Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
just to be sure I have tried another kernel, with the same result 0 : CentOS Linux (5.1.16-1.el7.elrepo.x86_64) 7 (Core) 1 : CentOS Linux (4.4.184-1.el7.elrepo.x86_64) 7 (Core) 2 : CentOS Linux (3.10.0-957.21.3.el7.x86_64) 7 (Core) > On 5 Jul 2019, at 23:23, Peter Hudec wrote: > > There was

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
There was no IPv6.. If I change BIND from bind :80 bind :443 ssl crt /home/certs/haproxy/combined/ to bind :::80 v4v6 bind :::443 v4v6 ssl crt /home/certs/haproxy/combined/ the IPv4 and IPv6 are working as expected. But in this setup IPv4 is wrongIPv6 is OK bind :::80

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
it works on localhost, but not on public ip curl -k -v https://2.57.64.11 curl -k -v http://2.57.64.11 or try IPv6 2a09:d4c0::11 Peter > On 5 Jul 2019, at 23:02, Peter Hudec wrote: > > thos config do not works. > I took your working config anf add mu global sand

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
thos config do not works. I took your working config anf add mu global sand default section global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 userhaproxy group haproxy daemon # turn on

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
There’s not problem with nginx/php. If I add this lines in my config http-response set-header X-Server-IP %[dst] http-response set-header X-Server-Port %[dst_port] http-response set-header X-Client-IP %[src] http-response set-header X-Client-Port %[src_port] see exactly the

Re: Get http connection client/server ip/port

2019-07-05 Thread Christopher Faulet
Le 05/07/2019 à 21:55, Peter Hudec a écrit : Hi Jarno, thanks for answer. I tried to run the haproxy in debug mode, but I do not see the request headers for the upstream in the log. But I have found some new facts. Test these 2 scenarios, at this moment there is no valid certs

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
Hi, still could be problem on my side, but I have the same result with version 1.8.20 1.9.8 2.0.1 Peter > On 5 Jul 2019, at 21:55, Peter Hudec wrote: > > Hi Jarno, > > thanks for answer. > I tried to run the haproxy in debug mode, but I do not see the request > headers for the

Re: Get http connection client/server ip/port

2019-07-05 Thread Peter Hudec
Hi Jarno, thanks for answer. I tried to run the haproxy in debug mode, but I do not see the request headers for the upstream in the log. But I have found some new facts. Test these 2 scenarios, at this moment there is no valid certs http://web01.test.host.sk/test.php

receive side scaling, need help with approach to port ranges

2019-07-05 Thread Richard Russo
Hi, I've been experimenting with Recieve Side Scaling (RSS) for a tcp proxy application. The basic idea with RSS is by configuring the NICs, kernel, and application to use the same CPU for a given socket, cross CPU locking and communication is eliminated or at least significantly reduced. On

Re: [RFC PATCH] BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2

2019-07-05 Thread Emmanuel Hocdet
> Le 4 juil. 2019 à 18:55, Илья Шипицин a écrit : > > can you provide some comment around code ? > > I think almost nobody can read such code > > чт, 4 июл. 2019 г. в 21:17, Emmanuel Hocdet >: > Hi, > > This thread reminds me that with BoringSSL empty (and abort)

Re: [PATCH] DOC: contrib: spoa_server Add some hints for building, spoa_server

2019-07-05 Thread Christopher Faulet
Le 03/07/2019 à 10:24, Aleksandar Lazic a écrit : Hi. I have added some hints into the spoa_server. Thanks Thierry for the nice server ;-) Thanks, merged now. -- Christopher Faulet

Re: Help with 1.8.1/4 and spoa_server/spoa_example

2019-07-05 Thread Christopher Faulet
Le 03/07/2019 à 16:16, Aleksandar Lazic a écrit : I know this is a old haproxy version but I have not the option to update as it's part of a vendor product. I need to bring the `[haproxy-2.0.git]/ contrib/spoa_server/` up and runnig or `[haproxy-1.8.git]/contrib/spoa_example/` from 1.8.4 to be

Re: Debugging protobuf and HTX

2019-07-05 Thread Christopher Faulet
Le 03/07/2019 à 13:28, GARDAIS Ionel a écrit : Hi list, We ran into an issue with haproxy 2.0.1 in front of SonarQube. With HTX enabled, despite no errors being displayed either in haproxy nor SonarQube, some but not all analysis failed. From SonarQube, debug shows protobuf requests

Re: question about spoe doc

2019-07-05 Thread Christopher Faulet
Le 03/07/2019 à 11:03, Aleksandar Lazic a écrit : Hi. in the spoe doc in section **2.5. Example** are the following lines. ``` 620 spoe-message get-ip-reputation 621 args ip=src 622 event on-client-session if ! { src -f /etc/haproxy/whitelist.lst } ``` As far as I

Re: issue with small object caching

2019-07-05 Thread Christopher Faulet
Le 04/07/2019 à 16:54, Senthil Naidu a écrit : Hi, I there any fix that can be applied for small object caching to work with Firefox and chrome too, With Internet Explorer I am able to hit the cache properly. As mentioned in my earlier , I can see that firefox is sending header

Re: Get http connection client/server ip/port

2019-07-05 Thread Christopher Faulet
Le 04/07/2019 à 15:16, Peter Hudec a écrit : Hi, I have maybe found some bug in haproxy, submitted as https://github.com/haproxy/haproxy/issues/154. The variables dst, dst_port are identical with the src, src_port. Is there any other way how to get these /in this case dst/ values ?? What do

[PATCH] DOC: Fix typo in intro.txt

2019-07-05 Thread Alain Belkadi
Hello, You will find as attachement my first ultra-small contribution to the documentation, a fix for a typo. Regards, -- [Alain Belkadi / LinuxBeach]From ba4a3f9674d31622a002a12a97b7ae6fdeb080b7 Mon Sep 17 00:00:00 2001 From: Alain Belkadi Date: Fri, 5 Jul 2019 10:12:40 +0200 Subject: