Haproxy Fan-out
I want to do the following: say if i get a request to haproxy - it currently forwards to nodeA, i want to have it forwarded to nodeB also. I do not want to do load balancing. instead a fan-out. i want...
View ArticleHow to extend and collect HAProxy Prometheus Metrics with more labels
Hello: I am using HAProxy to access other websites, I want to collect the target websites, custom metadata into prometheus metrics, with extending the existing HAProxy Prometheus Metrics. How can I...
View ArticleHeader case insesnitive
Running with HAProxy 3.1.8 and an old ZKTeco firmware that read the header response Date to synchronize the clock of the device. HAProxy changes the response to lowercase date, therefore the device...
View ArticleAD FS 5.0 (Server 2022) and Certificate Authentication on port 49443 not working
Hello, I’m having a hard time making this work. My setup involves two Federation Servers that are now load balanced by another solution (that’s a Kemp LoadMaster) that I need to move off that to...
View ArticleRejecting a request with any query string
I recently switched to HAProxy 3.0.11 (-9e587df) on a OpenBSD System, version 7.7. I use HA to switch between hosts but most importantly also to filter out bad traffic. Most of it works fine: Requests...
View ArticleClik here to view.
SPOE engine filter ACL rules
Hellow, just trying to wrap my head arround why i can’t setup acl rules on the filter like bellow lines. I really don`t wanna send to coraza any message if is local network. If i use if...
View ArticleClik here to view.
Route https (websockets) connections with HAProxy
I have a need of doing a variant of this https://www.haproxy.com/blog/route-ssh-connections-with-haproxy but with HTTPS (mix of websockets and normal https) termination and route to backends based on...
View ArticleProxy RDP-Connection, no RDP_COOKIE available?
Hello, I am new to HAProxy and the Linux world. I would like to use HAProxy to route RDP connections. The routing should be based on the RDP cookie. But first, it should basically work. It is no...
View ArticleEnhance documentation for insecure-passwords and "invald" characters
Hi community, for some service, we are still using “basic auth”. As we noticed heavy CPU usage due to the used encryption method, we chose to switch that to “insecure-passwords”. But then, the...
View ArticleHaproxy config check behaving differently in version 3.2
I noticed that the haproxy config check behaves differently in haproxy version 3.2. Older versions returned “Configuration file is valid“, but version 3.2 does not report anything, when the...
View ArticleUsage / improvements to consistent hashing with bounded loads
Hi folks! We (pydantic) recently started using HAProxy, in particular for the consistent hashing with bounded loads feature (hash-balance-factor) and we’re really enjoying it. It’s well designed super...
View Article"SSL client certificate not trusted" even with "ca-ignore-err all"
Hello! In my setup, I want haproxy to accept mTLS connections, but not validate the client certificate chain at all. Instead, client’s certificate chain is validated in the backend (necessary because...
View ArticleRspirep - HAProxy Upgrade - Looking for Help!
Hi All, I am trying to upgrade the HAProxy version from 2.1 to 2.4, and as everyone’s already aware that Rspirep is no longer supported in the upgraded version. Hence, I need to use http-response...
View ArticleTCP-check IP second network card
Hi, I have three clustered servers with two network connections; one network card runs HTTPS, and the database data flows through the second network card. The network is isolated, with no internet...
View ArticleSecond server-template in one backend block is not working
Hi! I would like to split outgoing tcp connection via several network cards but second server-template in single backend section doesn’t seems like working. template generate servers but they are in...
View ArticlePerformance issue with SSL Passthrough?
I’m trying to use HAproxy in front of several nginx/php servers to host a few dozen websites. I was hoping to use the SSL Passthrough approach with TCP mode to keep the load balancer lightweight and...
View ArticleHaproxy high availability configuration?
How to make haproxy highly available? Can I just increase number of replicas and spread them across the nodes? Is this enough? 1 post - 1 participant Read full topic
View ArticleSubtle change in operation between 2.8.x and 3.2.x pertaining to...
We currently run 2.8.10 in production . A beautiful version, built like this …. HAProxy version 2.8.10-1ppa1~jammy 2024/06/16 - https://haproxy.org/ Status: long-term supported branch - will stop...
View ArticleClarifications regarding SNI and SSL verifications
Hi, Apache (2.4.65) recently changed its behaviour to prevent accessing a virtualhost that doesn’t align with the Host header when not presenting SNI in the request. It broke some HAProxy setups (at...
View ArticleNeed help understanding hashing in Haproxy
Hi, needed some help with understanding how hashing works in Haproxy. We have the below config in one of our haproxy backend: balance uri whole hash-type consistent djb2 avalanche Now if we make a...
View Article