Hi Lukas,
2016-04-22 9:04 GMT+02:00 Lukas Tribus <lu...@gmx.net>: > I suggest to remove tune.maxrewrite completely for a test. > > Also please post haproxy -vv output. > Well you were right, removing this header makes the deal. I think tune.maxrewrite behaviour changed recently ? It was set to half of bufsize before (so 8k). How is it set now ? I find documentation not clear on this point. I tried to set tune.maxrewrite to 9k and I still get the bug ... When tcpdumping the connection, this specific request has 746 bytes after header addition, with post content of 50237 bytes. Though I do not understand why Wireshark report this request as 5220 bytes long ... I'm using HAProxy 1.6.3 : HA-Proxy version 1.6.3 2015/12/25 Copyright 2000-2015 Willy Tarreau <wi...@haproxy.org> Build options : TARGET = linux2628 CPU = native CC = gcc CFLAGS = -O2 -march=native -g -fno-strict-aliasing -Wdeclaration-after-statement OPTIONS = USE_OPENSSL=1 USE_PCRE=1 USE_TFO=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200 Encrypted password support via crypt(3): yes Built without compression support (neither USE_ZLIB nor USE_SLZ are set) Compression algorithms supported : identity("identity") Built with OpenSSL version : OpenSSL 1.0.2f 28 Jan 2016 Running on OpenSSL version : OpenSSL 1.0.2f 28 Jan 2016 OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports prefer-server-ciphers : yes Built with PCRE version : 7.8 2008-09-05 PCRE library supports JIT : no (USE_PCRE_JIT not set) Built without Lua support Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. Olivier