Set up HAProxy with the attached configuration. The server-template directive will generate 3 upstreams based on the DNS-answers for letsencrypt.status.io. This is basic HAProxy DNS-service-discovery.
If you now check back with the stats socket or the webinterface, you will notice that while the first upstream will be L7OK, all the following upstreams are going to be L6RSP, doe to the fact that the check-sni setting does not get replicated for any of the generated upstreams than the first. The patch fixes this so the check-sni argument gets applied to all generated upstreams. With a patched version of HAProxy all the 3 upstreams will be L7OK. ** Attachment added: "HAProxy configuration with server-template" https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/1846714/+attachment/5295763/+files/haproxy.cfg ** Changed in: haproxy (Ubuntu Bionic) Status: Triaged => New ** Changed in: haproxy (Ubuntu Disco) Status: Triaged => New -- You received this bug notification because you are a member of Ubuntu High Availability Team, which is subscribed to haproxy in Ubuntu. https://bugs.launchpad.net/bugs/1846714 Title: Merge "BUG/MEDIUM: server: Also copy "check-sni" for server templates." Status in haproxy package in Ubuntu: Fix Released Status in haproxy source package in Bionic: New Status in haproxy source package in Disco: New Bug description: The current HAProxy 1.8.8 supplied with Ubuntu Bionic and Disco contains a bug when using the server-template functionality for generating upstreams in combination with the check-sni setting. The bug was fixed in upstream 1.8.17: https://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=5b9c962725e8352189911f2bdac7e3fa14f73846 Could you please take the appropriate action? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/1846714/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~ubuntu-ha Post to : [email protected] Unsubscribe : https://launchpad.net/~ubuntu-ha More help : https://help.launchpad.net/ListHelp
