Re: Download site horrendously slow

2017-05-31 Thread William Lallemand
On Wed, May 31, 2017 at 04:15:18PM +, Skarbek, John wrote:
> Hey guys,
> 
> Just an FYI, I'm not sure how you host the downloads for haproxy, but for the 
> past couple of days, they've been horridly slow.
> 

You are right, I'd just test it and the download of the tarball fluctuate
between 1 and 2 kB/s.


-- 
William Lallemand



Download site horrendously slow

2017-05-31 Thread Skarbek, John
Hey guys,

Just an FYI, I'm not sure how you host the downloads for haproxy, but for the 
past couple of days, they've been horridly slow.



Re: Mod Defender (a NAXSI clone) integration patch

2017-05-31 Thread Thierry Fournier



Le 29 mai 2017 11:40:47 AM Willy TARREAU  a écrit :


Hi Thierry, Dragan,

On Mon, May 29, 2017 at 11:25:48AM +0200, Thierry Fournier wrote:

Hi dragan, thats a great news.


Yep great news and apparently great work (as usual).


Just for information, the official project “mod_defender” is now here

   https://github.com/VultureProject/mod_defender


Since both of them are at the exact same commit ID, do you know if the
project simply moved or is forked ? Does this mean we should expect to
find updates only at the new URL above and not at the previous one ? Or
maybe someone should just contact the project maintainer to know which
one is supposed to be the right one.



The project owner says that is moved. I suppose that is for using the brand 
of his own company.





Two other comments while I'm thinking about this :
  - Dragan, I think it could be useful to mention in the README that in
its current state, the module is limited by haproxy to the analysis
of the first buffer and that just like for the mod_sec equivalent,
one workaround may consist in significantly increasing haproxy's
buffer size ;

  - Thierry/Dragan, given that both of your contribs were made from
Apache modules, do you think it would be useful/feasible to have
a more generic SPOE<->APR agent to natively support more Apache
modules ? Some people might want to recompress images or inline
CSS and JS for example, and while I totally despise these
practises which modify the delivered contents and corrupt caches,
I can understand why some people would prefer to run this on the
edge LB than having to configure it on all hosted servers.



Hard question. the question is not about spoe <-> apr but spoe <-> apache 
throuhgt apr. the usage of modsecurity I just writen the code used by 
modsec, but for more compatibility we must implement the behavior of apache 
and it is a big job and a little bit hazardous.



Thierry



Let's wait for a bit more feedback (if any) but at least from a quality
perspective I'm fine with merging it as-is.

Cheers,
Willy






Re: Set Maintenance Mode via Stats WebSite

2017-05-31 Thread Mark Janssen
No the changes from the admin interface are immediate. That's the
entire idea behind the admin interface

2017-05-17 13:52 GMT+02:00 Deckert, Matthias <
matthias.deck...@medizin.uni-leipzig.de>:

> Hello,
>
>
>
> just a short question.
>
> Is it necessary to restart the ha service after setting e.g. MAINT Mode
> via the haproxy stats website?
>
>
>
>
>
>
>
>
>
>
>
> Mit freundlichen Grüßen / Kind Regards
>
> Matthias Deckert
>
>
>
>
>
>   [image: cid:image001.jpg@01D151E7.4517FBF0][image:
> cid:image002.png@01CF2BC5.3CBD14D0]
>
> ___
>
> *Universitätsklinikum Leipzig - AöR*
> Bereich 1 – Informationsmanagement | AG-IS/T-SN | Liebigstr. 21 – Haus C |
> 04103 Leipzig
>
> Dipl.-Ing. (BA) Matthias Deckert
>
> Fon:  +49 341 97 10191 <+49%20341%209710191>  Fax:  +49 341 97 15809
> <+49%20341%209715809>
>
> IM:   *matthias.deck...@medizin.uni-leipzig.de*
> E-Mail:matthias.deck...@uniklinik-leipzig.de   Web:
> http://www.uniklinik-leipzig.de
>
>
>
> Aufsichtsratsvorsitzender: Prof. Dr. Knut Löschke
>
> Medizinischer Vorstand und Sprecher des Vorstandes: Prof. Dr. med.
> Wolfgang E. Fleig
>
> Kaufmännischer Vorstand: Marya Verdel
>
> Liebigstraße 18
>
> Steuernummer: 23114904074
>
> Bankverbindung: Deutsche Bank
>
>
>
> 04103 Leipzig
>
> IK: 261401052
>
> BLZ: 860 700 00
>
> Kto: 1247 998
>
> Telefon 0341 97 109
>
> Internet: www.uniklinik-leipzig.de 
>
> Swift-Code: DEUTDE8L
>
> IBAN: DE 27 860 70 12 47 99 800
>
> Diese E-Mail enthält vertrauliche und / oder rechtlich geschützte
> Informationen. Sollten Sie nicht der richtige Empfänger sein oder Sie haben
> diese E-Mail irrtümlich erhalten, informieren Sie uns bitte sofort und
> vernichten diese E-Mail. Das unerlaubte Kopieren sowie die unbefugte
> Weitergabe dieser E-Mail und der darin enthaltenen Informationen ist nicht
> gestattet.
>
>
>
>
>
>
>



-- 
Mark Janssen  --  maniac(at)maniac.nl
Unix / Linux Open-Source and Internet Consultant
Maniac.nl Sig-IO.nl Vps.Stoned-IT.com


Fallback Requirement

2017-05-31 Thread Prasad Jayasinghe
HI Sir / Madam

We need to load balance among 2 servers which are responding to TCP
connection. but in normal scenario this will perfectly work and we have
done the Haproxy configuration as well. But we are having another
requirement when fallback happen existing (already established) TCP
connection (50%) from server B need to move to Server A (Server A fail and
Server B get the server A load then Server A Comes up ).

Do you have any solution or configuration for this kind of requirement. If
you can guide me to overcome this issue it will really helpful me and
really appreciate.

Note : Architecture attached. (Requirement shows on Diagram *No 4* )

thanks.
*Regards*

Prasad Jayasinghe
*Network Administrator* - IT



Wavenet International (Pvt) Ltd. | Wavenet Solutions (Pvt) Ltd.

141/6, Vauxhall Street | Colombo 02 | Sri Lanka

Mobile: +94772649710 | Tel: +94117526000 Ext: 183 | Fax: +94117526099 |
Website : www.globalwavenet.com