Hi, I'm using 1.5-dev24 on Linux (2.6.32) and having problems getting
transparent to work with ipv6 addresses. I'm not actually acting as a
transparent proxy, I just need to have haproxy bind to some addresses
that may not exist on the server when haproxy starts. This is working
fine with ipv4, but with ipv6 I get "cannot bind socket
[xxxx:xxxx:x:x::x:443]". It binds to non-transparent ipv6 sockets
without issue. My pared-down config is below, any ideas anyone may
have would be much appreciated.
Thanks much.
global
log /dev/log local1 info
stats socket /var/run/haproxy.sock
maxconn 100000
user haproxy
group haproxy
daemon
defaults
mode http
option dontlognull
option allbackups
retries 3
option redispatch
timeout connect 5s
timeout client 50s
timeout server 50s
frontend webservices
log global
bind :::80
bind XXXX:XXXX:XXXX:XX::2:443 ssl crt
/etc/haproxy/wildcard-cert.pem ciphers RC4-SHA:HIGH:!ADH:!SSLv2
bind XXXX:XXXX:X:X::4:443 ssl crt /etc/haproxy/wildcard-cert.pem
ciphers RC4-SHA:HIGH:!ADH:!SSLv2 transparent
default_backend static-servers
backend static-servers
balance leastconn
option httpchk GET /haproxy_check/static
http-check disable-on-404
server be1-sjc-static-prv 10.54.169.136:8080 maxconn 500 check
observe layer7 backup