# HA proxy Backend serves Downs

**URL:** <https://discourse.haproxy.org/t/ha-proxy-backend-serves-downs/9210>\
**Category:** Help!\
**Created:** [November 5, 2023, 6:54pm UTC](https://discourse.haproxy.org/t/ha-proxy-backend-serves-downs/9210 "2023-11-05T18:54:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![safodz](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/safodz/32/2084_2.png) [@safodz](https://discourse.haproxy.org/u/safodz)\
**Post date:** [November 5, 2023, 6:54pm UTC](https://discourse.haproxy.org/t/ha-proxy-backend-serves-downs/9210/1 "2023-11-05T18:54:59Z")

</div>

Hi everyone

I have a HA proxy with 02 interfaces management and workload network, backend by a VMware Tanzu Clusters of 03 Nodes

So when I don’t add the default Route to the workload Network the HAproxy j it forward traffic to the backend serves and I can reach the WEB VIP address for my backed servers if I am in the same Network (workload) from client — HA ------Backend

But when I add a default route on the HAproxy to reach the Workload interface from outside, I could ping the VIP address from management LAN but no VIP Backend servers Web pages but it seems that like the HAproxy doesn’t forward the request to the backend server , and it says that No Server Available!!  
Despite the backend server are available and web service is up on ports 443 and H proxy is listening on the VIP:0443 as I already reached them in the first scenario

below is the log from the HA proxy for scenario 02

Could anyone hele on the root cause of this problems, ?

root@haproxy [~]# /usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-kube-system-kube-apiserver-lb-svc started.  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-vmware-system-csi-vsphere-csi-controller started.  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-kube-system-kube-apiserver-lb-svc-kube-apiserver started.  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-kube-system-kube-apiserver-lb-svc-nginx started.  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-vmware-system-csi-vsphere-csi-controller-ctlr started.  
Proxy domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-vmware-system-csi-vsphere-csi-controller-syncer started.

[NOTICE] 308/183151 (14115) : New worker #1 (14116) forked

[WARNING] 308/183153 (14116) : Server domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-kube-system-kube-apiserver-lb-svc-kube-apiserver/domain-c8:8830b39a-f678-40ad-bc2b-26fd07b79112-kube-system-kube-apiserver-lb-svc-192.168.231.201:6443 is DOWN,  
reason: Layer4 timeout, info: " at initial connection step of tcp-check", check duration: 2002ms. 2 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [November 6, 2023, 4:36pm UTC](https://discourse.haproxy.org/t/ha-proxy-backend-serves-downs/9210/2 "2023-11-06T16:36:44Z")

</div>

Sounds like you need help to setup routing; this is not directly related to haproxy.

Not sure if you will find the what you are looking for in this forum.

---

<div class="post-metadata">

**Author:** ![safodz](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/safodz/32/2084_2.png) [@safodz](https://discourse.haproxy.org/u/safodz)\
**Post date:** [November 19, 2023, 6:51pm UTC](https://discourse.haproxy.org/t/ha-proxy-backend-serves-downs/9210/3 "2023-11-19T18:51:57Z")

</div>

Hi  
Thanks for reply , Yes you are right I confirm that it is a Routing issue between the HAproxy and VMware Tanzu Supervisor cluster Workload Network , I used to add static route to my workstation in order to access to the VIP on the Haproxy Load balancer.

here are a poste that explain the case of Asymetric Routing in case of someone has the same Issue like me

> **[Issues encountered when setting up VMware Tanzu · Ketil Gjerde](https://techie.cloud/blog/2020/11/26/issues-encountered-when-setting-up-vmware-tanzu/)**
>
> Quick information about the issues I've encountered while setting up and using Tanzu.

> **[vSphere with Tanzu - Guest cluster deployment stuck at Control Plane VM](https://communities.vmware.com/t5/VMware-vSphere-Discussions/vSphere-with-Tanzu-Guest-cluster-deployment-stuck-at-Control/td-p/2811565)**
>
> I have master vCenter and 3x nested ESXi with VSAN on which I tried to test Tanzu , VDS switch (not NSX-T), HAproxy as LB. All MGMT are on existing network, deployed 2x new VLAN, one for Frontend and one for Workload. Managed to deploy...