• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Error in HA-PROXY ACL after Upgrade

Scheduled Pinned Locked Moved General pfSense Questions
8 Posts 2 Posters 990 Views 2 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L Offline
    luisenrique
    last edited by Sep 7, 2023, 12:58 PM

    Hello beautiful people!

    Maybe this is a question for the HAProxy community, but perhaps someone here can help me as well. I had pfSense 2.6.0 with HAProxy package 0.61_11. I performed an upgrade to version 2.7.0 and HAProxy 0.63_1. After the upgrade, I encountered an error with a custom ACL: var(req.working_day) eq 1 || 2 || 3 || 4 || 5. I have properly defined the variable with the following http-request statement: http-request set-var(req.working_day) date,ltime(%u), and it was working fine. However, I am now getting the following error message: "Matching method must be specified first (using '-m') when using a sample fetch of this type ('var')."

    Any assistance or guidance regarding this issue would be highly appreciated. Thank you in advance!

    1 Reply Last reply Reply Quote 0
    • S Offline
      stephenw10 Netgate Administrator
      last edited by Sep 7, 2023, 1:30 PM

      Can you show exactly where you have configured that?

      L 1 Reply Last reply Sep 7, 2023, 1:53 PM Reply Quote 0
      • L Offline
        luisenrique @stephenw10
        last edited by luisenrique Sep 7, 2023, 1:57 PM Sep 7, 2023, 1:53 PM

        @stephenw10
        yes. in the frontend/Advanced pass thru i define the variable and the http-request
        88673007-9cdc-49d5-8f11-30f70aa989c2-image.png
        Theses opntion's http-request are not in the config GUI, but work, i'm tested and work, them in the same frontend in ACL config i call the variable defined in Advanced pass thru
        6d26249f-72c3-4b94-8e0d-8d5a8970bf39-image.png
        this was working in the previous version of HA-PROXY, i'm tested this config many many times. it is an error from this package
        will be useful if the GUI has theses options to define ACL and by working time and days.

        1 Reply Last reply Reply Quote 0
        • S Offline
          stephenw10 Netgate Administrator
          last edited by Sep 7, 2023, 2:39 PM

          Hmm, not an issue I've seen but the error indicates you must set the matching method when using a 'var' like that. That could be a new requirement.

          L 1 Reply Last reply Sep 7, 2023, 4:50 PM Reply Quote 0
          • L Offline
            luisenrique @stephenw10
            last edited by luisenrique Sep 7, 2023, 4:52 PM Sep 7, 2023, 4:50 PM

            @stephenw10
            Yes, I'm researching, but I don't remember where I saw these examples of configuration ACL. my pfsense ha-proxy worked with this configuration for a long time ago.
            I will search for the original solution, or if not, I will ask the HA-Proxy community for help.
            In the meantime I will have to go back to my previous version, how can I install the previous version of ha-proxy? I have never downgraded a package in pfsense
            thanks

            1 Reply Last reply Reply Quote 0
            • S Offline
              stephenw10 Netgate Administrator
              last edited by Sep 7, 2023, 5:14 PM

              There is only one pkg version in the repo, other than the HAProxy dev version which you might try.

              To downgrade HAProxy you would need to also reinstall 2.6.

              Steve

              L 1 Reply Last reply Sep 7, 2023, 5:27 PM Reply Quote 0
              • L Offline
                luisenrique @stephenw10
                last edited by Sep 7, 2023, 5:27 PM

                @stephenw10
                thanks 😧 😲

                1 Reply Last reply Reply Quote 0
                • S Offline
                  stephenw10 Netgate Administrator
                  last edited by Sep 7, 2023, 5:52 PM

                  If it's a bug in GAProxy it might be fixed in the dev version of the package. It uses 2.8.d12 vs 2.7.8 in the standard pkg.

                  1 Reply Last reply Reply Quote 0
                  8 out of 8
                  • First post
                    8/8
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                    This community forum collects and processes your personal information.
                    consent.not_received