Set up HAProxy with the attached configuration. The server-template directive will generate 3 upstreams based on the DNS-answers for letsencrypt.status.io. This is basic HAProxy DNS-service-discovery.
If you now check back with the stats socket or the webinterface, you will notice that while the first upstream will be L7OK, all the following upstreams are going to be L6RSP, doe to the fact that the check-sni setting does not get replicated for any of the generated upstreams than the first. The patch fixes this so the check-sni argument gets applied to all generated upstreams. With a patched version of HAProxy all the 3 upstreams will be L7OK. ** Attachment added: "HAProxy configuration with server-template" https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/1846714/+attachment/5295763/+files/haproxy.cfg ** Changed in: haproxy (Ubuntu Bionic) Status: Triaged => New ** Changed in: haproxy (Ubuntu Disco) Status: Triaged => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1846714 Title: Merge "BUG/MEDIUM: server: Also copy "check-sni" for server templates." To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/1846714/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
