Ssl-proxy - redirect scheme - loop


#1

Hello,

I try to setup an new LB on Centos 7 - haproxy 1.7.5. Without “redirect scheme https if !{ ssl_fc }” I’m able to connect to :80 and :443 but I would like to redirect any http traffic to https. If I use “redirect scheme https if !{ ssl_fc }” http requests seems to be redierectd to :443 but the the connection failed.
The log looks like the connection is looping.

listen ssl-proxy
    bind-process 3 4 5 6
    bind 1.1.1.1:443 ssl crt /etc/pki/tls/certs/d1.test.pem
    bind 1.1.1.2:443 ssl crt /etc/pki/tls/certs/d2.test.pem
    mode tcp
    server sslhttp1 127.1.1.1:80 send-proxy
    server sslhttp2 127.1.1.2:80 send-proxy
    maxconn 100000

frontend web-in
        bind 1.1.22.2:80 name d1
        bind 1.1.22.4:80 name d2
	    option http-server-close
	    option forwardfor
	    redirect scheme https if !{ ssl_fc }
        bind 127.1.1.1:80 accept-proxy name web-in
        bind 127.1.1.2:80 accept-proxy name web-in
        bind-process 6
        mode http
        maxconn 100000
        default_backend B-webserver

Debuglog for just one request:

00000012:ssl-proxy-1.accept(0009)=0010 from [10.1.1.3:34184]
00000013:http-in.accept(000c)=0012 from [10.1.1.3:34184]
00000013:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000013:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000013:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000013:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000013:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000013:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000013:http-in.clihdr[0012:ffffffff]: DNT: 1
00000013:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000013:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000013:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000015:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34186]
00000015:ssl-proxy-1.clicls[0013:ffffffff]
00000015:ssl-proxy-1.closed[0013:ffffffff]
00000014:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000014:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000014:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000014:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000014:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000014:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000014:http-in.clihdr[0012:ffffffff]: DNT: 1
00000014:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000014:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000014:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000017:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34188]
00000017:ssl-proxy-1.clicls[0013:ffffffff]
00000017:ssl-proxy-1.closed[0013:ffffffff]
00000016:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000016:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000016:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000016:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000016:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000016:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000016:http-in.clihdr[0012:ffffffff]: DNT: 1
00000016:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000016:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000016:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000019:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34190]
00000019:ssl-proxy-1.clicls[0013:ffffffff]
00000019:ssl-proxy-1.closed[0013:ffffffff]
00000018:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000018:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000018:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000018:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000018:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000018:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000018:http-in.clihdr[0012:ffffffff]: DNT: 1
00000018:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000018:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000018:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000001b:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34192]
0000001b:ssl-proxy-1.clicls[0013:ffffffff]
0000001b:ssl-proxy-1.closed[0013:ffffffff]
0000001a:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000001a:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000001a:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000001a:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000001a:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000001a:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000001a:http-in.clihdr[0012:ffffffff]: DNT: 1
0000001a:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000001a:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000001a:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000001d:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34194]
0000001d:ssl-proxy-1.clicls[0013:ffffffff]
0000001d:ssl-proxy-1.closed[0013:ffffffff]
0000001c:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000001c:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000001c:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000001c:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000001c:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000001c:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000001c:http-in.clihdr[0012:ffffffff]: DNT: 1
0000001c:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000001c:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000001c:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000001f:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34196]
0000001f:ssl-proxy-1.clicls[0013:ffffffff]
0000001f:ssl-proxy-1.closed[0013:ffffffff]
0000001e:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000001e:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000001e:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000001e:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000001e:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000001e:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000001e:http-in.clihdr[0012:ffffffff]: DNT: 1
0000001e:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000001e:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000001e:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000021:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34198]
00000021:ssl-proxy-1.clicls[0013:ffffffff]
00000021:ssl-proxy-1.closed[0013:ffffffff]
00000020:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000020:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000020:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000020:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000020:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000020:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000020:http-in.clihdr[0012:ffffffff]: DNT: 1
00000020:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000020:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000020:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000023:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34200]
00000023:ssl-proxy-1.clicls[0013:ffffffff]
00000023:ssl-proxy-1.closed[0013:ffffffff]
00000022:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000022:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000022:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000022:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000022:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000022:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000022:http-in.clihdr[0012:ffffffff]: DNT: 1
00000022:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000022:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000022:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000025:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34202]
00000025:ssl-proxy-1.clicls[0013:ffffffff]
00000025:ssl-proxy-1.closed[0013:ffffffff]
00000024:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000024:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000024:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000024:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000024:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000024:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000024:http-in.clihdr[0012:ffffffff]: DNT: 1
00000024:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000024:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000024:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000027:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34204]
00000027:ssl-proxy-1.clicls[0013:ffffffff]
00000027:ssl-proxy-1.closed[0013:ffffffff]
00000026:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000026:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000026:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000026:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000026:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000026:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000026:http-in.clihdr[0012:ffffffff]: DNT: 1
00000026:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000026:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000026:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000029:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34206]
00000029:ssl-proxy-1.clicls[0013:ffffffff]
00000029:ssl-proxy-1.closed[0013:ffffffff]
00000028:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000028:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000028:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000028:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000028:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000028:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000028:http-in.clihdr[0012:ffffffff]: DNT: 1
00000028:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000028:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000028:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000002b:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34208]
0000002b:ssl-proxy-1.clicls[0013:ffffffff]
0000002b:ssl-proxy-1.closed[0013:ffffffff]
0000002a:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000002a:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000002a:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000002a:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000002a:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000002a:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000002a:http-in.clihdr[0012:ffffffff]: DNT: 1
0000002a:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000002a:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000002a:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000002d:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34210]
0000002d:ssl-proxy-1.clicls[0013:ffffffff]
0000002d:ssl-proxy-1.closed[0013:ffffffff]
0000002c:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000002c:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000002c:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000002c:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000002c:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000002c:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000002c:http-in.clihdr[0012:ffffffff]: DNT: 1
0000002c:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000002c:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000002c:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000002f:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34212]
0000002f:ssl-proxy-1.clicls[0013:ffffffff]
0000002f:ssl-proxy-1.closed[0013:ffffffff]
0000002e:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
0000002e:http-in.clihdr[0012:ffffffff]: Host: d1.test
0000002e:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
0000002e:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
0000002e:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
0000002e:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
0000002e:http-in.clihdr[0012:ffffffff]: DNT: 1
0000002e:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
0000002e:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
0000002e:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000031:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34214]
00000031:ssl-proxy-1.clicls[0013:ffffffff]
00000031:ssl-proxy-1.closed[0013:ffffffff]
00000030:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000030:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000030:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000030:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000030:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000030:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000030:http-in.clihdr[0012:ffffffff]: DNT: 1
00000030:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000030:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000030:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000033:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34216]
00000033:ssl-proxy-1.clicls[0013:ffffffff]
00000033:ssl-proxy-1.closed[0013:ffffffff]
00000032:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000032:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000032:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000032:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000032:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000032:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000032:http-in.clihdr[0012:ffffffff]: DNT: 1
00000032:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000032:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000032:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000035:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34218]
00000035:ssl-proxy-1.clicls[0013:ffffffff]
00000035:ssl-proxy-1.closed[0013:ffffffff]
00000034:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000034:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000034:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000034:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000034:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000034:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000034:http-in.clihdr[0012:ffffffff]: DNT: 1
00000034:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000034:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000034:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000037:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34220]
00000037:ssl-proxy-1.clicls[0013:ffffffff]
00000037:ssl-proxy-1.closed[0013:ffffffff]
00000036:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000036:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000036:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000036:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000036:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000036:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000036:http-in.clihdr[0012:ffffffff]: DNT: 1
00000036:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000036:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000036:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
00000039:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34222]
00000039:ssl-proxy-1.clicls[0013:ffffffff]
00000039:ssl-proxy-1.closed[0013:ffffffff]
00000038:http-in.clireq[0012:ffffffff]: GET / HTTP/1.1
00000038:http-in.clihdr[0012:ffffffff]: Host: d1.test
00000038:http-in.clihdr[0012:ffffffff]: Connection: keep-alive
00000038:http-in.clihdr[0012:ffffffff]: Upgrade-Insecure-Requests: 1
00000038:http-in.clihdr[0012:ffffffff]: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
00000038:http-in.clihdr[0012:ffffffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
00000038:http-in.clihdr[0012:ffffffff]: DNT: 1
00000038:http-in.clihdr[0012:ffffffff]: Accept-Encoding: gzip, deflate, sdch, br
00000038:http-in.clihdr[0012:ffffffff]: Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
00000038:http-in.clihdr[0012:ffffffff]: Cookie: SERVERID=http1_2
0000003b:ssl-proxy-1.accept(0009)=0013 from [10.1.1.3:34224]
0000003b:ssl-proxy-1.clicls[0013:ffffffff]
0000003b:ssl-proxy-1.closed[0013:ffffffff]

any Ideas?


#2

alex, you solved the problem, I have the same error when connecting to haproxy through a signed android app


#3

Open a new thread, and explain the entire problem and configuration please. A “me too” does not really help.