May have found a bug in HaProxy using SSL backend / SSL health check

[ki3den]

Hi there,

I am using HaProxy on a pfsense + 1100. I believe I may have found a bug in the implementation of the backend, with regard to health checks.

(I am not exactly sure where to post this...)

I personally have not been able to get the checks to work; however, I do keep trying.

Anyway, I had an SSL backend server, and had just switched over to it, so I tried using the SSL check to test it. Not sure why it failed, but, it did. So I switched it back to None.

Now, when I saved, I got the error:
config : Server <server>_ipvANY/<server> is DOWN, changed from server-state after a reload. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.

So, I spent like half a day troubleshooting, trying different things, switching it back to HTTP, etc etc.

But eventually ... I copied the config. Saved it, edited the frontend to point to the copy. And it worked.

It was like the check was still there, even though I set it to None.

[tomasenskede]

@ki3den said in May have found a bug in HaProxy using SSL backend / SSL health check:

Hi there,

I am using HaProxy on a pfsense + 1100. I believe I may have found a bug in the implementation of the backend, with regard to health checks.

(I am not exactly sure where to post this...)

I personally have not been able to get the checks to work; however, I do keep trying.

Anyway, I had an SSL backend server, and had just switched over to it, so I tried using the SSL check to test it. Not sure why it failed, but, it did. So I switched it back to None.

Now, when I saved, I got the error:
config : Server <server>_ipvANY/<server> is DOWN, changed from server-state after a reload. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.

So, I spent like half a day troubleshooting, trying different things, switching it back to HTTP, etc etc.

But eventually ... I copied the config. Saved it, edited the frontend to point to the copy. And it worked.

It was like the check was still there, even though I set it to None.

I've encountered the same error. Could you please explain how you resolved it by copying and reconfiguring?

[sun2006]

I am facing the same issue... Please guide.

[kiokoman]

it's a long time that there is this problem, the only solution i found was to remove the backend and reconfigure it, also changing destination port does not work