Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAProxy: Use UNLESS condition instead of default IF

    Scheduled Pinned Locked Moved Cache/Proxy
    13 Posts 3 Posters 2.6k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cwegh @viragomann
      last edited by

      @viragomann That was it, thanks! Searched a lot put could find any documentation on this.

      M 1 Reply Last reply Reply Quote 0
      • M Offline
        maturola @cwegh
        last edited by

        @cwegh said in HAProxy: Use UNLESS condition instead of default IF:

        @viragomann That was it, thanks! Searched a lot put could find any documentation on this.

        I know this is an old thread but I', still having issues with this, any chance you can post a screenshot on where exactly you place the "!"??

        V 1 Reply Last reply Reply Quote 0
        • V Offline
          viragomann @maturola
          last edited by

          @maturola
          In front of the ACL name in the actions ACL field.

          However, there is also a possibility to negate the ACL itself by checking "not".

          M 1 Reply Last reply Reply Quote 0
          • M Offline
            maturola @viragomann
            last edited by maturola

            @viragomann said in HAProxy: Use UNLESS condition instead of default IF:

            @maturola
            In front of the ACL name in the actions ACL field.

            However, there is also a possibility to negate the ACL itself by checking "not".

            Doesn't really work for me, I ended up with a "!" in front of the same,,,

            ACL config in PFsense/HAproxy

            backend onlyoffice_ipvANY
                    mode                    http
                    id                      115
                    log                     global
                    timeout connect         30000
                    timeout server          30000
                    retries                 3
                    load-server-state-from-file     global
                    acl                     existing-x-forwarded-host         req.hdr(X-Forwarded-Host) -m found
                    acl                     existing-x-forwarded-proto      req.hdr(X-Forwarded-Proto) -m found
                    http-request add-header !X-Forwarded-Host %[req.hdr(Host)]  if   !existing-x-forwarded-host
                    http-request add-header !X-Forwarded-Proto https  if  !existing-x-forwarded-proto
                    server                  onlyoffice 192.168.10.145:80 id 109 ssl  verify none
            

            Using the "not" check box, does yield a ! after the if, which I guest if+! = unless??? I was expecting the "if "to change to "unless" but I guest negating the ACL works the same. however that still doesn't seen to work to do the SSL offloading for the onlyoffice server, I still get 503 Service Unavailable.

            V 1 Reply Last reply Reply Quote 0
            • V Offline
              viragomann @maturola
              last edited by

              @maturola
              I don't believe that 503 has anything to do with the add-heafer action.
              Check the backend status.

              M 1 Reply Last reply Reply Quote 0
              • M Offline
                maturola @viragomann
                last edited by

                @viragomann said in HAProxy: Use UNLESS condition instead of default IF:

                @maturola
                I don't believe that 503 has anything to do with the add-heafer action.
                Check the backend status.

                I'm afraid you are right, but everything else is setup exactly the same and all other services work except for onlyoffice so I thought this may be the issue, but I don't think it is.

                Sticking with google docs i guess =(

                V 1 Reply Last reply Reply Quote 0
                • V Offline
                  viragomann @maturola
                  last edited by

                  @maturola
                  So what about the backend health? If you go to Statute > HAproxy stats, is the backend green there?

                  M 1 Reply Last reply Reply Quote 0
                  • C Offline
                    cwegh
                    last edited by

                    Here my pfsense configuration in which OpenOffice works. What is your configuration on Nextcloud for Onlyoffice?

                    9c9470eb-1587-4e19-a14d-7c1241f6e06b-image.png

                    1 Reply Last reply Reply Quote 0
                    • M Offline
                      maturola @viragomann
                      last edited by

                      @viragomann said in HAProxy: Use UNLESS condition instead of default IF:

                      @maturola
                      So what about the backend health? If you go to Statute > HAproxy stats, is the backend green there?

                      Well, Honestly I'm not sure where the "Green/Red" would be but the back end status looks the same as all other services that are working. (screenshot of onlyoffice and "password" which is bitwarden).

                      HA Backend status

                      @cwegh said in HAProxy: Use UNLESS condition instead of default IF:

                      Here my pfsense configuration in which OpenOffice works. What is your configuration on Nextcloud for Onlyoffice?

                      9c9470eb-1587-4e19-a14d-7c1241f6e06b-image.png

                      Thank you, this is how I have it now, but still getting 503 error. I haven't gotten to the nextcloud config yet as it pings the https://<serveraddress>/healthcehck and that url gets 503 error (currently)

                      V 1 Reply Last reply Reply Quote 0
                      • C Offline
                        cwegh
                        last edited by cwegh

                        It is normal health check fails if your backend is not configured yet. Turn off your health check (set to none) or configure Nextcloud for Onlyoffice and you should be good to go.

                        ee19b893-e33e-488c-81bd-a91d0683807e-image.png

                        1 Reply Last reply Reply Quote 0
                        • V Offline
                          viragomann @maturola
                          last edited by

                          @maturola said in HAProxy: Use UNLESS condition instead of default IF:

                          Well, Honestly I'm not sure where the "Green/Red" would be but the back end status looks the same as all other services that are working. (screenshot of onlyoffice and "password" which is bitwarden

                          You"ve disabled health check. So there is no information on the backend status.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.