Haproxy freez and too many wating connection to the upstreams
hello everybody I have set up a HAproxy to handel about 100K rps and then proxied that to the 4 nginx but suddenly all the connection from HAproxy to the nginxes become connection wating (red line)...
View ArticleHAPROXY lb-update module support
Hi Currently, we are using HA-Proxy version 2.1.10-7aff177 2020/11/05 - https://haproxy.org/ Status: stable branch - will stop receiving fixes around Q1 2021. Known bugs:...
View ArticleUnable to use new MQTT payload converter
I have been trying to use the new mqtt_is_valid converter introduced in HAProxy 2.4, however, I keep getting connection refused error. Tried to look at docs but couldn’t find what’s wrong. Is it the...
View ArticleLooking for stats data of "old" Haproxy process after reload
Hello, I am running an HAProxy version 2.0.13-2ubuntu0.1. When I perform a reload on HAProxy to load new configuration, I am aware, that this spawns a new process and therefore (some) stats are reset....
View ArticleDo-resolve for a SRV record?
Hi! Can http-request do-resolve be used for resolution of SRV records or only A records ? regards 1 post - 1 participant Read full topic
View ArticleRate limiting login page (pfSense)
I am trying to rate limit just the login page of a website with HAProxy in pfSense. The rate limiting works, but not the page checking, so I am unsure on my logic/syntax. [Logic] (?) “If path =...
View ArticleMassive surge in PR-- terminations with status code -1 after enabling...
Hi there! We use Haproxy v2.2 (upgraded from 1.8) to load balance traffic to our web server stack of a few debian based vps servers, hosting a php website with apache2 (mpm_event) and php-fpm. Ever...
View Article`Ta` increase after 2.3 -> 2.4 upgrade
Hi, I hope someone can help me out with this question. Recently we’ve upgraded from 2.3 to 2.4. We log and monitor using the default timing events TR/Tw/Tc/Tr/Ta. After upgrading to 2.4, the TR (and...
View ArticleAWS Amplify sometimes 503 service unavailable
Hi Haproxy Community, I’m using AWS Amplify as my website hosting. The aws amplify build and server our website with their generated subdomain like “master.xxxxxxxxx.amplifyapp.com”. Then i’m using...
View ArticleConsistent hashing/routing with HAProxy?
Hello, I have a web-based game platform that relies on WebSockets. In this game, a group of users (up to 10) can be matched together in a room to play a game against each other. There can be more than...
View ArticleUnable to load certificate chain from file error
Issue - Haproxy config test is failing with below error unable to load certificate chain from file ‘/etc/haproxy/certs/mapersite2-vs/209037_mapersite2_default_mysite.pem’. Haproxy Version - haproxy...
View ArticleHaproxy 2.2 ( CORS proper Implementation)
Hi Team, We are trying to use standard implementation of CORS ( cross origin shared resources ) with HAProxy 2.2 , after implementation we observed that this is working but we will have to enter all...
View ArticleExclude backends from http auth HAProxy 1.5
Hi! I am using haproxy 1.5 on a CentOS 7 server. I had to enable http auth for a few backends, but unfortunately its presenting http auth for all the backends in the configuration. Please how can I...
View ArticlePreserve DNS discovery backends when DNS fails and reloads
We are trying DNS recovery with TCP in HAPROXY 2.4.1, everything works supremely well other than an edge case. Our cluster of HAPROXY config is written with API and reloads very often, for example...
View ArticleSending HAproxy events to syslog.. issues
So I’ve got an Ubuntu 20.04 LTS server setup with Haproxy and I’m trying to fwd log info to Splunk Cloud. I have the Haproxy.cfg with a Global entry: log 127.0.0.1. local4 And I’ve got an entry in...
View ArticleHaproxy mysql-check user removal
HI , i am using the mysql check with the user, i have a security issue by using the user. so we have to remove the user in the mysql check ############################################## Maria DB...
View ArticleSend-proxy-v2 / send-proxy-v2-ssl with SNI
Hi, I’m trying to setup the following configuration: client → (SSL + SNI) → HAProxy → (SSL + retain original SNI + proxy protocol) → backend service I’ve tried with the following configuration:...
View ArticleExtract SNI value for logging in TCP mode
My frontend is in TCP mode and I use the following acl rule to extract the sni. tcp-request inspect-delay 5s tcp-request content accept if { req_ssl_hello_type 1 } acl is_my_domain req.ssl_sni -i...
View ArticlePlease help get a noob up and running
Hi all, Looking for some assistance getting set up HAProxy. My installation of HAProxy is running certbot and holds my wildcard SSL certs and is the only machine listening on 80, and 433 on the...
View ArticleUnexpected queue wait latency while inspecting req.ssl_sni
I’m using HAProxy in TCP mode and I’ve a requirement to log SNI in a HTTPS requesst. To get the SNI value, I’m reading the raw socket buffer. tcp-request inspect-delay 3s tcp-request content capture...
View Article