pfSense » pfSense Packages

For my load balancing, I ended up needing to use Agent-based checks in HAProxy.

I configured it in my pfSense+ (23.05.1 ; VM in ESXi 6.7) and its HAProxy package (HAProxy devel 0.63_1).

For that, I created the Frontend and the Backend.
In the Backend, I selected None for Healt Check Method to avoid my service blacklisting HAProxy for too many invalid connections.
I also checked the Agent Checks and configured its port.
I left blank the Agent Interval to accept the default.

Bug No 1 :
Error message says "Config is invalid, invalid character "a" in an integer field."

Explanation : The default interval is not written in the config file. As such, the first string that follows Agent-Interval is Agent-Port, which starts with an A instead of being a number.
Workaround is to specify the value explicitly.
Fix : to actually write the default (2000) in the config file when the field is empty.

Bug No 2 :
No checks performed
When reviewing the config file as generated, the SERVER line that describes the backend is missing the command word "check" that enables the agent-checking process.
Workaround is to add that word in the advanced option offered in the top of the form (where SSL checking is also defined).
Fix : the fact that Agent-Checking is itself checked, that check command should be added to every server in that backend.