HAProxy Question
@paraffin wrote: Hi We are looking to Load Balance 3 x IIS Web Servers over HTTPS using HAProxy and need session persistence (Sticky Sessions), most users will come from a single external IP as they...
View ArticleDynamic backend server port from request
@mwp wrote: Hi folks, I'm trying to come up with a scheme by which the backend server port is selected based on some parameters of the request. For example, some requests might go to backend foo,...
View ArticleSSL client CA chain cannot be verified (when including CRL)
@jseparovic wrote: Hi,We recently introduced a subordinate CA into our haproxy setup (previously we were using a self signed CA to sign the haproxy and client certs) For some reason we are seeing "SSL...
View ArticleIP routing with haproxy tcp for ftp
@ebourgui wrote: Hi guys, My configuration: server1ha proxy 1.5.14 - centos 7public ip eth0 : 1.2.3.4public ip eth0:0 : 5.6.7.8 (ovh ip failover which can point to another haproxy server when failover...
View ArticleNTLM with httpchk
@Chris wrote: Is it possible to use NTLM with "option httpchk"? I know that the below works, using basic auth: option httpchk GET /relative/urlstr/ HTTP/1.0\r\nAuthorization:\ Basic\ basic_auth_header...
View ArticleBackend Servers with client transparency cannot get out to internet themselves
@webber wrote: We have two backend IIS servers which are load balanced and working fine for HTTP and HTTPS passthrough traffic perfectly. They are configured for clientip transparency so their default...
View ArticleBackend IP based on frontend IP
@Kal wrote: Hi, I use Haproxy (1.6 on Ubuntu 12.04) as a SSL termination proxy in front of a Varnish server. Varnish listen several IPs, for virtual host purpose. So I want Haproxy to listen all IPs,...
View ArticleIs it possible to use backend server 127.0.0.1 with TProxy?
@funbsd wrote: TProxy does not work in this case:server local-server 127.0.0.1 source 0.0.0.0 usesrc clientip I have to delete "usesrc clientip", but then I can not see "clientip". Is it possible to...
View ArticleHigh CPU usage after upgrading Haproxy
@Raidok wrote: I had 4 identical deployments of Haproxy 1.6.5 handling a steady 10-20k concurrent websocket connections each 24/7 with average CPU usage below 50%. A few days ago I decided to upgrade...
View ArticleHAProxy close Moodle sesions
@hkeyland wrote: Hi all Im using moodle, the user log into Moodle and navigate, but after 3 or 4 minuts the sesion closed and need to login again, every 3 or 4 minuts always. I tried to modify...
View ArticleHow to bring up a feature request?
@xczheng wrote: In particular, the feature I want to bring up is, in HTTP mode, if a request is tarpitted, it is not configurable to log a 429 status code(not the status code sending back to client)....
View ArticleExchange 2016,outlook not updating inbox but connected
@Maurotb wrote: Hi,i have setup an exchange 2016 site (three exchange mbx), in front of site one squid3 as ssl offloading.I did try to focus squid on MBX1 first , then MBX2 and 3, all work as...
View ArticleHow to get common name from client cert in TLS connection instead of HTTPS
@haboy5258 wrote: how to get common name from client cert in TLS connection instead of HTTPS. I am using TLS not https and want to get common name from client cert using haproxy 1.6.9 also tried...
View ArticleLimit concurrent connections based on part of URI
@mmcaughan wrote: Hi, Cannot find a good example after a fair amount of googling. Want to concurrent connection limit based on client part of the URI below....
View ArticleClik here to view.
Newbie - Several backends - not redirecting correctly
@ksl28 wrote: Hello, First of all i need to inform that im fairly new to HA Proxy, and is no master at it The HA proxy setup consists of 2 nodes, running HA Proxy and Keepalived with at floating IP....
View ArticleUptime via stats without scraping html
@bwmetcalf wrote: Is there anyway to programmatically obtain the uptime metric from haproxy statistics via http without having to scrape the html version of the output? It would be nice to have this...
View ArticleHaProxy Validates Websocket DNS lookup backend but not ipaddress
@toriacht wrote: Hi, I am configuring my haproxy instance before all my backend servers are alive. For the configuration below If I use a not yet existing ip address all starts fine however if I use a...
View ArticleIntermittent 503 errors with multiple sites through proxy
@webber wrote: I put a new Centos6 haproxy (compiled) system in production with 700+ sites behind it. The load was not high on the proxy or the two backend IIS servers. We were noticing occasional 503...
View ArticleTraffic being sent to down hosts on HAProxy reload
@dkhap wrote: Hey there, We are running HAProxy v. 1.5.4 in TCP mode and are running into an issue where down hosts are receiving traffic for a short time after HAProxy is reloaded. This eventually...
View ArticleWhen the ejabberd backend goes down
@dobry wrote: I have rather typical setup: 1 frontend + 1 backend, tcp mode, in backend I've several ejabberd servers. Ejabberd backends are stateless and when some of them go down, I'd like client...
View Article