19.7.5 HAProxy config broken

[dieterarn]

Hi fraenki

you say over on the development page: https://github.com/opnsense/plugins/pull/1498 that

WARNING

This release introduces the HAProxy 2.0 release series. This is a major change and may break existing configurations. Please test thoroughly before using this version in production.

i found out the hard way that my config breaks (luckily i always snapshot before i upgrade and so was able to revert to 19.7.4). do you have any guidance on common breakage points?

[fraenki]

i found out the hard way that my config breaks (luckily i always snapshot before i upgrade and so was able to revert to 19.7.4). do you have any guidance on common breakage points?

Nope, there is no such thing (from the HAProxy developers, at least). These are the release notes, maybe you can spot a change that affects your configuration:
https://www.mail-archive.com/haproxy@formilux.org/msg34215.html

Please post the HAProxy errors or log files, I'll try to determine what went wrong.


Regards
- Frank

[dieterarn]

so normal operations on 19.7.4 (OPNsense 19.7.4_1-amd64) the log looks like a list of connections:

Code: [Select]

Oct 20 22:14:18 haproxy[13596]: Connect from 192.168.xxx.xxx:52758 to yyy.yyy.yyy.yyy:443 (nextcloudWebFacingService/HTTP)
Oct 20 22:13:22 haproxy[13596]: Connect from 192.168.xxx.xxx:59890 to yyy.yyy.yyy.yyy:443 (nextcloudWebFacingService/HTTP)
Oct 20 22:02:58 haproxy[13596]: Connect from xxx.xxx.xxx.xxx:24450 to yyy.yyy.yyy.yyy:443 (nextcloudWebFacingService/HTTP)
Oct 20 22:02:57 haproxy[13596]: Connect from xxx.xxx.xxx.xxx:10349 to yyy.yyy.yyy.yyy:443 (nextcloudWebFacingService/HTTP)
Oct 20 22:02:57 haproxy[13596]: Connect from xxx.xxx.xxx.xxx:8150 to yyy.yyy.yyy.yyy:443 (nextcloudWebFacingService/HTTP)

*** update ***

ok, werid. i reapplied the 19.7.5 update to capture the logs and now everything seems to be working. i hate mysteries. anyway if the service does start failing I'll post the logs here...