Hi Karl,

We use HAproxy and Corosync/Pacemaker at client site. Perhaps I can
help.  We terminate the SSL connection at the load balancer however
(using stunnel).

Which version of HAproxy are you using?

Stupid question but does this problem occur if you are not using HAproxy
or if one of load balancers is deliberately disabled (thus forcing all
traffic to one system)?

We had a similar issue when we started to restrict the SSL encryption
algorithms as we require PCI DSS compliance. It turned out that one of
the algorithms was necessary for IE6 to work properly (IE 6 specific
problem)

HAproxy mailing list might be helpful as well.


On Mon, 2010-11-22 at 12:31 +1100, Karl Kloppenborg wrote:
> Hi Linux-HA Users,
> 
> I have a bit of an issue and I don't know whether this is a good place to 
> start...
> 
> I have been trying to implement HaProxy alongside Heartbeat for the last 
> couple of weeks...
> 
> Combining it with Heartbeat was no issue however HAProxy's actual 
> configuration was the issue.
> 
> The load balancing setup is:
> LB Algorithm: source based
> Load balancing: 
> 1) port 443(sslHTTPs / tcp based)
> 2) port 80(HTTP / http based)
> 
> The website enters and exits https all throughout it and the load balancer is 
> using source load balancing to ensure it does not leave the app server with 
> its current site session on it.
> 
> 95% of users are working perfectly and it seems like the setup is working 
> fine, however 5% of clients seem to be returning a blank white page upon 
> trying to enter SSL...
> 
> Has anyone else seen this? I am at whits end! :)
> 
> Your thoughts please,
> 
> Karl Kloppenborg
> Head of Development
> Phone: 1300 884 839 (AU Only - Business Hours)
> Website: AU http://www.crucial.com.au| US http://www.crucialp.com
> 
> 
> 
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems

-- 
Best Regards,

Brett Delle Grazie

_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to