Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

See also:

2099 questions
0
votes
1 answer

Haproxy TLS health check custom success code

I am trying to configure an haproxy health check for a particular backend such that a 403 error is considered a "successful" response. I tried adding "http-check expect status 403" and "option httpchk" to the backend, but when I add "check" to the…
amparito
  • 121
  • 3
0
votes
1 answer

HAProxy Multiple Services, Reverse Proxy, CERT NAME INVALID

I have a server with HAProxy setup. I am trying to connect my public ip to multiple servers that offer DIFFERENT services via external ports. So Port 80 will direct to Server 1, Port 100 will forward to Server 2 etc.. This part is working so far,…
Matt
  • 1
  • 3
0
votes
0 answers

HAProxy to Amazon API Gateway with custom domain

Hi we have been trying to handle an inbound request from HAProxy and use API Gateway to handle the request. The flow is domain1.com is the end point at HAProxy. HAProxy should then forward to request to a API Gatway on amazon which is using a custom…
Thomas
  • 1
  • 1
0
votes
1 answer

Configuring Load Balancer with only 2 nodes with HAProxy

I am very new in this and I am trying to configure a load balancer for 2 web servers using HAProxy with 2 EC2 Instances. Let's just say I can only work with 2 Instances, is it possible for me to hook this up with only 2 nodes? I currently only have…
machy
  • 3
  • 3
0
votes
2 answers

How can I make Haproxy don't send SNI field to backend server?

Following reverse proxy work for en.wikipedia.org but not zh.wikipedia.org, my censor prevents access to zh.wikipedia.org by SNI. if no SNI then just correct IP in /etc/hosts is enough. Original configuration: defaults log 127.0.0.1:514 user …
illiterate
  • 149
  • 7
0
votes
0 answers

How can I balance http request in https for every website in Haproxy?

For example, in this config file, just first HTTP connect request is balanced by Haproxy. Is self-signed certificate work with this case? I don't know how to generate one self-signed certificate for every website for Haproxy. defaults timeout…
illiterate
  • 149
  • 7
0
votes
1 answer

Difference betwwen two Haproxy configurations

Next, I'm going to show two configurations of balancing servers. What I see, these two configuration have the same performance. So what is the utility of using backup for last server 4 on first configuration? First config listen web_cluster…
user3637971
  • 155
  • 2
  • 11
0
votes
1 answer

HAProxy sees Exchange ports 587 and 465 as unreachable, and is unable to forward traffic

I am unable to get HAProxy to balance SMTPS This is my configuration: frontend SMTPS_465 bind 10.1.1.232:465 name smtpssl ssl crt /home/exchange.pem mode tcp option tcplog default_backend SMTPS_465 frontend SMTPS_587 bind…
Tomislav Plečko
  • 23
  • 1
  • 6
0
votes
0 answers

HAProxy: How to match on hostname instead of the IP address

I am trying to match the host request header and use appropriate backend to route the request. This is what I want to match on (which does not work): acl from_external_url req.hdr(Host) -i mydomain.com # Chrome dev tools network tab does show…
summerNight
  • 113
  • 1
  • 6
0
votes
1 answer

How to get haproxy and keepalived working on the same device as an emqx broker

I'm rather new to this, so please be patient. My setup is essentially thre devices using mqtt, connecting through two brokers both running emqx. Both emqx brokers are also supposed to be set up as haproxy load balancers, with keepalived in case one…
Brandon
  • 1
  • 3
0
votes
1 answer

Issue with HAProxy and Exchange 2016 with certificate based authentication

I have an Exchange 2016 as a backend that requires client certificates for accessing OWA and HAProxy as a reverse proxy. When I try to open OWA from Exchange directly everything is fine: I get a certificate prompt and can choose one that I want. But…
Kirill
  • 1
  • 2
0
votes
0 answers

Forward proxy with squid or anything else

i have a server with few thousands of IPv6s i want to create a forward proxy server with it which do the following: port forwarding (X.X.X.25:PORT -> IPV6 outgoing traffic) basic username/password authentication support socks5 (not required but it…
Pezhvak
  • 117
  • 5
0
votes
0 answers

HAProxy: rewrite header keeping the original sub-domain, if available

I'm sort of new to ha-proxy and trying to rewrite the host_header, keeping the sub-domain intact and this is my first attempt to achieve that: http-request set-var(req.get_sub) req.hdr(host),lower,regsub(\.website\.com$,) if { hdr_end(host) -i…
MacUsers
  • 469
  • 2
  • 7
  • 13
0
votes
0 answers

haproxy redirect URL path to another path

haproxy version 1.5.18 I want to redirect: /document/(.*)/(.*)/somefile => /anotherPath/somefile For example: redirect /document/20181/20182/a_good_pic.jpg => /anotherPath/a_good_pic.jpg How to do that with haproxy? I retried follow the example…
r ne
  • 101
  • 1
  • 2
0
votes
0 answers

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate hosts by ips, as long as the source ips are kept…
Walid
  • 143
  • 6
1 2 3
…
99 100