problem about haproxy-Collection of common programming errors
coneybeare
apache-2.2 logging log-files haproxy
I am trying to clean out some of the log clutter from my machines and am starting by removing requests that are generated from the server themselves. I have cache warmers running around the clock and I don’t want these polluting the logs.I was able to get apache to stop logging local requests by adding a dontlog for the local IP:SetEnvIf Remote_Addr “RE\.DA\.CT\.ED” dontlog CustomLog “|logger -p local3.info -t http” combined env=!dontlogand now I am looking for something similar to put in a conf
Chris
haproxy
I am having some issues with HAProxy configuration. I have been playing around with it to try and make it more resilient to high server loads and Denial of Service. However, I felt it was working fine until suddenly I was victim of a (D)DoS attack – Haproxy was reporting the backend as down even though I could still access it fine via the direct port.Could somebody please check my HAProxy config and see if there is somewhere I am messing up or why I would be experiencing this.. I just can’t seem
Anand Soni
amazon-ec2 load-balancing haproxy rabbitmq
I wanted to use HAProxy for my web app for load balancing purpose. I am trying to add a new rabbitmq node dynamically in HAProxy server using command : haproxy -p /var/run/haproxy.pid -sf $(cat /var/run/haproxy.pid). I am doing tcp connection mode with leastconn balance algorithm in load balancing. What is expected is when there is 3 connection in one rabbitmq, I add a new rabbit server in HAProxy server. so the next connection would pass to 2nd rabbitmq server which is not happening in my case.
nbevans
haproxy
Is it possible for HAproxy to reload its configuration at runtime, without dropping existing connections?I’ve looked high and low in the documentation for some mention of this but have been unsuccessful. Does anybody know off hand?Thanks.
Anony-Mousse
load-balancing haproxy
We are using HAPROXY to cluster two app servers. Currently, for test purpose, the 2 servers are virtual servers.We are observing lot of Concurrency warnings being logged in the server logs as below[CacheListener] Possible concurrency problem: Replicated version id 273 is less than or equal to in-memory version for session tDC2DAPeZ8ChQ74l1cHgig__What I found, when I did a search in google, is that many such instances could lead to load balancer crashing.I think the issue logged here : https://
guojinpeng
connection statistics reset haproxy was
I’m using haproxy for load balance, it works very happily.I setup a statistics page, this page return “the connection was reset” while I refresh it sometimes.listen status 0.0.0.0:8080stats enablestats refresh 5sstats uri /admin Is this a bug or there’s some configurition problem?thanks!
user1075894
haproxy stunnel pound
I’m looking at introducing a loadbalancer to my existing site infrastructure to help with traffic growth and provide a level of failure protection.The site I am running uses SSL certificates for the login section and I will need to continue with this functionality. The backend servers will need to be aware of the originating IP address so I can’t use the TCP loadbalancing function and will need the SSL terminated on the loadbalancer so I can insert aX-Forwarded-ForHeader. I have seen a couple of
Andrew Smith
iptables haproxy ddos linux-kernel rate-limiting
Please do not reply with “this is not possible”, as it’s waste of time. I am developing cloud appliance and I have a valid reason to protect this layer against DDoS, and there are few companies doing the same, so please dont tell me that I dont have the point, as many companies looking to buy this solution and I dont see the problem with implementing it using stock LinuxMy Linux kernel is crashing with oops on 10.000 connections due to lack of resources like CPU and RAM. I was wondering how to l
Daniel Hough
ssl haproxy
I’m having an issue where HAProxy is crashing with no explanation when I switch from 1.4.12 to 1.5-dev12. The reason I’m switching is for the SSL offloading.My config file doesn’t have any errors, it’s quite simple and it works well with 1.4 – but for some reason when I run it with 1.5-dev12 I see the logs noting that the two backends I have have been set up, and then when I hit one of the frontends, I get an HTTP 400 in the browser and suddenly HAProxy isn’t running anymore when I check.I under
growse
haproxy rabbitmq graphite
I’m trying to pull some metrics into Graphite over a RabbitMQ exchange. I’ve got my publishers merrily publishing data to an exchange called metrics, and I’ve configured carbon.conf with the following:ENABLE_AMQP = True AMQP_HOST = hostname AMQP_PORT = 5672 AMQP_VHOST = /vhost AMQP_USER = user AMQP_PASSWORD = password AMQP_EXCHANGE = metrics AMQP_METRIC_NAME_IN_BODY = TrueThe rMQ installation is a two-node cluster behind haproxy.When this works, it works great. However, quite often, carbon throw
Andrew B
php ssl reverse-proxy haproxy joomla
Having a strange problem with Haproxy. I’m using it to frontend SSL connections to a few Joomla sites and the sites don’t appear to be picking up on the https front end which is leading to javascript errors.The relevant sections in my haproxy config:frontend http-inbind *:80 acl is_abc hdr_end(host) -i abc.comuse_backend abc if is_abcfrontend https-in bind :443 ssl crt certificate.pem crt /var/certs/servers reqadd Front-End-Https:\ On reqadd X-Forwarded-Proto:\ https acl is_abc hdr_end(host) -i
beardtwizzle
load-balancing haproxy
I have haproxy running as my load-balancer and from the stats web interface that comes with haproxy, I can put a web server into maintenance mode (and bring it back out again) – which is great!However, I also want to be able to perform that same action from the command line (for use in some automated deployment workflows). Is this possible, and if so how?Many thanks
thiesdiggity
ubuntu mysql haproxy high-availability
I am trying to setup HAProxy with MySQL failover with Ubuntu. I used a setup similar to this serverfault question, however I am getting the following error when starting haproxy:[ALERT] 341/220001 (17405) : parsing [/etc/haproxy/haproxy.cfg:29] : unknown option ‘mysql-check’. [ALERT] 341/220001 (17405) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg [ALERT] 341/220001 (17405) : Fatal errors found in configuration.I even tried installing the lastest version of HAProxy (1.4.22).
quanta
haproxy
I am using HA Proxy HA-Proxy version 1.4.18 2011/09/16 I am trying to insert the following into /etc/init.d/haproxy.cfg file# Use General Purpose Couter (gpc) 0 in SC1 as a global abuse counter # Monitors the number of request sent by an IP over a period of 10 secondsstick-table type ip size 1m expire 10s store gpc0,http_req_rate(10s)tcp-request connection track-sc1 srctcp-request connection reject if { src_get_gpc0 gt 0 }# Table definition stick-table type ip size 100k expire 30s store conn_cu
Adrian
mysql load-balancing haproxy connection
I’ve set up load balancing MySQL slaves using HAProxy via a xinetd. 2 load balancers shared a virtual IP that is managed by Pacemaker:crm configure show:node SVR120-27148.localdomain node SVR255-53192.localdomain primitive failover-ip ocf:heartbeat:IPaddr2 \params ip=”192.168.5.9″ cidr_netmask=”32″ \op monitor interval=”5s” \meta is-managed=”true” primitive haproxy ocf:heartbeat:haproxy \params conffile=”/etc/haproxy/haproxy.cfg” \op monitor interval=”30s” \meta is-managed=”true” colocation hapr
user128296
postfix load-balancing haproxy
I want to configure Haproxy for outgoing mails load balancing on my centos 5.6 vps server. for this i have installed postfix on load balancer. My postfix sasl configuration as follows to use Haproxy and sasl authentication.smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination data_directory = /var/lib/postfix inet_protocols = ipv4 smtp_sasl_
OuterEdge
ssl https haproxy openssl
I’ve got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully.I’m now trying to get SSL traffic to work (in TCP mode and on just one server for now) however I keep getting the following error when testing via openssl:26396:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:588:However, when I try the same test (openssl s_client -connect) on the web servers IP address and hostname, everything seems to look O
ghickman
tomcat haproxy
HAProxy is pinging tomcat and requesting a very small page causing Tomcat to create a new session every 2 seconds. Is there is a way to programmatically (or through a config) tell Tomcat to not create a new session for a specific page?
Web site is in building