Cloudflare don't pass requested url, plz advise!

[ramez]

I have a small office setup

• 3 web servers all have certs assigned to them.
• pfsense + HAproxy configured to listen on port 443
• HAproxy have conditional rule to route the traffic to the corresponding server based on the host name in the requested URL as follow:
• https: QC.domain.c.o.m > Srv01
• https: Web.domain.c.o.m > Srv02
• https: doc.domain.c.o.m > Srv03

The setup works great if HTTP proxy(CDN) is turned off for DNS records on Cloudflare, but once i turn them on i get Error 522 “Connection timed out”

it seems that cloudflare dont pass the actual requested url back to the firewall when CDN is enabled, or i could be missing a setting !!

please advice

[MarkMeyer]

What’s your SSL setting here?
Are there any firewall rules in place on, or in front If your haproxy? Make sure this IPs are allowed:

IP Ranges | Cloudflare

That’s a snippet of my haproxy config. Very basic…

Can't reach my subdomain with haproxy

I am not a haproxy guru but the below works for me Special here is the SSL cobfiguration for ‘vault’. If you want ti use SSL with haproxy you need to tell him ‘forward’ the certificate. It’s not a perfect config but I only need haproxy to save public IPs global daemon maxconn 2560 log /dev/log local0 debug defaults option httplog timeout connect 5000ms timeout client 50000ms timeout server 50000ms frontend http_in mode tcp bind *:80 bind *:443 tcp-request inspect-delay 5s a…

[atifziaq]

Try this solution and please update if it works

Blank page after turning on CDN and HTTP proxy

hi i finally found a solution for the problem , by the way my website run for 10 months cloud flare with no problems or changes in important settings , anyway i will write down the option to ONLY enable and other option disable them and this will fix problem for and keep in mind after 4 days of problem with me and 100s of tests the problem not from one option its from 3 options combined u have to disable : 1- Crypto > Automatic HTTPS Rewrites > OFF ,(main source of problem), if you need to…

[system]

This topic was automatically closed after 31 days. New replies are no longer allowed.