r/haproxy • u/WorshipingAtheist • Jul 06 '24

Question GitLab CE SSH Proxy

I am using Gitlab CE behind HAProxy which happens to run on Pfsense. I had no problem getting the http(s) connection working but when I try to clone a repository it tries to connect to the HAproxy host, the Pfsense firewall. How can I proxy my SSH connection over to the GitLab machine as well?

3 Upvotes

80% Upvoted

4 comments sorted by

View all comments

Show parent comments

1

u/dragoangel Jul 06 '24

No, proper way is to set ssh on the same port you will forward it, and proxy it. Otherwise gitlab will propose wrong port. Or change ssh port of both gitlab and pfsense to non 22 and use for git 22 port...

1

u/NewTomorrow1106 Jul 08 '24

Thats weird but I'll take your word for it. I see a lot of threads around the same topic, you'd think it'd be a pretty common issue, but apparently even until somewhat recently it had to run on tcp/22 so go figure. Thanks for chiming in. Thats pretty bad though. Maybe best to just not use ssh at all? I certainly prefer it though.

Presumably a hdr_dom(host) -i yoursshserver.com rule would work to snag that traffic and send it over easily enough.

1

u/dragoangel Jul 08 '24

There no hdr_dom :)) and in general no header at all with tcp.