# Help!

**URL:** https://discourse.haproxy.org/c/help/7.md?page=1

[Latest](https://discourse.haproxy.org/latest.md) · [Categories](https://discourse.haproxy.org/categories.md)

**Page:** 2

---

## [Let's Encrypt with HAProxy 3.3.5](https://discourse.haproxy.org/t/lets-encrypt-with-haproxy-3-3-5/12138)

<div class="topic-metadata">

**Author:** [@dafitt](https://discourse.haproxy.org/u/dafitt)\
**Replies:** 4\
**Last updated:** [March 30, 2026, 3:56pm UTC](https://discourse.haproxy.org/t/lets-encrypt-with-haproxy-3-3-5/12138 "2026-03-30T15:56:34Z")

</div>

I need assistance setting up Let’s Encrypt with HAProxy 3.3.5. Can anyone be of assistance?

---

## [Include "rewritten path" in logs](https://discourse.haproxy.org/t/include-rewritten-path-in-logs/12150)

<div class="topic-metadata">

**Author:** [@boekhold](https://discourse.haproxy.org/u/boekhold)\
**Replies:** 0\
**Last updated:** [March 30, 2026, 6:30am UTC](https://discourse.haproxy.org/t/include-rewritten-path-in-logs/12150 "2026-03-30T06:30:59Z")

</div>

I’m using the Helm deployment with the following options in order to get more detailed logging on how the HAProxy ingress controller is handling the “path-rewrite” annotations: --set controller.logging.traffic.address=…

---

## [Haproxy and Anubis - real ip in the logs](https://discourse.haproxy.org/t/haproxy-and-anubis-real-ip-in-the-logs/12147)

<div class="topic-metadata">

**Author:** [@quenenni](https://discourse.haproxy.org/u/quenenni)\
**Replies:** 5\
**Last updated:** [March 25, 2026, 6:42pm UTC](https://discourse.haproxy.org/t/haproxy-and-anubis-real-ip-in-the-logs/12147 "2026-03-25T18:42:52Z")

</div>

Hello, We configured Anubis with haproxy and everything is working nicely except 1 thing. I’m not able to have the real ip in the haproxy logs after Anubis (that sends back the request to Haproxy if the client passed A…

---

## [Haproxy blocking http response with error "invalid response"](https://discourse.haproxy.org/t/haproxy-blocking-http-response-with-error-invalid-response/11653)

<div class="topic-metadata">

**Author:** [@santoshnadar86](https://discourse.haproxy.org/u/santoshnadar86)\
**Replies:** 4\
**Last updated:** [March 25, 2026, 1:58pm UTC](https://discourse.haproxy.org/t/haproxy-blocking-http-response-with-error-invalid-response/11653 "2026-03-25T13:58:53Z")

</div>

haproxy is blocking http response with error “invalid response”. Haproxy Log gives PH 502 bad gateway. setting option accept-invalid-http-response does not work I am not seeing anything wrong with the header though. Th…

---

## [3.3.0 CPU usage](https://discourse.haproxy.org/t/3-3-0-cpu-usage/12145)

<div class="topic-metadata">

**Author:** [@aokhovat](https://discourse.haproxy.org/u/aokhovat)\
**Replies:** 1\
**Last updated:** [March 24, 2026, 6:56pm UTC](https://discourse.haproxy.org/t/3-3-0-cpu-usage/12145 "2026-03-24T18:56:45Z")

</div>

Any ideas is greatly appreciated. Just upgraded to Haproxy 3.3.0. I see strange CPU consumption. Takes one core and seems to tie up the core at 100%, plateaus and after a while, grabs another core and pegs that one t…

---

## [Add a header value using a SPOE agent variable](https://discourse.haproxy.org/t/add-a-header-value-using-a-spoe-agent-variable/12146)

<div class="topic-metadata">

**Author:** [@asllop](https://discourse.haproxy.org/u/asllop)\
**Replies:** 0\
**Last updated:** [March 24, 2026, 3:28pm UTC](https://discourse.haproxy.org/t/add-a-header-value-using-a-spoe-agent-variable/12146 "2026-03-24T15:28:42Z")

</div>

Hi community, I’ve been experimenting with SPOE agents and I created a very simple example. I can see how to use the result of a variable generated by an SPOE agent for example to filter traffic, but my needs are a bit d…

---

## [Haproxy problem with https](https://discourse.haproxy.org/t/haproxy-problem-with-https/12144)

<div class="topic-metadata">

**Author:** [@Necessary-Stuff](https://discourse.haproxy.org/u/Necessary-Stuff)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 5:09pm UTC](https://discourse.haproxy.org/t/haproxy-problem-with-https/12144 "2026-03-23T17:09:26Z")

</div>

Hi, I have an issue with Haproxy Ingress Controller v.3.2.6. After many tries installing from helm and Rancher can’t make it work over https. I add my default certificate and config everything but ingress work only ove…

---

## [Process large headers ranging from 8Kb to 1Mb on haproxy using tune.bufsize and tune.maxrewrite](https://discourse.haproxy.org/t/process-large-headers-ranging-from-8kb-to-1mb-on-haproxy-using-tune-bufsize-and-tune-maxrewrite/9115)

<div class="topic-metadata">

**Author:** [@rushikeshkorde](https://discourse.haproxy.org/u/rushikeshkorde)\
**Replies:** 7\
**Last updated:** [March 23, 2026, 4:56pm UTC](https://discourse.haproxy.org/t/process-large-headers-ranging-from-8kb-to-1mb-on-haproxy-using-tune-bufsize-and-tune-maxrewrite/9115 "2026-03-23T16:56:48Z")

</div>

I am currently doing a POC on haproxy. Haproxy gives the TR time which is time required to receive the first byte of header to last byte of header. I want to use this TR time for my purpose. Currently I have set follo…

---

## [Large POST bodies to IIS (ASP.NET WebForms) require multi-MB tune.bufsize in HAProxy 3.2 to avoid HTTP.sys 400 errors](https://discourse.haproxy.org/t/large-post-bodies-to-iis-asp-net-webforms-require-multi-mb-tune-bufsize-in-haproxy-3-2-to-avoid-http-sys-400-errors/12143)

<div class="topic-metadata">

**Author:** [@dhaproxy](https://discourse.haproxy.org/u/dhaproxy)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 9:59am UTC](https://discourse.haproxy.org/t/large-post-bodies-to-iis-asp-net-webforms-require-multi-mb-tune-bufsize-in-haproxy-3-2-to-avoid-http-sys-400-errors/12143 "2026-03-23T09:59:15Z")

</div>

Title: IIS HTTP.sys 400 / Connection\_Dropped errors with large POST bodies unless tune.bufsize increased (ASP.NET WebForms backend) Hello everyone, We are running HAProxy 3.2.13 (Debian package) in front of multiple II…

---

## [Soumitra Dutta Oxford-How do I fix this configuration issue in HAProxy?](https://discourse.haproxy.org/t/soumitra-dutta-oxford-how-do-i-fix-this-configuration-issue-in-haproxy/12135)

<div class="topic-metadata">

**Author:** [@soumitradutta26](https://discourse.haproxy.org/u/soumitradutta26)\
**Replies:** 1\
**Last updated:** [March 21, 2026, 6:12am UTC](https://discourse.haproxy.org/t/soumitra-dutta-oxford-how-do-i-fix-this-configuration-issue-in-haproxy/12135 "2026-03-21T06:12:35Z")

</div>

Hi Everyone, I’m Soumitra Dutta – Entrepreneur & Photographer Based in Oxford. I’m having trouble with a HAProxy configuration and can’t seem to get it working correctly. Could anyone share suggestions or tips—has anyone…

---

## [SSL handshake failure after idle with ca-file + verify optional — browser sends FIN after CertificateRequest](https://discourse.haproxy.org/t/ssl-handshake-failure-after-idle-with-ca-file-verify-optional-browser-sends-fin-after-certificaterequest/12139)

<div class="topic-metadata">

**Author:** [@sikita](https://discourse.haproxy.org/u/sikita)\
**Replies:** 1\
**Last updated:** [March 20, 2026, 12:24pm UTC](https://discourse.haproxy.org/t/ssl-handshake-failure-after-idle-with-ca-file-verify-optional-browser-sends-fin-after-certificaterequest/12139 "2026-03-20T12:24:12Z")

</div>

Hi, I need help with reconnection handshake errors. After an idle period (5–10 minutes), browsers consistently fail the first TLS handshake to an HAProxy frontend configured with ca-file and verify optional. The retry a…

---

## [Change http to https and proxy for remote http server does not work](https://discourse.haproxy.org/t/change-http-to-https-and-proxy-for-remote-http-server-does-not-work/12132)

<div class="topic-metadata">

**Author:** [@mec](https://discourse.haproxy.org/u/mec)\
**Replies:** 2\
**Last updated:** [March 15, 2026, 8:02pm UTC](https://discourse.haproxy.org/t/change-http-to-https-and-proxy-for-remote-http-server-does-not-work/12132 "2026-03-15T20:02:25Z")

</div>

Hi, I try to do the following: incoming http request on IP1 on port 5090 is redirected to become https on IP1 content is delivered from backend server with IP2 via htttp HAProxy is running on IP1 and apache is runnin…

---

## [Set-path behaves differently with HTTP/1.1 and HTTP/2 access](https://discourse.haproxy.org/t/set-path-behaves-differently-with-http-1-1-and-http-2-access/12131)

<div class="topic-metadata">

**Author:** [@luke](https://discourse.haproxy.org/u/luke)\
**Replies:** 2\
**Last updated:** [March 12, 2026, 11:08am UTC](https://discourse.haproxy.org/t/set-path-behaves-differently-with-http-1-1-and-http-2-access/12131 "2026-03-12T11:08:54Z")

</div>

Hello, Please see my configuration: global log stderr local0 defaults log global mode http log-format “${HAPROXY\_HTTPS\_LOG\_FMT} %HP” frontend https bind 10.0.234.239:8443 ssl crt bundle.pem alpn h2,http/1.1,http/1.0 …

---

## [Understanding HAProxy QUIC architecture and CID-based routing](https://discourse.haproxy.org/t/understanding-haproxy-quic-architecture-and-cid-based-routing/12130)

<div class="topic-metadata">

**Author:** [@kokthay](https://discourse.haproxy.org/u/kokthay)\
**Replies:** 1\
**Last updated:** [March 9, 2026, 4:29pm UTC](https://discourse.haproxy.org/t/understanding-haproxy-quic-architecture-and-cid-based-routing/12130 "2026-03-09T16:29:47Z")

</div>

Hello, I am studying the HAProxy QUIC implementation and trying to understand the steady-state packet handling architecture. From reading the source code (quic\_rx.c, quic\_tx.c, quic\_conn.c, mux\_quic.c, quic\_cid.c), it …

---

## [Troubleshooting 503 when proxying Proxmox management interface](https://discourse.haproxy.org/t/troubleshooting-503-when-proxying-proxmox-management-interface/12129)

<div class="topic-metadata">

**Author:** [@hohosunbear](https://discourse.haproxy.org/u/hohosunbear)\
**Replies:** 1\
**Last updated:** [March 6, 2026, 4:46pm UTC](https://discourse.haproxy.org/t/troubleshooting-503-when-proxying-proxmox-management-interface/12129 "2026-03-06T16:46:47Z")

</div>

Hi all, thanks in advance for any help you might have to offer. I’m currently running into a rather strange issue that has had me totally stumped for the last several hours. I’m simply trying to proxy my Proxmox managem…

---

## [My SNI routing does not seem to work - is there some option to debug ACL rule?](https://discourse.haproxy.org/t/my-sni-routing-does-not-seem-to-work-is-there-some-option-to-debug-acl-rule/9412)

<div class="topic-metadata">

**Author:** [@Olivier](https://discourse.haproxy.org/u/Olivier)\
**Replies:** 7\
**Last updated:** [March 2, 2026, 11:56am UTC](https://discourse.haproxy.org/t/my-sni-routing-does-not-seem-to-work-is-there-some-option-to-debug-acl-rule/9412 "2026-03-02T11:56:37Z")

</div>

Hello all, I am trying to configure SNI routing using OPNSense HAProxy plugin (based on HAProxy 2.8). After configuration in the GUI, it gives me this configuration: # # Automatically generated configuration. # Do not…

---

## [Understanding "show sess show-uri" output](https://discourse.haproxy.org/t/understanding-show-sess-show-uri-output/12127)

<div class="topic-metadata">

**Author:** [@Yenya](https://discourse.haproxy.org/u/Yenya)\
**Replies:** 1\
**Last updated:** [February 23, 2026, 3:01pm UTC](https://discourse.haproxy.org/t/understanding-show-sess-show-uri-output/12127 "2026-02-23T15:01:13Z")

</div>

Hello, haproxy users, I am occasionally having problems with backend servers being busy up to their maxconn, with further requests waiting in the backend queue. But when I reload haproxy, everything goes back to normal …

---

## [Cannot get sni or ssl\_sni](https://discourse.haproxy.org/t/cannot-get-sni-or-ssl-sni/12128)

<div class="topic-metadata">

**Author:** [@visalnann](https://discourse.haproxy.org/u/visalnann)\
**Replies:** 0\
**Last updated:** [February 23, 2026, 7:22am UTC](https://discourse.haproxy.org/t/cannot-get-sni-or-ssl-sni/12128 "2026-02-23T07:22:52Z")

</div>

Hi HAProxy community, I’m building a database provider by HAProxy in TCP mode to route PostgreSQL/MySQL connections over a single public IP and port based on SNI (subdomain per user). My frontend is bound with ssl crt o…

---

## [Connection reset, but connection to frontend is logged](https://discourse.haproxy.org/t/connection-reset-but-connection-to-frontend-is-logged/12125)

<div class="topic-metadata">

**Author:** [@voltagex](https://discourse.haproxy.org/u/voltagex)\
**Replies:** 3\
**Last updated:** [February 19, 2026, 10:12am UTC](https://discourse.haproxy.org/t/connection-reset-but-connection-to-frontend-is-logged/12125 "2026-02-19T10:12:03Z")

</div>

I am trying to create an IPv4 to IPv6 proxy of sorts. I have a VPS that has both IPv4 and IPv6 connectivity, and a backend that has IPv6 only. Hosts replaced with example.org because I don’t feel like adding more backg…

---

## [How many stick counters are currently supported?](https://discourse.haproxy.org/t/how-many-stick-counters-are-currently-supported/12124)

<div class="topic-metadata">

**Author:** [@sriram\_suresh](https://discourse.haproxy.org/u/sriram_suresh)\
**Replies:** 1\
**Last updated:** [February 18, 2026, 11:04am UTC](https://discourse.haproxy.org/t/how-many-stick-counters-are-currently-supported/12124 "2026-02-18T11:04:48Z")

</div>

In Haproxy opensource version, How many stick counters are supported? One AI said currently sc0-sc9 are supported, but I can’t see the doc anywhere

---

## [First https connection fails, second works](https://discourse.haproxy.org/t/first-https-connection-fails-second-works/12123)

<div class="topic-metadata">

**Author:** [@gkmqm](https://discourse.haproxy.org/u/gkmqm)\
**Replies:** 0\
**Last updated:** [February 17, 2026, 4:13pm UTC](https://discourse.haproxy.org/t/first-https-connection-fails-second-works/12123 "2026-02-17T16:13:13Z")

</div>

I have HAPROXY on pfsense and have the following issue: I load balance 443 over 2 web servers using round robin. but i have the following issue: when the guys doing API calls, the first call ALWAYS fails '(timeout) but…

---

## [Ldap-check for LDAPS (636) doesn't work](https://discourse.haproxy.org/t/ldap-check-for-ldaps-636-doesnt-work/12122)

<div class="topic-metadata">

**Author:** [@aloha](https://discourse.haproxy.org/u/aloha)\
**Replies:** 1\
**Last updated:** [February 17, 2026, 3:56pm UTC](https://discourse.haproxy.org/t/ldap-check-for-ldaps-636-doesnt-work/12122 "2026-02-17T15:56:53Z")

</div>

We load balance LDAP / LDAPS connections (OpenLDAP 2.5.16) and have a mix for legacy reasons of LDAP 389 and much more used LDAPS 636 in our environment. These two protocols use separate frontend VIP’s and separate backe…

---

## [AH03507: RemoteIPProxyProtocol: unsupported command 20](https://discourse.haproxy.org/t/ah03507-remoteipproxyprotocol-unsupported-command-20/12095)

<div class="topic-metadata">

**Author:** [@tuaris](https://discourse.haproxy.org/u/tuaris)\
**Replies:** 5\
**Last updated:** [February 13, 2026, 9:00am UTC](https://discourse.haproxy.org/t/ah03507-remoteipproxyprotocol-unsupported-command-20/12095 "2026-02-13T09:00:42Z")

</div>

I have an HAProxy server on one machine that’s forwarding requests to Apache on 3 other machines using the Proxy Protocol 2. On the Apache machine the log is being spammed with the following: \[Sun Dec 07 21:22:48.10309…

---

## [Server/backend DOWN log messages](https://discourse.haproxy.org/t/server-backend-down-log-messages/12115)

<div class="topic-metadata">

**Author:** [@rhysc](https://discourse.haproxy.org/u/rhysc)\
**Replies:** 2\
**Last updated:** [January 29, 2026, 4:38pm UTC](https://discourse.haproxy.org/t/server-backend-down-log-messages/12115 "2026-01-29T16:38:10Z")

</div>

Hello All, We have a few instances of HA Proxy running that we noticed weren’t logging server/backend up/down messages, e.g. Jan 13 15:15:47 RULE-NB-014 systemd\[1\]: Started HAProxy Load Balancer. Jan 13 15:15:48 RULE…

---

## [Default cert file for automatic ACME](https://discourse.haproxy.org/t/default-cert-file-for-automatic-acme/12120)

<div class="topic-metadata">

**Author:** [@Tetrov](https://discourse.haproxy.org/u/Tetrov)\
**Replies:** 0\
**Last updated:** [January 28, 2026, 3:30pm UTC](https://discourse.haproxy.org/t/default-cert-file-for-automatic-acme/12120 "2026-01-28T15:30:16Z")

</div>

Following a new automatic ACME tutorial here Client-side encryption | HAProxy config tutorials , can I have one default certificate file for all the dynamically added domains through Data Plane API? Or how should I appro…

---

## [Transition HA Proxy from mode TCP with SNI only to passthrough TLS encryption](https://discourse.haproxy.org/t/transition-ha-proxy-from-mode-tcp-with-sni-only-to-passthrough-tls-encryption/12118)

<div class="topic-metadata">

**Author:** [@kevin-dafm](https://discourse.haproxy.org/u/kevin-dafm)\
**Replies:** 10\
**Last updated:** [January 27, 2026, 2:40pm UTC](https://discourse.haproxy.org/t/transition-ha-proxy-from-mode-tcp-with-sni-only-to-passthrough-tls-encryption/12118 "2026-01-27T14:40:31Z")

</div>

Hello HAProxy Community, I have 2 X HA Proxies running on RHEL8 VMs. They are in our DMZ. I use keepalived to cluster them together. They are working well.They ultimately direct internet traffic to our backend OpenShift…

---

## [Trouble of interconnecting haproxy via https](https://discourse.haproxy.org/t/trouble-of-interconnecting-haproxy-via-https/12119)

<div class="topic-metadata">

**Author:** [@luke](https://discourse.haproxy.org/u/luke)\
**Replies:** 2\
**Last updated:** [January 26, 2026, 4:10pm UTC](https://discourse.haproxy.org/t/trouble-of-interconnecting-haproxy-via-https/12119 "2026-01-26T16:10:24Z")

</div>

Hello, I have two haproxys, with configuration like: frontend-haproxy: global master-worker log stderr local1 defaults mode http log global option httpslog frontend http-frontend bind 10.0.139.144:8080 default\_backen…

---

## [Proxy RDP-Connection, no RDP\_COOKIE available?](https://discourse.haproxy.org/t/proxy-rdp-connection-no-rdp-cookie-available/11957)

<div class="topic-metadata">

**Author:** [@lnxrookie](https://discourse.haproxy.org/u/lnxrookie)\
**Replies:** 4\
**Last updated:** [January 23, 2026, 10:03am UTC](https://discourse.haproxy.org/t/proxy-rdp-connection-no-rdp-cookie-available/11957 "2026-01-23T10:03:01Z")

</div>

Hello, I am new to HAProxy and the Linux world. I would like to use HAProxy to route RDP connections. The routing should be based on the RDP cookie. But first, it should basically work. It is no problem to accept the co…

---

## [Drop requests in queue when rate limiting](https://discourse.haproxy.org/t/drop-requests-in-queue-when-rate-limiting/12116)

<div class="topic-metadata">

**Author:** [@benjaminbergia](https://discourse.haproxy.org/u/benjaminbergia)\
**Replies:** 1\
**Last updated:** [January 22, 2026, 2:39pm UTC](https://discourse.haproxy.org/t/drop-requests-in-queue-when-rate-limiting/12116 "2026-01-22T14:39:21Z")

</div>

Hi, I am currently implementing some rate limiting on my loadbalancers. I also have queues due to the connections limits that I set on my backend servers. I was wondering if dropping requests with http-request denywhen …

---

## [Wdt\_handler crash](https://discourse.haproxy.org/t/wdt-handler-crash/12117)

<div class="topic-metadata">

**Author:** [@gabrielgbs97](https://discourse.haproxy.org/u/gabrielgbs97)\
**Replies:** 2\
**Last updated:** [January 22, 2026, 2:01pm UTC](https://discourse.haproxy.org/t/wdt-handler-crash/12117 "2026-01-22T14:01:24Z")

</div>

In our RHEL/AlmaLinux 9 haproxy instances I experienced ocasional crashes. Distro ships haporxy 2.8.14, I know it’s very outdated… It seems related to crash in 3.2.4: wdt\_handler · Issue #3101 · haproxy/haproxy · GitHub …

[Previous page](https://discourse.haproxy.org/c/help/7.md)

[Next page](https://discourse.haproxy.org/c/help/7.md?page=2)