Wazuh Load Balancing Issues with Nginx: Why All Agents Hit One Manager
TL;DRAll Wazuh agents were ending up on a single manager because the load balancer was using IP-hash stickiness. Because every agent connection passed through a Cloudflare Tunnel, the hash consistently mapped them to the same backend. Changing the 1514 upstream to least_conn balanced new connections across managers and fixed the skew. 1515 (registration) remained pointed … [Read more…]