HAProxy HTTP frontend and backend
Hi , We have an HAProxy setup running in Production for some time which supports access to Confluent Kafka cloud purpose in TCP for both Kafka brokers , port 9092 and Kafka Admin API , port 443 , as...
View ArticleHAProxy Stats page is not displayed correctly
Hi all, I just installed 02 new HAProxy server. The stats page of these two haproxy servers is showing the wrong form. Like the photo below. I tried to update to version 2.7 or downgrade to version...
View ArticleService stops when entry not DNS resolvable
Hi HAProxy community, I am pretty new in using HAProxy. I am using it as a super simple bind port and forward to DNS name or IP address. Nothing fancy, one example entry: lobal log /dev/log local0 log...
View ArticleStick-table to slow down new requests after a forbidden response from backend...
Hi Everybody, I’m trying to track L7 messages from backend in order to slow down new incoming connections from a certain IP address. My backend always respond 200 to any requests, so I can’t track 4xx...
View ArticleMy HAProxy Configuration
I hope people can get some use out of my configuration. I have written up how it all works. Cipher Menial – 19 Jul 22 My HAProxy Configuration This is an explanation of my HAProxy config, mostly as a...
View ArticleHaProxy Reverse Proxy not sending me to the new machine
Hello, I am trying to use HaProxy to send a subdomain to a specific Virtual Machine and all other domains to another one. See pictures for my current settings. store.survivalnetwork.games is not...
View ArticleUnable to login with our application credentials via HA-Proxy
Hi Team, We have an application with active/active which will be accessible via HA-proxy we are able to take the application individually and login but from HA-Proxy we are not able to login with the...
View ArticleSingle domain with RSA and ECDSA certs
I’m having a difficult time to setup TLS termination on HAProxy, I have HAProxy 2.6.7, I have 2 certificates for RSA and ECDSA, it is set up ad described in the docs: HAProxy Technologies – 15 Jun 19...
View ArticleHaproxy clear table is not clearing all records
I have a stick-table in my Haproxy: backend myback stick-table type ip size 5k expire 1h store http_req_cnt http-request track-sc0 src When I clear the table using: echo “clear table myback” | sudo...
View ArticleHow to log cache Hits
Is there anyway to log the cache hits and miss’s ? Thanks Terence 1 post - 1 participant Read full topic
View ArticleRoute https/Traffic based ACL
I tried to route https traffic based on acl but it’s not working. i tried with abns, unix@socket no better. Any idea? 1 post - 1 participant Read full topic
View ArticleHow could I found that user was redirected from other domain?
I have a frontend configured to check for specific domain in http request and then redirects that user to other domain. Each user redirected that way should be then forwarded to certain backend on the...
View ArticleVerify Client Cert not working as expected
I’ve done it before on OPNSense but am now attempting to do it with docker and am running into issues. I have this line in my bind: crt /usr/local/etc/haproxy/certs/ ca-file /etc/haproxy/CA/CA.pem...
View ArticleLooking to have my account removed/anonymized
Can someone please remove/anonymize my account? 1 post - 1 participant Read full topic
View ArticleSet-var with regex
Hello, i want to regsub but i have error my req.body: val1:test1,valx:testx,val3:test3 i want to have only valx:testx in my variable: http-request set-var(txn.myvar)...
View ArticleHow to use absolute path in backend
Hi, I want to configure a HAProxy in front of other 2 load balancers which serve 2 k8s clusters. My issue seems to be the fact that HAProxy tries to use relative paths from backend. I would like to...
View ArticleReplace path clarification
I’m attempting to create some sort of virtual directory that exists at any level, even if nonexistent path or the domain name itself. I need to keep the last two segments of the path, one known, one...
View ArticleForward TCP proxy
Hi, My product runs on my K8S clients environment, and they requested that all my outbound traffic will be proxied through a single point. I want to use TCP mode, so that TLS will be handled by my end...
View ArticleWindows Extended Protection and Exchange 2016
Hello, A security update on Exchange 2016 (2019) will break the possible use of a loadbalancer like haproxy. I using at this moment haproxy, but when I enable this security, outlook remote will not...
View ArticleHAProxy closing connections too soon for my application?
Hello, I have a web service I am trying to access via HAProxy. The web service requires upwards of 30 minutes to process a file. If I connect via the local ip address and http there is no problem. If...
View Article