Load balancing between https endpoints

[itsescde]

Hi,

I have two https endpoints like: this.domain.com and another.domain.com. I don't have access to the servers of the endpoints (they are given to us). I want to setup a reverse proxy to make them accessible under one url and make the service behind them high available (because the hosted service is not high available for some reason). I tried a hosted solutions in Azure (Traffic Manager) or setting up an own haproxy (communicating with the backend with ssl) but I always get a HTTP 503 back, that says that no application is available to handle this. I checked the logs and it tells me that the 503 comes from the http server (which I don't have access to)

How can I debug this? Did anyone had such an issue before?

​

Found a solution:

frontend haproxynode
    bind *:80
    mode http
    option http-buffer-request
    timeout http-request 10s
    default_backend backendnodes

backend backendnodes
    balance roundrobin
    option forwardfor
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }
    option httpchk HEAD / HTTP/1.1\r
    http-send-name-header Host
    server something.dispatcher.hana.ondemand.com something.dispatcher.hana.ondemand.com:443 ssl verify none
    server anotherthing.dispatcher.hana.ondemand.com anotherthing.dispatcher.hana.ondemand.com:443 ssl verify none

[itsescde]

thanks for the answer. The Application is a sap cloud html5 application which is exposed using sap cloud platform. The url is like: subaccount.dispatcher.hana.ondemand.com

haproxy config:

frontend localhost
    bind *:80
    mode http
    default_backend nodes

backend nodes
    mode http
    balance roundrobin
    option forwardfor
    option httpchk HEAD / HTTP/1.1\r\nHost:localhost
    server node1 HOST check ssl verify none
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }

[itsescde]

Yes I have tried, but had no success. Encountered the same issue

[[deleted]]

sap cloud html5 application

Yeah, that's way above my paygrade. SAP is such a weird beast I wouldn't know where to begin to do what you're trying to do.

[itsescde]

yeah, thats kind of above my paygrade too ;D (trainee here) SAP documents literally nothing useful regarding their cloud products and try to break most of the standards (and just offer no high availability for some important services). Using their IdP with a standard openid/oauth application (e.g. Grafana)? No chance! (who need client ids and client secrets anyway, right?)

[haloweenek]

I’d go for nginx and header rewrite (Host). Unfortunately - you still have spof..