Haproxy passthru errors with more backend navigating from firefox

Help!
1

Hello Everyone,
I have a strange problem with my haproxy.
I have a setup like this

frontend localhost443
bind *:443
option tcplog
mode tcp
acl tls req.ssl_hello_type 1
acl is_logwatch req.ssl_sni -i logwatch.nivolapiemonte.it
acl is_rancher req.ssl_sni -i nivola-rancher.glb.nivolapiemonte.it
use_backend backend-logwatch if is_logwatch
use_backend backend-rancher if is_rancher

backend backend-logwatch
mode tcp
option ssl-hello-chk
server elk-to2-kibana-user 10.138.154.38:443 check

ackend backend-rancher
mode tcp
option ssl-hello-chk
server nivola-rancher01 10.138.154.191:443 check

If on my firefox browser I cannot open two tabs with logwatch.nivolapiemonte.it and nivola-rancher.glb.nivolapiemonte.it.

One of them gives me:

404 Not Found

It works if one of them is opened in firefox private window.
Please help me.
Ignazio

2

The browser will reuse a TLS session for a different hostname, if the server certificate validates for it.

So … if you have a logwatch.nivolapiemonte.it and nivola-rancher.glb.nivolapiemonte.it SANs on the same certificate or a corresponding wildcard certificate, then this is what will happen.

You need to use specific certificates to avoid this problem.

3

Thanks.
Ignazio