Haproxy, cloudflare and Blazor websocket

[aniodon]

Hello everyone !

I struggle with my haproxy setup and i am looking for an external advice...

We host a Blazor website. This tech use a signalr websocket which needs to remain on the same backend.

The setup is as follows :
Cloudflare->pfsense->iis
We have ssl certificate on our iis, and cloudflare is on strict setup

I tried a lot of différent configuration to have a sticky connexion to a backend, including :

• cookie (not available in https tcp mode)and offloading not possible for Security reasons
• source ip : not reliable as cloudflare outbound ip constantly changes
• ssl session (strictly following https://www.haproxy.com/fr/blog/maintain-affinity-based-on-ssl-session-id/) : in this setup i have a stick table well populated but it seems that my websocket connexion is still interrupted by changing the backend

Right now, the only way i have to make my website work is to inactive a backend so all request goes to one backend. Not what i expect though... :)

I know this setup is not common, but has someone experienced such issue ?

Really appreciate your feedback Here.

Have a Nice day !

Olivier