Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

Hello Lukas, Thanks for your update. > >> Currently, I start haproxy manually with this command (in the same shell I >> edit the config file, thus I have to stop haproxy with CTRL-C for changes): >> — >> haproxy -d -f /etc/haproxy/haproxy.cfg >> — > > > I see. Can you run it through strace -tt

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

Hi Heiko, > Currently, I start haproxy manually with this command (in the same shell I > edit the config file, thus I have to stop haproxy with CTRL-C for changes): > — > haproxy -d -f /etc/haproxy/haproxy.cfg > — I see. Can you run it through strace -tt, Not that I expect to see why the TLS ha

Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

Hello Lukas, > Am 17.10.2014 um 18:11 schrieb Lukas Tribus : > >> Used the bind parameter before which did / does not help and >> created a tcpdump with the mentioned settings (DH = 1024 Bit >> and force tls) with your requested parameters. > > Something doesn't add up. > > The handshake you s

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

> Used the bind parameter before which did / does not help and > created a tcpdump with the mentioned settings (DH = 1024 Bit > and force tls) with your requested parameters. Something doesn't add up. The handshake you sent me is still negotiating TLSv1.2 and TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

Hi Heiko, > #- > # test configuration > #- > > frontend test1 > bind *:443 ssl crt /etc/pki/tls/certs/domain.com-haproxy.pem > #ciphers HIGH:RC4-SHA:!ADH > #ciph

Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

Hello Lukas, Thanks for your reply. You can find my additional information in your text below. > Am 17.10.2014 um 01:32 schrieb Lukas Tribus : > > > Gonna need to see your configuration to be able to help you, especially ssl > and http related parts. ##

Re: HAProxy proxying JDBC requests two a percona cluster

Hello! > Oh. Thanks for mentioning that page (I somehow never got there). I now saw, > that > the connections are dropped with "cD" - meaning, that HAproxy thought, the > server would be down. Getting back on that. I understand, that "D" means that HAProxy thinks, the server is down. Shouldn't

Re: HAProxy proxying JDBC requests two a percona cluster

Hi! > Maybe try with "no option dontlognull" ? > Are all connections in logs logged with "normal --" session state ? > http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#8.5 Oh. Thanks for mentioning that page (I somehow never got there). I now saw, that the connections are dropped wi

Question about "srv_conn" and "beconn"

Hi haproxy team: I see the document about these: "beconn" is the total number of concurrent connections handled by the backend when the session was logged. "srv_conn" is the total number of concurrent connections still active on the server when the session was logged. fell confused ab

Stick-table misconfiguration; haproxy should throw error

I just wanted to report an issue that had me hitting my head on the table for a few hours: I reconfigured a development environment to use Chef to generate haproxy config files. Every 2-3 minutes or so, depending on load, haproxy would crash with a `trap divide error` (divide by zero). It work

RE: Understanding haproxy cpu usage in ssl-offload scenario

Hi Dennis, > Now from what I read on the net about haproxy I expected that the > load-balancing isn't that cpu intensive and that most of the cpu usage > should be generated by the ssl offloading but what I'm seeing is that > the two cores 0 and 4 are at 20% idle while the rest is at 80-90% idle

Re: HAProxy proxying JDBC requests two a percona cluster

Hi, On Wed, Oct 15, Dennis Plöger | getit GmbH wrote: > Hi! > > > Hmm... I just understood, that we're probably talking about different things > > here. As you can see in my configuration, I haven't specify a maxconn value. > > From the configuration documentation I didn't understand, what the de

Re: haproxy issue

Hi, On Wed, Oct 15, pasquale scalea wrote: > i have configure haproxy-1.5.4-1.el6.x86_64 with this config ... > backend view_https > mode tcp > option tcplog > option httpchk OPTIONS / > http-check expect status 200 > option ssl-hello-chk #make sure we can talk SSL, not just TC