#HAproxy users here?
Why can't I reference a request variable in map()?
i.e. var(),map(file,%[var(req.fallback)])
I use reverse proxy only for applications internal to my network (about 15 applications) and use #pFsense , #HAProxy and Acme certificates. I don't have a particular reason, I started with this about 3 years ago, I've never had any problems, and left it as it is
For all applications that are exposed on the internet I use CloudFlare Tunnel for now , soon I will use Pangolin on VPS
What I wanted to do:
Move this mastodon instance from its current datacenter location to my homelab.
What I did:
Update all my #proxmox nodes to the latest release, remove #haproxy and #acme packages from #pfsense in favour of a dedicated machine handling it.
That machine, however, still needs an ansible role and playbook to be written, in order to set it up
Let's gooooo!
Who's up for a multi-modloader #HAProxy protocol mod for #Minecraft?
I.e. As many versions as possible of #Fabric, #Forge and #NeoForge - in one file.
Did a quick writeup of how I use #anubis behind #haproxy in my #homelab.
https://mktbs.net/blog/2025/05/19/running-anubis-behind-haproxy/
Thanks to @cadey for the project. Support them!
In case you're interested in running a bleeding edge #reverseproxy with an optimized #SSL library: read this blog post (of mine) on "Compiling HAProxy with WolfSSL":
Advisory Alert!
We've just published our Aleandro Prudenzano's advisory (in cooperation with Edoardo Geraci) regarding a heap overflow in HAProxy as part of our coordinated disclosure process. Read all the details here: https://www.doyensec.com/research.html#haproxy_heap_buffer_overflow_CVE_2025_32464
“AWS-LC looks like a very active project with a strong community. […] Even the recently reported performance issue was quickly fixed and released with the next version. […] This is definitely a library that anyone interested in the topic should monitor.”
#OpenSSL #BoringSSL #WolfSSL #AWSLC #HAProxy #OpenSource #FreeSoftware #FOSS #OSS #TLS #QUIC
https://www.haproxy.com/blog/state-of-ssl-stacks
@f4grx @nixCraft @torproject not really.
I do this with #pfSense & #pfBlockerNG for quite a while…
And the same #blocklist also works for other applications like #nginx, #HAproxy, #httpd, etc.
Le numéro mai-juin de Linux Pratique (disponible en kiosque dans une semaine) contient mon nouvel article traitant de la gestion de #haproxy à l'aide de #terraform.
Si vous le lisez, n'hésitez pas à me partager vos retours
#HAProxy v.3 Installationsanleitung
Mit Hilfe unserer Installationsanleitung für den HAProxy Version 3 stable (LTS) können Sie beispielsweise zwei verschiedene Cloud-Anwendungen parallel betreiben und diese mit LetsEncrypt Zertifikaten versorgen. Wir nutzen dafür einen Mixed Mode, also Layer 6 (http) und Layer 4 (tcp für https) in der HAProxy-Konfiguration.
Der HAProxy agiert dabei als klassischer ReverseProxy und kann auf Wunsch auch zum Loadbalancer erweitert werden.
Nachfolgend stellen wir dafür unsere HAProxy-Konfiguration aus dem Labor bereit. Diese nutzen wir bspw. für unsere Cloud-Testinstanzen (bspw. #Nextcloud und #opencloud auf einem dedizierten Server. Die SSL-Terminierung übernimmt dabei das jeweilige Backend, also Nextcloud und OpenCloud und nicht der HAProxy selbst. Der HAProxy reicht die https-Anfragen an die Anwendung durch und agiert im tcp-Mode (Layer 4) quasi transparent.
https://www.c-rieger.de/haproxy-installationsanleitung/
I've performed some tests, and it's great. #snac and #haproxy are working great together - now with caching of media and json responses, to scale up, and up, and up...and up!
#Varnish is the best tool for caching, but the setup I've tested doesn't require it and it's still good enough.
I think this will be a blog post, as soon as I'll have enough time.
I just unfollowed #HAProxy from Twitter, but it seems they are not here on the Fediverse.
A pity, I will miss them.