SSL frontend and SSL backends
@Talz wrote: Hi, I trying to setup a HTTPS frontend with ACL to HTTPS backends for Ubuntu and RHEL private repositories at our company. When doing so I get TLS errors on the browsers...
View ArticleError detected while parsing switching rule
@prem wrote: Hi, I’m trying to whitelist client hostnames. I’m getting an error(see below) when client hostname is not on our network and haproxy service is not starting. Is there a way to ignore/skip...
View ArticleLet HAProxy starts despite servers not yet running in docker
@sanjibukai wrote: Hello, I try to setup HAProxy as a reverse proxy and SSL termination for my websites. After googling for examples I finally managed to have a little setup with HAProxy and two...
View ArticleSeamless Reloads don't work with systemd
@kustodian wrote: I’m trying to make HAProxy 1.8.3 work on CentOS 7 and I want to enable seamless reloads. I’ve managed to make seamless reloads work if I run HAProxy in the shell, but it doesn’t want...
View ArticleHow logging works (stdout or file or syslog)
@sanjibukai wrote: Hi everyone, TL;DR: I found many different configuration examples with various parameters. For example, I saw either using an address (127.0.0.1) or a directory (/dev/log). I also...
View ArticleHAProxy 1.5.18 Centos 6 CPU Issue
@JamesM wrote: Since installing Kernel 2.6.32-696.18.7.el6 (Spectre / Meltdown mitigation) on our Centos 6 HAProxy box, the CPU has gone from around 20% to 100%. The box is dedicated to running...
View ArticleClik here to view.
Config for Service Discovery using DNS and SRV records?
@bploetz wrote: I’m trying to use the new Service Discovery feature available in HAProxy 1.8 as described here: HAProxy Technologies – 27 Sep 17 DNS for Service Discovery in HAProxy - HAProxy...
View ArticleRouting 443 and 80 to correct ports on target
@fbyrne wrote: Hi all. I want to receive connections into a frontend on ports 443 and 80 - this bit is OK and it’s working. This frontend send requests to multiple backends - all OK so far… My problem...
View ArticleLog client ip only in Apache Access log
@Ssppune wrote: After enabling and setting X-Forwarded-For parameter, we have noticed that two IPs, one client ip and other load balancer ip is logged in Apache Access log. How can we get only client...
View ArticleHaproxy 1.8 sc0_get_gpc0 activate acl from bad request count
@nictrix wrote: I’m running HAproxy 1.8 and trying to track a general counter with a stick-table, but each time it’s called by the ACL it isn’t returning true. My expectations are; once the counter...
View ArticleForward response
@tom1 wrote: Hi. I’m trying forward response from outside service to internal server. I’m using haProxy for this issue. But i don’t know, what i’m doing bad. Response going to public endpoint in DMZ...
View ArticleSticky Session / Session Persistence
@DevendraJoshi wrote: Hi, I have two back-end and i am using Round-Robin to load balance. I want to configure Haproxy like, If my one back-end_1 goes down, the traffic of back-end_1 will keep on same...
View ArticleReloads of haproxy 1.8.3 under SystemD cause "finishing" children to stack-up
@rh20i wrote: Hi everyone I work for a large-ish UK web hosting company and we’re slowly introducing HTTP/2 now that’s it’s in haproxy 1.8. We’re using haproxy 1.8.3 under SystemD on CentOS 7.4...
View ArticleClik here to view.
SessionExpiry resetting ever 3 minutes?
@James007 wrote: I use a Tomcat-based app and haproxy. It has worked fine and overall it doesn’t have any issues (use JSESSIONID as the cookie to maintain session). But I tried to add the following...
View ArticleHAPROXY SOCKERR in 0ms
@phenix128 wrote: hello, we just set up HAPROXY on a CENTOS server. Our problem is that we are not able to reach our web application under Windows server 2012R2 We get an error “SOCKERR in 0ms”, I see...
View ArticleReturn haproxy http log
@quanzhao wrote: When I upgrade haproxy from 1.7.9 to 1.8.2, I just got haproxy http log like the following lines occasionally: <134>Jan 11 14:29:28 haproxy[4022]: 100.116.225.103:30099...
View ArticleBalance based on SNI
@MasterSlave wrote: Hello all, I want to to load-balancing with SSL passthrough (mode tcp). I have multiple backend servers and the load balancing algorithm should choose the server by hashing the...
View ArticleSynchronization of 2 HAProxy nodes
@johndone wrote: I would like to set up two haproxy’s nodes in master-master configuration. And to achieve that I would have to keep synchronizing their backends (servers status, number of...
View ArticleHAProxy for converting HTTP to HTTPS request with server requiring SNI
@satya wrote: Hi Team, I have a client which can only send HTTP requests. However, the server will accept only messages from clients which can support TLS 1.2 with SNI. Without SNI, the server...
View ArticleRewrite from domain to different ip and hide the ip
@Elluminatus wrote: Hi there this is my frist post in this forum. I´m new to haproxy and need some help setting up a special configuration, maybe you can help me with some configuration hints. I have...
View Article