Skip to content

Commit 16e8428

Browse files
committed
Fix recurring errors when using TLS/SSL
Turns out haproxy needs to be told that the connection is TLS/SSL twice. Once for the `tcp-check` connect and then for the `server-template`. If `ssl` is not specified in the `server-template` config, then there will be some plaintext tcp connections. These seem to be separate from the `tcp-check` connections though. Redis will print an error such as this when it's running in TLS/SSL mode and a plaintext connection gets opened: ``` 1:M 14 Apr 2025 14:41:03.686 # Error accepting a client connection: error:0A00010B:SSL routines::wrong version number (addr=11.35.244.11:34886 laddr=11.35.244.4:6379) ``` They are mostly annoying, but are harmless.
1 parent 114d2de commit 16e8428

File tree

2 files changed

+1
-1
lines changed

2 files changed

+1
-1
lines changed

appuio/haproxy-2.5.1.tgz

-10.9 KB
Binary file not shown.

appuio/haproxy/templates/configmap-redisk8s.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,5 +56,5 @@ data:
5656
tcp-check expect string +OK
5757
{{- end }}
5858
59-
server-template redis- {{ $redisk8s.nodeCount }} {{ $redisk8s.dnsservicename }}:{{ default "6379" $redisk8s.port }} {{ if $redisk8s.check.enabled }}check inter 1s on-marked-down shutdown-sessions {{ end }}resolvers mydns init-addr none {{ if $redisk8s.tls }} verify none {{ end }}
59+
server-template redis- {{ $redisk8s.nodeCount }} {{ $redisk8s.dnsservicename }}:{{ default "6379" $redisk8s.port }} {{ if $redisk8s.check.enabled }}check inter 1s on-marked-down shutdown-sessions {{ end }}resolvers mydns init-addr none {{ if $redisk8s.tls }} verify none ssl {{ end }}
6060
{{- end }}

0 commit comments

Comments
 (0)