Understanding Layer 7 5xx error counter metrics
Hi, I’m hoping to get some more insight on how retries, error logs and HTTP 5xx error metrics interact. What I’m seeing is HTTP 5xx responses reported in the haproxy_frontend_http_responses_total and...
View ArticleSend-proxy-v2 doesn't work when conntrack is disabled
We have the following (working) setup: Haproxy and our Proxy app are running on the same server. Haproxy sends requests to the Proxy app via the proxy prototcol: listen web_proxy_app bind *:443 ssl...
View ArticleBinding TCP port ranges to backend port ranges
Hi, I’d like to bind multiple internet TCP ports to multiple TCP ports internally. can that be achieved in a single frontend and backend pair? Something like this: frontend tcp12300_12399 mode tcp...
View ArticleLog http request body and performance impact
I have basically two questions: Is it possible to only log the body (xml payload) of a POST request? What would be the impact on the HAProxy performance when the request body is logged? For the first...
View ArticleJava Log Client IP using send-proxy header
Hi Have anyone configured a java application to log client IP when the java application is running behind haproxy in tcp mode and the haproxy is configured to send the “send-proxy” header. A sample...
View ArticleInvalid args in converter 'map' : The file "/etc/haproxy/extensions.map" is...
Hi everyone, I got the error indicated in the title after trying to use map to convert a chrome extension ID to a nice name in my haproxy logs. The line where I placed the map argument is the...
View ArticleLog-forward ssl termination error
Hi Everyone, I’d like to set up SSL termination for a log-forwarder but I’m having trouble getting it to work. According to the HAProxy 2.4 documentation, the ssl bind parameter should work in a...
View ArticleClik here to view.
HAproxy and PowerAutomate header headache :) Ideas please
Hello, Now, im a network engineer and not a coder per se, so please bear with me In short, im trying to do some automation with MS flow. It fires off requests from the cloud, so in order to use...
View ArticleHAProxy re-executing Master process
Hi everyone, I’m observing a strange behavior which has occurred 2 times till now. For some reason HAProxy re-executes its master process every 21 days, which forks a new worker process and kills the...
View ArticleHAproxy ssl offload for Redis
Hey Guys, Im trying to configure HAproxy ssl offload for Redis. In other words, have the ssl termination on the HAproxy. However, im not being able to achieve this and need some help. For the...
View ArticleHealthcheck on HTTP port with redirection to HTTPS
Hi everyone, My haproxy is performing a basic LB active/passive to 2 apache servers. The HTTPS part is working as expected. However, I have trouble to perform the appropriate healthcheck on the...
View ArticleProlem with separate logging
Hi guys! I have a little problem with logging. I tried to follow this( Introduction to HAProxy Logging - HAProxy Technologies ) article to set up separate logging on my instance but i have a problem....
View ArticleConsult for redirecting http to https
Hi, I am trying to redirecting http traffic to https via HA-proxy 2.2.3 and here is my config: frontend simple_webapp mode http bind *:5006 bind *:5443 ssl crt /root/Downloads/simple_webapp_all.pem...
View ArticleClik here to view.
Force SSL renegotiation on subdomain change using wildcard certificate
Hi, I’m using haproxy as an SSL terminator and SNI based service selector for my family server. Some of the subdomains use client side certificate, some of them not. Some of them are TCP, others are...
View ArticleMultiple ACLs for letsencrypt in backend
Hi! I’m using haproxy in my homeserver for quite some time now and I absolutely love it! Now I ran into a weird edge case though: I run haproxy with ssl termination for all my backend services and...
View ArticleHaproxy and ActiveMq : how to manage the failover
Hello I have two clusters of ActiveMq (two cluster of passive/active). I use them to push notifications to clients, via TCP or Websockets. These clusters are on two differents AZ on AWS. I route...
View ArticleHow to whilelist a * url
I have a haproxy server running haproxy version 1.8.8 2018/04/19 I would like to know in my config how do i whilelist a * url. So it would be *.autodesk.com I tried “server appl *.autodesk.com:443”...
View ArticleLog json escaped string
Hello all, I noticed that I can use json converter in the log-format directive. This seems to work as expected → log-format '{"root_req_id":"%[capture.req.hdr(0),json(utf8p)]"}' However how this can...
View ArticleHAProxy - shared posts or multiple posts on a single IP
Hello community, can you help me, I am new to Proxy I am trying to make my publications use the same Public IP, my configuration is the following: frontend SharedFrontend-merged bind 0.0.0.0:443 name...
View ArticleNeed to double escape single quotes in str fetch?
I wantd to store the string 'self' in a variable, which is later used in setting a header. My first attempts all resulted in just self (note the absense of the single quotes: str("'self'")...
View Article