HAProxy will hangs when I upgrade to pfsense 2.3.4

jimp

OK, that I can reproduce on 2.3.4 and 2.4. The key is having the DNS resolver configured inside haproxy. It appears to get hung up attempting to query the UNIX socket for stats. Even if I try to hit that manually, it never receives a response. If I start haproxy manually in the foreground (Disable daemon mode), the stats command succeeds.

cjbujold

I can also confirm that if I remove the DNS entries in Haproxy it no longer hangs pfsense. However, it is still not routing the calls to any internal server. I presume the daemon issue still exist.

ringo

@cjbujold:

However, it is still not routing the calls to any internal server.

Does it show a 503 service unavailable error?

–-
EDIT: Could you try disabling ssl offloading (if enabled) and see if it work or not?

cjbujold

Got it to work, Had a typo (SSL) and once fixed everything seems to work like normal as long as I do not add any DNS entries into haproxy.

Thanks for all the help, much appreciated.

jimp

FYI- Same problem with haproxy 1.7.4 on plain FreeBSD, so not specific to our package. I did just copy over the config and adjust though, so it could be in one of the directives there but nothing seems obvious yet. Still trying things out.

jimp

Same problem with 1.7.5 also on FreeBSD.

jimp

OK, I reported the issue upstream and I have a lead on fixing our local copy until they can work on a fix. Won't be long now, at least for a temporary fix.

jimp

New version of HAProxy is up which has the problematic commits removed. Works OK here with resolvers configured in HAProxy.

Update and give it a try.

https://redmine.pfsense.org/issues/7533

ringo

Thank you @jimp for the update, it works great for me!

jimp

@Cow:

Thank you @jimp for the update, it works great for me!

Thank YOU for finding the way to reproduce it! ;D

gjurriens

Thank you all for resolving this issue.
It seemed I had the exact same problem with the DNSes in the HAproxy config.

I'm glad it is resolved, now I don't need to keep a putty session open anymore to keep HAproxy running.

jimp

I updated the haproxy again with a new patch that seems to be a better fix. If anyone has problems with the new version, let me know.

DuSt

Thank you @jimp. The new version works as expected, no hanging anymore. Great job!

nish

Sorry about the noob question in advance, but can someone please advise or point me in the right direction on how to update to the fix? I have tried a reinstall and it hasn't worked.