Questions tagged [haproxy]
The haproxy tag has no usage guidance.
53
questions
1
vote
0answers
10 views
How to define OpenVPN network in haproxy ACLs
I would like to define OpenVpn network in haproxy ACLs.
OpenVPN server and haproxy is running on the same server (X.X.X.X/32).
It is possible to set up in haproxy to allow requests only from the ...
1
vote
1answer
22 views
Cannot access haproxy stats socket with systemd
I am trying to disable a haproxy frontend from a systemd service in Debian 9 (haproxy 1.7.5-2). The default config sets up admin access via a unix socket at /run/haproxy/admin.sock so I use socat (1....
0
votes
0answers
10 views
HAProxy configuration problem with ports
Hi :) I have problem with HAProxy configuration.
I have haproxy and two backend servers (backend servers listen on 1234 port)
It's my haproxu config:
frontend http_front
bind *:80
backend ...
0
votes
1answer
25 views
Filtering Apache log for errors codes
Suppose I have a Apache/Haproxy log:
Jan 28 15:45:18 lict haproxy[48318]: 103.133.5.14:52243 [28/Jan/2020:15:45:08.730] LICT_front~ LICT_back/web2 9320/0/0/212/9532 302 556 - - --VN 24/24/4/1/0 0/0 "...
0
votes
0answers
21 views
Subdirectory frontend to root backend
I’m looking for some help with figuring out the best way to handle routing URLs with subdirectories to applications hosted on the root of a webserver.
Say I have URL domainx.com/path1, I want users ...
0
votes
0answers
21 views
Make https request with HAProxy without explicitly mentioning certificates?
Why?
Some app started making annoying authentication verification that work with the region. Every time I travel, and I login from another country, I have to go through a very annoying process of ...
0
votes
1answer
331 views
Haproxy seems to not send logs to 127.0.0.1:514 despite configuration
Edit: the actual problem ended up being either the local0 vs local2 distinction and the rsyslog end of deal.
I'm building a kubernetes / openshift cluster, and on front of that, I need to set up a L4 ...
1
vote
0answers
147 views
DNS round-robin and keepalived
I'm experimenting with a pair of HAProxy servers in an HA load balancing configuration. What I'd like to do is get a pair of IP addresses to put in a DNS round-robin, and have keepalived maintain one ...
0
votes
1answer
39 views
HAproxy + Varnish Cache configuration
need some help here.
I have HAProxy that's load balancing 2 servers.
HAProxy - 192.168.1.20:80
Server 1 - 192.168.1.18:80
Server 2 - 192.168.1.19:80
Now I would like to configure Varnish Cache to ...
0
votes
0answers
16 views
Two Virtaulhost with one IP in Apache2 is not working with Haproxy
For my case, haproxy is at front-end where ssl terminates ( in actual system) and requests are served via back end. In backend, there are two virtual hosts. My requirement is that if client type IP in ...
0
votes
0answers
133 views
haproxy plugin on check_mk
I'd really appreciate hints if anybody has one or two...
I cannot seem to get haproxy information on back end servers to show in Check_MK.
I can run hatop -s /var/run/haproxy.socket and this shows ...
0
votes
0answers
24 views
haproxy setup is not working when resource utilization become high
We are using HA proxy v2.3 in our organization for load balancing our apache application servers. Three web application servers are configured in haproxy.
When any one of the web application server ...
0
votes
0answers
9 views
Issue in haproxy configuration while server load become high
We are using haproxy version 2.0.3 in our environment for load balancing purpose.
{ balance roundrobin }
They are total 3 webnodes. But we are facing issue in load balancing setup while server load ...
0
votes
0answers
886 views
HAProxy as a reverse proxy for backend already ssl enabled and SSL terminator for a backend exposed in port 80
I have 4 servers:
proxy_server,
$BK_SERVER_001,
$BK_SERVER_002 and
$BK_SERVER_003
The "proxy_server" only has an HAProxy enabled service with this configuration:
(please look at the rows marked ...
1
vote
1answer
92 views
HAProxy ignores nbproc
In our test environment we've identified a strange HAProxy behavior. We're using the standard RHEL 7 provided haproxy-1.5.18-8.el7.x86_64 RPM.
According to our understanding, the total number of ...
0
votes
0answers
45 views
How to use haproxy for outgoing requests?
I am trying to create a tls link between two haproxy instances. Each instance is installed on a machine which have some apps that need to talk with each other using the proxy. I want the haproxy ...
0
votes
1answer
1k views
Getting “ERROR 1364 (HY000): Field 'ssl_cipher' doesn't have a default value” Error using mariadb
While creating a haproxy_check user in MariaDB I am getting error ERROR 1364 (HY000): Field 'ssl_cipher' doesn't have a default value, what I need to do?
0
votes
0answers
47 views
HAproxy / rewrite local ip to external ip
I have a local cluster and an external client on the internet. The solution is communicating on several ports, but though a HAproxy upstream LB.
The cluster handles many other solutions on the local ...
1
vote
1answer
689 views
Deployment of haproxy between devices and Syslog server
Below is the current architecture of Syslog-NG to avoid single point of failure.
Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the ...
2
votes
1answer
276 views
Source-MAC Filter iptables
I have a HAProxy box with centos7 and doing load balance proxy for a smtp cluster providing mail relay to our customers.
default gateway => 10.0.0.1
master-relay.example.net => 10.0.0.254
...
4
votes
1answer
7k views
How to start HAProxy on CentOS with systemd
I'm trying to set up a simple web load balancing using CentOS 7.5 (64bit, kernel 3.10), HAProxy 1.8.13 and systemd.
It seems that the HAProxy configuration is OK, but starting the application gives me ...
0
votes
0answers
585 views
HAProxy didn't start as service
Did need to configurate and start HAproxy from User without SUDO rights.
in general it turned out to be done.
/data/haproxy/haproxy -f /etc/haproxy/haproxy.cfg
stdout:
[WARNING] 198/141606 (119143) ...
0
votes
2answers
545 views
haproxy pass origin IP in galera cluster db
We have one galera cluster, mariadb version 10.3 and haproxy.
We want the users to connect like this client->haproxy->galera_cluster.
The user we create in the database we allow the IP to the client....
1
vote
1answer
883 views
FIPS 140-2 compliance for Apache and Haproxy on CentOS 7 [closed]
I have CentOS 7 and Apache and the Haproxy load balancer with SSL support.
How to make the server compliant to FIPS 140-2?
From CHAPTER 10. FEDERAL STANDARDS AND REGULATIONS | redhat.com
I got the ...
0
votes
1answer
112 views
add a header to incoming http request in a server
I have a ubuntu 16.04 server. It runs nginx webserver for the frontend part. Also the backend application runs in the same server.
Now the requirement is to add header to incoming http requests. And ...
1
vote
2answers
2k views
Why haproxy logs status code 200 when using “http-response set-status <not-200>”?
I am using haproxy 1.7.8.
I have a config that blocks requests with some specific abusers domains in HTTP Referer header.
Important parts of my haproxy config looks like this:
frontend ...
2
votes
0answers
4k views
haproxy silently fails to start up using systemd on CentOS because of missing permissions for pid file
I have a CentOS 7.4 installation with haproxy which I updated to 1.8. Haproxy fails to start, even sudo systemctl start haproxy doesn't show any output.
sudo systemctl status haproxy displays this:
●...
1
vote
3answers
10k views
HAproxy - add path to backend server
I'm setting up HAproxy as a reverse proxy on my NAS, because I would like to use easy to remember subdomains instead of referring to the apps on my NAS with their port numbers.
I managed to get it ...
0
votes
1answer
64 views
2-way TLS Using HAProxy Authenticates with Command Line but Fails in Browser
For a proof of concept development, I have an HAProxy server running on my local machine (OSX) which is expecting to make a 2-way TLS with any client and then forward that client to a web server.
I ...
0
votes
1answer
322 views
CARP Interface Doesn't Respond to Traffic
I have two OpenBSD boxes on running as Gen1 VMs on Hyper-V 2016; the VMs are split across two Hyper-V hosts. The NICs associated with the CARP pseudo interface do have MAC address spoofing enabled; ...
2
votes
2answers
2k views
HaProxy 1.5.8 to FTP server
I have been at this a few times and have become completely stuck in configuring this. Currently, I have this set up for an FTP server:
Local PC (My MAC) -> AWS EC2 (HaProxy) -> FTP Server
Here's a ...
1
vote
1answer
568 views
Multiple puppetmaster behind load balancer
We build two puppet master on openstack cloud and put them behind LBaasV2 (haproxy) load balancer, also we have separate puppetDB and PuppetCA server to handle certificate.
|-...
1
vote
0answers
62 views
How to add ngnix behind haproxy server
I have setup nginx web server and I want to do the load balancing using haproxy server. I have done these using apache but unable to do it for nginx.
Below the apache settings which are working for ...
1
vote
1answer
2k views
Is it possible to change config file location in haproxy?
I install Haproxy in /apps/haproxy/usr/local/sbin. Instead of placing config in /etc/haproxy/haproxy.cfg I want to use default config in /apps/haproxy/conf/haproxy.cfg and /etc/default/haproxy. How to ...
1
vote
1answer
743 views
Nginx Reverse Proxy setup
I currently have a few hundred web applications spread across around 20 servers, and a reverse proxy sat in front of these running Pound and Haproxy. Pound is doing the http to https redirect and SSL ...
2
votes
0answers
569 views
haproxy serving wrong SSL certificate for a subdomain
I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain.
The ...
2
votes
1answer
1k views
Public HTTP/HAProxy server also is a VPN… should it do both?
I have a HTTP/HAProxy server. It also is the OpenVPN server for my network (all my servers are connected to it). I expect my website to grow dramatically soon, so I am worried if this single point of ...
1
vote
0answers
207 views
How to route to Virtual IP as gateway
I have environment on Centos 6.7 Final,
2 Loadbalancer failover (Haproxy, keepalived),
3 Web Server (nginx - PHP-Fpm).
LB1 (Public x.x.x.233, Private 10.110.120.21),
LB2 (Public x.x.x.235, Private 10....
2
votes
1answer
4k views
Use HAProxy to tunnel SSH through https
I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
18
votes
4answers
60k views
Does HAProxy support logging to a file?
I've just installed haproxy on my test server.
Is there a way of making it write its logs to a local file, rather than syslog?
This is only for testing so I don't want to start opening ports / ...
0
votes
1answer
2k views
How to remove port number from url?
My application "XY" running on port 1234 in tomcat server. I'm using HA-Proxy for loadbalancing. So in loadbalancing my front end port is 5678 to access the "XY" application through browser. Right now,...
4
votes
1answer
5k views
systemd service and multiple haproxy instances
I have a requirement to run a couple of instances of haproxy and I need to update the haproxy.service file to add the second command / instance. Google lead me to adding the second command on the same ...
1
vote
1answer
436 views
How to load balance mutiport traffic using HAProxy
I have 2 servers that host an application that listens to mutiple ports.
Is there a way to load traffic between these servers using HAProxy?
I tried this in configuration, but it didn't work:
...
0
votes
0answers
5k views
Why I have a HAproxy error 503 while web servers are up and running?
3 months ago I configured my HAproxy to balance 2 Apache webservers. Since then everything is up and running. Today I woke up seeing a HAproxy 503 error. When I checked the its web stats I saw the ...
0
votes
0answers
245 views
HAproxy wont see Apache after uninstall Nginx, why?
I have a website I need to mount and I'm doing so with an HAproxy as load balancer, 3 webservers, 1 memcached, another HAproxy and a mysql galera cluster with 3 servers. All in CentOS 7.
Anyway I ...
0
votes
0answers
831 views
HAProxy with Roundrobin working only on 2 of 3 MySQL servers, why?
Good day.
I'm following this article to configure HAProxy to balance with roundrobin between 3 MySQL servers (db1, db2, db3) in a MariaDB Galera cluster (working perfectly).
However I have a problem....
0
votes
0answers
826 views
haproxy removing mod_expires set by apache
I've haproxy server which is routing requests to different web service instance based on rules. The web service instances have apache running at port 80. Now, I'm trying to set some expiry header by ...
2
votes
1answer
5k views
Haproxy: use backend server like backup
To my haproxy i redirect the traffic to single server in backend, i need set another server what work only in case of failure of first server, it's possible? I read the guide, but in balance algorithm ...
0
votes
0answers
2k views
HAproxy: redirect from IP to hostname
I have a proxmox host with multiple VM and multiple webserver, i have a VM with haproxy that redirect external request to internal VM. I need redirect IP request to hostname, if in my browser i type ...
4
votes
2answers
2k views
Iptables can't forward from/to internal LAN with proxmox
I have an host with proxmox with single public ip and some virtual machine installed whit webservers and multiple doimains, the first VM is a proxy with haproxy that forward the request to other VM ...
