Compare header/vaules against a map file
Hi all, Is it possible to have a logic with MAP file where the keys are header names and values are the header values and block traffic if a request contains any of header/value combinations set in...
View ArticleSSL Backend on Custom Port Causes 503 Error
hi I want to send my ssl traffic to an ssl server on non 443 port and it causes 503 Service Unavailable No server is available to handle this request. But If use same port on backend server for...
View ArticleClik here to view.
Changing the request based on the domain begining
We have an application where we expect the request in the form mydomain.com/app/?db=name Where “name” is the customer ID and there could be 100’s of possible names (I hope…) The customers wish to...
View ArticleHaproxy 1.8 vs 2.7.3
Hello, I am new to haproxy so learning as I go, so please excuse any obvious mistakes. I have a working haproxy setup that forwards http requests to load balance between two servers. This is running...
View ArticleAutomated Simplified Taxation System What is Known About It Today
Someone joked about pickle and cucumber, someone claimed that their employees were already dreaming of returning to work on January 2, someone was basically surprised at the posing of the question:...
View ArticleHaving trouble setting headers with an ACL
I want to set a header if the request is to a particular domain. I am trying to do it on the front end but unfortunately I cant get it to work and I get config warnings. These are what I have tried:...
View ArticleError GET Request with chucked payload
We have deployed in Openshift an HAProxy to forward the traffic to upstream APIs. The HAProxy is working fine and it can address thousands of request but, sometimes, it seems that there is an issue...
View ArticleConnection reset error
Hi, I am having a configuration of HAProxy with Patroni and Postgres. HAProxy reading status of Postgres via Patroni listen port. Eventhough I am able to connect to DB through ports defined in HAProxy...
View ArticleOpennig ports behind gcnat with something like socat/frp/ngrok(?)
I was wondering if there is an option to create a tcp tunnel directly to haproxy, wich can serve as a backend? Sort of what ngrok is doing. 2 posts - 2 participants Read full topic
View ArticleClik here to view.
ACL rule not working
Hi, I am configuring a new acl rule to route request to application server. rule name : robots.txt when i checked in configuration, found it is routing to one particular server abc. but same...
View ArticleHaproxy 1.8 Update to 2.7.3 LUA Issues
We have an internal HAProxy which for convenience I built a users registration in using LUA and that LUA uses io.popen calls. One popen is for running a qrencode command to generate a QR code and one...
View ArticleSsl-min-ver in crt-list used to work with haproxy 2.2, does not seem to work...
I have a crt-list.txt which looks like so: old.example.com.pem [alpn h2,http/1.1,http/1.0 ssl-min-ver TLSv1.0] modern.example.com.pem [alpn h2,http/1.1,http/1.0 ssl-min-ver TLSv1.2] And it’s used in...
View ArticleHow to use two different backend for websockets for different url path
I have a use case where i want to connect to different backend on websockets for different url path For eg: my haproxy hostname is test.haproxy.com which has ssl configured i.e....
View ArticleNginx to haproxy migration, need help with this
Hi there, i would like to migrate from nginx to hproxy and need your help on this. I have this location in nginx which i also want to map in haproxy, what is the best way to do this ? location = / {...
View ArticleOs.execute() to run shell script
Is it possible to use os.execute() to run a shell script in a use-service lua script? 1 post - 1 participant Read full topic
View ArticleHaproxy listener ftps(s) no connection establishment
Hi there, Have a problem here with haproxy and ftp(s) which i do not understand. listen FTPVIP bind *:21 ssl crt /etc/haproxy/git-03.test.local.crt ssl-min-ver TLSv1.2 bind *:60000-65535 ssl crt...
View ArticleHelp - Layer7 wrong status, code: 400, info: "Bad Request"
Hi All, I’m having an issue with a new Backend (see the Subject). I’ve looked at other, similar posts here & elsewhere and I don’t think (ie can’t see if) they’re relevant to my issue. The HAProxy...
View ArticleUnable to set SSL cipher list to 'PROFILE=SYSTEM'
Hi, I have build 2.4.22-f8e3218 from source on CentOS 7.9.2009 : $ haproxy -vv HAProxy version 2.4.22-f8e3218 2023/02/14 - https://haproxy.org/ Status: long-term supported branch - will stop receiving...
View ArticleTool to generate ACLs from an OpenAPI specification
Hello, Is there any tool that would parse an OpenAPI specification and generate a list of ACL for a reverse proxy? 1 post - 1 participant Read full topic
View ArticleJust show me how to cache
This is absolutely insane. Some please give me a config that caches responses from an nginx server in memory for 30 seconds. nginx is serving static content (like 1kb html pages) and i need haproxy to...
View Article