Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

❦ 18 mai 2016 22:56 +0200, Pavlos Parissis  : >> Also, where is the bugtracker for haproxy? I can file a report if you >> want to save time. > > As far as I know there isn't any bugtracker. Posting problems in this > ML is enough to kick the investigation. So far this

Re: [PATCH] BUG/MEDIUM: init: don't use environment locale

On Wed, May 18, 2016 at 11:13:38PM +0200, Maxime de Roucy wrote: > This patch remove setlocale from the main function. (...) Thank you Maxime, I've merged it. I've amended your commit message to mention the ID of the commit which introduced it in order to avoid future confusion from people who

Re: [PATCH] BUG/MEDIUM: init: don't use environment locale

On 18 May 2016 at 16:18, Cyril Bonté wrote: > Le 19/05/2016 00:34, Maciej Katafiasz a écrit : >> While potentially >> confusing, forcing it to C is also confusing and prevents people from >> actually exploiting locale should they want to, and traditionally the >> Unix

Re: [PATCH] BUG/MEDIUM: init: don't use environment locale

Le 19/05/2016 00:34, Maciej Katafiasz a écrit : On 18 May 2016 at 14:13, Maxime de Roucy wrote: This patch remove setlocale from the main function. Some regex may have different behaviours depending on the locale. Some LUA scripts may change their behaviour too

Re: [PATCH] BUG/MEDIUM: init: don't use environment locale

On 18 May 2016 at 14:13, Maxime de Roucy wrote: > > This patch remove setlocale from the main function. > > Some regex may have different behaviours depending on the > locale. Some LUA scripts may change their behaviour too > (http://lua-users.org/wiki/LuaLocales). I'm

[PATCH] BUG/MEDIUM: init: don't use environment locale

This patch remove setlocale from the main function. Some regex may have different behaviours depending on the locale. Some LUA scripts may change their behaviour too (http://lua-users.org/wiki/LuaLocales). Without this patch (haproxy is using setlocale) : $ cat locale.cfg

[PATCH] BUG/MEDIUM: init: don't use environment locale

This patch remove setlocale from the main function. Some regex may have different behaviours depending on the locale. Some LUA scripts may change their behaviour too (http://lua-users.org/wiki/LuaLocales). Without this patch (haproxy is using setlocale) : $ cat locale.cfg

Re: [PATCH] BUG/MAJOR: fix listening IP address storage for frontends

Le 18/05/2016 22:52, Arthur Țițeică a écrit : În ziua de miercuri, 18 mai 2016, la 22:38:45 EEST, Cyril Bonté a scris: It looks like you didn't recompile with USE_OPENSSL=1 haproxy -vv should give some hints. Indeed, sorry about that. And error on my build script. I fixed that, haproxy

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

On 18/05/2016 10:42 μμ, Jonathan Fisher wrote: > Also, where is the bugtracker for haproxy? I can file a report if you want to > save time. > As far as I know there isn't any bugtracker. Posting problems in this ML is enough to kick the investigation. So far this model works quite well

Re: [PATCH] BUG/MAJOR: fix listening IP address storage for frontends

În ziua de miercuri, 18 mai 2016, la 22:38:45 EEST, Cyril Bonté a scris: > It looks like you didn't recompile with USE_OPENSSL=1 > haproxy -vv should give some hints. Indeed, sorry about that. And error on my build script. I fixed that, haproxy starts successfully but the issue remains, it still

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

Also, where is the bugtracker for haproxy? I can file a report if you want to save time. On Wed, May 18, 2016 at 1:52 PM, Jonathan Fisher wrote: > Nice here's the complication output: > > > http://pastebin.com/iS2JKXED > > Now I just have to figure out how to add

Re: [PATCH] BUG/MAJOR: fix listening IP address storage for frontends

Hi, Le 18/05/2016 22:36, Arthur Țițeică a écrit : Hi all, În ziua de miercuri, 18 mai 2016, la 20:51:13 EEST, Willy Tarreau a scris: Thanks Vincent! It looks pretty good and very clean in the end. Arthur, as soon as you confirm it works for you I'll merge it. I'm keeping it untouched below

Re: [PATCH] BUG/MAJOR: fix listening IP address storage for frontends

Hi all, În ziua de miercuri, 18 mai 2016, la 20:51:13 EEST, Willy Tarreau a scris: > Thanks Vincent! > > It looks pretty good and very clean in the end. > Arthur, as soon as you confirm it works for you I'll merge it. I'm keeping > it untouched below in case you missed it. Something seems a bit

Re: [PATCH] BUG/MAJOR: fix listening IP address storage for frontends

Thanks Vincent! It looks pretty good and very clean in the end. Arthur, as soon as you confirm it works for you I'll merge it. I'm keeping it untouched below in case you missed it. Thanks, Willy On Wed, May 18, 2016 at 04:17:44PM +0200, Vincent Bernat wrote: > From: Vincent Bernat

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

Nice here's the complication output: http://pastebin.com/iS2JKXED Now I just have to figure out how to add openssl, zlib, and libpcre which don't seem to be available on Oracle Solaris. On Wed, May 18, 2016 at 1:40 PM, Vincent Bernat wrote: > You can try this patch to

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

You can try this patch to check if it works. >From 74b502bcbef74927b2e006ac399a4d3b3de1d331 Mon Sep 17 00:00:00 2001 From: Vincent Bernat Date: Wed, 18 May 2016 19:38:36 +0200 Subject: [PATCH] MINOR: use a macro for htonll/ntohll Some OS have a definition for htonll/ntohll

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

Oh man, I wish I was smart enough to understand what's happening there... what do I need to replace? (And for my own learning/benefit, can you explain what's happening?) Thank you!!! On Wed, May 18, 2016 at 12:07 PM, Vincent Bernat wrote: > Hey! > > Since there is some

Re: Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

Hey! Since there is some discrepancy in the definition of ntohll among platforms, I define this macro to shadow any existing definition: #ifndef ntohll # define ntohll(x) \ (((u_int64_t)(ntohl((int)(((x) << 32) >> 32))) << 32) | \

Compilation problem: haproxy 1.6.5 (latest) on Solaris 11

We can get 1.5 to compile quite nicely on Solaris 11 :) 1.6 has a few nice features though we'd like to have, if it all possible. I have a VMDK created if the developers want to try it themselves in a virtual machine. Here is the output of the compiler, which is GCC-48:

[PATCH] BUG/MAJOR: fix listening IP address storage for frontends

From: Vincent Bernat When compiled with GCC 6, the IP address specified for a frontend was ignored and HAProxy was listening on all addresses instead. This is caused by an incomplete copy of a "struct sockaddr_storage". With the GNU Libc, "struct sockaddr_storage" is defined

Re: Crash with kernel error

On Wed, May 18, 2016 at 08:58:25AM -0500, Sasha Litvak wrote: > I have a core now. How and what can I send to you? Excellent :-) If it's less than a few megs, just compress it and send it to me/us over e-mail. In all cases, don't send it to the list as it contains some sensitive information! If

Re: Crash with kernel error

I have a core now. How and what can I send to you? On Wed, May 18, 2016 at 8:54 AM, Willy Tarreau wrote: > On Wed, May 18, 2016 at 08:48:05AM -0500, Sasha Litvak wrote: > > Home directory for user haproxy or other permissible place had to be > used > > to start in order to store

Re: 100% cpu , epoll_wait()

On Wed, May 18, 2016 at 03:39:34PM +0200, Sebastian Heid wrote: > Hi Willy, > > thanks for the feedback. I'm using OBS (Open Build Service) for creating > CentOS/RHEL RPMs, so it should be as clean as it can get. OK thanks for checking. > When I find some time, I'll try to reproduce it and will

Re: Crash with kernel error

On Wed, May 18, 2016 at 08:48:05AM -0500, Sasha Litvak wrote: > Home directory for user haproxy or other permissible place had to be used > to start in order to store a core file. While running in the non daemon > mode killall -6 haproxy produced core. However editing /etc/init.d/haproxy > as

Re: Crash with kernel error

Home directory for user haproxy or other permissible place had to be used to start in order to store a core file. While running in the non daemon mode killall -6 haproxy produced core. However editing /etc/init.d/haproxy as below had no effect, i.e no core. start() { ++ ulimit -c unlimited

Hardware Security Module (HSM) + Haproxy

Has anyone had any luck using a Thales nshield Connect or gemalto safenet HSM for key storage and/or SSL sessions setup with HAproxy? Last i could find was this from last year: https://marc.info/?l=haproxy=143766398313038=2 Thanks Mike

Re: Using socket commands to add a new server to a backend

On 05/18/2016 12:35 AM, Tugberk Ugurlu wrote: > Thanks! > What do you think about this approach: > http://engineeringblog.yelp.com/2015/04/true-zero-downtime-haproxy-reloads.html > Seems a bit complicated to get it right but wonder if it's worth investing > into. That really depends on your

Re: 100% cpu , epoll_wait()

Hi Willy, thanks for the feedback. I'm using OBS (Open Build Service) for creating CentOS/RHEL RPMs, so it should be as clean as it can get. When I find some time, I'll try to reproduce it and will come back to you. Cheers, Sebastian -Ursprüngliche Nachricht- > Von:Willy Tarreau

Re: 100% cpu , epoll_wait()

Hi Sebastian, On Thu, May 12, 2016 at 09:58:22AM +0200, Sebastian Heid wrote: > Hi Lukas, > > starting from around 200mbit/s in, haproxy processes (nbproc 6) are > hitting 100% cpu regularly (noticed up to 3 processes at the same time with > 100%), but recover again on its own after some time.

Re: Crash with kernel error

On Wed, May 18, 2016 at 12:50:19PM +0200, Nenad Merdanovic wrote: > Hey, > > On 5/18/2016 8:28 AM, Sasha Litvak wrote: > > It is hard to reproduce, It took almost a week for it to crush and > > produced no core. I did ulimit -c unlimited before start. Does it make > > sense to go to back to

Re: Haproxy 1.6.5 listens on all IPv4 addresses

În ziua de miercuri, 18 mai 2016, la 10:30:56 EEST, Willy Tarreau a scris: > That works for me. Let's have Arthur test them to confirm the issue goes > away for him. I'm glad to help.

Re: Crash with kernel error

Hey, On 5/18/2016 8:28 AM, Sasha Litvak wrote: > It is hard to reproduce, It took almost a week for it to crush and > produced no core. I did ulimit -c unlimited before start. Does it make > sense to go to back to 1.6.3 or try git source ? Make sure you set the fs.suid_dumpable=1 sysctl

Re: Haproxy 1.6.5 listens on all IPv4 addresses

Hi Vincent, On Wed, May 18, 2016 at 09:58:33AM +0200, Vincent Bernat wrote: > ??? 15 mai 2016 09:55 +0200, Vincent Bernat  : > > >> I suppose that some new features of gcc started to rely on the > >> strict-aliasing rule without taking -fno-strict-aliasing into > >>

Re: Haproxy 1.6.5 listens on all IPv4 addresses

❦ 15 mai 2016 09:55 +0200, Vincent Bernat  : >> I suppose that some new features of gcc started to rely on the >> strict-aliasing rule without taking -fno-strict-aliasing into >> consideration. I didn't find anything in the bugzilla, but it's easy to >> miss something as there

Re: Crash with kernel error

It is hard to reproduce, It took almost a week for it to crush and produced no core. I did ulimit -c unlimited before start. Does it make sense to go to back to 1.6.3 or try git source ? On Thu, May 12, 2016 at 2:11 AM, Lukas Tribus wrote: > Hi, > > > ok, thanks. > > This