Hi, > > Because your Host header is certainly "influxdb-drp.example.net:8086", not > "influxdb-drp.example.net". You can verify this with this acl instead : > acl host_influxdb-drp.example.net hdr(host) -i influxdb-drp.example.net:8086 > > Or you can even capture the header in your logs, it's quite useful to debug > acls ;-) >
You are right. The port was missing from acl :( Using "capture request header Host len 150" was effectively showing it in log: Jul 9 18:54:59 kalinga haproxy[46185]: 192.168.246.17:59204 [09/Jul/2017:18:54:59.275] https_influxdb~ influxdb-drp.example.net/https_8086 0/0/1/0/1 200 332 - - ---- 1/1/0/0/0 0/0 {influxdb-drp.example.net:8086} "GET /query?q=SHOW%20DATABASES HTTP/1.1" Thank you. Regards, M.