HELP: HAProxy

canefield

Marcello,

I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

In underneath link a saw a how-to, but whithout luck:
http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
So far I understand I configure this for each Frontend? What Username & Password should I give in?

Thanks,
Canefield

marcelloc

Try the haproxy-full package.

It's the one I use.

canefield

Still no luck with pfSense and HAProxy nor HAProxy-Full. I'm still trying to complete the process to make Exchange (with all functionality) and SMTP available in a Load Balanced and Reverse Proxy scheme. Can you/anybody help me out?

@canefield:

Marcello,

I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

In underneath link a saw a how-to, but whithout luck:
http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
~~So far I understand I configure this for each Frontend? What Username & Password should I give in?~~
As far I have read the statistics are only available on the pfSense box; so http://192.168.x.y/haproxy?stats. It doesn't work. I can't see a thing. Furthermore, how to configure '/haproxy?stats' while using multiple Frontends? All linking to the same address?

Thanks,
Canefield

KR,
Canefield

marcelloc

Canefield,

I'm working on apache-modsecurity package to offer a definitive reverse proxy package to pfsense.

I found some extra configs on apache to get it working with owa but I have some deadlines this month on my job and apache new gui package is quite stopped.

Wait some time until I finish it. ;)

att,
Marcello Coutinho

canefield

Marcello,

Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
If it is finished please send me an PM.

Thx,
Canefield

canefield

@canefield:

Marcello,

Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
If it is finished please send me an PM.

Thx,
Canefield

Marcello, any update yet?

marcelloc

@canefield:

Marcello, any update yet?

Not yet, I'm really busy on my job and last month I had no time for package devel. :(

canefield

Marcello,

No problem. Do you have any estimate?

Thanks,
Canefield

marcelloc

@canefield:

No problem. Do you have any estimate?

Ill release a devel version soon with current code. I need some patches applied on mod_security freebsd ports to get all features working but after about 50 days, its still not merged by package commiter

nimamhd

Hello
i install haproxy-full 1.4.21 pkg v 1.0 on pfsense 2.0.1 and configure it with 3 webserver,
it works but do not insert cookies to clients and keep switching between servers.
what`a wrong with my config? ???
i use Round robin Balance in HTTP Type.

Thanks a lot.

canefield

Dear Nimamhd,

How did you managed this? Do you also have one external IP? Forwarding based on host-header in case of port 80 and 443? Did you managed the '/haproxy?stats' part?

I really hope you can help me out though.

KR,
Canefield

marcelloc

@canefield:

…Forwarding based on host-header in case of port 443....

I think haproxy can balance only 443 connections without checking host header.

It will work fine on server pools that has the same config.

I`ll try to speed up apache2 devel package to help you. some features will be left out as I need changes on ports.

marcelloc

@nimamhd:

what`a wrong with my config? ???
I use Round robin Balance in HTTP Type.

Change it to source instead of round-robin

nimamhd

Hello Dear marcelloc

It works when use Source instead of round robin.
but why the cookies dose not insert to client?

I was googleing and found " http://www.howtoforge.com/forums/archive/index.php/t-34573.html "

They have my problem, how can i add " cookie JSESSIONID insert " in to the HAproxy Config File?

Thanx.

nimamhd

@canefield:

Dear Nimamhd,

How did you managed this? Do you also have one external IP? Forwarding based on host-header in case of port 80 and 443? Did you managed the '/haproxy?stats' part?

I really hope you can help me out though.

KR,
Canefield

Hi Canefield

I have one External IP and Forwarding port 80 , /haproxy?stats works fine .
i had a problem when i use " NAT Port Forwarding " at the same time with same External Ip address. i disabled the Port Fw, and "/haproxy?stats" gone ok.

marcelloc

@nimamhd:

It works when use Source instead of round robin.
but why the cookies dose not insert to client?

Did you configure cookie on servers tab?

nimamhd

@marcelloc:

@nimamhd:

It works when use Source instead of round robin.
but why the cookies dose not insert to client?

Did you configure cookie on servers tab?

Yes , i configure it .

nimamhd

Finally the problem was solved . i add " cookie XXXX insert indirect nocache " in to front end "Advanced pass thru" , it works perfectly .

server insert cookie to clients now.

Thanx A lot team.

marcelloc

So this field should be custom options instead of Advanced pass thru ?

Just another hint from haproxy mailing list.

If you want/need to detect offline servers, configure haproxy to use only one processor instead of detected cpus.

nimamhd

I was bewildered with " Advanced pass thru "`s name actually .

Thanks again marcelloc for your help