Morning all …

    I’ve been fighting with an issue here, and have run out of ideas …

    We have a wordpress site, two webheads behind haproxy … balance leastconn … 
in front of haproxy, we are using Incapsula, as CDN/DDoS shield … if I am only 
running one webhead, everythign works great, pages load fine, etc … as soon as 
I bring up a second web server, I will sporatically get mis-loaded pages … as 
if the CSS isn’t being loaded properly, so its unformatted.

    Both webservers are identical … wordpress and plugins are all in sync using 
git, wp-content/uploads is in sync using csync2 … config files for apache, 
php-fpm, php.ini, etc are all sync’d using git, and each web server works fine 
“on their own” … 

    If I hit the load balancer directly (modify my /etc/hosts file), it 
*appears* to be fine also … its only once I throw incapsula into the mix that I 
seem to have odd issues …

    One thought I had was to configure haproxy to use ‘balance source’, and 
base the load balancing on the client IP (my browser), but when I look at the 
haproxy logs, all I see is the numerous IPs coming in from Incapsula itself … 
so figure I have to somehow tell haproxy to use the X-Forwarded-For header that 
Incapsula should be passing down … but, I can’t see to figure out a way to do 
this, or find examples on the web on how to do this … 

    Has someone done this … ?    Seen similar issues?

Thanks ...


Reply via email to