Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    May have found a bug in HaProxy using SSL backend / SSL health check

    Scheduled Pinned Locked Moved Cache/Proxy
    4 Posts 4 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      ki3den
      last edited by

      Hi there,

      I am using HaProxy on a pfsense + 1100. I believe I may have found a bug in the implementation of the backend, with regard to health checks.

      (I am not exactly sure where to post this...)

      I personally have not been able to get the checks to work; however, I do keep trying.

      Anyway, I had an SSL backend server, and had just switched over to it, so I tried using the SSL check to test it. Not sure why it failed, but, it did. So I switched it back to None.

      Now, when I saved, I got the error:
      config : Server <server>_ipvANY/<server> is DOWN, changed from server-state after a reload. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.

      So, I spent like half a day troubleshooting, trying different things, switching it back to HTTP, etc etc.

      But eventually ... I copied the config. Saved it, edited the frontend to point to the copy. And it worked.

      It was like the check was still there, even though I set it to None.

      T 1 Reply Last reply Reply Quote 4
      • T
        tomasenskede @ki3den
        last edited by

        @ki3den said in May have found a bug in HaProxy using SSL backend / SSL health check:

        Hi there,

        I am using HaProxy on a pfsense + 1100. I believe I may have found a bug in the implementation of the backend, with regard to health checks.

        (I am not exactly sure where to post this...)

        I personally have not been able to get the checks to work; however, I do keep trying.

        Anyway, I had an SSL backend server, and had just switched over to it, so I tried using the SSL check to test it. Not sure why it failed, but, it did. So I switched it back to None.

        Now, when I saved, I got the error:
        config : Server <server>_ipvANY/<server> is DOWN, changed from server-state after a reload. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.

        So, I spent like half a day troubleshooting, trying different things, switching it back to HTTP, etc etc.

        But eventually ... I copied the config. Saved it, edited the frontend to point to the copy. And it worked.

        It was like the check was still there, even though I set it to None.

        I've encountered the same error. Could you please explain how you resolved it by copying and reconfiguring?

        1 Reply Last reply Reply Quote 1
        • S
          sun2006
          last edited by

          I am facing the same issue... Please guide.

          kiokomanK 1 Reply Last reply Reply Quote 0
          • kiokomanK
            kiokoman LAYER 8 @sun2006
            last edited by kiokoman

            it's a long time that there is this problem, the only solution i found was to remove the backend and reconfigure it, also changing destination port does not work

            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
            Please do not use chat/PM to ask for help
            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

            1 Reply Last reply Reply Quote 0
            • V VMlabman referenced this topic on
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.