HAProxy community

HAProxy Losing Connection to Windows Server


#1

Hi, I’m running haproxy 1.5.18 on CentOS and it is load balancing a couple of Windows Server 2016 machines. I’m hitting an issue whereby if I try and run a vulnerability scan e.g. from Qualys, after a while the Windows Server becomes inaccessible to the HAProxy. I can’t ping it or access websites from the haproxy but connections to it are available from other devices. Then, when the scans stop, and after a while the connectivity returns. The config is similar to this:

global
    log       127.0.0.1 local2

    chroot	/var/lib/haproxy
    pidfile     /var/run/haproxy.pid
    maxconn     100000
    user        hap
    group	hap
    daemon

    stats socket /var/lib/haproxy/stats


defaults
    log                     global
    option                  dontlognull
    option http-server-close
    option                  redispatch
    retries                 3
    timeout http-request    10s
    timeout queue           1m
    timeout connect         10s
    timeout client          60m
    timeout server          60m
    timeout http-keep-alive 10s
    timeout check           10s
    maxconn                 5000

frontend 1.2.3.4-http
        bind    1.2.3.4:80
        reqadd X-Forwarded-Proto:\ http
        mode    http
        option  forwardfor except 127.0.0.1/8
        option httplog
        option http-server-close
        timeout http-request    10s
        timeout http-keep-alive 10s
        use_backend scan-test

frontend 1.2.3.4-https
        bind    1.2.3.4:443 ssl crt /etc/certs/cert1.pem
        reqadd X-Forwarded-Proto:\ https
        mode    http
        option  forwardfor except 127.0.0.1/8
        option httplog
        option http-server-close
        timeout http-request    10s
        timeout http-keep-alive 10s
        use_backend scan-test

backend scan-test
        balance         leastconn
        cookie          serverid insert
    	mode http
        option httpchk GET /pagemonitor.txt
        http-check expect rstatus ([2-3][0-9][0-9])
    	server         server1_http 192.168.1.101:80 cookie 1 check inter 30000
	server         server2_http 192.168.1.102:80 cookie 2 check inter 30000

Has anyone experienced this issue before?


#2

Provide logs please.


#3

Feb 7 21:52:26 localhost haproxy[15100]: 4.3.2.1:52142 [07/Feb/2019:21:52:20.044] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:52:54 localhost haproxy[15100]: 4.3.2.167:39448 [07/Feb/2019:21:52:54.242] 1.2.3.4-https-scantest~ scan-test/web01_http 0/1/22 1425 – 7/7/0/0/0 0/0
Feb 7 21:52:54 localhost haproxy[15100]: 4.3.2.167:39450 [07/Feb/2019:21:52:54.262] 1.2.3.4-https-scantest~ scan-test/web01_http 0/0/23 0 SD 7/6/0/0/0 0/0
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52312 [07/Feb/2019:21:52:56.489] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:43656 [07/Feb/2019:21:52:56.502] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 8/0/0/0/0 0/0
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:43664 [07/Feb/2019:21:52:56.711] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 10/0/0/0/0 0/0
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52324 [07/Feb/2019:21:52:56.773] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52326 [07/Feb/2019:21:52:56.827] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52328 [07/Feb/2019:21:52:56.863] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52332 [07/Feb/2019:21:52:56.910] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52336 [07/Feb/2019:21:52:56.943] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:56 localhost haproxy[15100]: 4.3.2.1:52338 [07/Feb/2019:21:52:56.978] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:57 localhost haproxy[15100]: 4.3.2.167:39478 [07/Feb/2019:21:52:55.104] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:52:57 localhost haproxy[15100]: 4.3.2.1:52294 [07/Feb/2019:21:52:55.518] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:52:57 localhost haproxy[15100]: 4.3.2.1:52340 [07/Feb/2019:21:52:57.009] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:57 localhost haproxy[15100]: 4.3.2.1:52342 [07/Feb/2019:21:52:57.047] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:52:57 localhost haproxy[15100]: 4.3.2.1:52348 [07/Feb/2019:21:52:57.083] 1.2.3.4-https-scantest/1: Stopped a TLSv1 heartbeat attack (CVE-2014-0160)
Feb 7 21:53:05 localhost haproxy[15100]: 4.3.2.1:52400 [07/Feb/2019:21:53:05.904] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:06 localhost haproxy[15100]: 4.3.2.1:52402 [07/Feb/2019:21:53:06.218] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:07 localhost haproxy[15100]: 4.3.2.1:52408 [07/Feb/2019:21:53:07.243] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:08 localhost haproxy[15100]: 4.3.2.1:52414 [07/Feb/2019:21:53:08.957] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.167:54228 [07/Feb/2019:21:53:09.194] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 19/6/0/0/0 0/0
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.1:52416 [07/Feb/2019:21:53:09.272] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.167:54232 [07/Feb/2019:21:53:09.274] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/2 187 PR 20/7/0/0/0 0/0
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.1:52418 [07/Feb/2019:21:53:09.588] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.1:52422 [07/Feb/2019:21:53:09.903] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:09 localhost haproxy[15100]: 4.3.2.1:52420 [07/Feb/2019:21:53:09.741] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.1:52424 [07/Feb/2019:21:53:10.053] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.167:39548 [07/Feb/2019:21:53:10.181] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.1:52426 [07/Feb/2019:21:53:10.217] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.167:39550 [07/Feb/2019:21:53:10.214] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.1:52428 [07/Feb/2019:21:53:10.367] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.1:52430 [07/Feb/2019:21:53:10.682] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:10 localhost haproxy[15100]: 4.3.2.1:52432 [07/Feb/2019:21:53:10.996] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54230 [07/Feb/2019:21:53:09.210] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1804 187 PR 24/12/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54244 [07/Feb/2019:21:53:09.924] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1111 187 PR 24/12/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54236 [07/Feb/2019:21:53:09.293] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1808 187 PR 24/12/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54274 [07/Feb/2019:21:53:11.222] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 24/12/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54278 [07/Feb/2019:21:53:11.311] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 25/12/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.1:52434 [07/Feb/2019:21:53:11.311] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54282 [07/Feb/2019:21:53:11.432] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 25/13/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54284 [07/Feb/2019:21:53:11.521] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 25/13/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.1:52436 [07/Feb/2019:21:53:11.534] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54286 [07/Feb/2019:21:53:11.641] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 25/13/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54290 [07/Feb/2019:21:53:11.730] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 25/13/0/0/0 0/0
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.1:52438 [07/Feb/2019:21:53:11.847] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:11 localhost haproxy[15100]: 4.3.2.167:54292 [07/Feb/2019:21:53:11.928] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/21 187 PR 25/13/0/0/0 0/0
Feb 7 21:53:12 localhost haproxy[15100]: 4.3.2.1:52444 [07/Feb/2019:21:53:12.158] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:12 localhost haproxy[15100]: 4.3.2.167:54300 [07/Feb/2019:21:53:12.221] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 26/14/0/0/0 0/0
Feb 7 21:53:12 localhost haproxy[15100]: 4.3.2.1:52452 [07/Feb/2019:21:53:12.468] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:12 localhost haproxy[15100]: 4.3.2.1:52450 [07/Feb/2019:21:53:12.457] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:12 localhost haproxy[15100]: 4.3.2.1:52460 [07/Feb/2019:21:53:12.779] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54314 [07/Feb/2019:21:53:13.030] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/12 187 PR 31/18/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54270 [07/Feb/2019:21:53:11.052] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/2007 187 PR 30/17/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54316 [07/Feb/2019:21:53:13.062] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/5 187 PR 30/17/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54318 [07/Feb/2019:21:53:13.083] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 31/18/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54322 [07/Feb/2019:21:53:13.100] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 32/19/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54326 [07/Feb/2019:21:53:13.117] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 32/19/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54328 [07/Feb/2019:21:53:13.133] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 32/19/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54330 [07/Feb/2019:21:53:13.150] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 32/19/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54332 [07/Feb/2019:21:53:13.166] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 33/20/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:54334 [07/Feb/2019:21:53:13.183] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 33/20/0/0/0 0/0
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.167:39650 [07/Feb/2019:21:53:13.703] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:13 localhost haproxy[15100]: 4.3.2.1:43814 [07/Feb/2019:21:53:13.942] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/7 187 PR 38/25/0/0/0 0/0
Feb 7 21:53:14 localhost haproxy[15100]: 4.3.2.167:54302 [07/Feb/2019:21:53:12.241] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1808 187 PR 38/25/0/0/0 0/0
Feb 7 21:53:14 localhost haproxy[15100]: 4.3.2.167:54354 [07/Feb/2019:21:53:14.258] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 41/25/0/0/0 0/0
Feb 7 21:53:14 localhost haproxy[15100]: 4.3.2.167:54356 [07/Feb/2019:21:53:14.467] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 42/25/0/0/0 0/0
Feb 7 21:53:14 localhost haproxy[15100]: 4.3.2.167:54358 [07/Feb/2019:21:53:14.677] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 43/25/0/0/0 0/0
Feb 7 21:53:14 localhost haproxy[15100]: 4.3.2.1:52498 [07/Feb/2019:21:53:14.954] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:43816 [07/Feb/2019:21:53:13.969] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1106 187 PR 42/24/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.167:54320 [07/Feb/2019:21:53:13.084] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/2005 187 PR 41/23/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:43844 [07/Feb/2019:21:53:15.158] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/27 187 PR 43/24/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:43846 [07/Feb/2019:21:53:15.284] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 43/24/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:43852 [07/Feb/2019:21:53:15.494] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/1 187 PR 44/24/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:52512 [07/Feb/2019:21:53:15.532] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:43856 [07/Feb/2019:21:53:15.705] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 44/24/0/0/0 0/0
Feb 7 21:53:15 localhost haproxy[15100]: 4.3.2.1:52516 [07/Feb/2019:21:53:15.845] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:16 localhost haproxy[15100]: 4.3.2.1:52526 [07/Feb/2019:21:53:16.158] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:16 localhost haproxy[15100]: 4.3.2.1:52528 [07/Feb/2019:21:53:16.470] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:16 localhost haproxy[15100]: 4.3.2.1:52534 [07/Feb/2019:21:53:16.625] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:16 localhost haproxy[15100]: 4.3.2.1:52538 [07/Feb/2019:21:53:16.781] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:16 localhost haproxy[15100]: 4.3.2.1:52544 [07/Feb/2019:21:53:16.937] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.167:54364 [07/Feb/2019:21:53:15.105] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/2004 187 PR 48/24/0/0/0 0/0
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.1:52550 [07/Feb/2019:21:53:17.247] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.1:52554 [07/Feb/2019:21:53:17.558] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.1:52560 [07/Feb/2019:21:53:17.668] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.1:52568 [07/Feb/2019:21:53:17.868] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:17 localhost haproxy[15100]: 4.3.2.1:43914 [07/Feb/2019:21:53:17.952] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/17 187 PR 52/25/0/0/0 0/0
Feb 7 21:53:18 localhost haproxy[15100]: 4.3.2.1:43916 [07/Feb/2019:21:53:17.997] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/13 187 PR 52/25/0/0/0 0/0
Feb 7 21:53:18 localhost haproxy[15100]: 4.3.2.1:52586 [07/Feb/2019:21:53:18.480] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:25 localhost haproxy[15100]: 4.3.2.167:39676 [07/Feb/2019:21:53:25.305] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:28 localhost haproxy[15100]: 4.3.2.167:39684 [07/Feb/2019:21:53:28.741] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:33 localhost haproxy[15100]: 4.3.2.1:52606 [07/Feb/2019:21:53:33.519] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54388 [07/Feb/2019:21:53:34.073] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 63/29/0/0/0 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54390 [07/Feb/2019:21:53:34.098] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 63/29/0/0/0 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54392 [07/Feb/2019:21:53:34.124] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 63/29/0/0/0 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:39454 [07/Feb/2019:21:52:54.292] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40024 212 sC 62/33/62/62/3 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:39456 [07/Feb/2019:21:52:54.300] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40029 212 sC 61/32/61/61/3 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:39468 [07/Feb/2019:21:52:54.461] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40026 212 sC 62/33/62/62/3 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54398 [07/Feb/2019:21:53:34.495] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 62/29/0/0/0 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54400 [07/Feb/2019:21:53:34.520] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 62/29/0/0/0 0/0
Feb 7 21:53:34 localhost haproxy[15100]: 4.3.2.167:54402 [07/Feb/2019:21:53:34.544] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 62/29/0/0/0 0/0
Feb 7 21:53:36 localhost haproxy[15100]: 4.3.2.1:52310 [07/Feb/2019:21:52:56.400] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40072 212 sC 66/36/66/66/3 0/0
Feb 7 21:53:36 localhost haproxy[15100]: 4.3.2.1:52316 [07/Feb/2019:21:52:56.508] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40074 212 sC 65/35/65/65/3 0/0
Feb 7 21:53:36 localhost haproxy[15100]: 4.3.2.1:43676 [07/Feb/2019:21:52:56.922] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40005 212 sC 65/29/65/65/3 0/0
Feb 7 21:53:37 localhost haproxy[15100]: 4.3.2.1:43688 [07/Feb/2019:21:52:57.072] 1.2.3.4-http-scantest scan-test/web01_http 30001/-1/40002 212 sC 65/29/65/65/3 0/0
Feb 7 21:53:37 localhost haproxy[15100]: 4.3.2.1:43696 [07/Feb/2019:21:52:57.215] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40003 212 sC 64/28/64/64/3 0/0
Feb 7 21:53:37 localhost haproxy[15100]: 4.3.2.1:52254 [07/Feb/2019:21:52:53.486] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/44323 0 sC 65/36/65/65/3 0/0
Feb 7 21:53:43 localhost haproxy[15100]: 4.3.2.1:52390 [07/Feb/2019:21:53:03.630] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40025 212 sC 68/36/68/67/3 0/0
Feb 7 21:53:43 localhost haproxy[15100]: 4.3.2.1:52388 [07/Feb/2019:21:53:03.630] 1.2.3.4-https-scantest~ scan-test/web01_http 30001/-1/40025 212 sC 67/35/67/67/3 0/0
Feb 7 21:53:43 localhost haproxy[15100]: 4.3.2.1:52386 [07/Feb/2019:21:53:03.630] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40029 212 sC 66/34/66/66/3 0/0
Feb 7 21:53:44 localhost haproxy[15100]: 4.3.2.167:39494 [07/Feb/2019:21:53:04.844] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40032 212 sC 66/33/65/65/3 0/0
Feb 7 21:53:47 localhost haproxy[15100]: 4.3.2.1:52406 [07/Feb/2019:21:53:07.215] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40030 212 sC 71/37/69/69/3 0/0
Feb 7 21:53:47 localhost haproxy[15100]: 4.3.2.167:54208 [07/Feb/2019:21:53:07.904] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40015 212 sC 69/32/68/68/3 0/0
Feb 7 21:53:48 localhost haproxy[15100]: 4.3.2.1:52412 [07/Feb/2019:21:53:08.177] 1.2.3.4-https-scantest~ scan-test/web01_http 30005/-1/40028 212 sC 69/36/68/68/3 0/0
Feb 7 21:53:48 localhost haproxy[15100]: 4.3.2.167:54216 [07/Feb/2019:21:53:08.370] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40016 212 sC 68/32/67/67/3 0/0
Feb 7 21:53:49 localhost haproxy[15100]: 4.3.2.167:54224 [07/Feb/2019:21:53:09.009] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40008 212 sC 69/32/67/67/3 0/0
Feb 7 21:53:49 localhost haproxy[15100]: 4.3.2.167:54238 [07/Feb/2019:21:53:09.507] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40024 212 sC 69/32/67/67/3 0/0
Feb 7 21:53:50 localhost haproxy[15100]: 4.3.2.167:54248 [07/Feb/2019:21:53:10.009] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40034 212 sC 68/31/66/66/3 0/0
Feb 7 21:53:50 localhost haproxy[15100]: 4.3.2.167:39730 [07/Feb/2019:21:53:50.056] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:50 localhost haproxy[15100]: 4.3.2.167:54258 [07/Feb/2019:21:53:10.566] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40003 212 sC 68/31/66/66/3 0/0
Feb 7 21:53:50 localhost haproxy[15100]: 4.3.2.167:54264 [07/Feb/2019:21:53:10.789] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40010 212 sC 67/30/65/65/3 0/0
Feb 7 21:53:51 localhost haproxy[15100]: 4.3.2.167:54268 [07/Feb/2019:21:53:11.024] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40032 212 sC 66/29/64/64/3 0/0
Feb 7 21:53:51 localhost haproxy[15100]: 4.3.2.167:54280 [07/Feb/2019:21:53:11.363] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40294 212 sC 66/29/64/64/3 0/0
Feb 7 21:53:52 localhost haproxy[15100]: 4.3.2.167:54298 [07/Feb/2019:21:53:12.158] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40016 212 sC 65/28/63/63/3 0/0
Feb 7 21:53:52 localhost haproxy[15100]: 4.3.2.167:54306 [07/Feb/2019:21:53:12.365] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40047 212 sC 66/27/64/64/3 0/0
Feb 7 21:53:52 localhost haproxy[15100]: 4.3.2.1:43798 [07/Feb/2019:21:53:12.544] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40004 212 sC 66/27/64/64/3 0/0
Feb 7 21:53:52 localhost haproxy[15100]: 4.3.2.167:54312 [07/Feb/2019:21:53:12.668] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40044 212 sC 65/26/63/63/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54324 [07/Feb/2019:21:53:13.100] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40005 212 sC 65/26/63/63/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.1:43806 [07/Feb/2019:21:53:13.160] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40024 212 sC 64/25/62/62/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54336 [07/Feb/2019:21:53:13.301] 1.2.3.4-http-scantest scan-test/web01_http 30001/-1/40003 212 sC 64/25/62/62/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54340 [07/Feb/2019:21:53:13.334] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40004 212 sC 63/24/61/61/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54342 [07/Feb/2019:21:53:13.461] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40004 212 sC 62/23/60/60/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54346 [07/Feb/2019:21:53:13.512] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40003 212 sC 62/23/60/60/3 0/0
Feb 7 21:53:53 localhost haproxy[15100]: 4.3.2.167:54348 [07/Feb/2019:21:53:13.533] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40009 212 sC 61/22/59/59/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52646 [07/Feb/2019:21:53:54.045] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52480 [07/Feb/2019:21:53:14.222] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40086 212 sC 62/39/59/58/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52482 [07/Feb/2019:21:53:14.222] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40086 212 sC 61/38/58/58/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52484 [07/Feb/2019:21:53:14.230] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40117 212 sC 60/37/57/57/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52488 [07/Feb/2019:21:53:14.427] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40026 212 sC 59/36/56/56/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52492 [07/Feb/2019:21:53:14.658] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40048 212 sC 59/36/56/56/3 0/0
Feb 7 21:53:54 localhost haproxy[15100]: 4.3.2.1:52496 [07/Feb/2019:21:53:14.931] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40049 212 sC 59/36/56/56/3 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.167:39664 [07/Feb/2019:21:53:15.225] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40024 212 sC 59/36/56/56/3 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.1:52506 [07/Feb/2019:21:53:15.347] 1.2.3.4-https-scantest~ scan-test/web01_http 30001/-1/40099 212 sC 58/35/55/55/3 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.167:39770 [07/Feb/2019:21:53:55.478] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.167:54474 [07/Feb/2019:21:53:55.626] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 58/23/0/0/0 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.167:54476 [07/Feb/2019:21:53:55.651] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 58/23/0/0/0 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.167:54478 [07/Feb/2019:21:53:55.676] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 58/23/0/0/0 0/0
Feb 7 21:53:55 localhost haproxy[15100]: 4.3.2.1:43860 [07/Feb/2019:21:53:15.918] 1.2.3.4-http-scantest scan-test/web01_http 30000/-1/40003 212 sC 57/22/55/55/3 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.167:54480 [07/Feb/2019:21:53:56.045] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 57/22/0/0/0 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.167:54482 [07/Feb/2019:21:53:56.070] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 57/22/0/0/0 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.167:54484 [07/Feb/2019:21:53:56.095] 1.2.3.4-http-scantest 1.2.3.4-http-scantest/ -1/-1/0 187 PR 57/22/0/0/0 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.1:52524 [07/Feb/2019:21:53:16.055] 1.2.3.4-https-scantest~ scan-test/web01_http 30001/-1/40084 212 sC 56/34/54/54/3 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.1:52532 [07/Feb/2019:21:53:16.570] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40047 212 sC 56/34/54/54/3 0/0
Feb 7 21:53:56 localhost haproxy[15100]: 4.3.2.1:52542 [07/Feb/2019:21:53:16.926] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40025 212 sC 56/34/54/54/3 0/0
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:52672 [07/Feb/2019:21:53:57.053] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:52546 [07/Feb/2019:21:53:17.102] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40075 212 sC 56/34/54/54/3 0/0
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:52552 [07/Feb/2019:21:53:17.408] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40032 212 sC 56/34/54/54/3 0/0
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:43900 [07/Feb/2019:21:53:17.616] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40004 212 sC 56/21/54/54/3 0/0
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:52562 [07/Feb/2019:21:53:17.708] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40024 212 sC 55/34/53/53/3 0/0
Feb 7 21:53:57 localhost haproxy[15100]: 4.3.2.1:52564 [07/Feb/2019:21:53:17.781] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40024 212 sC 55/34/53/53/3 0/0
Feb 7 21:53:58 localhost haproxy[15100]: 4.3.2.167:39796 [07/Feb/2019:21:53:58.905] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:53:59 localhost haproxy[15100]: 4.3.2.1:52588 [07/Feb/2019:21:53:19.167] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40028 212 sC 58/36/57/57/3 0/0
Feb 7 21:54:02 localhost haproxy[15100]: 4.3.2.1:52590 [07/Feb/2019:21:53:22.258] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40029 212 sC 57/35/56/56/3 0/0
Feb 7 21:54:03 localhost haproxy[15100]: 4.3.2.1:43934 [07/Feb/2019:21:53:23.188] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40004 212 sC 57/21/55/55/3 0/0
Feb 7 21:54:03 localhost haproxy[15100]: 4.3.2.167:54376 [07/Feb/2019:21:53:23.693] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40005 212 sC 56/20/55/55/3 0/0
Feb 7 21:54:03 localhost haproxy[15100]: 4.3.2.1:52700 [07/Feb/2019:21:54:03.738] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:54:04 localhost haproxy[15100]: 4.3.2.1:43936 [07/Feb/2019:21:53:24.216] 1.2.3.4-http-scantest scan-test/web01_http 30004/-1/40005 212 sC 54/19/54/54/3 0/0
Feb 7 21:54:05 localhost haproxy[15100]: 4.3.2.1:52596 [07/Feb/2019:21:53:25.219] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40023 212 sC 53/34/53/52/3 0/0
Feb 7 21:54:05 localhost haproxy[15100]: 4.3.2.1:52598 [07/Feb/2019:21:53:25.219] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40023 212 sC 52/33/52/52/3 0/0
Feb 7 21:54:05 localhost haproxy[15100]: 4.3.2.1:52600 [07/Feb/2019:21:53:25.227] 1.2.3.4-https-scantest~ scan-test/web01_http 30001/-1/40023 212 sC 51/32/51/51/3 0/0
Feb 7 21:54:05 localhost haproxy[15100]: 4.3.2.167:39678 [07/Feb/2019:21:53:25.605] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40024 212 sC 50/31/50/50/3 0/0
Feb 7 21:54:08 localhost haproxy[15100]: 4.3.2.167:54384 [07/Feb/2019:21:53:28.306] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40004 212 sC 52/19/52/52/3 0/0
Feb 7 21:54:10 localhost haproxy[15100]: 4.3.2.1:52602 [07/Feb/2019:21:53:30.171] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40029 212 sC 55/35/55/55/3 0/0
Feb 7 21:54:14 localhost haproxy[15100]: 4.3.2.167:39692 [07/Feb/2019:21:53:34.335] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40023 212 sC 56/35/56/56/3 0/0
Feb 7 21:54:14 localhost haproxy[15100]: 4.3.2.167:39694 [07/Feb/2019:21:53:34.348] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40024 212 sC 55/34/55/55/3 0/0
Feb 7 21:54:14 localhost haproxy[15100]: 4.3.2.167:54404 [07/Feb/2019:21:53:34.907] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40003 212 sC 56/20/56/56/3 0/0
Feb 7 21:54:16 localhost haproxy[15100]: 4.3.2.167:39704 [07/Feb/2019:21:53:35.989] 1.2.3.4-https-scantest~ scan-test/web01_http 30001/-1/40026 212 sC 56/36/55/55/3 0/0
Feb 7 21:54:16 localhost haproxy[15100]: 4.3.2.1:52608 [07/Feb/2019:21:53:36.221] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40023 212 sC 54/34/54/54/3 0/0
Feb 7 21:54:16 localhost haproxy[15100]: 4.3.2.1:52610 [07/Feb/2019:21:53:36.222] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40024 212 sC 53/33/53/53/3 0/0
Feb 7 21:54:16 localhost haproxy[15100]: 4.3.2.1:52612 [07/Feb/2019:21:53:36.229] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40021 212 sC 52/32/52/52/3 0/0
Feb 7 21:54:16 localhost haproxy[15100]: 4.3.2.1:52614 [07/Feb/2019:21:53:36.606] 1.2.3.4-https-scantest~ scan-test/web01_http 30004/-1/40031 212 sC 52/31/51/51/3 0/0
Feb 7 21:54:17 localhost haproxy[15100]: 4.3.2.1:43958 [07/Feb/2019:21:53:37.028] 1.2.3.4-http-scantest scan-test/web01_http 30002/-1/40002 212 sC 51/19/50/50/3 0/0
Feb 7 21:54:17 localhost haproxy[15100]: 4.3.2.1:43962 [07/Feb/2019:21:53:37.236] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40004 212 sC 51/19/50/50/3 0/0
Feb 7 21:54:17 localhost haproxy[15100]: 4.3.2.1:52622 [07/Feb/2019:21:53:37.297] 1.2.3.4-https-scantest~ scan-test/web01_http 30002/-1/40027 212 sC 50/30/49/49/3 0/0
Feb 7 21:54:18 localhost haproxy[15100]: 4.3.2.1:43968 [07/Feb/2019:21:53:38.199] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40002 212 sC 50/18/49/49/3 0/0
Feb 7 21:54:19 localhost haproxy[15100]: 4.3.2.1:43970 [07/Feb/2019:21:53:39.232] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40004 212 sC 49/17/48/48/3 0/0
Feb 7 21:54:21 localhost haproxy[15100]: 4.3.2.1:52630 [07/Feb/2019:21:53:41.169] 1.2.3.4-https-scantest~ scan-test/web01_http 30003/-1/40027 212 sC 50/33/50/50/3 0/0
Feb 7 21:54:22 localhost haproxy[15100]: 4.3.2.167:39826 [07/Feb/2019:21:54:22.843] 1.2.3.4-https-scantest/1: SSL handshake failure
Feb 7 21:54:23 localhost haproxy[15100]: 4.3.2.167:54412 [07/Feb/2019:21:53:43.316] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40004 212 sC 52/18/52/52/3 0/0
Feb 7 21:54:53 localhost haproxy[15100]: 4.3.2.167:54508 [07/Feb/2019:21:54:13.335] 1.2.3.4-http-scantest scan-test/web01_http 30003/-1/40003 212 sC 50/14/50/50/3 0/0
Feb 7 21:54:54 localhost haproxy[15100]: Server scan-test/web01_http is DOWN, reason: Layer4 timeout, check duration: 10000ms. 0 active and 0 backup servers left. 50 sessions active, 0 requeued, 0 remaining in queue.
Feb 7 21:54:54 localhost haproxy[15100]: backend scan-test has no server available!


#4

Your backend server stops responding when 50 sessions are active, the issue is there:

Feb 7 21:54:54 localhost haproxy[15100]: Server scan-test/web01_http is DOWN, reason: Layer4 timeout, check duration: 10000ms. 0 active and 0 backup servers left. 50 sessions active, 0 requeued, 0 remaining in queue.
Feb 7 21:54:54 localhost haproxy[15100]: backend scan-test has no server available!

You will have to figure out why your backend server can only handle 50 sessions.


#5

Thanks for the response. I also have another haproxy which is connecting to the same set of Windows servers and I’m seeing an extra 200 sessions from that one (there are more backends on that haproxy). So thats a max of around 250 sessions. Does that seem low to you? It’s odd because when the haproxy that I test with the scan hits the limit, the other one is still serving requests without issue.


#6

I suggest you try to access the backend server from the box where haproxy runs while it doesn’t work. You may have some intermediate devices (Firewalls) or the server itself that rejects the IP address of haproxy due to excessive queries.

I can only guess at this point, but for haproxy, the server is down.


#7

I have tried this and it’s strange as there is no connectivity there at all. I cannot ping the backend server from the haproxy when it sees it as down (would this be expected?!). If I run a continuous ping it takes 10 minutes to start responding again each time which must be a significant figure. I’m trying to work out where this 10 minute timeout exists.


#8

It probably means that some anti DDoS protection is kicking in somewhere. Maybe on the server, maybe on intermediate devices.