When local service ssh is enable on VyOS to a dedicated Interface AND haproxy ssh service is also enabled for backend servers, the commit gives an error:
set interfaces ethernet eth0 address '10.0.0.1/24' --> Local SSH enabled set interfaces ethernet eth0 vif 10 address '192.168.10.20/24' --> FrontEnd SSH enabled set interfaces ethernet eth1 address '10.0.1.1/24' --> Server subnet set service ssh listen-address '10.0.0.1' set service ssh port '22' commit;save Then we configure HA proxy with ssh service set load-balancing haproxy backend InternalServer mode 'tcp' set load-balancing haproxy backend InternalServer server service-ssh address '10.0.1.100' set load-balancing haproxy backend InternalServer server service-ssh port '22' set load-balancing haproxy service InternalServer backend 'InternalServer' set load-balancing haproxy service InternalServer listen-address 192.168.10.20 set load-balancing haproxy service InternalServer mode 'tcp' set load-balancing haproxy service InternalServer port '22' [edit] vyos@vyos# commit;save [ load-balancing haproxy ] TCP port "22" is used by another service [[load-balancing haproxy]] failed Commit failed Warning: you have uncommitted changes that will not be saved.
Weird thing is IF I configure haproxy first and then configure local SSH, the commit doesn't give an error.
[edit] vyos@vyos# delete service ssh [edit] vyos@vyos# commit;save [edit] vyos@vyos# set service ssh listen-address 10.0.0.1 [edit] vyos@vyos# set service ssh port 22 [edit] vyos@vyos# commit;save No error and the actual HAproxy and local ssh works