Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Error in HA-PROXY ACL after Upgrade

    General pfSense Questions
    2
    8
    793
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      luisenrique
      last edited by

      Hello beautiful people!

      Maybe this is a question for the HAProxy community, but perhaps someone here can help me as well. I had pfSense 2.6.0 with HAProxy package 0.61_11. I performed an upgrade to version 2.7.0 and HAProxy 0.63_1. After the upgrade, I encountered an error with a custom ACL: var(req.working_day) eq 1 || 2 || 3 || 4 || 5. I have properly defined the variable with the following http-request statement: http-request set-var(req.working_day) date,ltime(%u), and it was working fine. However, I am now getting the following error message: "Matching method must be specified first (using '-m') when using a sample fetch of this type ('var')."

      Any assistance or guidance regarding this issue would be highly appreciated. Thank you in advance!

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Can you show exactly where you have configured that?

        L 1 Reply Last reply Reply Quote 0
        • L
          luisenrique @stephenw10
          last edited by luisenrique

          @stephenw10
          yes. in the frontend/Advanced pass thru i define the variable and the http-request
          88673007-9cdc-49d5-8f11-30f70aa989c2-image.png
          Theses opntion's http-request are not in the config GUI, but work, i'm tested and work, them in the same frontend in ACL config i call the variable defined in Advanced pass thru
          6d26249f-72c3-4b94-8e0d-8d5a8970bf39-image.png
          this was working in the previous version of HA-PROXY, i'm tested this config many many times. it is an error from this package
          will be useful if the GUI has theses options to define ACL and by working time and days.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, not an issue I've seen but the error indicates you must set the matching method when using a 'var' like that. That could be a new requirement.

            L 1 Reply Last reply Reply Quote 0
            • L
              luisenrique @stephenw10
              last edited by luisenrique

              @stephenw10
              Yes, I'm researching, but I don't remember where I saw these examples of configuration ACL. my pfsense ha-proxy worked with this configuration for a long time ago.
              I will search for the original solution, or if not, I will ask the HA-Proxy community for help.
              In the meantime I will have to go back to my previous version, how can I install the previous version of ha-proxy? I have never downgraded a package in pfsense
              thanks

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                There is only one pkg version in the repo, other than the HAProxy dev version which you might try.

                To downgrade HAProxy you would need to also reinstall 2.6.

                Steve

                L 1 Reply Last reply Reply Quote 0
                • L
                  luisenrique @stephenw10
                  last edited by

                  @stephenw10
                  thanks 😧 😲

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    If it's a bug in GAProxy it might be fixed in the dev version of the package. It uses 2.8.d12 vs 2.7.8 in the standard pkg.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.