Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAProxy - Shared Front End but Do not Use CSP

    pfSense Packages
    1
    2
    972
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      spaceboy
      last edited by

      Hi, I'm sure this is a basic question but I can't easily find the answer. I have HAProxy set up with a shared front end and two back ends. Everything works ok except that:

      For one backend i want to use a fairly strict CSP that blocks the second backend from working. I don't see how to tell HAProxy to only use the CSP for one back end.

      I tried ordering the Actions in the share frontend to be

      Backend 1
      CSP
      Backend 2

      but the CSP is still used on Backend 2. I tried creating a separate frontend for backend 2 but that causes problems because the two frontends are using the same WAN IP.

      I seem so close to achieving what i want but i can't see the answer. Grateful for any guidance on which i am sure is a very basic issue. Cheers

      1 Reply Last reply Reply Quote 0
      • S
        spaceboy
        last edited by

        yeah - knew it must be a stupid question. found the option to add the CSP to the specific backend rather than in the shared frontend. all good

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.