Questions tagged [haproxy]

HAProxy is an open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

See also:

2099 questions
0
votes
0 answers

Haproxy Server Certificate Common Name

I would just like to now if it is possible to define a ACL by the CN of the Backend Server. So if a Client connects to my proxy, everything is fine and the connection will come to the backend. But there I want to proof if the CN of the Server’s Cert…
Rivest
  • 33
  • 1
  • 4
0
votes
1 answer

HAProxy Config - Am I doing something wrong?

I have been facing issues on my app under load and after running some load tests, I realised that when I directly load test the app server over http on port 8080, the app server responds fairly quickly. When I load test by hitting the domain name…
kapad
  • 113
  • 6
0
votes
1 answer

HAProxy uniform balancing between processes

We using nbproc 10 for multiprocess HAProxy. Server with Intel(R) Xeon(R) CPU E5-1650 v3 @ 3.50GHz. In config: nbproc 10 cpu-map 1 0 cpu-map 2 1 cpu-map 3 2 cpu-map 4 3 cpu-map 5 4 cpu-map 6 5 cpu-map 7 6 cpu-map 8 7 cpu-map 9 8 …
0
votes
1 answer

HAProxy Active Passive VIP Issue

I have a very basic question, we all know that when we configure HAProxy in the Active-Passive manner then there is a VIP. Outside service will access the VIP and the traffic will be routed to appropriate inner services. Now, my question is if the…
Swarup Saha
  • 111
  • 4
0
votes
1 answer

haproxy https redirect loop if backends down

This haproxy config terminates ssl for 2 sites (foo and bar) and load balances both sites to their own backend cluster. It also redirects http requests to https. That works fine. Only, if the backend is down, it gets into a redirect loop for both…
tvlooy
  • 130
  • 1
  • 8
0
votes
1 answer

HAProxy - Proxy to sites behind an internal ALB

I currently have an internal ALB (Not accessible to the world) with some microservices running. I now want the world to access certain microservices. I would like to place a HAProxy cluster in front of my internal ALB that proxies the requests…
SnIpY
  • 123
  • 5
0
votes
1 answer

Why doesn't keepalived track_script restart keepalived when HAProxy drops out?

UPDATE: seems to need a custom track script to actually failover and restart when HAProxy dies. Posted as answer. I have keepalived (plus VIP) + haproxy + galera_node (on the same host, config below) setup using the same track script found in dozens…
Server Fault
  • 3,714
  • 12
  • 54
  • 89
0
votes
0 answers

HAProxy backend requests time out with high waiting time for the server

We started using HAProxy recently and everything works fine so far. However, we are seeing "randomly" some errors on the backend server (Debian + Apache + FCGID + PHP 7) like this: [Wed Jan 31 08:22:22 2018] [warn] [client XXXX:XXXX::1] (70007)The…
holger359
  • 21
  • 3
0
votes
0 answers

keepalived failover downtime

I have a simple setup with keepalived configured on 2 Ubuntu 16.04 servers (VMWare VM's) I have a VIP shared between the hosts and everything is working fine. When I stop or restart one server the other takes over as MASTER and the VIP is…
user166435
  • 11
  • 3
0
votes
0 answers

HAProxy appsession sends 5% of sessions to wrong backend server

Please consider this HAProxy configuration with sticky sessions using JSESSIONID defaults timeout server 5m frontend http-in bind *:80 default_backend servers backend servers option httpchk OPTIONS / option forwardfor …
Stefaan Neyts
  • 179
  • 1
  • 6
0
votes
1 answer

Using HAProxy for syslog traffic at scale

I have an environment that generates a frankly ludicrous amount of Syslog traffic - this is mostly due to a culture of leaving debug-level logging on in production applications (and changing this tendency is unfortunately off the table and way above…
Mikey T.K.
  • 1,417
  • 2
  • 16
  • 29
0
votes
1 answer

Load Testing HaProxy

I've been following the guide here https://medium.freecodecamp.org/how-we-fine-tuned-haproxy-to-achieve-2-000-000-concurrent-ssl-connections-d017e61a4d27 that claims they achieved 2mil ssl connections to haproxy. I have 1 server ubuntu 16.04, 6…
Wjdavis5
  • 121
  • 1
  • 9
0
votes
2 answers

How to create iptables rule to allow IP Address with any sub directory

I currently have a DigitalOcean Ubuntu 16.04x64 server with Linux Containers to house multiple sites. One of the containers has HAProxy installed and routes incoming traffic to their appropriate containers. Each container has a unique IP Address…
0
votes
0 answers

Haproxy total time increases

I have deployed haproxy as layer 7 loadblancer for ssl and 5 backend app sevrers running nginx on with fast-cgi cache enabled. This is the stats page looks like. I am bit confuse about the latency shown in the yellow box. Could anyone explain it? My…
Vivek Bajpai
  • 101
  • 2
0
votes
1 answer

Haproxy external check with arguments

I'm trying to use the Option external-check and can't get it to work with an argument. It if I can't pass anything then that option becomes useless. I've been trying for hours and nothing works. It only works with just the executable. It gives me…
Panama Jack
  • 121
  • 1
  • 6