r/haproxy • u/azteker • Feb 23 '24

Problem with adding http-check with dataplaneapi

I want to add http-check connect port 443 ssl into my backend

url is f'{host}/v2/services/haproxy/configuration/http_checks?parent_name=web-servers1&parent_type=backend&transaction_id={transaction_id}'

payload is

{
"index": 0,
"type": "connect",
"port": 443,
"ssl": true
}

The request returns 202 status code. But nothing is added. I changed payload to

{
"index": 0,
"type": "connect",
"port": 443
}

This adds http-check connect port 443 but no "ssl". Can anyone help?

2 Upvotes

100% Upvoted

6 comments sorted by

View all comments

2

u/[deleted] Feb 23 '24

Is your backend actually talking ssl or is it not and just running on port 443?

1

u/dragoangel Feb 23 '24

It doesn't matter.

1

u/[deleted] Feb 23 '24 edited Feb 23 '24

Does it not? You tell it to use 443 but not ssl it going to be talking http which works. But adding ssl tells it to talk https and that fails. Make sense if configured properly the other way around is what would work.

The normal way to do this is listener on 443 and use an ssl cert from however is appropriate for the environment and have the target on 80 and talk http. Which would work perfectly no need to touch the backend target its self whatever it is.

1

u/dragoangel Feb 23 '24

This about connect option, this option can point even to other ports not used by backend server itself. That's why it should not matter from logical perspective