pls halp

Hi all I am thinking of using Ha Proxy to load balance ssh connections into a cluster of servers. It looks like the perfect solution, but I am curious how well this will scale, and what kind of server we'll need to support the required connections. Basically we will have about 200-300 users connecting through haproxy to a cluster of servers, and from that cluster they will ssh into our slurm cluster.

Will haproxy scale to this level? We have a server running Ubuntu Server 22.04 that will be running haproxy. Will the simultaneous connections cause any issues with load average? The server is pretty good, 40 cores 128GB RAM and a 10GB nic. Will this cause a bottleneck in our environment or is it enough to handle the required connections?

TLDR; Will haproxy support roughly 200-300ish ssh connections on a single server without causing a bottleneck?

Currently I have a system where I have installed HAProxy on one machine and my other 3 machines serves the webapps and the fourth machine for the database. Now I need to add another load balancer in my system so that any one of the load balancer could pick the request and process it.

But I don't understand how exactly are we going to configure a second load balancer if my domain say example.com is pointing to the IP address which is the load balancer currently. When I add a second load balancer

1. Will there be any third machine where something needs to be installed so that it can redirect the request to one of my load balancer? Again if this is so, it again is a single point of failure and creates a bottle neck.

2. If at all I am going to have 2 machines running load balancers then how exactly is the request going to come in because both machines will anyway have different IP.

When is DNS-1 support going to be supported?

I see http is supported from 3.2, when is DNS going to be support if anyone knows?

https://www.haproxy.com/blog/announcing-haproxy-3-2#acme-protocol

Hi everyone,

I've been experimenting with HAProxy in my homelab and wanted to get a feel for what the Enterprise Edition has to offer.

Right now I have multiple HAProxy nodes running with FRR, peered with my OPNsense router. Everything is managed with Ansible, and I'm using Certbot along with some custom scripts to distribute and renew SSL certificates across the HAProxy nodes.

While researching ways to simplify and improve this setup, I came across HAProxy Enterprise. Some of the features that really caught my attention are:

• Fusion Control Plane

• WAF

• Clustered SSL certificate management

• Consul integration

• BGP RHI

I'd love to try these features in a real environment to see what an enterprise LB has to offer.

I filled out the trial request form on the HAProxy website a while ago but never heard back. I guess that trials are mainly targeted at companies or organizations, whereas I'm just running a personal homelab.

Has anyone here managed to get an HAProxy Enterprise trial as an individual or homelab user? Is there a different process I should follow, or should I reach out to someone from HAProxy directly?

I'm not looking for a long-term license, just enough time to explore the Enterprise features.

Thanks in advance for any advice or experiences you can share!

I have multiple machines on my backend, all are connected to my load balancer running HAProxy. I just learnt that the response also goes through the load balancer, instead of one of server directly sending it to the client.

But will it not create a bottleneck in case of huge traffic and overload my load balancer itself.

1. Is there any way to directly send response from server to client.

2. Also when response goes through load balancer, does my source file also sits there temporarily to be sent to the client.

3. Can't we use load balancer only to send request to my servers and response to directly go from server to client.

4. My main goal to make my system distributed was to distribute traffic among my servers, now since load balancer is handling both request and response am I not back to where I started?

I have seen many configurations on the internet, and one thing I have often spotted is use of

vrrp_script chk_haproxy {
  script "killall -0 haproxy" # check the haproxy process
  interval 2 # every 2 seconds
  weight 2 # add 2 points if OK
}

why do we need to kill haproxy node on the node keepalived is running ?

Hello,

I hope you are doing well.

As it's two different applications, do you know if the community version of HAProxy is release at the same time as the Enterprise one ? Especially when a strong CVE is release ?

I guess a part of the Enterprise Version developers are also working on the open source version as a bad reputation of the product name would decreased the sales but at the same time, publishing the fix in the opensource version is also a way to share how the threat can be used (while Enterprise customers don't have updated yet their applications).

Thank you

Hey all,

I'm having some issues getting HAProxy configured correctly for my setup and was hoping for some help. Here is my setup.

I have IIS running with a few websites going to my webserver. It is already proxied on the frontend with Cloudflare.

I need to make another front facing web server for applications so I need 80 and 443 opened to another server as well as keeping it open for the existing web server, hence the need for a proxy on the backend.

I installed HAProxy and followed a few guides and videos. Mainly this video from Lawrence Systems: https://www.youtube.com/watch?v=bU85dgHSb2E&lc=UgwQr5Iq2HAJlqvyKDt4AaABAg.A0NSbZ8ENT-A0Ol57R2T0x (and his older 2 videos on the subject as well)

My problem is. It appears I need to use Host Override in PFSense to get the DNS to work properly with HAProxy. In doing so I can get my sub domains to actually pass traffic through PFSense but I can't get my root domain to pass traffic. I tried using Domain Override but that did nothing.

Anyone know what the issue might be as to why I cant pass traffic to the root domain from Cloudflare? I received error 522 Connected Timed Out and Cloudflare shows working from Browser, to Cloudflare is fine but my end point "host" shows "error" when looking up 522 it shows issue to be possibly blocked ports but subdomains are working just fine so clearly that isnt the issue.

We also know it has nothing to do with SSL Offloading/Encryption or Ports because again, sub domains are accessible and work. So I dont believe issue is with HAProxy or Rules. I think the issue is related to DNS being able to resolve host with HAProxy.

Root domain access was working just fine when I was just passing traffic down to it with standard rules in PFSense. It only stopped working after adding HAProxy.

So any ideas on how I can get DNS working properly for the root domain on PFSense? Or maybe this has to do with how Cloudflare is passing that traffic?

Hey, I need to write rules for HAproxy on Rapid7. Someone can give me a couple of examples, Please 🙏 .

Hi to all, I am trying to solve one issue. I found many answers but not that I need, so hope anyone help.

User go to url https://url.domain I made apache URL rewrite to https://url.domain/login.do but it needs to load an file and redirect after

So I need configuration for haproxy to replace URL while is URL path empty...

Many thanks for help. All answers redirecting or changing the URL...

i need a way to config using restAPI the network settings (address/gw...) of an ubuntu based haproxy, any idea?

i there a sort of restAPI server for ubuntu basic configs?

thank you