# Send SYN to backend as soon as Client sends one

**URL:** https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123
**Category:** Help!
**Created:** [August 1, 2019, 1:55am UTC](https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123 "2019-08-01T01:55:29Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![nalgoel](https://avatars.discourse-cdn.com/v4/letter/n/87869e/32.png) [@nalgoel](https://discourse.haproxy.org/u/nalgoel)
#### Post date: [August 1, 2019, 1:55am UTC](https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123/1 "2019-08-01T01:55:29Z")

</div>

Hi,

I am new with HAProxy and I am running an experiment where I want HAProxy to send SYN to the backend as soon as Client sends SYN. Currently, I see that HAProxy completes 3-way Handshake with Client first and then starts 3-way with backend. My aim is to parallelize these 2 handshakes.

I believe this is because of native DDOS prevention against SYN flood from HAProxy. Is there a way to solve this?

Thanks,  
Nalin

---

<div class="post-metadata">

### Author: ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)
#### Post date: [August 1, 2019, 9:11am UTC](https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123/2 "2019-08-01T09:11:32Z")

</div>

No, haproxy is a layer 7 load-balancer, it does not forward packets. What you are trying to achieve is not possible at this layer.

When the client sends a SYN to the port haproxy is running, haproxy does even know about it yet, because the kernel only passes the connection to the application when the 3 way handshake is completed, and even then, haproxy likely wont yet know what backend server to connect to, as it could depend on layer 7 informations.

---

<div class="post-metadata">

### Author: ![nalgoel](https://avatars.discourse-cdn.com/v4/letter/n/87869e/32.png) [@nalgoel](https://discourse.haproxy.org/u/nalgoel)
#### Post date: [August 1, 2019, 3:28pm UTC](https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123/3 "2019-08-01T15:28:18Z")

</div>

Thanks for your reply. Wondering if there are any another alternative solutions that I can use.

---

<div class="post-metadata">

### Author: ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)
#### Post date: [August 1, 2019, 4:00pm UTC](https://discourse.haproxy.org/t/send-syn-to-backend-as-soon-as-client-sends-one/4123/4 "2019-08-01T16:00:38Z")

</div>

IPVS is what you are looking for.
