Fail to start Haproxy

satimis · 05-23-2015, 05:25 AM

Hi all,

Guest VM - Ubuntu 14.04 Haproxy
Host - Ubuntu 14.04
VirtualBox
On router - port 80 forwarded to VM

This is a new installation.

$ sudo service haproxy restart
* Restarting haproxy haproxy

Code:

[ALERT] 142/180117 (1118) : Starting frontend http-frontend: cannot bind socket [static_IP:80]
   ...fail!

$ netstat -nat | grep 80 | grep LISTEN

Code:

tcp6       0      0 :::80                   :::*                    LISTEN

cat /etc/haproxy/haproxy.cfg

Code:

global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL). This list is from:
        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
        ssl-default-bind-options no-sslv3

defaults
        log     global
        mode    http
        option forwardfor
        option http-server-close
        option  httplog
        option  dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http

        frontend http-frontend
        bind static_IP:80
        reqadd X-Forwarded-Proto:\ http

        backend wwwbackend
        server 1-www 192.168.0.xxx:80 check
        server 2-www 192.168.0.xxx:80 check
        server 2-www 192.168.0.xxx:80 check

Please help. Thanks

Regards
satimis

TenTenths · 06-02-2015, 04:07 PM

You probably have an apache instance listening on port 80 or you're not starting haproxy as root.

satimis · 06-03-2015, 01:43 AM

Quote:

Originally Posted by TenTenths

You probably have an apache instance listening on port 80 or you're not starting haproxy as root.

Hi,

Thanks for your advice.

Connection (all websites are on name-base)

Code:

                          | Webserver1 (VM2)
Internet -> Haproxy (VM1) | Webserver2 (VM3)
                          | Webserver3 (VM4)

Port80 forwarded to VM1

It works without problem if ONLY one webserver running. But this connection fails to work if all webservers running simultaneously. It is because Port80 is only allowed to be forward to one webserver. The same has been confirmed by the moderator of Oracle Virtualbox forum.

Up to now I have no solution.

Regards
satimis