Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

See also:

2099 questions
0
votes
2 answers

How can I configure haproxy to put two frontends to access owa online?

I am facing a problem with HAPROXY on an Ubuntu 16.04 server when redirecting to show OWA on the internet. I have a domain, and I installed exchange server 2013 on windows server 2012 r2. I need to use a second frontend with tcp for OWA on both 443…
roney IT
  • 1
  • 1
  • 3
0
votes
0 answers

Log Client Ciphersuite in HAProxy

We know of log configurations that can log negotiated cipher-suite info in successful connections. But what we need to do is to log the client cipher-suite info that HAProxy gets hold of during TLS Handshake, whether or not the connection…
Ace
  • 125
  • 5
0
votes
1 answer

haproxy and certificates mismatch

I have been wrestling with Haproxy for a few hours now and I am probably missing something in my limited know-how. I have two servers (ha1.domain.com and ha2.domain.com), both with keepalived and haproxy, that should manage failover between two…
Mindustries
  • 11
0
votes
1 answer

How to split vpn traffic from https traffic on the same port using haproxy?

I have a following goal: Running softhether vpn and web applications both on port 443. I want all traffic to come to haproxy, which sends vpn to one container, and the rest to another container (traefik), which finally redistributes to respective…
BrandonSk
  • 1
  • 2
0
votes
0 answers

For many different TCP hosts, how can I differentiate and route them from the same external IP?

I realize I may be asking the impossible here -- At the moment I use too many elastic IPs, and they cost money. Not only do they cost money...but in a disaster scenario, it takes time to reattach 25 - 30 elastic IPs to a machine. Those elastic IPs…
Muradin007
  • 13
  • 2
0
votes
1 answer

HAProxy does not perform SNI lookup

HAProxy v.1.5.18, 1.7.11, listening on a single IP address with a wildcard SSL certificate, I need to specify several backends with SNI lookup. There's a ton of config-files that all say req_ssl_sni -i hostname.example.com as ACL to use when…
Vesper
  • 794
  • 1
  • 9
  • 32
0
votes
0 answers

How can you prevent X-Forwarded-For spoofing on haproxy?

Is there a way to prevent the X-Forwarded-For from being spoofed in haproxy? i.e. Can I rename that header to something else? Or is there another way to forward on the correct IP address of the client?
Wayne
  • 73
  • 1
  • 11
0
votes
1 answer

HAProxy: Run external-check command every 30 seconds

I have HAPproxy configuration with two servers: listen 10.10.10.10 bind *:1234 mode tcp option tcplog balance roundrobin timeout client 5h timeout server 5h option external-check …
ccelis5215
  • 1
  • 1
  • 2
0
votes
1 answer

Unable to access mongodb from my desktop

I'm trying new GUI of MongoDB called Compass. However, my MongoDB server is on the Azure virtual machine which has private IP only. All Azure servers in our virtual subnet are accessible via one server called monitoring Server which has public IP…
innervoice
  • 21
  • 7
0
votes
1 answer

serve static file when response status 404 HAproxy

I want to serve a static file like errorfile when the response status is 500. I have to use this config in the backend section.
peeyush pathak
  • 101
  • 2
0
votes
1 answer

TCP passthrough for HTTP connection with haproxy

I have done passthrough for HTTPS/SSL connections using SNI, but Id don't know if I can do the same for HTTP using host header? is there any way I can use passthrough (tcp mode) in stead of reverse-proxy (http mode) for http connections?
jlanza
  • 113
  • 1
  • 2
  • 7
0
votes
1 answer

SPOE and modsecurity contrib Failed to decode HELLO frame

I'm compile modsec as described in the instructions contib/modsec/README, but have the next errors: # /usr/local/bin/modsecurity -n 4 -d -f /etc/haproxy/waf/modsecurity.conf 1534409877.286475 [00] ModSecurity for nginx (STABLE)/2.9.2…
Pavel Loginov
  • 1
  • 1
0
votes
1 answer

Add LimitNOFILE on haproxy init script

I want to add open files limit to HAProxy 1.8 process to 1024576. But since I use version 1.8, I cannot add LimitNOFILE to init scripts, instead of systemd file. How can I add limitNOFILE to those processes ? *P.S: I had changed openfile on…
Williams Perdana
  • 21
  • 4
0
votes
0 answers

TCP HaProxy Error 400

I set up a syslog generator to send logs using 514 and received via rsyslog (10.1.1.1) then using same host but diff port to set up HaProxy (10.1.1.1:1936) and from HaProxy to forward those logs to 2 diff server (10.1.1.4 & 10.1.1.5) using port…
Jaime
  • 1
0
votes
1 answer

haproxy ssh path based routing

I have a use case where I want to use haproxy to forward ssh requests to different back end servers. I want a user to be able to ssh to proxy.example.com/server1 and haproxy forwards the request on to the backend ssh server. The path in the url is…
yossarian2004
  • 143
  • 4
  • 9
1 2 3
…
99 100