Routing by string, it works for other strings
@HiTTi wrote: Hello community, i am a nooby with haproxy but until jet i can work with it. I try to route requests with ftp. or sftp over port 5022 to one webserver. So i configure:frontend...
View ArticleSSL handshake failure
@junaid wrote: Hello Guys, We are running a website and have 3 servers behind Haproxy. We are getting following log entries 39.40.42.99:53156 [17/May/2017:12:37:21.319] main/2: SSL handshake failure...
View ArticleHaproxy Script to monitor application port
@capricorn wrote: Hi! I have one linux box running HAproxy and two windows box running some application on port 8080.I want that if the service on port 8080 is not responding then HAproxy consider...
View ArticleTCP backend inside the namespace as non-root
@shefys wrote: Hi, Is there any way to run haproxy as non-root with a backend configured inside the namespace?I tried to setcap cap_sys_admin+ep /usr/sbin/haproxy but it didn't help. If I start...
View ArticleHaproxy url rewrite and masking
@crmadhu20 wrote: Hi All I have a scenario here, I want to to redirect my frontend acl path_reg /foo/* to /bar/* but the /foo in the browser should not change frontend test *:80 acl testfoo path_reg...
View ArticleSNI routing to servers - only ever sent to first server
@dashfield wrote: Hi there. I'm trying to get HAProxy setup to receive requests on port 443 for a range of different subdomains, then use SNI based ACLs to direct them to an appropriate server for...
View ArticleImplement basic authentication
@zahid.k11 wrote: Hi Team, Lets suppose I've configured a my website with domain name "abc.zahid.com" configured in nginx. I also use subdomains like "static1.abc.zahid.com", "static2.abc.zahid.com",...
View ArticleTimeout server bug
@Gero wrote: Hi! I think there is a bug in how timeout server is treated. The documentation says "The inactivity timeout applies when the server is expected to acknowledge or send data." In http mode...
View ArticleReplace appsession with stick tables on cookie prefix
@kengillies.nz wrote: The "appsession" directive enabled a cookie to be matched on a prefix rather than the complete cookie name. Eg you could have a cookie named "MYSESSnnnn" match on the "MYSESS"...
View ArticleEncrypted private key
@nmoss wrote: Hi, Is it possible to use a certificate with an encrypted private key with haproxy SSL listeners? We are evaluating haproxy for use and due to client security requirements may not have...
View ArticleBlock Vulnerability Scanners base on http_err_rate
@ops wrote: Hey I have problem on blocking vulnerability scanners base on http_err_rate, with this config I can block login bruteforce attacks and redirect them to a sandbox but vulnerability scanner...
View Article"SSL handshake failures" on big amount of requests
@SorokinPA wrote: Hi guys,I'd appreciate if anyone can give me couple of suggestions for the issue I have with SSL.I know that sounds like certificate issue, but it happens only when I have big spike...
View ArticleErrorfile not working
@sbonar wrote: I am trying to use a custom error file and instead I get a 408 request timeout. My current setup is my haproxy is running behind an ELB out in AWS. My config is: global log 127.0.0.1...
View ArticleHAproxy doing LB to a dhcp failover landscape
@thiago.daconceicao wrote: I would like to know if is possible to do the IP forward using like round-robin for 2 backends, but the service will be routed is dhcp, ports 67,68 , I guess they are udp...
View ArticleBlocking IPs that repeatedly hit the same URL
@Grimddd wrote: A client's website is currently under attack, and I've been called in to fix it. A huge number of IPs (easily over 5,000) is constantly hitting /login, presumably trying to bruteforce...
View ArticleCan I forward the request to the server which is the fastest server to watch...
@blackantt wrote: Can I forward the request to the server which is the fastest server to watch youtube? Posts: 1 Participants: 1 Read full topic
View ArticleSticky TCP load balancing
@AnkitSinghai wrote: I have to load balance incoming TCP connections but the source is same for all (i.e they all are coming by a gateway), please suggest alternate options that can be used. Posts: 4...
View ArticleHttp2 support in version 1.8
@junaid wrote: Hello, When we are going to have Http2 support in Haproxy. I read this thread(http://discourse.haproxy.org/t/http-2-support-in-1-7/927) and there is no support of it in 1.7 version. Are...
View ArticleIs there a way to forward request according to the target IPs?
@blackantt wrote: for example , if the target IPs is (11.0.0.0, 12.0.0.0, 13.0.0.0,.....), then Haproxy arranges server1 to copy with,if the target IPs is (211.0.0.0, 212.0.0.0, 213.0.0.0,......),...
View ArticleURL redirect to subdomain
@jrcmilanez wrote: Hello friends, how are you? Today we changed a lot of web systems and I need to keep the old urls. The old url is like this: system.server.com/app The new url is: app.server.com/app...
View Article