Capture the country name in haproxy log file
I need to capture the country name in haproxy logfile from those who are all accessing my site… Is there anyway to do this… Is there any option in http-request capture or log-format 2 posts - 2...
View ArticleTransform hex to dec serial in header
hi! http-request set-header X-SSL-CLIENT-SN %{+Q}[ssl_c_serial,hex] i want to put the ssl serial number in the header to decimal, but i couldn’t find a solution anywhere. what to write in place of...
View ArticleHttp-chek send error
Hi there, We’re using version 2.0.13 in Ubuntu and i’m trying to configure the http-check send as the documentation says http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#option%20httpchk....
View ArticleHAProxy transparently rewrite path
Good day, I have one frontend example.com and backend server1. Backend has an application: /app, the application is generating random user tokens to identify them in the application itself, so after...
View ArticleHAProxy - check the url if it has a sub domain name
I have a wildcard Cert and need to direct any sub domain name that does not exist to custom 503 error page and don’t want to use the Frontend’s Error files feature nor its default 503 page. I want my...
View ArticleAdd reason phrase to response
Can I somehow add the HTTP reason phrase e.g. “OK” (RFC 2616 - Hypertext Transfer Protocol -- HTTP/1.1) to the HTTP response in HAProxy? My webserver doesn’t support reason phrases, but a client...
View ArticleAdd the client ip address to a stick-table who logs an "SSL handshake failure"?
Hello, Is there an ACL directive or method to add the client ip address to a stick-table who logs an “SSL handshake failure” ? On a test system TLSv1.3 is forced using “ssl-default-bind-options...
View Article"Acl utls work with variables", How can I select exact variable with value to...
Good time of a day dear community members and staff. A problem with selecting the backend using variables and their value. For example, there is URL like "...
View ArticleEnabling http2 on backends in tcp mode
I am trying to configure HAProxy to work with h2 backend using tcp load balancing mode: listen 443pp bind [redacted]:443 interface ens224 mode tcp balance roundrobin log global source [redacted]...
View ArticleHow do I manipulate response headers based on path
I’ve been using the following formula: # SNI dmarc frontend port443-raw from tcpees bind :443 alpn h2 bind :::443 alpn h2 default_backend loopback-main # main frontend frontend main from httpees bind...
View ArticleOutbound / SNAT for backend servers
We’ve got a bunch of f5 servers we’re looking at replacing with haproxy. In addition to load balancing and application delivery, these can provide much needed SNAT to which we use as a gateway for...
View ArticleNeed proper replacement for reqrep directive in 2.4
with HAP 1.8 version we have following reqrep directive in backend section acl isithttp10 var(txn.http10) -m beg 1.0 # identifies request with HTTP/1.0 version reqrep ^(.*)\ HTTP/[^\ ]+$ \1\ HTTP/1.1...
View ArticleCan not set var via SPOA for a lua script
Greetings! I’m developing a SPOA. The place I stuck is a setting var via an ACK message. In the haproxy log always the same message repeated twice: SPOE: [request_cacher]...
View ArticleClarification on backend server configuration
Hello everyone, after numerous searches I came to this site and I hope someone can help me clarify my thoughts. I am configuring an HAProxy istance and reading the server section of the documentation...
View ArticleWhy lua script on the http-response triggered twice?
Greetings! For some reason I see double output of a lua func in the haproxy log. Imo, this mean the func triggered twice. Is it a normal behaviour ? Is it possible to avoid double func call ? Haproxy...
View ArticleIs it possible to get http response code in http-response lua func call?
Greetings! Is it possible to get http response code in http-response lua func call ? I found a way how to override, but not how to get. txn.res looks like a way out but still need some parsing. Thanks...
View ArticleHaproxy, how to use case insensitive redirects map?
So, I want redirects like these to work: example.com/QWER → example.com/qwer example.com/Qwer → example.com/qwer example.com/QwEr → example.com/qwer What I have tried: http-request redirect location...
View ArticleBalance based in host and path
Hi, I’m having problems trying to find a way to balance a group of servers based in host + path (not including query parameters). For example if I receive the following requests:...
View ArticlePlease use distinct names
Backend “Group” another server named “name” was already defined at line.Please use distinct names. Here we are using haproxy 2.0.4 and we are getting error , if we add IP Address also, we get this...
View ArticlePort forwarding
Hi All, I’m new to haproxy and want to confirm some basic functions. Currently I port forward my mail server ports on my router to the internal mail server. My static ip xx.yyy.127.21 port 25 to...
View Article