found it just after I sent this: balance hdr(X-Forwarded-For)
testing right now, but *looks* like it fixes the issue … *cross fingers* > On Jan 16, 2015, at 9:21 AM, Marc Fournier <[email protected]> wrote: > > > Morning all … > > I’ve been fighting with an issue here, and have run out of ideas … > > We have a wordpress site, two webheads behind haproxy … balance leastconn > … in front of haproxy, we are using Incapsula, as CDN/DDoS shield … if I am > only running one webhead, everythign works great, pages load fine, etc … as > soon as I bring up a second web server, I will sporatically get mis-loaded > pages … as if the CSS isn’t being loaded properly, so its unformatted. > > Both webservers are identical … wordpress and plugins are all in sync > using git, wp-content/uploads is in sync using csync2 … config files for > apache, php-fpm, php.ini, etc are all sync’d using git, and each web server > works fine “on their own” … > > If I hit the load balancer directly (modify my /etc/hosts file), it > *appears* to be fine also … its only once I throw incapsula into the mix that > I seem to have odd issues … > > One thought I had was to configure haproxy to use ‘balance source’, and > base the load balancing on the client IP (my browser), but when I look at the > haproxy logs, all I see is the numerous IPs coming in from Incapsula itself … > so figure I have to somehow tell haproxy to use the X-Forwarded-For header > that Incapsula should be passing down … but, I can’t see to figure out a way > to do this, or find examples on the web on how to do this … > > Has someone done this … ? Seen similar issues? > > Thanks ... > >

