Need help to understand VRRP failovers and healthchecks
Hi Team, New to HAProxy looking for help with the following pair (no network related issues seen i.e spanning-tree re-convergence events etc between a and b LBs) I’m looking to understand the links...
View ArticleChange response-header from http to https
Hello everyone, I need help with a big problem for me. I have a frontend that accepts https:// and a backend that only understands http://. So classic SSL offloading. No secret. Now to the problem....
View ArticleTimeout http-keep-alive doesn't work
haproxy version: 2.0.17 We found the client received some 504 errors, less than 1/10000. Thus, we take a tcpdump and follow the stream, found that when haproxy completes a request, it does not...
View ArticleHaproxy kills external-check process before script ends
I have a docker container running haproxy:2.8-lts, which does a check to the backend, but my script gets killed before it can finish resulting in a failed check and accumulated alot of processes in...
View ArticleEasiest way to *not* output a dash from unset capture output
We are using a custom log capture format (JSON) and have quite a few captures in place. What’s the easiest and most performant way to output a blank string instead of the capture string if it wasn’t...
View ArticleCan't connect to backend server if they are using SSL with wildcard Subject...
For some reason I get “503 Service Unavailable” when trying to reach a backend server over 443/ssl where the target server uses wildcard SSL in their Subject Alternative Names. Here’s the full config...
View ArticleA 'http-request' rule placed after a 'redirect' rule will still be processed...
Hi, Getting the below message in haproxy log. could some one suggest me what went wrong. a ‘http-request’ rule placed after a ‘redirect’ rule will still be processed before. haproxy version:2.8 My...
View ArticleHaproxy in front of elastic ECK
Hi I need help configure HAProxy in front of Elastic ECK Using curl, when I connect directly to the backend elasticsearch I got the correct response. example : curl -k -L -XGET...
View ArticleBest practise wanted websockets-offloading-multidomain-singleip
What would be the best practise to tick this functionality I need to offload clients that are both using https and websocket using same port (443) they are using same domain, and differentiate from...
View ArticleAgent check with agent-send to a bash script
Hi, I’ve been using http checks with HAProxy with the option httpcheck send-state which is very useful to pass the backend/server names, the node name… I’d like to move to an agent-check to better...
View ArticleChange redirect
Hi, I’m trying to maintain the URL when the response returns from the server. I’ll explain the request: we have a cloud proxy that allows us to do reverse proxying, but there are applications that...
View ArticleDynamic use_backend?
How can i get the ACL and USE_BACKEND below to a dynamic one (or two) liner(s) ? the domain in ACL - has the info needed for the backend statement imho. (either by its own name or its value) and - yes...
View ArticleOverall slow file transfers
Hello, I recently setup an HAProxy instance. I‘m using multiple subdomains for different backends, which are overall pretty slow. I have a pretty loaded page, which took less than 5s to completely...
View ArticleSsl and connection informations
Having a configuration with a single HAProxy load balancer frontend and two apache backend servers with a webapp, I need to use https for incoming traffic to the frontend and pass all relevant...
View ArticleGetting errors on health check with haproxy 2.8 version
Hi All, My haproxy.cfg file looks as below and i am trying to enable health check over my vault cluster and getting the below errors. Could some one help me or guide me here and thanks in advance...
View ArticleNOSRV when upgraded to WebSocket?
I’ve got a Unifi Network Application behind HAProxy. Everything works fine when using the normal web interface, but when I use the Unifi app, HAProxy gives me trouble. https~ black/<NOSRV>...
View ArticleHow much backend does HAProxy can easily support?
Hello everyone! I’ve been using HAProxy for my company’s needs for some time now, aiming to facilitate communication between remote clients (through VPN network) and their resources hosted locally,...
View ArticleUsing one backend with hundreds of servers from DNS SRV records
Hi, We’ve a few hundreds (sometimes 2000) servers each running the same service and we’d like to forward incoming request to a given backend server. Suppose in DNS we’ve:...
View ArticleHow to pass the real address to Exchange
Hello. I want to pass the real client address from Haproxy to Exchange. I have added the option forwardfor option to all blocks. I still see the Haproxy address. Can anyone tell me the exact steps how...
View ArticleDo a manual curl health check
Hi, I have a haproxy backend entry as follows: option httpchk GET /healthcheck HTTP/1.0\r\nUser-agent:\ osa-haproxy-healthcheck How do I use a curl command to check its health ? I tried but I am not...
View Article