make on os x

2009-06-11 Thread Rapsey
I'm trying to build haproxy with kqueue on osx leopard, but I don't think
it's working. There is no mention of DENABLE_KQUEUE anywhere when it's
building it.
This is the make I use:
make Makefile.osx TARGET=darwin CPU=i686 USE_PCRE=1  all

checking the executable after make:
 ./haproxy -vv
HA-Proxy version 1.3.17 2009/03/29
Copyright 2000-2008 Willy Tarreau w...@1wt.eu

Build options :
  TARGET  = osx
  CPU = i686
  CC  = gcc
  CFLAGS  = -O2 -march=i686 -g
  OPTIONS = USE_PCRE=1

So how do I enable kqueue in the build?


thank you,
Sergej


Re: Do I need more than HAProxy for SSL webserver

2009-06-11 Thread Erik Gulliksson
Hi Holger,

On Wed, Jun 10, 2009 at 6:07 PM, Holger Justhapr...@meine-er.de wrote:

 At our site, we are using nginx for that task.
 This is layed out as follows:
                                                          ---
                                                    | Backend 1 |
                                                   /      ---
  ---         ---        - /       ---
 | teh Internets |--| nginx |-| HAProxy |--| Backend 2 |
  ---  https  ---  http  - \ http  ---
                                                   \      ---
                                                    | Backend 3 |
                                                          ---

I tried a similar setup with nginx 0.6.x a while back, but I ended up
getting 411 Length Required for requests without the Content-Length
header. If I recall correctly a HTTP/1.1 client does not have to
specify Content-Length when doing chunked encoding (TE: chunked)
transfer, but nginx is not compliant with this. This is mainly an
issue with PUT and POST requests. Did you bump into this or is it
perhaps fixed in newer nginx?

Regards
Erik Gulliksson

-- 
Erik Gulliksson, erik.gulliks...@diino.net
System Administrator, Diino AB
http://www.diino.com



Re: Do I need more than HAProxy for SSL webserver

2009-06-11 Thread Guy
2009/6/10 Tom Potwin wxm...@gmail.com:
 I've read that all I need is to change mode http to mode tcp, balance
 roundrobin to balance source, and option httpchk to option ssl-hello-chk,
 and all should work. Then I also read that HAProxy can't do SSL so you have
 to install something like stunnel to get it to work. I'm trying to keep
 things as simple as I can, so what is the correct way for me to handle this?

Another option is to have Pound (http://www.apsis.ch/pound/) doing
your HTTPS proxying. It does the SSL authentication and then sends the
request for the actual content to the backend servers. Not sure of
performance if you've got a site with very heavy traffic though.
I'm currently using HAProxy and Pound side by side for my web load
balancing and it works just fine with webmail servers that get a fair
bit of traffic.

On the subject of load balancing, I'd be careful about going the
Heartbeat route. I've used it before and had headaches. I was using it
with DRBD though, so it may work just fine in your situation.

Cheers
Guy

-- 
Don't just do something...sit there!



RE: Do I need more than HAProxy for SSL webserver

2009-06-11 Thread Tom Potwin
Hi Guy

I was curious, what problems did you have with heartbeat? I've been having a
strange problem where the LB node, using Xen, where I keep loosing the
ability to see the HAProxy stats page. If I stop and restart Heartbeat, then
the stats come back for about 15-20 minutes. The failover capabilities seem
to keep working, I just loose the stats. 
I also looked into pound, but I was concerned because others said they had
problems on a busy CMS site.
When I started to set this up, I looked at DRBD VS rsync/replication, but I
actually don't remember now why I chose against it.

Tom

-Original Message-
From: Guy [mailto:wyldf...@gmail.com] 
Sent: Thursday, June 11, 2009 10:38 AM
To: haproxy@formilux.org
Subject: Re: Do I need more than HAProxy for SSL webserver

2009/6/10 Tom Potwin wxm...@gmail.com:
 I've read that all I need is to change mode http to mode tcp, balance 
 roundrobin to balance source, and option httpchk to option 
 ssl-hello-chk, and all should work. Then I also read that HAProxy 
 can't do SSL so you have to install something like stunnel to get it 
 to work. I'm trying to keep things as simple as I can, so what is the
correct way for me to handle this?

Another option is to have Pound (http://www.apsis.ch/pound/) doing your
HTTPS proxying. It does the SSL authentication and then sends the request
for the actual content to the backend servers. Not sure of performance if
you've got a site with very heavy traffic though.
I'm currently using HAProxy and Pound side by side for my web load balancing
and it works just fine with webmail servers that get a fair bit of traffic.

On the subject of load balancing, I'd be careful about going the Heartbeat
route. I've used it before and had headaches. I was using it with DRBD
though, so it may work just fine in your situation.

Cheers
Guy