We use haproxy version 1.3.24 - we configure a permanent redirect from http to https. The user gets redirected if he visit the site for the first time. If he/she visit the site with http://xxx.xx again, there's no redirect to https://xxx.xx. After reloading the site some times (~ 16 times) there's a redirect from http to https. So sometimes haproxy redirects and sometimes not. Reproducible: Always Steps to Reproduce: Config: frontend frontend_domain bind 0.0.0.0:8085 maxconn 30000 mode http option httplog reqidel ^X-Forwarded-For:.* option forwardfor except xxx.xxx.xxx.xx #option httpclose log 127.0.0.1 local0 capture request header Host len 192 timeout client 1m acl request_domain hdr_reg(host) -i (^|\.)xxxx\.xx acl redirect1 url_beg /test redirect location https://www.xxx.xx/test if redirect1 request_domain Actual Results: There's a redirect at the first time. But not everytime the user visit the site. Expected Results: Everytime a redirect from http to https
1) This would be an application bug, to be filed upstream. 2) This version is not even in gentoo portage anymore. 3) option httpclose is the point here: by not setting it, the http client keeps the connection open, haproxy will only rewrite the first request on a new connection. Closing INVALID.
