HAProxy Port Redirect Internal
-
@spiker
This is the web UI directly accessed.What do you get without the port stated?
Edit:
Oh well, your frontend ist listening on port 2443 now. -
As the error message indicates, your web UI is forced to use https, but HAproxy uses http for accessing it.
-
Yeah directly accessed would be on port 10443, and that works just fine, cert and all.
I do have a rule on all other interfaces/networks to block port 10443, but I am on the network that is stated in the front end and that interface has no rule to block 10443 to the FWL address.
-
Yeah I am using https to access it, crome will redirect to https anyway even if I try http.
-
@spiker
I was talking about the backend.
Do you still have "Encrypt (SSL)" checked and "SSL checks" unchecked in the backend? -
-
Hey that worked....
Thank you for your time here guys, I am new to all of this but you guys were amazing.
-
I put back on the ACL and moved the front end listener to 443 and it all works... Pushed the cert for the web management page back to the self signed one and HAProxy is SSL offloading with the signed cert! Man cant thank you guys enough.
-
@spiker
Great!Remember, "Encrypt (SSL)" means, that HAproxy uses HTTPS to connect to the backend.
"SSL checks" means, that it checks the SSL certificate of the backend server. I.e. the certificate has to be valid. -
Thank you, I had that a bit flipped in my mind!
