sending traffic to one backend server based on which another backend server sticky session

So I have a need to send a remote visitor to one specific server on another port/backend based on the first backend server they logged in to. Its really the same server just different IP's. Is this possible? Joe

Re: Master server outage this night (1wt.eu)

Lol. Know what you mean. Good going. On Sep 3, 2014 5:05 PM, "Willy Tarreau" wrote: > On Wed, Sep 03, 2014 at 09:51:54PM +0200, Willy Tarreau wrote: > > I'll send another mail when it's back online. > > Done after 65 mn. Not bad for a move of 6 servers, 2 switches and > an UPS 25km away after 410

Re: keep alive timeouts

tiste" wrote: > On Tue, Aug 26, 2014 at 10:49 PM, Joseph Hardeman > wrote: > > Hi Lukas, > > > > Thank you for responding, I was told that the remote servers are sending > > keep alive request with microseconds between calls. I have not actually > > invest

Re: keep alive timeouts

Hi Lukas, Thank you for responding, I was told that the remote servers are sending keep alive request with microseconds between calls. I have not actually investigated this, I am going off of what my Network Engineer is telling me with him running wireshark and looking at packet captures. The se

keep alive timeouts

Hi everyone, I hope someone can help out. I have a customer who has an IPSEC tunnel, using PAT so that our systems only see requests from a single IP, from their facility to us, they are then passing through a firewall to go into haproxy, old version part of vSheild so I don't know what version o

Re: Capturing Cookies

t; Baptiste > Le 16 oct. 2013 21:23, "Joseph Hardeman" a écrit : > > Hey Guys, >> >> Quick questions, I want to capture what cookies are making it to an >> haproxy system, I know I can capture a cookie based off its name, but is >> there a way to capture all cookies when a browser hits my proxy? >> >> Thanks >> >> Joe >> >

Capturing Cookies

Hey Guys, Quick questions, I want to capture what cookies are making it to an haproxy system, I know I can capture a cookie based off its name, but is there a way to capture all cookies when a browser hits my proxy? Thanks Joe

Haproxy SSL Termination question

Hi Everyone, I am in need of a little help, currently I need to send traffic to a haproxy setup and terminate the SSL certificate there, which I have working, but until I can get a backend application changed from redirecting when it gets the https request to a login page, is there any way I can c

Re: build with static openssl

Hey Lukas, I just tried again and found that the LIBSSLBUILD variable was empty and using TARGET=linux24 plus ARCH=i386 worked great. I checked and it supports SNI and SSL. Very cool, Thanks Joe On Sat, May 11, 2013 at 12:28 PM, Lukas Tribus wrote: > Hi Joseph, > > the make TARGET is just

Re: build with static openssl

Hi Lukas I am trying to follow the steps you mentioned and the OpenSSL installs fine, but am getting the following when trying to build haproxy and I would appreciate any thoughts on why this maybe happening. This is a CEntOS 5.3 32bit system, I have tried with the target like you mentioned and a

Re: Virtual Hosting and logs

12, 2012 at 08:40:01PM -0500, Joseph Hardeman wrote: > > Hey Chris, > > > > What flavor of linux will you be putting syslog-ng on? Be sure the > > syslog-ng you install can handle multi-threading of its processes, so > > version 3.0 or newer I believe, otherwise it

Re: Virtual Hosting and logs

as the west coast is now getting off of work. And the clf option sends through less data than the normal option httplog so the amount of data is a bit lower than if you log normal logs from haproxy. Joe On Thu, Jan 12, 2012 at 7:03 PM, Chris Miller wrote: > ** > On 1/12/2012 3:54 PM, Jos

Re: Virtual Hosting and logs

Hi Chris, If you have a spare nic, you can set this to a different subnet from the other interfaces and set one on a syslog server, then in the global section of haproxy setup the logging section, for example: log192.168.5.5:514 local6 Make sure your syslog-ng is set for tcp a

Parsing Logs

Hi Everyone, I was wondering if anyone has a way to parse the logs and present them in a friendly format? Such as with AWStats or another log parser. Thanks Joe

Re: Linux routing performace

Hi James, I would agree with jw. If your internal network is all on the same subnet, you don't need the second gateway. Now if you are routing to different subnets on the internal network, you could simply put route statements pointing those routes to use the internal router instead of adding a

Re: using haproxy for https

s Joe On Sun, Apr 10, 2011 at 5:14 PM, Brian Carpio wrote: > Of course you can export the cert and private keys from IIS and use them in > stunnel. You will need to use OpenSSL to convert the certificate but it will > work. > > Sent from my iPhone > > On Apr 10, 2011, at

Re: using haproxy for https

-Forwarded-Proto:.* > >> reqadd X-Forwarded-Proto:\ HTTP > >> option forwardfor > >> frontend https > >> bind 127.0.0.1:81 > >> reqidel ^X-Forwarded-Proto:.* > >> reqadd X-Forwarded-Proto:\ HTTPS > >> No

using haproxy for https

Hi Guys, I was wondering if someone has a good example I could use for proxying https traffic. We are trying to proxy multiple sites that use https and I was hoping for a way to see how to proxy that traffic between multiple IIS servers without having to setup many different backend sections. Th

Question about passing traffic

Hi guys, I have been asked if it were possible for Haproxy to receive traffic from servers for NFS over TCP, pass that traffic to a storage cluster and then the cluster send the data directly to the servers. Sort of the same method as LVS-DR would be. So the flow would go something like thi

Re: Source IP instead of Haproxy server IP

ext set of systems instead of changing it out for haproxy server IP address. Thanks again. Joe > From: Willy Tarreau > Date: Tue, 6 Apr 2010 07:10:04 +0200 > To: Joseph Hardeman > Cc: > Subject: Re: Source IP instead of Haproxy server IP > > On Tue, Apr 06, 2010 at 07:02:

Source IP instead of Haproxy server IP

Hi Guys, I got asked if there is a way to make haproxy set the requesting IP it sends to the backends to the ip address of the visitor instead of the ip address of the haproxy server. I know I can do this with LVS, I did that for another company several years ago, simply by changing ipv4.ip_forwa

Re: haproxy listening to all interface is safe for a heartbeat cluster? (was: High Availability question)

Hi Dirk, We use heartbeat with haproxy and don't have any issues. Our setup is pretty simple, we have a VIP that floats between the two servers by heartbeat and when I move it over via hb_takeover or hb_standby (we haven't had a failover happen besides my manually moving it or rebooting the

Re: ACL Question

ingle box now.  I was just curious if it could be done. *S* Love Haproxy and I recommend it to every one now. Joe Willy Tarreau wrote: Hi, On Fri, Nov 06, 2009 at 11:35:24AM +0100, XANi wrote: Hi, On Thu, 05 Nov 2009 19:44:03 -0500, Joseph Hardeman wrote: Hi Eve

ACL Question

Hi Everyone, I know you can use acl's to take a request for a file and send it to a different backend than the normal requests go to, but I was wondering can an acl be setup so that when a request for a file, say update.php, is called via the external url, for example: http://www.example.com

Re: MySQL + Haproxy Question

s for the reply. Joe XANi wrote: Hi On Sat, 24 Oct 2009 16:01:26 -0400, Joseph Hardeman wrote: Hey Guys, I was wondering if there was a way to have Haproxy handle mysql requests. I know that I can use the TCP option instead of HTTP and it will work, but I was wondering if anyone has a w

MySQL + Haproxy Question

Hey Guys, I was wondering if there was a way to have Haproxy handle mysql requests. I know that I can use the TCP option instead of HTTP and it will work, but I was wondering if anyone has a way to make haproxy send all requests for Select statements to a set of servers and all Insert, Updat

Re: Tracking down IP address problem

You can run ip addr sh eth0 to see if it is on that interface on your system but not labeled so that ifconfig would show it. But if you try to ping it from another system on your network, do you get any response? I don't see anything off hand wrong in your interfaces config below. Joe To

Re: Public ip not showing using HAproxy

Hi Nelson, You need to enable the forwardfor option, put "option forwardfor" in the listen section. The 'forwardfor' option creates an HTTP 'X-Forwarded-For' header which contains the client's IP address. So you will need to configure your web server to capture the X-Forwarded-For header a

Re: HAProxy running at 10 Gigabit/s

Hey Willy, I would also love to see how you tuned everything to get the thru put and performance. Thanks Joe John Marrett wrote: Willy, The rest is "just" kernel parameter tuning. I'm thinking about writing a tuning guide for 2.6 kernels. I've once again been contacted by a big site t

Re: drain backend nodes ?

Very cool. Welcome to the community. :-) Jan-Frode Myklebust wrote: On 2009-03-26, Joseph Hardeman wrote: Yes it can, there is an haproxy.conf file which contains the hosts that you are proxying the traffic for. To remove a host, you would edit this file, put a # in front of the server

Re: Solution for Load Balancing 2 Internal Apache Web Servers

Shannon, I have used several different load balancers, primarily LVS, in the past and I am real enjoy using Haproxy. It is very easy to configure and maintain. Plus the list is very quick and helpful in responding to questions. The stats page helps me locate any potential problems with my

Re: drain backend nodes ?

Jan-Frode, Yes it can, there is an haproxy.conf file which contains the hosts that you are proxying the traffic for. To remove a host, you would edit this file, put a # in front of the server(s) you want taken off line and then run the following command: /usr/local/sbin/haproxy -f /etc/hapr

Re: haproxy + memcached

pting to load balance memcached nodes. See http://code.google.com/p/memcached/wiki/FAQ#Cluster_Architecture_Questions for explanations. James. On Mar 4, 2009, at 11:12 PM, Joseph Hardeman wrote: Hi Everyone, I was wondering if anyone has put a haproxy system in front of memcached and h

Re: Multiple Proxies

Scott, John is right, the way to do this is to use either heartbeat or keepalive and fail over a VIP to a secondary machine in case the first has issues. Make sure your haproxy files are identical and then test the failover. We use heartbeat for one of our clients and so far any time I have

haproxy + memcached

Hi Everyone, I was wondering if anyone has put a haproxy system in front of memcached and how it performed. I am considering putting 12 web servers in front of a haproxy server with 2 memcached servers behind it to spread the calls to memcached between the two memcached systems. Does anyone

Stats Page Explanation

Hi I was wondering if there was a document explaining what the sessions counter actively counted? I have been doing some testing and when I go to a single page, the counter for Max Sessions tend go up more than the single request page I made. I looked in my logs and saw the page I requested

mode health check failed

Hi everyone, I just experienced again a check on the health of haproxy for one of our clients which forced a failover to our backup haproxy system. I am hoping someone has something to help with this. From looking at the documentation it states that the mode health will not log anything if

Check on Port 60000 not responding in time

Hi Guys, Here is a question I am hoping someone has either seen before or has a suggestion for me. For the first time since we put haproxy in months ago, the primary haproxy we have did not respond in 10 seconds for the check on port 6, which we have set as our health check port: liste

Unique IP Connections

Hey Guys, Is there a way to get real time stats on the number of unique IP's that are connecting to haproxy? I do have the stats page running and can see how many connections are coming in, but I understood that these were per session connection not per unique IP. If I am wrong, then please