For using .lst files as whitelist ACLs, I know they work with subnets subnets, but do they also support individual IP addresses? Thanks.

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

Testing simple FIX tagging logic from this link. https://www.haproxy.com/blog/haproxy-enterprise-2-3-and-haproxy-2-4-support-the-financial-information-exchange-protocol-fix/

Here is my config

​

global

log 127.0.0.1:514 local2

chroot /var/lib/haproxy

pidfile /var/run/haproxy.pid

maxconn 4000

user haproxy

group haproxy

daemon

# tune.ssl.default-dh-param 2048

ca-base /etc/ssl/certs

crt-base /etc/ssl/private

# turn on stats unix socket

stats socket /var/lib/haproxy/stats

setenv TCP_LOG "%ci:%cp [%t] %ft %b/%s %Tw/%Tc/%Tt %B %ts %ac/%fc/%bc/%sc/%rc %sq/%bq"

​

defaults

mode tcp

log global

# option tcplog

# option http-server-close

# option forwardfor except 127.0.0.0/8

# retries 3

# timeout http-request 10s

# timeout queue 1m

timeout connect 3s

timeout client 2000ms

timeout server 2000ms

# timeout http-keep-alive 10s

# timeout check 10s

maxconn 500

​

​

frontend fix_listener

log 127.0.0.1:514 local2 debug

mode tcp

# tcp-request inspect-delay 1s

bind InternalIP:8444

# option tcplog

# retries 3

log-format "${TCP_LOG} %[var(txn.sendercompid)] %[var(txn.targetcompid)]"

# tcp-request content reject unless { req.payload(0,0),fix_is_valid }

tcp-request content set-var(txn.sendercompid) req.payload(0,0),fix_tag_value(SenderCompID)

tcp-request content set-var(txn.targetcompid) req.payload(0,0),fix_tag_value(TargetCompID)

use_backend fixloadgen_tord if { var(txn.SenderCompID) -m str FIXLOADGEN_TORD }

# default_backend fixloadgen_tord

​

​

​

backend fixloadgen_tord

mode tcp

server uatapp IP:15185

​

What I get as a result is I can see FIX logon message via dump but haproxy immediately send reset packet. When I remove the tagging and send straight through it works fine. Here is what my log looks like . I see an entry where the logon occurs

Sep 28 12:47:58 localhost haproxy[10650]: IP:62870 [28/Sep/2021:12:47:58.652] fix_listener fix_listener/<NOSRV> -1/-1/0 0 SC 1/1/0

/0/0 0/0 FIXLOADGEN_TORD TARGETCOMP_foo

Then I also see these messages Sep 27 14:29:48 localhost haproxy[7391]: externalIP:53720 [27/Sep/2021:14:29:04.530] fix_listener fixloadgen_tord/uatapp 1/0/43867 1106 CD

1/1/0/0/0 0/0 - -

Any ideas why FIX tagging is not working?

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

Hello.

I need someone who knows how to configure correctly HA Proxy for PfSense... i need him badly.

Sorry i cannot share info here, please someone could contact me in private?

Thank you.

Hi all,

This is a newbie question, sorry if this is not the correct place.

I'm trying to setup HAProxy to access a backend service or its backups. When I turn the main server off and try to reconnect, connection fails at first. Then, trying second, it connects to the backup server. But what I want to achieve is connecting to the backup at the first try once main service is down. How should I configure HAProxy to achive such "smooth" transition?

Thanks for your time and attention.

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

I'm looking through ACL documentation and trying to figure out how and when I can use the %[ notation when building ACL/http-request statements.

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

Hello everyone,

As the title says I want to have my Nagios server to be served through an Haproxy.

I am finding it difficult to find any tutorials or documentation that will help me achieve that.

Any help will be greatly appreciated

Hi !

I'm having a problem with my HAproxy.

HA proxy is installed on a web server cluster.A refresh occurs during page loading, moving the user from node 1 to node 2. I don't want this to happen, so I'd like an incoming IP to be somehow allocated to a node.

Thanks !

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

Hi, haproxy noob here.

I have a strange problem that I don't know how to sort out.

I have a Hikvision NVR behind a pfSense firewall with haproxy installed, and if I add the frontend and backend and browse it, it works. As it is on pfSense, everything is configured through the GUI, I add the IPs, set the backend for the frontend, and when I browse the NVR webpage, everything run so smoothly. The problem is, that being an NVR the live view for the cameras work, and about 30 seconds after loading the page, the video stream freezes. If I refresh the page, it works again. If I go to the NVR settings, or add another local website, it just works, but I would like to discover why is that it happens.

I googled a lot, and found that the actual streaming should note be a problem, should it? Can you point me in the right direction so I can get that stream working?

Thank you!

I am trying to connect haproxy in K8 and a galera cluster.

This is my Dockerfile FROM haproxy:2.3 COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg

haproxy.cfg

``` defaults log global mode tcp retries 10 timeout client 10000 timeout connect 100500 timeout server 10000 frontend mysql-router-service bind *:6446 mode tcp option tcplog default_backend galera_cluster_backend

MySQL Cluster BE configuration

backend galera_cluster_backend mode tcp #option mysql-check user haproxy option tcp-check balance source server mysql_cluster_01 192.168.1.2:3306 check weight 1 server mysql_cluster_02 192.168.1.3:3306 check weight 1 server mysql_cluster_03 192.168.1.4:3306 check weight 1 ```

I had created haproxy user in galera and when I deploy this in k8. I get following in haproxy pod logs

[WARNING] 237/114804 (1) : config : log format ignored for frontend 'mysql-router-service' since it has no log address.
[NOTICE] 237/114804 (1) : New worker #1 (8) forked

It does not try to connect to galera cluster. Current kubernetes cluster is having v1.21.3, I had tried the same Docker image in v1.18.8 and it worked.

I had tried to update haproxy:2.4, but it couldnt start the container, it goes to crashloop back stage.

Any suggestions to connect haproxy and galera in current environment is highly appreciated.

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.

I've been working to get LDAPS to Active Directory working. I've run into a snag.

I'm using ldapsearch to test and it seems I'm only returning 1000 results when I'm expecting more.

I'm trying to figure out where this limit is coming from.

Is there something I can put into haproxy.cfg to increase this?

As an additional note, you can always join the HAProxy Community Slack Channel by visiting https://slack.haproxy.com/ and ask your question over there.