Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

See also:

2099 questions
3
votes
1 answer

HAProxy reloads very slow (almost 3 minutes)

We're using HAProxy 1.6.3 to load balance and route HTTP traffic to hundreds of backend servers. We reload the config often (several times a day), both automatically when a server fails and manually for administrative reasons. The problem is that…
DukeOf1Cat
  • 171
  • 6
3
votes
2 answers

HAProxy Multi-Process TLS Proxying doesn't pass TLS Info on

We get enough TLS traffic on HAProxy now that a single process isn't able to cope with the number of new TLS connections. After seeing how StackOverflow uses a TLS proxy on processes 2-N that sends traffic back to process 1, I started…
user65539
3
votes
2 answers

How to forward client's IP address to Nginx from Haproxy in tcp mode

I want to forward real client's ip address from haproxy to my backend servers in tcp mode. The configuration of Haproxy is as follows: frontend main bind *:80 mode http option forwardfor option http-server-close …
Sinai
  • 203
  • 1
  • 3
  • 17
3
votes
1 answer

HAProxy require client certificate on certain url and forward it to backend

frontend front bind *:80 bind *:443 ssl crt /etc/haproxy/certs/server.pem ca-file /etc/haproxy/certs/id.crt verify required option tcplog mode http default_backend app backend app balance roundrobin cookie SERVERID insert option…
jetcarq q
  • 33
  • 1
  • 1
  • 4
3
votes
1 answer

Pass Client IP from AWS ELB to HA Proxy

We have a issue in our application where the client IP is not getting passed to the App servers in the following setup. USER---------> AWS ELB -----------> HAPROXY -----------> Application server(apache) Our ELB is using TCP listeners and we have…
3
votes
1 answer

How to prevent HAProxy from dropping HTTP headers with underscores

We have an API backend server that requires certain HTTP headers which contain underscores. I know that this is not best practice and headers should use hyphens but I cannot change this. We were using nginx as a proxy server with the option…
Thomas
  • 145
  • 1
  • 6
3
votes
1 answer

Unable tu surpass ~11K requests per second with Haproxy in http mode

I'm not managing to get more that 11K requests per second per haproxy instance. I have two haproxy instances on amazon EC2. Both under a c4.xlarge instance. I tried to configure the maxconn parameter, the cpu mapping and linux limit without any…
Sinjuice
  • 131
  • 1
  • 7
3
votes
0 answers

HAProxy performance issues

I am trying to troubleshoot a sporadic performance issue in our production environment. We have an http frontend that points to a backend with 8 servers. In HAProxy http logs, there are hundreds of successful requests (~0.1% of requests) with…
pruslan
  • 31
  • 2
3
votes
1 answer

HAProxy request rewrite

I am trying to setup pass proxy with HAProxy. Version :- HA-Proxy version 1.7.5 2017/04/03 I have two URL abc.com/foo and abc.com/bar and I want it to get redirected to my backend servers which are serving request as 10.0.0.1/xyz/ For example, if my…
Faisal Muazzam
  • 33
  • 1
  • 1
  • 4
3
votes
2 answers

Send PROXY protocol header from HAProxy

I've probably got lost in the masses of documentation on this subject, but I'm trying to configure my HAProxy process to send the PROXY protocol header as described at http://www.haproxy.org/download/1.8/doc/proxy-protocol.txt. This is because I am…
Wad
  • 221
  • 1
  • 2
  • 8
3
votes
1 answer

SSL offloading for multiple domains (multiple certs) on Haproxy

Let's say that we have haproxy in front of 2 apache: +----> Apache (10.0.0.2) Haproxy (10.0.0.1) --| +----> Apache (10.0.0.3) Haproxy is configured to load balance traffic based on URI (needs to see URI so…
gr0bz
  • 53
  • 2
  • 4
3
votes
1 answer

How to secure HAProxy TCP stats socket? Needed for remote operation

I would like to control my HAproxy remotely during deploy of applications. E.g. before stopping apps on "app-server1" I want to instruct the HA-proxy to disable the backend server "app-server1". When the application is running again, I want to issue…
Leif John
  • 181
  • 1
  • 6
3
votes
1 answer

I need to configure haproxy with multiple ssl ports

I have two servers which have the same URL but the port number may change. I want to redirect these two URLs HTTPS. If I enter my first URL (http://example.com) then I want to it will redirect to https://example.com. If I enter second URL…
parag bharne
  • 33
  • 1
  • 4
3
votes
1 answer

WSS Load Balancing with SSL Termination at layer 4

Should it be possible to terminate SSL for wss (secure websockets) at a layer 4 load balancer? Seems to me that wss (and ws) in general would require TCP routing since an HTTP reverse proxy wouldn't be able to make sense of the packets; and, SSL…
rbinion
  • 31
  • 1
  • 2
3
votes
1 answer

HAProxy health check for a single backend

I have a HAProxy configuration with a single backend something very similar to this: backend mybackend option httpchk get /ping http-check expect ! rstatus ^5 server mybackend-0 192.168.1.1:9041 weight 1 The /ping endpoint always return 200. My…
Zeeshan
  • 33
  • 1
  • 3