Hello, On Sat, 27 Mar 2021 at 11:52, Aleksandar Lazic <al-hapr...@none.at> wrote: > > Hi. > > I have a lot of such entries in my logs. > > ``` > Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23167 > [27/Mar/2021:11:48:20.523] https-in~ https-in/<NOSRV> -1/-1/-1/-1/0 0 0 - - > PR-- 1041/1011/0/0/0 0/0 "<BADREQ>" > Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23167 > [27/Mar/2021:11:48:20.523] https-in~ https-in/<NOSRV> -1/-1/-1/-1/0 0 0 - - > PR-- 1041/1011/0/0/0 0/0 "<BADREQ>"
Use show errors on the admin socket: https://cbonte.github.io/haproxy-dconv/2.0/management.html#9.3-show%20errors > Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23166 > [27/Mar/2021:11:48:20.440] https-in/sock-1: SSL handshake failure > Mar 27 11:48:20 lb1 haproxy[14556]: ::ffff:<CLIENT-IP>:23166 > [27/Mar/2021:11:48:20.440] https-in/sock-1: SSL handshake failure That's currently a pain point: https://github.com/haproxy/haproxy/issues/693 Lukas
