Questions tagged [haproxy]
HAProxy is a load-balancer, to spread out requests between web servers.
67
questions
0
votes
0
answers
11
views
Where does each of my local facilities logs to in Unix?
I was using local0 facility to log info in HAProxy. What I don't understand is in which file each of my facilities (local0,local1,local2,local3,local4,local5,local6,local7) logs to?
- 1
0
votes
0
answers
13
views
HAPROXY traffic logs not logging in /var/log/haproxy.log
I have below configuration in /etc/haproxy/haproxy.cfg
# Example configuration for a possible web application. See the
# full configuration options online.
#
# http://haproxy.1wt.eu/download/1.4/...
0
votes
0
answers
19
views
Logrotate - specify weekly run in separate config file, but is not rotating
Objective: weekly rotate haproxy.log, written by rsyslog Docker container.
Scenario: Running an application with Docker-based HAProxy containers, each proxy sends logs to a Docker rsyslog container, ...
- 467
0
votes
0
answers
3
views
Unable access to webex desktop app using tcp mode
I'm running haproxy 2.4 and when the haproxy is configured in http mode, i can't access to webex desktop app, says connecting but instead pass to logon page, back to "select webex website".
...
0
votes
0
answers
49
views
High cpu usage over TCP
I'm running haproxy 2.4 and when the haproxy is configured in tcp mode i get a high cpu usage.
Example:
Running the stress tool to generated arround 30k connections:
./pst -c 100000 -r 100000 -u ...
0
votes
0
answers
321
views
HAPROXY - Redirect request to another server (url sef active)
Through a HAProxy I have to redirect requests of the type http://my server/vo-tcs to a server with IP address 172.22.80.40 (SRV1). I state that on SRV1 the Joomla CMS is installed and it is installed ...
0
votes
1
answer
27
views
Does the "offical" HAProxy ingress controller provide drain support?
We're exploring using the "offical" HARoxy ingress controller (https://www.haproxy.com/documentation/kubernetes/latest/) and require traffic to continue to be sent to a pod that is in a ...
- 101
0
votes
0
answers
92
views
HAPROXY connecting only one backend server
We have a serious challenge here connecting the both backend server.
We can see that src is same for all the connection, hence the request are forwarded to one server. But when we try new connection ...
- 2,941
0
votes
0
answers
67
views
Getting rsyslog to fwd to Splunk from Ubuntu .20.04
So I've got an Ubuntu 20.04 LTS server setup with Haproxy and I'm trying to fwd log info to Splunk Cloud.
I have the Haproxy.cfg with a Global entry:
log 127.0.0.1 local4
And I've got an entry in /...
- 53
0
votes
0
answers
139
views
Haproxy rate limits by URL parameter
We have a haproxy and need to rate limit per second requests to API by URL parameter(token\key).
Right now we have test a configuration from documentation:
frontend website
bind *:443 ssl crt /etc/...
- 1
0
votes
0
answers
86
views
How to setup velocity proxy with ports to diffrent servers
What i would like
192.168.1.11: The ip of the server running evertrhing.
192.168.1.11:25577: What the velocity proxy is bound to.
smp.velocity.lan:25577: Defined as a forced host in the velocity ...
0
votes
0
answers
442
views
HAproxy + Transparent Squid configuration
I tried configuring squid to be a transparent proxy and then connecting it to a HAProxy load balancing server on CentOS 7.
My squid configuration is this:
http_access allow localnet
http_access allow ...
- 41
0
votes
0
answers
322
views
kex_exchange_identification error: Git behind Reverse Proxy
Not really sure where to go here. I'm stuck. I've got a git repository (call it hostname Git) running on a local VM that I can access locally via git@git.lan, I can have my router forward any port to ...
- 101
1
vote
0
answers
116
views
Where is a mistake in HAProxy configuration?
I have a problem with HAProxy configuration. I have several backend servers and in most cases, redirections are being done correctly. It works everywhere except one backend, where Rocket.Chat is ...
- 21
0
votes
1
answer
87
views
Haproxy: replace any active failing server with backup
My haproxy configuration is like this:
backend my-liveBackend
timeout connect 5s
timeout server 600s
mode http
balance uri len 52
server my-live-backend1 10.80.1.161:8080 ...
- 168
1
vote
1
answer
1k
views
Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?
I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration:
frontend haproxynode
bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1
mode tcp
...
- 11
1
vote
1
answer
1k
views
Docker: Restricting inbound and outbound traffic using iptables
We have lot of applications that run on Linux server using Docker.
As an example, let us say my application runs on ServerA as a container (Docker).
CONTAINER ID IMAGE ...
- 1,149
0
votes
1
answer
752
views
haproxy SSL Load balancer empty response
my haproxy.cfg
global
maxconn 50000
defaults
timeout connect 10s
timeout client 30s
timeout server 30s
log global
mode http
option httplog
maxconn 3000
frontend bravo
...
1
vote
0
answers
111
views
Proxy tomcat with haproxy
I am trying to proxy tomcat with haproxy. Tomcat and haproxy are dockerized inside containers gis-web & web-gateway (both are added to docker bridge network)
I added sample.war app to webapps ...
- 111
0
votes
1
answer
764
views
How can I access the web console of CodeReady Containers, installed on CentOS Docker container, from Host machine?
I have this scenario:
a HOST machine running Debian that runs docker containers.
a CentOS docker container that have CodeReady Containers (CRC) installed on itself. CRC working on the container, via ...
- 61
1
vote
1
answer
258
views
How to define OpenVPN network in haproxy ACLs
I would like to define OpenVpn network in haproxy ACLs.
OpenVPN server and haproxy is running on the same server (X.X.X.X/32).
It is possible to set up in haproxy to allow requests only from the ...
- 121
2
votes
1
answer
332
views
Cannot access haproxy stats socket with systemd
I am trying to disable a haproxy frontend from a systemd service in Debian 9 (haproxy 1.7.5-2). The default config sets up admin access via a unix socket at /run/haproxy/admin.sock so I use socat (1....
- 31
0
votes
1
answer
29
views
Filtering Apache log for errors codes
Suppose I have a Apache/Haproxy log:
Jan 28 15:45:18 lict haproxy[48318]: 103.133.5.14:52243 [28/Jan/2020:15:45:08.730] LICT_front~ LICT_back/web2 9320/0/0/212/9532 302 556 - - --VN 24/24/4/1/0 0/0 "...
- 133
0
votes
0
answers
34
views
Make https request with HAProxy without explicitly mentioning certificates?
Why?
Some app started making annoying authentication verification that work with the region. Every time I travel, and I login from another country, I have to go through a very annoying process of ...
0
votes
1
answer
1k
views
Haproxy seems to not send logs to 127.0.0.1:514 despite configuration
Edit: the actual problem ended up being either the local0 vs local2 distinction and the rsyslog end of deal.
I'm building a kubernetes / openshift cluster, and on front of that, I need to set up a L4 ...
1
vote
0
answers
460
views
DNS round-robin and keepalived
I'm experimenting with a pair of HAProxy servers in an HA load balancing configuration. What I'd like to do is get a pair of IP addresses to put in a DNS round-robin, and have keepalived maintain one ...
- 1,366
0
votes
1
answer
131
views
HAproxy + Varnish Cache configuration
need some help here.
I have HAProxy that's load balancing 2 servers.
HAProxy - 192.168.1.20:80
Server 1 - 192.168.1.18:80
Server 2 - 192.168.1.19:80
Now I would like to configure Varnish Cache to ...
- 17
0
votes
0
answers
53
views
haproxy setup is not working when resource utilization become high
We are using HA proxy v2.3 in our organization for load balancing our apache application servers. Three web application servers are configured in haproxy.
When any one of the web application server ...
1
vote
1
answer
214
views
HAProxy ignores nbproc
In our test environment we've identified a strange HAProxy behavior. We're using the standard RHEL 7 provided haproxy-1.5.18-8.el7.x86_64 RPM.
According to our understanding, the total number of ...
- 8,797
0
votes
0
answers
122
views
How to use haproxy for outgoing requests?
I am trying to create a tls link between two haproxy instances. Each instance is installed on a machine which have some apps that need to talk with each other using the proxy. I want the haproxy ...
- 101
0
votes
2
answers
3k
views
Getting "ERROR 1364 (HY000): Field 'ssl_cipher' doesn't have a default value" Error using mariadb
While creating a haproxy_check user in MariaDB I am getting error ERROR 1364 (HY000): Field 'ssl_cipher' doesn't have a default value, what I need to do?
0
votes
0
answers
78
views
HAproxy / rewrite local ip to external ip
I have a local cluster and an external client on the internet. The solution is communicating on several ports, but though a HAproxy upstream LB.
The cluster handles many other solutions on the local ...
- 47
1
vote
1
answer
1k
views
Deployment of haproxy between devices and Syslog server
Below is the current architecture of Syslog-NG to avoid single point of failure.
Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the ...
- 1,246
2
votes
1
answer
577
views
Source-MAC Filter iptables
I have a HAProxy box with centos7 and doing load balance proxy for a smtp cluster providing mail relay to our customers.
default gateway => 10.0.0.1
master-relay.example.net => 10.0.0.254
...
- 23
5
votes
1
answer
13k
views
How to start HAProxy on CentOS with systemd
I'm trying to set up a simple web load balancing using CentOS 7.5 (64bit, kernel 3.10), HAProxy 1.8.13 and systemd.
It seems that the HAProxy configuration is OK, but starting the application gives me ...
- 151
0
votes
0
answers
931
views
HAProxy didn't start as service
Did need to configurate and start HAproxy from User without SUDO rights.
in general it turned out to be done.
/data/haproxy/haproxy -f /etc/haproxy/haproxy.cfg
stdout:
[WARNING] 198/141606 (119143) ...
0
votes
2
answers
1k
views
haproxy pass origin IP in galera cluster db
We have one galera cluster, mariadb version 10.3 and haproxy.
We want the users to connect like this client->haproxy->galera_cluster.
The user we create in the database we allow the IP to the client....
- 596
2
votes
1
answer
1k
views
FIPS 140-2 compliance for Apache and Haproxy on CentOS 7 [closed]
I have CentOS 7 and Apache and the Haproxy load balancer with SSL support.
How to make the server compliant to FIPS 140-2?
From CHAPTER 10. FEDERAL STANDARDS AND REGULATIONS | redhat.com
I got the ...
user11085
0
votes
1
answer
165
views
add a header to incoming http request in a server
I have a ubuntu 16.04 server. It runs nginx webserver for the frontend part. Also the backend application runs in the same server.
Now the requirement is to add header to incoming http requests. And ...
1
vote
2
answers
3k
views
Why haproxy logs status code 200 when using "http-response set-status <not-200>"?
I am using haproxy 1.7.8.
I have a config that blocks requests with some specific abusers domains in HTTP Referer header.
Important parts of my haproxy config looks like this:
frontend ...
- 316
3
votes
0
answers
7k
views
haproxy silently fails to start up using systemd on CentOS because of missing permissions for pid file
I have a CentOS 7.4 installation with haproxy which I updated to 1.8. Haproxy fails to start, even sudo systemctl start haproxy doesn't show any output.
sudo systemctl status haproxy displays this:
●...
- 581
2
votes
3
answers
15k
views
HAproxy - add path to backend server
I'm setting up HAproxy as a reverse proxy on my NAS, because I would like to use easy to remember subdomains instead of referring to the apps on my NAS with their port numbers.
I managed to get it ...
- 31
0
votes
1
answer
103
views
2-way TLS Using HAProxy Authenticates with Command Line but Fails in Browser
For a proof of concept development, I have an HAProxy server running on my local machine (OSX) which is expecting to make a 2-way TLS with any client and then forward that client to a web server.
I ...
- 322
0
votes
1
answer
397
views
CARP Interface Doesn't Respond to Traffic
I have two OpenBSD boxes on running as Gen1 VMs on Hyper-V 2016; the VMs are split across two Hyper-V hosts. The NICs associated with the CARP pseudo interface do have MAC address spoofing enabled; ...
- 277
2
votes
2
answers
2k
views
HaProxy 1.5.8 to FTP server
I have been at this a few times and have become completely stuck in configuring this. Currently, I have this set up for an FTP server:
Local PC (My MAC) -> AWS EC2 (HaProxy) -> FTP Server
Here's a ...
- 4,469
1
vote
1
answer
672
views
Multiple puppetmaster behind load balancer
We build two puppet master on openstack cloud and put them behind LBaasV2 (haproxy) load balancer, also we have separate puppetDB and PuppetCA server to handle certificate.
|-...
- 1,530
1
vote
0
answers
73
views
How to add ngnix behind haproxy server
I have setup nginx web server and I want to do the load balancing using haproxy server. I have done these using apache but unable to do it for nginx.
Below the apache settings which are working for ...
2
votes
1
answer
3k
views
Is it possible to change config file location in haproxy?
I install Haproxy in /apps/haproxy/usr/local/sbin. Instead of placing config in /etc/haproxy/haproxy.cfg I want to use default config in /apps/haproxy/conf/haproxy.cfg and /etc/default/haproxy. How to ...
1
vote
1
answer
795
views
Nginx Reverse Proxy setup
I currently have a few hundred web applications spread across around 20 servers, and a reverse proxy sat in front of these running Pound and Haproxy. Pound is doing the http to https redirect and SSL ...
- 43
2
votes
0
answers
681
views
haproxy serving wrong SSL certificate for a subdomain
I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain.
The ...
- 661