxy 2.1 when loading certificates from a directory. I think i got it right now,...
View ArticleHaproxy 1.8 ERR_HTTP2_FRAME_SIZE_ERROR when changing tune.bufsize with http2
Hello, I’m facing an error with haproxy and http2. our application use big cookies and so we need to change param tune.bufsize to more than 16k (actually tune.bufsize 32768). With http1.1 it’s work...
View ArticleOutput haproxy backend's TCP client port in the logs
Context: I have a HAProxy configured to proxy TCP traffic for websockets. So a TCP redirecting session looks like this: client app --> [(frontend) haproxy (backend)] --> server app From the...
View Article