Questions tagged [haproxy]

HAproxy is a TCP/HTTP load balancer which provides cookie-based persistence, advanced traffic regulation with surge protection, automatic failover, run-time regex-based header control, Web-based reporting, advanced logging to help trouble-shooting buggy applications and/or networks, and a few other features.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
19 views

How can I read/parse/query a haproxy log file?

I have been given a haproxy log file (not access to the haproxy server), about 0.6GB, with rows like: Nov 17 11:53:03 localhost haproxy[48735]: : [17/Nov/2023:11:53:03.186] gaee-https~ npgis-servers/ ...
GregStef's user avatar
  • 174
0 votes
0 answers
28 views

Multiple requests from Haproxy

I'm running 3 node Galera cluster using mariadb-galera:10.9.3 and haproxy. The problem is that haproxy is spamming with requests, 192.168.1.4 is the address of the haproxy. How to remove root requests ...
Vlad's user avatar
  • 1
-1 votes
0 answers
41 views

How to fix Jenkins reverse proxy setup?

I'm looking to fix my reverse proxy for Jenkins. The symptoms are as follows: The configure page says my reverse proxy is broken Many elements (test results, some parts of settings) will not load ...
Maxwell Arena's user avatar
2 votes
1 answer
33 views

get HAProxy stick-table size

I want to set limit of new users' connections if amount of active users exceeded the required threshold. Users connect to the load balancer via http. I use stick-table to limit the amount of http ...
kozmo's user avatar
  • 4,258
-1 votes
0 answers
13 views

Load Balanced create react application gives unexpected token error

I have three indentical copies of the same create-react application running on three different RHEL servers. The applications are deployed using the serve command and apache proxy is configured for ...
user22910474's user avatar
0 votes
0 answers
23 views

My WordPress page dies if I remove the port in the URL (Ubuntu Server)

I have a problem with my WordPress page in which, as it appears in the title, if I remove the port from the URL, my page dies. To explain better, it is something like this: www.MyPage.com:8091 (the ...
Josh's user avatar
  • 1
0 votes
1 answer
61 views

404 Error when connecting to multiple sites on the same domain

We have 2 websites hosted on different web servers at: https://site1.mydomain.com https://site2.mydomain.com These both have DNS entries pointing to the same IP which utilises a HAProxy to manage ...
Jonathan Corbett's user avatar
0 votes
0 answers
13 views

HAProxy path-based routing a webpage; webpage resources cannot load

I have the following haproxy.cfg: global stats socket /var/run/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners log stdout format raw local0 info defaults mode http ...
Snappawapa's user avatar
  • 1,739
0 votes
1 answer
35 views

using haproxy to forward multiple ports to same backend server, how can I avoid multiple backend/frontend phrase?

I'm trying to use haproxy to forward multiple ports to the same backend server. Right now I had to write multiple frontend and backend phrase. I need to forward port 80 to backend port 80, port 81 to ...
daisy's user avatar
  • 22.7k
0 votes
1 answer
35 views

HAProxy return 502 Bad Gateway

I want to forward the traffic vom: https://demo2.company.com:8443 to the internal address 10.11.0.6: https://10.11.0.6:8443 But I get an 502 Bad Gateway error: global log /dev/log local0 ...
fohnbit's user avatar
0 votes
0 answers
11 views

Haproxy Redirects to different application

I am new to Haproxy. I intend to do a reverse proxy using Haproxy. My setup is as follows I have two Haproxy Servers with keepalived installed for HA, and then I have my applications hosted on several ...
Damola's user avatar
  • 11
0 votes
0 answers
51 views

haproxy ingress forward request to service based on header check

We have a ingress and service like below, I want the request to be handle by my-ingress only if request path starts with /api and has "Authorization" header. if condition is met then ...
Jayesh's user avatar
  • 6,067
0 votes
0 answers
30 views

Process large headers from 8Kb to 1 MB on haproxy using tune.bufsize and tune.maxrewrite

Currently I am doing a POC on haproxy where we need to get the TR time which is the time taken to receive http header. I have currently set tune.bufsize 131702 tune.maxrewrite 32768 but I am not able ...
Rushikesh Korde's user avatar
0 votes
1 answer
26 views

Haproxy - Browser communication, request are looping

I have a log collection service on my server which is using haproxy. All request coming from outside are served thru haproxy. When I call the log collection service from curl/postman, log collection ...
codingenious's user avatar
  • 8,435
1 vote
0 answers
72 views

How to generate a private key from a encrypted pirvate key?

I got a encrypted private key and a cert-bundle (cert.pem). I need a private key instead of the encrypted one. I tried generating the private key from the encrypted running this command: openssl pkey -...
Josue's user avatar
  • 43
0 votes
0 answers
36 views

Haproxy logs 200 status code but real response is error code

global lua-load /etc/haproxy/notify.lua defaults log global mode http frontend http-in option httplog bind *:80 timeout client 30s default_backend proxies backend ...
Max Frai's user avatar
  • 62.5k
0 votes
0 answers
16 views

How to get chosen backend name in HAProxy with lua?

I use 2.8 HAProxy with such config for backends: backend proxies http-response lua.notify server node-0 node-0:8080 check server node-1 node-1:8080 check And I have lua action from a ...
Max Frai's user avatar
  • 62.5k
0 votes
0 answers
37 views

Use HAProxy to ensure PrivateBin is truly for private usage

I want to host my PrivateBin for my personal use. In other words, I want to make it unavailable for anyone to post on my PrivateBin from the internet. However, the generated posts should still be ...
Isopote42's user avatar
0 votes
1 answer
79 views

haproxy ACL with dynamic pattern

I want to use an HAProxy ACL to compare src (the client IP address) to a dynamic pattern that depends on other variables in the request - is this possible in HAProxy? I am using HAProxy to route to ...
jeremysprofile's user avatar
0 votes
0 answers
63 views

HAProxy - limit number of connections per second to backend based on Authorization HTTP header

In some cases, users can generate hundreds connection attempts per second to the server. I want to limit the number of connections coming to the internal server to 1 connection per user per second. ...
Nikolo's user avatar
  • 37
0 votes
0 answers
22 views

Remove a backend from HaProxy

I'm interested to know if is possible to erase an backend using CLI. I see that exist a curl command in HAProxy Data Plane API that permit to delete a backend using DELETE method.
Mihai8's user avatar
  • 3,139
0 votes
0 answers
27 views

Early EOFException for all clients in Patroni + haproxy cluster

Cluster consists of: 1 haproxy, 3 postgres. EOFException appears for all client at about 208 of 800 connections (select count(*) used from pg_stat_activity;). What other limits could be causing the ...
Sergey Bakhtiarov's user avatar
-1 votes
1 answer
33 views

How to receive message over TCP and convert and forward as HTTP using HAProxy

I am trying to take a message (text string, JSON) over a TCP connection on port 8082 and forward it as an HTTP request to an apache server on port 80 (on the same machine). I think my configuration is ...
Matt Welander's user avatar
0 votes
0 answers
41 views

Routing HTTP response back through different server by perceiving origin server IP

I want to achieve following http/https traffic flow. Client (not owned) ↓ ↑ * Server 1 ← ← ← ← ← ↓ Server 2 (not owned) ↑ ↓ * Server 3 → → → → → ↓ ...
Ernestas's user avatar
0 votes
0 answers
11 views

HAProxy Passthrough SSL where the target is the caller host

I would like to configure HAProxy for VPC Transitive peering issue, so HAProxy should only forward requests further to the host which caller want to reach. My configuration looks like: # Global ...
Olsson's user avatar
  • 25
0 votes
0 answers
60 views

Trino with HAProxy - Unable to find valid certification path to requested target

I have following configuration for Trino 425 cluster, all worked fine with older Presto version: 2 coordinators 5 workers I have configured self signed certs in following way : 1. Self-Signed CA ...
Tomasz Krol's user avatar
0 votes
1 answer
51 views

HAPROXY jwt_verify() always returns Unknown Certificate (-5)

I am creating an HAProxy instance in a docker container (image: "haproxytech/haproxy-alpine:latest"). This uses haproxy version 2.8 (with OpenSSL installed), so the jwt_verify() function is ...
Richard Cross's user avatar
0 votes
0 answers
67 views

SSL how to redirect HTTPS to HTTP API via HAPROXY [closed]

I have to following situation: I have a website for example example.com, this website makes an API call to a VPS where data should be retrieved. The website makes the API call like this: https://xxx....
J_P's user avatar
  • 196
1 vote
0 answers
49 views

HTTP/2 for HAproxy and nginx

This answer does not answer my question: How can I enable HTTP/2 on HAProxy? What I have is huge site with many servers. Most of them are supported by one HAproxy which is set for http and https ...
pbies's user avatar
  • 686
0 votes
0 answers
31 views

Haproxy http not redirect to https

haproxy.cfg like below frontend haproxy_front mode http bind *:3333 ssl crt /etc/haproxy/certs/my.pem http-request redirect scheme https code 301 if !{ ssl_fc } http-response del-header ...
DaeYoung's user avatar
0 votes
1 answer
23 views

Haproxy http-check string can't access mysqld-exporter metrics after go runtime ones

I try to setup HAproxy http-check and it fails to work with mariadb_exporter metrics list: backend galera-nodes mode tcp option srvtcpka option httpchk GET /metrics #http-...
wejdross's user avatar
1 vote
0 answers
14 views

Timers session value extracted with Lua

In documentation about Timing events can be observed values like Ta/Tr/Tw/Td. A general question is how can correspondence of such values can be extracted in some additional code, like Lua one.
Mihai8's user avatar
  • 3,139
0 votes
0 answers
43 views

HAPROXY websockets over http2.0 don't work

I am trying to configure my haproxy that it will work over http2.0 even for websockets. This is my configuration: global maxconn 100000 log /dev/log local0 debug log /dev/log local1 ...
dovzanperovica's user avatar
1 vote
1 answer
149 views

nginx service prevents IP leaks ssl certificate

I use Nginx ssl_reject_handshake on; to refuse direct IP access, so as not to leak my origin site certificate, and the server only opens port 443. For this I created a server: server { listen 443 ...
Xiaoer's user avatar
  • 61
0 votes
0 answers
13 views

HAProxy ALOHA 14-5 exclude specific IP from stats

Is there a way to exclude a specific IP(supervision BOT) from HAPROXY ALOHA stats , i dont won't to deny it but to ask HAPROXY not to log the http requests coming from this source and exclude them ...
Rya's user avatar
  • 1
0 votes
1 answer
227 views

How to send trace to Elastic APM Server with OpenTelemetry Collector over OTLP

OpenTelemetry Collector Version: 0.82.0 Elastic APM Server Version: 7.12.1 HAProxy Version: 2.0.31-0ubuntu0.2 APM Server's service port is 8080 and it's in insecure mode. I have a HAProxy LB ...
EliotK's user avatar
  • 13
0 votes
1 answer
36 views

podman container crashes on running ENTRYPOINT script

I want to build haproxy based on these instructions for rhel8 inside a podman (almalinux:8) container. running a container from an image built like this FROM almalinux:8 COPY make_ha_proxy.sh /usr/...
vrms's user avatar
  • 227
0 votes
0 answers
35 views

503 Service Unavailable after hitting localhost:80, HAProxy loadbalancer running in docker container

Facing 503 Service Unavailable after hitting localhost:80. I am using haproxy in a docker container. my haproxy.cfg file looks like this: global log /dev/log local0 log /dev/log local1 ...
Mueem Nahid's user avatar
-1 votes
1 answer
65 views

HAProxy Integration for JWT Token-Based MQTT Authentication in IoT Scenario

I am working on implementing an IoT scenario where client devices send MQTT messages to MQTT brokers via the WebSocket protocol. In this setup, the client devices provide JWT tokens, and the MQTT ...
Timur's user avatar
  • 41
1 vote
0 answers
66 views

using HAProxy to expose service UI - behind haproxy on Kubernetes

My problem: Exposing a UI for service behind haproxy fails Details: I'm using a server (Prefect) that exposes an API and UI in different urls. Using haproxy for routing and authentication with the API ...
Lior Barak's user avatar
0 votes
0 answers
46 views

HA proxy and spring boot gives status=-1 for uploading videos

I have a Spring Boot project that includes an API for uploading videos. Within this project, I have implemented a Spring Cloud Gateway named "A" which acts as a reverse proxy for my ...
Zahra Vahidi's user avatar
0 votes
0 answers
11 views

How to configure non-path based service to path-based in haproxy

We have a docker-based infra that uses haproxy. There are a lot of services added and is in the format: http://example.org/serviceX So the existing frontend and backend setup is like below which works ...
icasimpan's user avatar
  • 1,273
0 votes
0 answers
88 views

Configuring DocuSeal Behind an Existing Reverse Proxy - HAPROXY on Pfsense

I'm deploying DocuSeal behind an existing reverse proxy Pfsense with HAProxy. As I found here: https://github.com/docusealco/docuseal/wiki/Configuring-DocuSeal-Behind-an-Existing-Reverse-Proxy-(nginx) ...
Luca Folin's user avatar
1 vote
0 answers
65 views

HAProxy's TLS offload feature not working as I expect

I am in the process of setting up HAProxy 2.8 via Docker to leverage it's ability to provide TLS offload in my network to avoid having certificates attached to every VM instance I deploy. My problem ...
LinuxNinja83's user avatar
0 votes
1 answer
229 views

Haproxy redirect same url with different path to different backend port

I want to redirect a URL with two different paths to two different port on a backend server. So for example i have the url: https://testmysite.com/app1/* ------> redirects to backend port xxx https:...
Ian Twy's user avatar
  • 79
0 votes
0 answers
30 views

HAProxy redirect request based on client ip to specific host in the backend pool

I have a backend pool of servers (around 20 hosts) that serve the request. Out of 20 hosts, 5 are canary hosts (we deploy any change first in these 5 hosts and then to the rest 15). The request comes ...
Sonali's user avatar
  • 51
0 votes
0 answers
41 views

HAProxy inject proxy path into url internal requests

I have a HAProxy configuration to map a route to a KeyCloak server that doesn't have any context. If I call this server directly I must do something like http://myserver.com:36765/ This server will ...
Magno C's user avatar
  • 1,972
0 votes
0 answers
14 views

Load balancing: for Haproxy with 2 or more instances of the same services

I am having 2 instances of the same service on two different ips and using haproxy to load balance, each of the instance manage a session for a logged in user which is not shared across the multiple ...
Ankit Jain's user avatar
0 votes
0 answers
47 views

HAProxy - How to use a variable in ACL

I set variable like this: set-var proc.migration_finished_range str("1:1000") Is there any way I can use it with ACL, like: acl migration_finished urlp("customer_id") -m int %[...
n0rm4l's user avatar
  • 93
0 votes
0 answers
54 views

haproxy https not work SSL_ERROR_RX_RECORD_TOO_LONG

Firefox: SSL_ERROR_RX_RECORD_TOO_LONG Chrome: ERR_SSL_PROTOCOL_ERROR haproxy.cfg .......... errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http ...
ывапав's user avatar

1
2 3 4 5
54