found it just after I sent this:

balance hdr(X-Forwarded-For)

testing right now, but *looks* like it fixes the issue … *cross fingers*


> On Jan 16, 2015, at 9:21 AM, Marc Fournier <[email protected]> wrote:
> 
> 
> Morning all …
> 
>    I’ve been fighting with an issue here, and have run out of ideas …
> 
>    We have a wordpress site, two webheads behind haproxy … balance leastconn 
> … in front of haproxy, we are using Incapsula, as CDN/DDoS shield … if I am 
> only running one webhead, everythign works great, pages load fine, etc … as 
> soon as I bring up a second web server, I will sporatically get mis-loaded 
> pages … as if the CSS isn’t being loaded properly, so its unformatted.
> 
>    Both webservers are identical … wordpress and plugins are all in sync 
> using git, wp-content/uploads is in sync using csync2 … config files for 
> apache, php-fpm, php.ini, etc are all sync’d using git, and each web server 
> works fine “on their own” … 
> 
>    If I hit the load balancer directly (modify my /etc/hosts file), it 
> *appears* to be fine also … its only once I throw incapsula into the mix that 
> I seem to have odd issues …
> 
>    One thought I had was to configure haproxy to use ‘balance source’, and 
> base the load balancing on the client IP (my browser), but when I look at the 
> haproxy logs, all I see is the numerous IPs coming in from Incapsula itself … 
> so figure I have to somehow tell haproxy to use the X-Forwarded-For header 
> that Incapsula should be passing down … but, I can’t see to figure out a way 
> to do this, or find examples on the web on how to do this … 
> 
>    Has someone done this … ?    Seen similar issues?
> 
> Thanks ...
> 
> 


Reply via email to