Issues with Cloudflare -> Haproxy -> Varnish setup when using http-reuse...
Hi, our setup consists of Cloudflare, Haproxy and Varnish. My issue is with http-reuse always/safe. It is causing some requests to route wrongly in varnish. Here’s my haproxy config: global cpu-map...
View ArticleClik here to view.
Can't Upload Files To Servers Trough Front End Getting 403
I have a few worker nodes that were on a different LB I moved them to HAP they seem to work fine and can see traffic flowing trough, but when I try to upload a file I get 403. I’m suspecting that the...
View ArticleHow to calculate memory needs with http2
Hello All! Two questions for this group. First, is this the correct formula for calculating memory needs when http2 is not used: (tune.bufsize) * (global maxconn) Second, is this the correct formula...
View ArticleClik here to view.
How can I take a substring from the path to use it elsewhere?
It’s been forever since I edited the HAProxy file. I had been using a GUI for it and I forgot a lot of stuff. I didn't have much luck with the docs. (click for more details) I’m trying to use a...
View ArticleTCP mode for NX protocole load balancing
Hi! Is it possible to load balance NX (TCP) traffic between two servers ? With free edition ? With enterprise edition ? NX is SSH-like protocole used by NoMachine, remote desktop solution. Thanks!...
View ArticleUri rewrite , append
Hello everyone. I need to rewrite the incoming uri/path if it matches. like if incoming path start with /test/*** then change this to /test/testing/** Basically, we are appending /testing/into the...
View ArticleStructured data lost when forwarding logs voa syslog forwarding feature
I’m currently testing a setup where a syslog-ng client is shipping its logs to an Haproxy syslog forwarding endpoint which then forwards to a remote syslog-ng server. The logs arrive at the...
View ArticleClik here to view.
I am facing HAProxy Connection Issues
Hey everyone, I am working with HAProxy in a project & I am facing connection issues that I am struggling to troubleshoot. The setup is fairly simple: I have HAProxy configured as a reverse proxy...
View Article2.2.3 multiprocess -> 3.0.8 multithreaded TLS performance degradation
Hi all, I’m working on trying to port existing haproxy instances from 2.2.3 using nbproc to 3.0.8 nbthread and hitting a (literal) TLS performance wall. The hardware and underlying OS is identical,...
View ArticleInstalling Kubernetes Ingress Controller: Can I put everything in a Helm...
I’ve been able to install the Kubernetes Ingress Controller using Helm helm install haproxy-controller haproxytech/kubernetes-ingress --set controller.service.type=LoadBalancer --set...
View ArticleUsing parameters in http-request set-map filenames
I’m trying to update my haproxy config to allow different map files to be updated using http-request set-map as described in the haproxy blog, Introduction to HAProxy Maps Instead of hardcoding the...
View ArticleCalling Backend with FULL url
Hi I am new to haproxy and facing difficulty with backend with full url I have the following setup: HAProxy version 2.4.22-f8e3218 OS = Rhel9 My situation User do the following 1.) Open browser and...
View ArticleDNS resolution libc works, resolvers does not
Using version 2.6.18 I am updating a working haproxy configuration to be able to handle backend servers not being up yet at the time haproxy is starting. It’s a docker container running in kubernetes,...
View ArticleTrying to forward HTTPS from 443 to 1433 in TCP mode
Hello! I have two servers (192.168.0.101/2) running two web servers (via containers), one of them listening on port 443 and the other on 1443. I set up HAproxy on TCP mode and each web server is...
View ArticleHaproxy 2.4 with k3s v1.32.3 +k3s1 and rancher two diff clusters
hi i just created my k3s cluster (all with local ips plus hostnames) one for rancher with 3 vms, another for master-x same 3 vms for master and 3 for workers for HA, im my case im using haproxy in...
View ArticlePinging VIP through VLAN interface causes reply to pass through eth0 interface
Hi all, I’ve just discovered a routing issue with HAproxy Aloha that I’d like some help with. We use a remote detection service that sends ICMP packets to our public facing VIP to check if its up or...
View ArticleChecking client cetificates (mtls)
Good afternoon dear community members! I’m experimenting with haproxy as a balancer and facing some difficulties. Clients connect tcp-streams (not http data) to my system using client certificates....
View ArticleHAProxy "unable to set SSL curves list to 'secp38r1'"
Hi, I’m trying to setup HAProxy on my OPNSense box as a reverse proxy for Plex. I’ve followed the tutorial at OPNSense I’m pretty sure I’ve followed the instructions to the letter, but I keep getting...
View ArticlePossible improvement of haproxy.org website
Hi, a colleague of mine has brought to my attention that some changes could be made to the main haproxy.org website to improve its accessibility. What is the best way to discuss with the people in...
View ArticleHow can I configure HAProxy to treat primary and fallback backends as...
I’m using HAProxy to load balance traffic to an application running on a single machine. I want to define a primary and a fallback backend, both pointing to the same server (same app, same machine),...
View Article