Hi all. I need some help, please.
I have fortigate 60e, just for ssl vpn, and 2 wan. for high aviability i setup HAProxy on cloud vdc. config HAProxy now:
defaults log global mode http option httplog option dontlognull option clitcpka option srvtcpka timeout connect 120s timeout client 120s timeout server 120s errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http frontend info80 mode http bind 2.2.2.2:80 redirect scheme https code 301 if !{ ssl_fc } frontend info443 bind 2.2.2.2:443 option tcplog option clitcpka mode tcp default_backend sginfonodes backend infonodes mode tcp option srvtcpka balance roundrobin option ssl-hello-chk server web01 1.1.1.1:443 check server web02 1.1.1.1:443 check obviously, in ssl-vpn monitor host ip it is ip of HAProxy. If i set up in config of HAProxy - server web02 1.1.1.1:443 check send-proxy - service is down. How can i send source host ip to forigate from HAProxy? sorry for my english
User | Count |
---|---|
2546 | |
1354 | |
795 | |
643 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.