Hi, I'm using 1.5-dev24 on Linux (2.6.32) and having problems getting
transparent to work with ipv6 addresses. I'm not actually acting as a
transparent proxy, I just need to have haproxy bind to some addresses
that may not exist on the server when haproxy starts. This is working
fine with ipv4, but with ipv6 I get "cannot bind socket
[xxxx:xxxx:x:x::x:443]". It binds to non-transparent ipv6 sockets
without issue. My pared-down config is below, any ideas anyone may
have would be much appreciated.

Thanks much.

global
    log /dev/log local1 info
    stats socket /var/run/haproxy.sock
    maxconn 100000
    user haproxy
    group haproxy
    daemon

defaults
    mode    http
    option  dontlognull
    option  allbackups
    retries 3
    option redispatch
    timeout connect 5s
    timeout client  50s
    timeout server  50s


frontend webservices
    log global
    bind :::80
    bind XXXX:XXXX:XXXX:XX::2:443 ssl crt
/etc/haproxy/wildcard-cert.pem ciphers RC4-SHA:HIGH:!ADH:!SSLv2
    bind XXXX:XXXX:X:X::4:443 ssl crt /etc/haproxy/wildcard-cert.pem
ciphers RC4-SHA:HIGH:!ADH:!SSLv2 transparent

    default_backend static-servers

backend static-servers
    balance leastconn
    option httpchk GET /haproxy_check/static
    http-check disable-on-404

    server be1-sjc-static-prv 10.54.169.136:8080 maxconn 500 check
observe layer7 backup

Reply via email to