Migrating rspirep to http-response replace-header
Currently I am using the following haproxy version: HA-Proxy version 1.8.19-1+deb10u3 2020/08/01 The following backend configuration snippet backend radicale-https ... acl hdr_location...
View ArticleSegregate haproxy ACLs
Hi all, I have a haproxy config where I attempt to restrict allowed origins to a few endpoints, it looks like this: acl is_allowed_endpoint req.hdr(Host) -i endpoint1.com acl...
View ArticleCan't enforce HTTPS
Hi, I’m completely new to HAProxy so I apologize in advance if my questions are basic. I’ve been trying to enforce HTTP → HTTPS but it seems like HTTP traffic doesn’t even reach the web application....
View ArticleConnection refused only when not using wildcard * at bind
Hi. I try to make L7 Load balancer using HA, behind L4 HW Load balancer. my NIC eth0 ip is 10.241.30.128. Therefore I try to bind the ip to frontend frontend main bind 10.241.30.128:12333 mode http...
View ArticleURL redirection issue
Hi Team, I am facing issue in URL redirection. Need your help and suggestion. Using : HA-Proxy version 2.0.4 2019/08/06 - https://haproxy.org/ Created HTTP & HTTPS Group. When user hit URL...
View ArticleUpgrading from 2.0.13 to 2.4.10
My company is currently using HAProxy 2.0.13 (from Ubuntu repository). Since latest HAProxy (just released last month) is 2.5, we think HAProxy 2.0.13 is a bit “long in the tooth”. Also, (claimed)...
View ArticleGetting forbidden error after enabling ssl
Hi, I have an application which is authenticated using keycloak server and multiple keycloak instances are configured as backend servers. When the application is accessed it will be redirected to the...
View ArticleLoad Balancing Strategy FIFO
Hello, Is it possible to setup HAProxy to use load balancing strategy FIFO? What that means is supposed that I have 3 backend servers: A, B, and C. It will load balance to A first If A is down, then...
View ArticleClik here to view.
Stats Socket Issue haproxy -v 2.0.26
Hi people, I know it’s almost time to celebrate the new year’s eve but I’m having issues with the stats socket. After upgrading Haproxy from 2.0.22 to 2.0.26 suddenly the stats are not available. The...
View ArticleHaproxy process getting killed
Currently we are running HAProxy 2.0.5 (Open source) on Redhat UBI image on container. Recently we are facing issues on HAproxy process getting killed inside the container for no reason and we...
View ArticleSlow SSL handshake
I am running a haproxy with multiple backend with SSL. One backend is used for connecting an external rest api over SSL(https). So for each api call the connection validating 2 ssl handshake (first...
View ArticleClik here to view.
Removing "www."; what (expression) replaces the scheme?
TLDR; text in bold. I’m attempting to come up with something to accept traffic on www. and redirect it the naked domain (so it’s clear it’s not used). frontend port[80|443] from httpees ......
View ArticleDocker image of haproxy:latest seems doesn't like "http-use-htx"
Hi, Sorry for my ignorance, but seems I can’t access prometheus metrics endpoint in haproxy:latest official docker image, but it is available in haproxy:lts-alpine official docker image. Any ideas why...
View ArticleTroubles with AND in acl
Hi What have I done wrong here below? As I cannot see what I should have done different, but sudo haproxy -c -f /etc/haproxy/haproxy01.cfg gives the following errors error detected while parsing ACL...
View ArticleDynamically update IP whitelist with expiration
I am looking for an approach to solve the following requirement. I’m aware that this could be solved with a helper program/service which uses the API or other methods, but I’m curious if there is an...
View ArticleClik here to view.
How to Navigate Uncertainty Using Real-Time Insights
You’ve heard the spiel before: this is an unprecedented time in history. The global health crisis affects every industry and every business. This is our new normal. What this means for marketers of...
View ArticleSSL Termination: Multiple Domains Sharing Same IP and Port
Hello, With the following LB setup: OS: Deban 10 (Buster) HA-Proxy version: 2.2.19 Trying to compose a config for: SSL Termination of many domains/sub-domains Multiple domains/subdomains on shared IP...
View ArticleAuthenticate as client
hello, Is it possible to have haproxy authenticate with the client IP to the server? many thanks 1 post - 1 participant Read full topic
View ArticleHaproxy use backend server based on past response status
How can i configure haproxy to use backendserver based on past response status codes. For example if response code for backendserver A is for host www.google.com is 503 and for backendserver B is 200...
View ArticleReqtarpit return code other than 500
Hi guys, I have the following to return a custom code for http-request tarpit: “http-request tarpit deny_status {some supported code} if TRUE” However is there an equivalent way to do it using...
View Article