Question
Fortigate behind HAProxy
Hi all. I need some help, please.
I have fortigate 60e, just for ssl vpn, and 2 wan. for high aviability i setup HAProxy on cloud vdc. config HAProxy now:
defaults log global mode http option httplog option dontlognull option clitcpka option srvtcpka timeout connect 120s timeout client 120s timeout server 120s errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http frontend info80 mode http bind 2.2.2.2:80 redirect scheme https code 301 if !{ ssl_fc } frontend info443 bind 2.2.2.2:443 option tcplog option clitcpka mode tcp default_backend sginfonodes backend infonodes mode tcp option srvtcpka balance roundrobin option ssl-hello-chk server web01 1.1.1.1:443 check server web02 1.1.1.1:443 check obviously, in ssl-vpn monitor host ip it is ip of HAProxy. If i set up in config of HAProxy - server web02 1.1.1.1:443 check send-proxy - service is down. How can i send source host ip to forigate from HAProxy? sorry for my english
