Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HELP: HAProxy

    pfSense Packages
    3
    24
    14.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      canefield
      last edited by

      Dear all,

      Is there any pfSense documentation about how-to configure HAProxy (Settings, Frontends and Servers).

      In the settings tab there is a 'Maxinum connections'…how many to choose. What system resource is being used? The part about 'Global Advanced pass thru'...what to/may be entered? How to configure the 'Frontends' and 'Servers' in detail? Can I make use of 'Host-Header', URIs or SSL-offloading?

      Thanks,
      Canefield

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        there is a doc http://doc.pfsense.org/index.php/Haproxy_package
        and some threads about haproxy
        http://forum.pfsense.org/index.php/topic,46558.0.html
        http://forum.pfsense.org/index.php/topic,43188.0.html

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • C
          canefield
          last edited by

          Sorry guys,

          Bud for some reason HAProxy doesn't work for me…I've filled in the 'Frontends' as well as the 'Servers'. Can I test or view some logs why it isn't working? How? Has somebody a good screenshot/how-to configure HAProxy?

          Furthermore the '/haproxy?stats' is not working, how come? So browsing to my pfSense box (http://192.168.x.y:81/haproxy?stats).

          Thanks,
          Canefield

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            canefield,

            what haproxy version are you using?

            The stats is the best place to see what is working and what is not working.

            Try to startup it via console to see if there are some config errors…

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • C
              canefield
              last edited by

              Marcello,

              I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
              While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

              In underneath link a saw a how-to, but whithout luck:
              http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
              Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

              Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
              So far I understand I configure this for each Frontend? What Username & Password should I give in?

              Thanks,
              Canefield

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                Try the haproxy-full package.

                It's the one I use.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • C
                  canefield
                  last edited by

                  Still no luck with pfSense and HAProxy nor HAProxy-Full. I'm still trying to complete the process to make Exchange (with all functionality) and SMTP available in a Load Balanced and Reverse Proxy scheme. Can you/anybody help me out?

                  @canefield:

                  Marcello,

                  I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
                  While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

                  In underneath link a saw a how-to, but whithout luck:
                  http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
                  Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

                  Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
                  So far I understand I configure this for each Frontend? What Username & Password should I give in?
                  As far I have read the statistics are only available on the pfSense box; so http://192.168.x.y/haproxy?stats. It doesn't work. I can't see a thing. Furthermore, how to configure '/haproxy?stats' while using multiple Frontends? All linking to the same address?

                  Thanks,
                  Canefield

                  KR,
                  Canefield

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    Canefield,

                    I'm working on apache-modsecurity package to offer a definitive reverse proxy package to pfsense.

                    I found some extra configs on apache to get it working with owa but I have some deadlines this month on my job and apache new gui package is quite stopped.

                    Wait some time until I finish it.  ;)

                    att,
                    Marcello Coutinho

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • C
                      canefield
                      last edited by

                      Marcello,

                      Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
                      If it is finished please send me an PM.

                      Thx,
                      Canefield

                      1 Reply Last reply Reply Quote 0
                      • C
                        canefield
                        last edited by

                        @canefield:

                        Marcello,

                        Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
                        If it is finished please send me an PM.

                        Thx,
                        Canefield

                        Marcello, any update yet?

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @canefield:

                          Marcello, any update yet?

                          Not yet, I'm really busy on my job and last month I had no time for package devel.  :(

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • C
                            canefield
                            last edited by

                            Marcello,

                            No problem. Do you have any estimate?

                            Thanks,
                            Canefield

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @canefield:

                              No problem. Do you have any estimate?

                              Ill release a devel version soon with current code. I need some patches applied on mod_security freebsd ports to get all features working but after about 50 days, its still not merged by package commiter

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • N
                                nimamhd
                                last edited by

                                Hello
                                i install haproxy-full 1.4.21 pkg v 1.0 on pfsense 2.0.1 and configure it with 3 webserver,
                                it works but do not insert cookies to clients and keep switching between servers.
                                what`a wrong with my config? ???
                                i use Round robin Balance in HTTP Type.

                                Thanks a lot.

                                1 Reply Last reply Reply Quote 0
                                • C
                                  canefield
                                  last edited by

                                  Dear Nimamhd,

                                  How did you managed this? Do you also have one external IP? Forwarding based on host-header in case of port 80 and 443? Did you managed the '/haproxy?stats' part?

                                  I really hope you can help me out though.

                                  KR,
                                  Canefield

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    @canefield:

                                    …Forwarding based on host-header in case of port 443....

                                    I think haproxy can balance only 443 connections without checking host header.

                                    It will work fine on server pools that has the same config.

                                    I`ll try to speed up apache2 devel package to help you. some features will be left out as I need changes on ports.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @nimamhd:

                                      what`a wrong with my config? ???
                                      I use Round robin Balance in HTTP Type.

                                      Change it to source instead of round-robin

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • N
                                        nimamhd
                                        last edited by

                                        Hello Dear marcelloc

                                        It works when use Source instead of round robin.
                                        but why the cookies dose not insert to client?

                                        I was googleing and found " http://www.howtoforge.com/forums/archive/index.php/t-34573.html "

                                        They have my problem, how can i add " cookie JSESSIONID insert " in to the HAproxy Config File?

                                        Thanx.

                                        1 Reply Last reply Reply Quote 0
                                        • N
                                          nimamhd
                                          last edited by

                                          @canefield:

                                          Dear Nimamhd,

                                          How did you managed this? Do you also have one external IP? Forwarding based on host-header in case of port 80 and 443? Did you managed the '/haproxy?stats' part?

                                          I really hope you can help me out though.

                                          KR,
                                          Canefield

                                          Hi Canefield

                                          I have one External IP and Forwarding port 80 , /haproxy?stats works fine .
                                          i had a problem when i use " NAT Port Forwarding " at the same time with same External Ip address. i disabled the Port Fw, and "/haproxy?stats" gone ok.

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @nimamhd:

                                            It works when use Source instead of round robin.
                                            but why the cookies dose not insert to client?

                                            Did you configure cookie on servers tab?

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.