Can haproxy strip https?
Theoretically, will this work: clients connect through a local haproxy in reverse proxy mode with self-signed root CA, then the local haproxy forward this proxy to a remote haproxy server over https,...
View ArticleHowto troubleshoot rewrite rule
Hello all, I am new to haproxy and I have possibly an easy question. I am trying to setup haproxy as a basic https proxy rewriting http request/response with regular expressions and I am unable to...
View ArticleConditional http-request directive as per map value
(topic deleted by author) 1 post - 1 participant Read full topic
View ArticleHow to decode unique-id
Hi I have followed the docs to setup the unique-id header. The recommendation is to hex encode it as per documentation. But how can i decode it ? I am getting errors on any hexdecode method i have...
View ArticleSeeing 100% CPU on random times, stability issues
Hello Haproxy users, We have been seeing our 20 or so HAproxy nodes spike up to 99% CPU on the cluster at random times which is causing our site to stop taking traffic for about 10 minutes of time and...
View ArticleHow to block an IP that sends several requests
hello ! sorry i am new here. my question: how to block an IP that sends several requests over a time interval? I have a blacklist but you must first integrate the ip into my file, while I block the...
View ArticleSetting up imaps with haproxy and local certs?
Slowly going crazy here… have setup haproxy using this Set Up SMTP and IMAP Proxy with HAProxy (Debian, Ubuntu, CentOS) it gets part of the way there, but I want to use my letsencrypt cert that I have...
View ArticleHTTP2 and HTTP1 on specific SNI or ACLs
Hello, I have an Haproxy with lots of different SNI and ACLs and I’m trying to configure HTTP2 on one specific SNI, but when I configure the haproxy.cfg as the example below, the requests to the site...
View ArticleHAProxy logs show excessive number incoming connections with limited number...
Hi Team, We have a use case multiple clients connect to HAProxy where HAProxy acts as load balancer for back-end services. can anyone help to understand this issue. HAProxy log shows as below in...
View ArticleClik here to view.
pfSense / HAProxy slow "establishing secure connection"
I have HAProxy and ACME setup. Domain is with NameCheap, Cloudflare is controlling the DNS. They have an A record that points to my public IP but they proxy it so my public IP is hidden. I also have...
View ArticleBest way to get request header
Hello, guys Browsing the internet, I’ve found few ways to get header value: txn.f:hdr(“x-forwarded-for”) txn.f:req_fhdr(“x-forwarded-for”) txn.http:req_get_headers()[“x-forwarded-for”][0] Do you maybe...
View ArticleBackend be_static has no server available!
Newbie as well, found a related post but still couldn’t get past the health checks failing giving me the “no server available” error when doing my reload of the .cfg file....
View ArticleLua packages not working with Haproxy
Hi folks, I’m new to Lua. Trying to use a Lua script in integration with Haproxy. We are trying to create a setup in which we want to conduct authorization of an incoming request at haproxy level...
View ArticleHaproxy return 502 error at 5 minutes on a connection
Hi all We have an HA-Proxy version 2.2.9-2+deb11u3 2022/03/10 For a specific website, there is a connection on specific url that trigger some actions (processing and sending mail) This connection need...
View ArticleNTLM Authentication to Backend (Windows IIS)
I am trying to determine how to do a health check against backend servers in HAProxy with NTLM authentication (Windows IIS servers). As I understand, it is ‘multistage’ in that it will do a ‘basic’...
View ArticleHaproxy as ssh proxy
Hi! I want to route my IPv4/6 SSH clients over a OPNsense HAproxy # # Automatically generated configuration. # Do not edit this file manually. # global uid 80 gid 80 chroot /var/haproxy daemon stats...
View ArticleExternal Health Check CURL
I have created an external healthcheck within a bash script but the server doesn’t come up… I know it works as it will return ‘200’ when I run it manually: RESP=$(curl -s -o /dev/null -w...
View ArticleClik here to view.
Haproxy caching redirect location?
Hello everyone I need sone help to understand http-request redirect location. I’m using HA-Proxy version 2.2.9-2+deb11u3 2022/03/10 I want a basic redirection like: acl redirect_test1 -i hdr_beg(Host)...
View ArticleUsing a variable to extract array of values from a JWT
Hi all, I have a JWT token from our auth provider that contains an array of permissions. It looks like haproxy can not deal with an array. Following is the instruction I am using: http-request...
View Article