Project

General

Profile

Actions

Bug #8307

closed

HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error

Added by Mark Saad about 6 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
haproxy
Target version:
-
Start date:
02/01/2018
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
2.4.2_1
Affected Plus Version:
Affected Architecture:

Description

This has existing since 2.3.x and has been worked around for some time.

We use a haproxy shared frontend for a common ssl cert.
When adding a new host to this config , pfsense responds with the following error

The following input errors were detected:

is not a valid source IP address or alias.

There is noting useful in syslog when this bug is generated.

The work around is to clone an existing config and edit that one to fit your needs.

Actions #1

Updated by Pi Ba about 6 years ago

Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> section from a pfSense configuration backup? (obfuscate passwords/ips and other sensitive info where needed..)

Actions #2

Updated by Mark Saad about 6 years ago

Pi Ba wrote:

Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> section from a pfSense configuration backup? (obfuscate passwords/ips and other sensitive info where needed..)

Pi
Is there a way to privately share this config ?

Actions #3

Updated by Pi Ba about 6 years ago

Perhaps you could send me 'PiBa' a PM on the forum?

Actions #4

Updated by Pi Ba about 6 years ago

The new package 0.55_2 should skip the check on 'secondary' frontends.
https://github.com/pfsense/FreeBSD-ports/pull/498/files
That should 'fix' the error reported..

Actions #5

Updated by Mark Saad about 6 years ago

Pi Ba wrote:

Perhaps you could send me 'PiBa' a PM on the forum?

Pi
Other then manually patching the code. Is there a way to test this via a package ?

https://github.com/pfsense/FreeBSD-ports/pull/498

Actions #6

Updated by Pi Ba about 6 years ago

The haproxy-devel 0.55_2 package will be build after the pull request is 'accepted' by official pfSense developers..

Before then you can 'manually' use the SystemPatches by adding the patch like this:
URL: https://github.com/pfsense/FreeBSD-ports/pull/498/commits/21272d261e031bd51651e784df8c44b2952db72e.patch
pathstrip: 4
Base: /
Ignore Whitespace: Checked
AutoApply: Unchecked

Save these settings, then press 'Fetch', and 'Apply'

Actions #7

Updated by Jim Pingle over 4 years ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF