Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-04 Thread Aleksandar Lazic
Hi. Am 02-03-2016 07:48, schrieb Zoltan Lorincz: Jeff, thanks again for the detailed answer. I've already tested a configuration without various ACL's. Please can you try to run the connector with debug on.

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-03 Thread Igor Cicimov
On 01/03/2016 9:57 PM, "Zoltan Lorincz" wrote: > > Hi all, > > i am very new to haproxy. Read trough all the docs but i think something is wrong with my configuration, because if we connect directly to tomcat we don't get any 502 errors. > > The errors from haproxy look like

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-01 Thread Zoltan Lorincz
Jeff, thanks again for the detailed answer. I've already tested a configuration without various ACL's. When i check the errors logs. I got this: [02/Mar/2016:07:38:34.834] backend servers (#4): invalid response frontend https-in (#3), server www1a (#1), event #9270 src 46.140.96.254:61409,

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-01 Thread Jeff Palmer
Zoltan, the "HP--" in the log means: P : the session was prematurely aborted by the proxy, because of a connection limit enforcement, because a DENY filter was matched, because of a security check which detected and blocked a dangerous error in server

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-01 Thread Zoltan Lorincz
Dear Jeff, thank you very much for your answer! The Tomcat connector doesn't have HTTPS enabled. I forgot to remove the old "redirectPort" from tomcat's connector setting, i did remove it now and restarted servers but the error still persist. Thank you, Zoltan. On Tue, Mar 1, 2016 at 2:19 PM,

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-01 Thread Jeff Palmer
You have tomcat on 8443 which is usually an SSL enabled port, but none of your backend server definitions enable SSL. In the 3 'server' lines towards the end of your config, add 'ssl' at the end. Let us know! On Mar 1, 2016 5:57 AM, "Zoltan Lorincz" wrote: > Hi all, > > i am