Quantcast
Channel: Serverphorums.com - HAProxy
Viewing all articles
Browse latest Browse all 5112

send-proxy requests not added to stick-table (2 replies)

$
0
0
Hi,
I've run into a strange phenomenon and I'm not sure if it's something
I'm doing wrong.

I have one SSL offloading frontend that receives requests, does
"http-request set-header X-Forwarded-Proto https" and then uses
send-proxy to forward the request to the plain http backend.

In the plain http frontend there is a check if the X-Forwarded-Proto
header is set to https and if that is *not* the case the client is
redirected to the SSL frontend.

In the http frontend I added the following two lines:
stick-table type ip size 200k expire 30s store gpc0,http_req_rate(10s)
tcp-request connection track-sc1 src

The problem I now run into is the following: When I access the site via
http I get an entry in the stick-table and I'm redirected to the SSL
frontend as expected but when I access the SSL frontend directly no
entry gets added. It looks as if the requests that get forwarded using
send-proxy completely bypass the tracking.

Is this expected?

I was thinking about moving the tracking to the SSL frontend but that
uses nbproc > 1 and I know that this causes issues with stick-tables and
peers so I'm hoping there is some other way I can get all requests
properly tracked.

Regards,
Dennis

Viewing all articles
Browse latest Browse all 5112

Trending Articles