Mixing mode tcp and http - SSL termination and Passthrough
@blechinger wrote: Hello! My last thread is here for reference: Cannot bind socket 80 / 443 That got everything working just fine. At the time I wanted to terminate all SSL at HAProxy. Works...
View ArticleHAProxy RDP Windows
@dali466 wrote: So, I am working on setting up a HAProxy Load balancer in my company. I am using the community version of Haproxy installed on my RHEL 6.9 server. I want to have it so that people who...
View ArticleRegex redirect with substitution
@jurgenhaas wrote: We need to redirect all paths that match something-de-de.pdf to de-de/doc.pdf where de-de is a variable country code. So the ACL looks like this: acl needsredirect path_reg...
View ArticleAlways using default_backend
@mucner76 wrote: Hi guys, i am lost in what I thought would be an easy use case. I have an application not HA ready and try to bind it to a single node of my cluster using this configuration: global...
View ArticleBruteforce Wordpress
@c0r3dump3d wrote: Hi, I’m trying to implement a Wordpress bruteforce protection at haproxy level, version 1.5.18 in CentOS 7. I’m folowing the manual...
View ArticleHAPROXY to sendmail server
@Miguel wrote: Hi, I have a mail system with sendmail and I want use HAPROXY in your front to balance connection between our sendmail systems. I saw on the internet some examples to use in postfix but...
View ArticleHow to use reqirep with https requests?
@jurgenhaas wrote: I’m using the following instruction which works just fine for http requests: reqirep ^([^\ :]*)\ /.*([a-z][a-z]-[a-z][a-z]).pdf \1\ /\2/404 if needsredirect !ischina But for https...
View Article503 Unavailable in ssl mode
@muj33b wrote: Hi, I am new to HAProxy (its my first attempt). I am trying to set up HAProxy in front of Kibana (on client nodes) in Elasticsearch cluster. Set up works fine for http requests...
View ArticleACL for missing path
@muj33b wrote: Hi, I want to create a separate ACL for path which does and does not contain a specific string “purchase”. extract from my config acl acl_p path_beg -i /purchase use_backend purchase if...
View ArticleSSL Passthrough without acl 403 Forbidden
@moscardo wrote: Hi, I have a bunch of domains pointing to my LB and balancing over 2 apache servers that handle vhosts for those domains, so I am getting 403 Forbidden from the webservers. Am I...
View ArticleHAProxy 1.5.1 - View backup servers in Statistics Report
@timjstewart wrote: Hi, I’m running HAProxy 1.5.1 and my config file has two servers: an active server and a backup server. When I go to the Statistics Report web page, I only see my active server....
View ArticleSSL handshake failure hangs HAProxy
@kustodian wrote: We are using HAProxy 1.8.9, but the same thing happens on 1.7.x versions. From time to time we get the following messages in HAProxy log (source IP is hidden): Jul 12 15:43:36 hap-01...
View ArticleDoes haproxy support wildcard for http v2
@thangvq wrote: Hi everyone. I have a problem with haproxy + http v2. I use SSL *.domain.vn, but it is working. It always recieves wrong backend. It seems to have a problem with SNI. Can someone help...
View ArticleWorkaround for map_regm bug?
@sottolski wrote: Hi there, just tried to upgrade from 1.7.5 to 1.8.12, but was then bitten by a bug. My config has a map_regm directive to set a header, using a back reference; this doesn’t work any...
View ArticleBackend by dns and not by ip
@slemesp wrote: Hello, I have 2 servers: server_1 and server_2 where server_2 is a virtual machine that to access it I have to access by sub.domain.com because if I use the ip I will be accessing the...
View ArticleRandomly issuing the wrong certificate
@Quartix wrote: Hi, I’m experiencing a problem using multiple certificates on the front end. I’ve tested this in multiple browsers, by refreshing several times, we randomly get the wrong certificate...
View ArticleMoving SSL termination from web server to HAProxy - L7 Timeout
@kingsloi wrote: Hi, I’m sure it’s something that I am overseeing, but any help would be much appreciated. I am moving from my web servers (apache/httpd) handling ssl termination, and instead handling...
View ArticleBack-references in regsub?
@sottolski wrote: Is there any way to use backreferences in the regsub converter? The docs state “It is important to note that due to the current limitations of the configuration parser, some...
View ArticleBind user to one outgoing IP for X minuttes
@mindeswx wrote: Hello, so I am running a 3proxy server and want to balance all the incoming traffic through haproxy. Basically the configuration below does the job perfectly. Only issue i’v got is...
View ArticleLoadbalance 2 jms clusters in weblogic
@Shankar wrote: Hi , I need to load balance between 2 jms clusters in weblogic using . Each cluster url is specified as a comma separated list of host and ports like for example :...
View Article