Re: Configure Haproxy to dynamically set backend server

2015-06-02 Thread Baptiste
Hello, What you want to do is a forward proxy. HAProxy is not able to do this and the coming DNS feature won't allow it as well. Why you want to switch from ATS to HAProxy since ATS can do this easily out of the box? If you know in advance the server IP address, then there is something we can

Choosing servers based on IP address

2015-06-02 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Quick question - can anyone think of a way to change a server's weight based on some criteria, for example source IP address? It would be so useful when dealing with a common service that has two distinct sites, and rules in place that stop access to resources from the wrong site, like

[no subject]

2015-06-02 Thread ShanyiWan
ShanyiWan

Re: Global least loaded server

2015-06-02 Thread Baptiste
On Tue, Jun 2, 2015 at 6:36 PM, N P nvn...@yahoo.ca wrote: Hi, I want to send two transactions with different weights to different servers. I have done this using frontend, backend, and ACL as can be seen from the below config. The other requirement is to also use leastconn balancing. The

Re: OCSP stapling troubleshooting

2015-06-02 Thread Shawn Heisey
On 6/2/2015 12:38 PM, Andrew Hayworth wrote: Are you reloading HAProxy or issuing a 'set ssl ocsp-response' command via the stats socket after you retrieve the response? That's necessary after you pull down an updated OCSP response. For example, here's our script that pulls down the OCSP

Re: OCSP stapling troubleshooting

2015-06-02 Thread Andrew Hayworth
Are you reloading HAProxy or issuing a 'set ssl ocsp-response' command via the stats socket after you retrieve the response? That's necessary after you pull down an updated OCSP response. For example, here's our script that pulls down the OCSP response then loads it in via the stats socket:

Re: OCSP stapling troubleshooting

2015-06-02 Thread Andrew Hayworth
On Tue, Jun 2, 2015 at 2:16 PM, Shawn Heisey hapr...@elyograg.org wrote: My script may update a dozen ocsp responses all used by a single haproxy process ... so when I am using the stats socket to set the ocsp response, how do I tell haproxy which of the certificates it is using needs that

Re: OCSP stapling troubleshooting

2015-06-02 Thread Shawn Heisey
On 6/2/2015 11:42 AM, Lukas Tribus wrote: Share your cronjob script, your configuration, and SSLtest output at least (you basically didn't share any OCSP related informations). Here's the script that retrieves the OCSP responses, with its redacted config file:

[SOLVED] Re: OCSP stapling troubleshooting

2015-06-02 Thread Shawn Heisey
On 6/2/2015 1:29 PM, Andrew Hayworth wrote: On Tue, Jun 2, 2015 at 2:16 PM, Shawn Heisey hapr...@elyograg.org wrote: My script may update a dozen ocsp responses all used by a single haproxy process ... so when I am using the stats socket to set the ocsp response, how do I tell haproxy which of

FW: Choosing servers based on IP address

2015-06-02 Thread Franks Andy (IT Technical Architecture Manager)
I guess not then! I did see something about the newer version having some lua based choice of server, but it may have nothing to do with what I'm after. Not to worry. Thanks Andy From: Franks Andy (IT Technical Architecture Manager) [mailto:andy.fra...@sath.nhs.uk] Sent: 02 June 2015 09:12

Re: [SOLVED] Re: OCSP stapling troubleshooting

2015-06-02 Thread Andrew Hayworth
Awesome, glad it's all settled! On Tue, Jun 2, 2015 at 3:31 PM, Shawn Heisey hapr...@elyograg.org wrote: On 6/2/2015 1:29 PM, Andrew Hayworth wrote: On Tue, Jun 2, 2015 at 2:16 PM, Shawn Heisey hapr...@elyograg.org wrote: My script may update a dozen ocsp responses all used by a single haproxy

led tube-Torchlico LED

2015-06-02 Thread Jenny
Dear My Friend, Hello! I am Jenny from Torchlico Lighting. Glad to learn you're on the market of led lights products. If you want to buy good led bulbs and led tubes, Torchlite LED is good manufacture you should never miss. Over 5 years experience, CE FCC

Re: ~20% of HAProxy forwarded requests missing x-forwarded-for?

2015-06-02 Thread Willy Tarreau
On Tue, Jun 02, 2015 at 10:19:30AM +1000, Daurnimator wrote: Upgrading fixed it! thanks for confirming. Willy

Re: Configure Haproxy to dynamically set backend server

2015-06-02 Thread Willy Tarreau
On Tue, Jun 02, 2015 at 01:59:43AM +, Mrunmayi Dhume wrote: Hello, Thanks for all your help. Any rough estimate on when the patch for doing DNS resolutions during runtime with asynchronous methods might be out? It should be in 1.6-dev2 in the forthcoming days, it just happens that this

Global least loaded server

2015-06-02 Thread N P
Hi, I want to send two transactions with different weights to different servers. I have done this using frontend, backend, and ACL as can be seen from the below config.The other requirement is to also use leastconn balancing. The problem is that in this setting, leastconn applies within each

OCSP stapling troubleshooting

2015-06-02 Thread Shawn Heisey
I've done a Qualys Labs SSL test against my setup fronted with haproxy, using this URL: https://www.ssllabs.com/ssltest/index.html I thought I had OCSP stapling correctly configured, but Qualys says it's not there. I ave a cronjob that uses openssl to retrieve the .ocsp file for each

RE: OCSP stapling troubleshooting

2015-06-02 Thread Lukas Tribus
Hi Shawn, I've done a Qualys Labs SSL test against my setup fronted with haproxy, using this URL: https://www.ssllabs.com/ssltest/index.html I thought I had OCSP stapling correctly configured, but Qualys says it's not there. I ave a cronjob that uses openssl to retrieve the .ocsp file

[SPAM] BOOKING=============

2015-06-02 Thread Mr David Brink
I am writing you this email to make reservations for my family at your hotel. Arrival day : 15/06/2015 Departure day: 30/06/2015 Number Of Gusts: 4 Adult Kindly send the total quotation so as to forward my card for the full payment only. Thanks Mr David Brink