Ravi,


Error:
Starting ravi_apps.1: [WARNING] 339/154647 (29412) : config : 'stats' statement ignored for proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as it requires HTTP mode. [WARNING] 339/154647 (29412) : config : 'option forwardfor' ignored for proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as it requires HTTP mode. [WARNING] 339/154647 (29412) : config : 'option httpclose' ignored for proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as it requires HTTP mode.

 listen VIP:apps.ravibhure.com:192.168.21.54:443
    [...]
    mode tcp

You are using tcp mode for 443 load balancing (as you must, if you don't decrypt it before haproxy handles ssl). As such, it cannot be httplogged and you are unable to forwardfor and httpclose on these ports. This is not a change from 1.3, though the warnings may not have been emitted before. Non ssl communication is being logged as it was before, note that these warnings to not affect apps.ravibhure.com:80.

If you need to do forwardfor and httpclose you will need to terminate the ssl before haproxy with something that can handle forwardfor, either patched stunnel, apache, nginx or similar.

If you wish to use stunnel, search on the haproxy homepage for "X-Forwarded-For support for Stunnel"

-JohnF

Reply via email to