Skip to content

Fix HaProxy config for ipv6 and logging #821

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nesitor merged 4 commits into from
Jul 15, 2025
Merged

Fix HaProxy config for ipv6 and logging #821

Changes from 2 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
31cfdbb
HaProxy force bind to ipv6
olethanh Jul 15, 2025
d1d0e73
HaProxy send log to stdout
olethanh Jul 15, 2025
dd0d5b8
Fix: Added missing IPv6 handling on metrics route
nesitor Jul 15, 2025
18c765e
HaProxy Certbots make certificate challange possible without stopping…
olethanh Jul 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions packaging/aleph-vm/etc/haproxy/haproxy-aleph.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,7 @@


global
log /dev/log local0
log /dev/log local1 notice
log stdout format raw local0
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin
stats timeout 30s
Expand Down Expand Up @@ -48,7 +47,8 @@ frontend stats

# Frontend for HTTPS traffic (with SNI extraction)
frontend ft_ssl
bind *:443
bind :::443 v4v6

mode tcp

# Inspect SSL handshake
Expand All @@ -65,7 +65,7 @@ frontend ft_ssl

# Frontend for HTTP traffic (with Host header extraction)
frontend ft_http
bind *:80
bind :::80 v4v6
mode http

# Extract Host header and store it
Expand All @@ -77,7 +77,7 @@ frontend ft_http

# Frontend for SSH and other TCP traffic
frontend ft_ssh
bind *:2222
bind :::2222 v4v6
#ssl crt /etc/haproxy/certs/ssl.pem
mode tcp

Expand Down Expand Up @@ -106,8 +106,8 @@ backend bk_http
mode http
# Use the appropriate variable based on the traffic type
# For HTTP - Use Host header
use-server %[var(txn.host),lower,map(/etc/haproxy/http_domains.map)] if { var(txn.host) -m found }
http-request set-header Host %[req.hdr(host)]
use-server %[var(txn.host),lower,map(/etc/haproxy/http_domains.map)] if { var(txn.host) -m found }
server web1 127.0.0.1:4020

# Default to fallback to the aleph-vm supervisor
Expand Down
Loading