Revocation list from certificate
Hi there, I can’t figure it out how to configure HAProxy to use personal certificate authentication without setting crl-file, but to use revocation list specified in perosnal certificate. Is there way...
View ArticleHaproxy logging is not working
Hello, I am setting up new haproxy by following the Introduction to HAProxy Logging - HAProxy Technologies and the logging is not working. Do you know what could be wrong? version of haproxy:...
View ArticleRewrite the title of an website
A website has Something in its html, behind haproxy. Can i rewrite this code to Something_Else? I have a pfsense box with haproxy installed. 1 post - 1 participant Read full topic
View ArticleMore oddities, looking for guidance
These may be bugs, but I’m more inclined to believe they are just some kind of configuration assumptions we’re making poorly. We’ve had sporadic reports from customers using our file-sharing service...
View ArticleLoad Balancer resets metrics when reloading endpoints
Greetings and Salutations, I noticed an odd behavior at a client site. They have one enterprise HAProxy for all their K8 applications/service offerings. For applications that use sticky affinity...
View ArticleMultiple Windows RDP Servers Load Balancing from Single Domain
Good day… Here is the query of the moment… One domain to one server check(meaning we got this and it works amazingly well) One domain…multiple servers…uncheck So a while back we started using...
View Article504 gateway timeout error with long polling connection
Hi. I am using haproxy 2.2.6 on pfsense. It is working OK, except I am getting a 504 gateway timeout on the long polling connection. I have done the packet sniff and I see the connection to the...
View ArticleBest practices for upgrading application server
When upgrading the applications behind haproxy I’ve been putting the specific backend into maintenance mode in haproxy, then upgrading the application and finally bringing up the backend in haproxy....
View ArticleCan I route based on response from a 3rd party server?
I have a need to to allow/deny route to backend based on a response on a simple REST call basically to check if that “account” is active or not. (the url have the data I need to make the the REST...
View ArticleShare a TCP/443 port with SSTP and HTTPS?
Hi, I’m trying to share a TCP/443 port with HTTPS webservers and an SSTP server. I tried stuff like: acl SSTP method SSTP_DUPLEX_POST use_backend SSTPServer if SSTP But it’s not working - the SSTP...
View ArticleHow to use different tlsv with same port for different url
Hi , I am using the Haproxy 1.8.8 version. It is working fine till now with tls 1.3. Now another one url needs to work with tlsv1.2. Now I cannot able to create 2 frontend with the same port. and I...
View ArticleSSL handshake failure (Not secure)
Hi, All my subdomains working fine(HTTPS) however, when I access my domain I am getting SSL handshake failure(Not secure). Any idea, Regards, Mangesh 1 post - 1 participant Read full topic
View ArticleSSL cert -> empty response
Hello guys! I just cannot seem to figure out why this is not working. I’m getting an empty response error (ERR_EMPTY_RESPONSE) on all requests. The certificate is a wildcard (*.example.com) cert...
View ArticleNginx only sees Gateway IP not Client IP
Hi folks, I have Haproxy on my pfSense Firewall and terminating my Web Servers using http to https offloading my issue is the Gateway IPs are seen in the logs and not Client IPs. I have tried adding...
View ArticleSet cookie according to user agent
Hello, I have a request to set samesite for cookies only if the user agent version is different than some versions of chrome that does not support this option. I know I have to capture the user-agent...
View ArticleACL for rate limiting when rate greater than value in http-request variable
I am trying to load up rate limits from a map file (which works), and then apply those rate limits to the request. I have loaded up my rate limit to apply into txn.applied_rate_limit_by_ip, but when I...
View ArticleHaproxy redirect from HTTPS to http
I’m fairly new to HAProxy and our company have successfully configured HAProxy to load balance inbound http connections on a non-standard port. We now need to accept standard TLS connections i.e...
View ArticleInconsistent Behavior at browser
Greetings, We have been using haproxy for a long time and it has been an excellent addition to our enterprise. Our Application Development is working to migrate their web applications to Server 2019....
View ArticleHelp with Regex
HAProxy receives an header called “X-Cf-Forwarded-Url” with value https://new-hello-app.apps.px-npe.cf.xxx.com/greeting?name=sen and when HAproxy making backend server call, need to capture...
View ArticleLUA applet stop working after updating to 2.0.22
After updating from 2.0.17 to 2.0.22 my LUA function stops working with error (see below). I could find only this (maybe related to my issue) : - BUG/MEDIUM: lua: Always init the lua stack before...
View Article