Use "%sc" as a condition when using set-map
Hello. I noticed that when I use “%sc” as a value to write to a map file, this is possible. However, if I try to use it as a condition, it does not seem to work. As an example, this is what I mean:...
View ArticleHAproxy path based routing of web containers
Hello, We are students working on a project using nomad haproxy and consul and we are new to all these technologies. We have VMs running on a server ( we used Vagrant) each Vm is hosting web...
View ArticleIngress controller does not create "default certificate" anymore
On haproxy ingress controller v1.10.10 I get this error in log: ERROR global.go:272 default certificate: annotation ‘ssl-certificate’: secret ‘namespace/namespace-default-cert’ does not exist...
View ArticleClik here to view.
Domain cookies are grabbed from another domain
Hello, I configured the haproxy with more than 50 domains, and everything works fine, only this subdomain takes the cookies from different frontend ( sometimes takes from the right cookies) and I...
View ArticleSni proxy only support port 443?
tcp proxy via sni domain. 443 success. 2096 wrong. haproxy.cfg global log /dev/log local0 log /dev/log local1 notice log /var/log/haproxy.log local0 notice chroot /var/lib/haproxy stats socket...
View ArticleClik here to view.
Backend server timeout config for slow reponse server
I am using HAProxy 2.9.1 and I am trying to setup 2 backends as follows: Backend named svelte This backend is fast to reponse i.e. it could take 0.1s to reponse. Example: time to make http request ❯...
View ArticleHttps in passthrough but with passing the source IP's
I’m new to HAProxy and i’m currently migrating my proxy server from NGINX to to HAProxy. One of the requirements i have is that I can do hostheader based routing without SSL offloading but that my...
View ArticleIssue with ISS backend
Hi ! Since we have updated our linux server, HAProxy are uanble to connect to our IIS backend server Before the update, everything worked fine, even if the certificat on IIS was self-seigned and...
View ArticleHA Proxy HTTP mode with SSL for GETH RPC
(topic deleted by author) 1 post - 1 participant Read full topic
View ArticleHTTP mode with SSL for Geth RPC
I am trying to configure HA Proxy for Geth Ethereum RPC nodes with SSL enabled to test.example.com I am running HA Proxy via docker image: haproxytech/haproxy-ubuntu:3.0 I have confirmed the backends...
View ArticleUsing HAproxy to terminate SNI and port forwarding
0 I have different servers in a couple of western countries as personal VPNs for myself and family and friends. Because of staggering internet censorship in Iran, using a domestic VPS as the relay is...
View ArticleInconsistent frontend logging from an external health check
My haproxy frontend config looks like this: frontend testthing.com bind :1234 ssl crt /etc/ssl/pem/mycert.pem mode tcp log-format "%ci:%cp [%t] %ft %b/%s %Tw/%Tc/%Tt %B %ts %ac/%fc/%bc/%sc/%rc %sq/%bq...
View ArticleKeepalive_requests equivalent
I’m starting a new thread to not necrobump an old thread. I agree that there is a very legitimate use case for limiting the number of keepalive_requests in hapoxy. In my use case, I use a dynamic...
View Article"CSRF verification failed" with HAProxy SSL Offloading
Hi everybody, I’m using Haproxy to offload SSL so that I can connect using HTTPS to a service (running in my backend) which is HTTP only. It seems to work correctly, as the landing page displays...
View ArticlePort binding MariaDB Galera HAProxy
Hi, I tried to configure HAproxy with loadbalancing for MariaDB Galera Stack on Docker and I can’t connect to my database : SQLSTATE[HY000] [2002] Connection refused HAProxy Host : 10.21.50.1 bind...
View ArticleClik here to view.
Using HAproxy as an Egress Controller + Proxy Pool?
Hey there, Folks! I am trying to set up HAproxy as a sort of Privacy Egress Controller, where it would have a large number of public IP addresses on one interface, and it would make connections out...
View ArticleMy SNI routing does not seem to work - is there some option to debug ACL rule?
Hello all, I am trying to configure SNI routing using OPNSense HAProxy plugin (based on HAProxy 2.8). After configuration in the GUI, it gives me this configuration: # # Automatically generated...
View ArticleLog custom information in the log file (backend)
I found this example configuration code online: http-request set-var(txn.ratelimited) str(RATE-LIMITED) if too_many_requests http-request capture var(txn.ratelimited) len 12 It works well for the...
View ArticleShould a use_backend followed by redirect work?
I am having acl isurl path_beg /path1/path2/ use_backend isurlsrv if isurl redirect scheme https code 301 if !{ ssl_fc } But looks like everything is being redirected 2 posts - 2 participants Read...
View ArticleConfiguration working with curl but not with a browser
I have a simple haproxy configuration that looks like the following: global # configure logging log stdout format raw local0 debug # set default parameters to the modern configuration...
View Article