HAProxy can give applications one stable MySQL endpoint and distribute new TCP connections across healthy database servers. It cannot read SQL, distinguish writes from reads, check replication freshness, or make an interrupted transaction safe. Use it when every server selected for a connection is interchangeable; use SQL-aware routing or orchestration when primary/replica roles and replication state determine where traffic may go.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
What HAProxy does—and what it cannot do
HAProxy operates at MySQL’s TCP connection layer. A client connects to HAProxy on port 3306, HAProxy selects a backend server, and that TCP session remains attached to the selected MySQL node until it closes or fails. HAProxy balances new connections; it does not rebalance an already-open session.
As an Amazon Associate I earn from qualifying purchases.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- It can provide one address for clients, spread new connections with a policy such as
roundrobinorleastconn, and remove a server that fails its health checks. - It cannot inspect SQL statements, identify read-only queries, send writes only to a primary, measure whether replication is current, or decide whether a transaction can be retried safely.
This distinction matters in a game service, leaderboard, account system, or any application that keeps long-lived database sessions. A connection may be healthy while the database is a stale replica or a node that must not accept writes. HAProxy’s check proves that the node answers the probe, not that the node has the correct replication role.
Choose the topology before configuring HAProxy
Identical connection targets
The simplest design puts equivalent MySQL nodes in one backend. Each node must be able to handle the same class of application connection. This is appropriate for genuinely interchangeable servers, or for a topology in which an external system has already made every listed node safe for the traffic it receives.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
One writer and one or more replicas
If one node is writable and the others are read-only replicas, placing all of them in one round-robin backend can send write traffic to a replica or send a read to a node that is not current. HAProxy has no SQL or replication-role awareness, so this arrangement is unsafe unless the application itself guarantees that every selected node can accept every connection.
When a SQL-aware layer is required
Use a SQL-aware proxy or an orchestration layer when routing depends on transaction intent, read_only state, writer/reader groups, or replication lag. ProxySQL documents writer and reader hostgroups, read_only-based decisions, runtime configuration, persistence, weights, and a max_replication_lag limit. Application-side routing is another option when the application already knows which operations are reads or writes and can react to cluster-level failover decisions.
Prerequisites and network plan
- At least two MySQL servers with reachable addresses and listening ports. The example uses
10.0.0.11:3306and10.0.0.12:3306. - A host running HAProxy, with a client-reachable address. The example listener binds to all interfaces on TCP port 3306; bind to a specific private interface instead when exposure should be narrower.
- Firewall rules allowing clients to reach HAProxy and HAProxy to reach each MySQL node. MySQL should not be reachable from untrusted networks merely because HAProxy is present.
- Administrative access to create a dedicated health-check account on every backend.
- A maintenance window or staging environment for stopping a backend and testing reconnection behavior.
- A decision about encryption. HAProxy can pass encrypted MySQL traffic through at the TCP layer, but certificate validation and client TLS settings remain MySQL-client concerns unless you deliberately terminate TLS at the proxy.
Record which address clients will use, which address HAProxy uses to reach MySQL, and whether MySQL sees the proxy’s source address or a preserved client address. Do not assume that client-IP preservation works automatically; it depends on the chosen network and protocol design, and any PROXY-protocol support must be verified for the exact MySQL and client versions in use.
Install HAProxy and protect the existing configuration
Install HAProxy from your operating system repository or the package supported by your vendor. Package names, service names, configuration paths, and available options vary by distribution and HAProxy edition.
- Identify the installed binary, service unit, configuration file, log destination, and the user under which HAProxy runs.
- Back up the existing configuration before adding a MySQL listener. Keep the backup outside any automated overwrite process.
- Confirm that no other process already owns the address and port you intend to use. If MySQL is running on the same host as HAProxy, move one service to a different local address or port rather than creating a bind conflict.
- Ensure the HAProxy service account can read its configuration and any referenced certificate or credential files, while those files remain inaccessible to ordinary users.
Create a restricted MySQL health-check account
option mysql-check can perform a MySQL-aware probe. In its basic form HAProxy checks the server’s handshake packet. With user <name>, it sends a client-authentication packet followed by a QUIT packet. HAProxy describes this as a basic but useful test and requires an unlocked, authorised user without a password for the username probe.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Create the same dedicated account on every backend, restricted to the HAProxy host or a tightly scoped subnet. The following is an illustrative account definition; adapt the host expression and account syntax to your MySQL version and password-policy settings:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
CREATE USER 'haproxy_check'@'10.0.0.10' IDENTIFIED BY '';Here 10.0.0.10 represents the HAProxy source address in this example. If the proxy reaches MySQL through a different address, use that address instead. If your server rejects an empty-password account because of a configured authentication policy, resolve that policy in a way supported by the HAProxy probe mode you selected rather than silently substituting an administrative credential.
- Do not reuse a DBA, application, or migration account.
- Do not grant table, schema, replication, or administrative privileges merely to make the probe work.
- Keep the account unlocked and network-reachable only from the HAProxy source address or subnet.
- Store the account definition and any related configuration with host-appropriate permissions.
The probe identity is not an authorization boundary for application traffic. A successful check says that MySQL accepted the probe sequence; it does not grant or restrict what an application user may do.
Build the minimal TCP configuration
Add a frontend that accepts client connections and a TCP backend containing the MySQL servers. This example uses a MySQL-aware check and round-robin balancing:
frontend mysql_frontend
bind 0.0.0.0:3306
mode tcp
default_backend mysql_backend
backend mysql_backend
mode tcp
balance roundrobin
option mysql-check user haproxy_check
server db1 10.0.0.11:3306 check
server db2 10.0.0.12:3306 checkEvery server line has check, so HAProxy evaluates each node and keeps failed nodes out of new-connection rotation. Replace the sample addresses with the actual backend addresses and use a narrower bind address when clients should not reach every interface.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Select a balancing policy
| Policy | Use it when | Important limitation |
|---|---|---|
roundrobin |
Backends are equivalent and connection durations are reasonably similar. | It does not account for a connection that is much longer or more expensive than another. |
leastconn |
Connection duration varies substantially and the node with fewer active connections should receive the next one. | It still has no knowledge of SQL cost, replication lag, or transaction role. |
Balancing happens when a connection is created. A busy connection does not move when the policy changes, and a failed connection is not transparently converted into a safe continuation of the original transaction.
Timeouts and session behavior
Set client, server, and connect timeouts appropriate to the application’s session length and failure tolerance. A short connect timeout can detect an unreachable node quickly; an overly short client or server timeout can terminate legitimate long-running sessions. HAProxy’s health-check interval and failure thresholds should be tuned alongside these values, not copied blindly from an unrelated workload.
Validate, reload, and observe the service
- Run the configuration-check mode of the installed HAProxy binary against the configuration file. Use the exact binary and path supplied by your package; do not reload a file that has not passed validation.
- Reload HAProxy through the host’s service manager so existing sessions follow the service’s documented reload behavior. A reload is not the same as restarting MySQL and should be planned around your platform’s process-management settings.
- Inspect HAProxy logs and, where enabled, the statistics interface. Confirm that
db1anddb2show the expected healthy state before directing production traffic. - From an application-like client, connect to the HAProxy address rather than directly to a backend. Verify that authentication, TLS negotiation if used, session initialization, and normal queries all work through the proxy.
Keep the direct backend path available to administrators during rollout, but do not leave it open to application networks unless there is a deliberate operational reason. The stable client endpoint should be the HAProxy address, while direct access remains a controlled troubleshooting path.
Understand health checks and failure removal
HAProxy’s documentation summarizes the purpose of checks: “Health checks ensure that only healthy servers are kept in the load balancing rotation.” When checks fail, a server is removed from rotation while checks continue. After successful checks meet the configured rise threshold, HAProxy can return it to service.
| Setting or behavior | What it controls | Operational question |
|---|---|---|
inter |
Time between health checks. | How quickly should a failure be noticed, and how much probe traffic is acceptable? |
fall |
Consecutive failures needed before marking a server down. | How much transient network loss should be tolerated before removal? |
rise |
Consecutive successes needed before restoring a server. | How much stability is required before sending new clients back? |
| Connect and session timeouts | How long connection attempts and sessions may wait. | Will a timeout fail fast enough without killing valid work? |
A node can pass the handshake while replication is delayed, read-only state is wrong, storage is nearly full, or an application-specific dependency is broken. Add deeper checks through an orchestration system or SQL-aware proxy when those conditions must affect routing. Watch for flapping nodes: an interval or threshold that is too aggressive can repeatedly remove and restore a server, causing uneven connection distribution and noisy failover.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Test distribution and failure recovery safely
- Open many short-lived connections through the HAProxy address and record which backend receives them using server-side connection information or controlled logging. Do not infer distribution from a single session.
- In staging, stop MySQL on one backend or block the HAProxy-to-backend port with a temporary firewall rule.
- Wait for the configured failures to mark that server down. Confirm that new connections avoid it while checks continue.
- Restore the service or firewall rule, then wait for the configured rise successes. Confirm that the server returns only after passing checks.
- Test an existing connection that was attached to the failed node. Determine whether the client receives a disconnect, how its driver reports the error, and whether the application retries only operations that are safe to repeat.
- Repeat with an in-flight transaction, an explicit commit, and an idempotent read. A TCP proxy cannot reconstruct a transaction whose connection disappeared.
Do not call a failover successful merely because a new connection opens. Verify data visibility, transaction semantics, and the application’s duplicate-request protections after a node failure.
Writes, reads, and replication lag
Putting a primary and replicas in one HAProxy backend does not create read/write splitting. HAProxy sees bytes on a TCP stream, not SQL verbs. It cannot know that INSERT, UPDATE, or a stored procedure write must reach a writer, nor can it remove a replica that exceeds a replication-lag threshold.
Use separate endpoints only when another component maintains the role distinction. For example, an orchestration layer can publish a writer address and a reader address, with HAProxy balancing equivalent nodes behind each address. The orchestration layer must update membership when a primary changes; editing a static HAProxy file after every role change is fragile.
Free tools Windows power users keep installed
One-click scans. No signup required.
When a SQL-aware proxy is responsible for routing, evaluate its documented hostgroup, read_only, lag, persistence, and weighting behavior against your application’s transaction patterns. If the application already knows transaction intent, application-side routing may provide clearer guarantees than trying to infer intent in a generic network load balancer.
TLS and client identity considerations
In TCP mode, HAProxy can forward the MySQL byte stream without understanding SQL. That makes it suitable for passing MySQL TLS through to the backend, where the client validates the server certificate and negotiates encryption with MySQL. If you terminate TLS at HAProxy, you must separately secure the proxy-to-MySQL leg and manage certificates and trust on both sides.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Client-IP visibility is also a topology decision. MySQL may see the HAProxy address as the source of every connection, which affects host-based grants and audit records. Preserving the original address requires a supported mechanism and compatible end-to-end configuration; do not enable a proxy header or protocol option without confirming that the MySQL listener and clients understand it.
Common failure modes and fixes
HAProxy will not start after the change
- Run the installed binary’s configuration check and read the exact line and directive reported.
- Check for a port or address already bound by MySQL or another service.
- Confirm that the configuration uses directives available in the installed HAProxy version and edition.
Every backend is marked down
- Test TCP reachability from the HAProxy host to each MySQL address and port.
- Confirm that MySQL is listening on an address reachable from HAProxy, not only on loopback.
- Verify the check account’s username, host restriction, unlocked state, and empty-password requirement.
- Inspect MySQL and HAProxy logs for firewall, authentication, or protocol errors.
Connections work but writes fail on some sessions
This is expected when a writer and replicas share one backend. Separate roles through orchestration, a SQL-aware proxy, or application routing; changing roundrobin to leastconn does not solve role selection.
Recommended Free Tools
A recovered node causes stale reads
A successful handshake does not establish replication currency. Keep the node out of the reader pool until the component that understands replication state declares it caught up, or use a SQL-aware proxy with a configured lag condition.
Users report duplicate actions after a failure
The original transaction may have committed before the connection dropped. Treat retries as an application correctness problem: use idempotency keys or other request-level safeguards, and retry only operations whose semantics are understood.
HAProxy versus a SQL-aware proxy
| Decision axis | HAProxy | SQL-aware proxy or orchestration |
|---|---|---|
| Routing layer | TCP connections; no SQL inspection. | Can use query or session metadata and database state, depending on the product. |
| Writer/reader separation | Not provided by a generic backend. | Writer/reader groups and role-aware policies can be maintained. |
| Replication lag | Handshake health checks do not measure it. | A documented lag threshold such as max_replication_lag can influence membership. |
| Failure detection | Fast, lightweight TCP/MySQL probes. | Can incorporate database state, role, and cluster consensus. |
| Operational complexity | Small configuration and a stable endpoint. | More state, policy, persistence, and failover behavior to operate. |
| Best fit | Equivalent nodes that can safely accept the same connections. | Mixed roles, lag-sensitive reads, automatic writer changes, or transaction-aware routing. |
Choose the simplest layer that can enforce your correctness requirements. HAProxy is a strong connection balancer when node interchangeability is real. It is the wrong place to encode database semantics that it cannot observe.
Production checklist
- Clients use the HAProxy endpoint, not a hard-coded individual backend.
- Each backend has
check; the MySQL-aware probe is configured deliberately. - The health-check account is dedicated, unlocked, passwordless only as required by the selected probe, and restricted by source address.
- Firewall rules permit only the intended client-to-proxy and proxy-to-MySQL paths.
- Configuration validation runs before every reload, and the previous configuration is recoverable.
- Logs or statistics expose backend state, check failures, flapping, and connection counts.
fall,rise,inter, and timeout values reflect the application’s tolerance for delay and interruption.- Writer/reader routing and replication-lag decisions are handled by a component that can actually observe them.
- Staging tests cover backend loss, restoration, existing sessions, in-flight transactions, TLS, and application retry behavior.
With those conditions met, HAProxy provides a dependable MySQL connection endpoint and removes failed nodes from new-connection rotation without pretending to be a database failover manager.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
