Project

General

Profile

Bug #8307

HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error

Added by Mark Saad about 1 year ago. Updated about 1 year ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
haproxy
Target version:
-
Start date:
02/01/2018
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.4.2_1
Affected Architecture:

Description

This has existing since 2.3.x and has been worked around for some time.

We use a haproxy shared frontend for a common ssl cert.
When adding a new host to this config , pfsense responds with the following error

The following input errors were detected:

is not a valid source IP address or alias.

There is noting useful in syslog when this bug is generated.

The work around is to clone an existing config and edit that one to fit your needs.

History

#1 Updated by Pi Ba about 1 year ago

Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> section from a pfSense configuration backup? (obfuscate passwords/ips and other sensitive info where needed..)

#2 Updated by Mark Saad about 1 year ago

Pi Ba wrote:

Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> section from a pfSense configuration backup? (obfuscate passwords/ips and other sensitive info where needed..)

Pi
Is there a way to privately share this config ?

#3 Updated by Pi Ba about 1 year ago

Perhaps you could send me 'PiBa' a PM on the forum?

#4 Updated by Pi Ba about 1 year ago

The new package 0.55_2 should skip the check on 'secondary' frontends.
https://github.com/pfsense/FreeBSD-ports/pull/498/files
That should 'fix' the error reported..

#5 Updated by Mark Saad about 1 year ago

Pi Ba wrote:

Perhaps you could send me 'PiBa' a PM on the forum?

Pi
Other then manually patching the code. Is there a way to test this via a package ?

https://github.com/pfsense/FreeBSD-ports/pull/498

#6 Updated by Pi Ba about 1 year ago

The haproxy-devel 0.55_2 package will be build after the pull request is 'accepted' by official pfSense developers..

Before then you can 'manually' use the SystemPatches by adding the patch like this:
URL: https://github.com/pfsense/FreeBSD-ports/pull/498/commits/21272d261e031bd51651e784df8c44b2952db72e.patch
pathstrip: 4
Base: /
Ignore Whitespace: Checked
AutoApply: Unchecked

Save these settings, then press 'Fetch', and 'Apply'

Also available in: Atom PDF