Hi All,
Not sure if i hit a bug or a config problem, so before creating a bug report
i'll ask the maillinglist.
i'm running a small haproxy setup, nothing fancy yet, it's just designed so the
client can upgrade to a multi cluster setup in no time.
Running debian stretch with 1.8.25-1~bpo9+1, this morning the package upgraded
to 1.8.26-1~bpo9+1 and i started noticing some strange behaviour.
The haproxy config isn't complicated:
defaults
timeout connect 1h
timeout client 1h
timeout server 1h
log global
mode http
balance roundrobin
option httplog
option dontlognull
option redispatch
option tcplog
stats uri /haproxy-status
option forwardfor
frontend mosquitto
mode tcp
default_backend mosquitto
bind 0.0.0.0:1883
frontend web
mode http
default_backend dev
bind 0.0.0.0:80
bind 0.0.0.0:443 ssl crt /etc/haproxy/dev.srv-0xxx.x-plose.cloud.pem alpn
h2,http/1.1
backend mosquitto
mode tcp
server dev1 127.0.0.1:11883 check
backend dev
mode http
server dev1 127.0.0.1:8080 check
the backend is an apache server which has runs as a proxy frontend for tomcat,
also nothing fancy:
<VirtualHost *:8080>
ServerName debug.x-plose.cloud
DocumentRoot /home/xxx_dev/apps/default/
RewriteEngine On
RewriteCond %{QUERY_STRING} transport=polling [NC]
RewriteRule /(.*) https://localhost:55056/$1 [P]
ProxyPass /ws/ wss://localhost:55056/ws/
ProxyPassReverse /ws/ wss://localhost:55056/ws/
ProxyRequests Off
ProxyPreserveHost on
SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off
ProxyPass / https://127.0.0.1:55056/ retry=0 timeout=3600
ProxyPassReverse / https://127.0.0.1:55056/
<Location />
Require all granted
</Location>
</VirtualHost>
Haproxy accepts SSL, sends it as http to the backend (apache), which has a
proxy pass to port 80
This setup is working with haproxy 1.8.25, as soon as i upgrade the haproxy
version, i see errors in my devtools console.
https://www.dropbox.com/s/zdb9pkzws30aogg/screenshot%202020-08-04%20at%2014.08.17.png?dl=0
Is this a haproxy bug, or do i have a configuration error?
Kind Regards,
Bram
