Hello Greg,

haproxy will listenen on the vip if you configured your setup in active/active setup.

So depending what you configure in cluster.conf it will listen or no. (https://packetfence.org/downloads/PacketFence/doc/PacketFence_Clustering_Guide-6.4.0.pdf)

What you can do is to paste your cluster.conf file and i will have a look.

Regards

Fabrice



Le 2016-11-16 à 09:39, Greg Harewood a écrit :
Hello Fabrice and my other Read-Only friends!

I never found out why the vips don't listen for http/https by default on the portal lans - seems nuts. I solved the problem, but I can't help thinking that this smells a little and that it should have worked without this botch... I'd love to know that the correct behaviour should be if anyone can tell me.

I solved the problem by ADDING TO HAPROXY.CONF....


frontend portal-http-reg

bind 10.20.70.133:80

reqadd X-Forwarded-Proto:\ http

default_backend portal-reg-backend


frontend portal-https-reg

bind 10.20.70.133:443 ssl no-sslv3 crt /usr/local/pf/conf/ssl/server.pem

reqadd X-Forwarded-Proto:\ https

default_backend portal-reg-backend


backend portal-reg-backend

balance source

option httpclose

option forwardfor

server 10.20.70.134 10.20.70.134:80 check

server 10.20.70.135 10.20.70.135:80 check






But there's just no way that this was "missed out" of the standard build. Any idea what's wrong with my install that I needed it?

Thanks either way - I still love PF :)

Greg


------------------------------------------------------------------------------


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to