ISA
Is possible change ISA Server 2006 (ActiveSync/OWA) to Haproxy? -- Atte Jorge Severino
Re: Mailer does not work
unsubscribe 2015-07-15 9:17 GMT-03:00 mlist ml...@apsystems.it: We take a tcpdump. Following the tcp traffic we can see each step. Reproducing manually the mail was sent. Probably HAProxy SMTP communication has an error on the final stage CRLF.CRLF as of that all goes right. Follows manual communication with mmail server reproducing tpcdump smto command seguence. EHLO smtp1 250-MAIL1 Hello [192.168.1.x] 250-SIZE 10485760 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-AUTH 250-8BITMIME 250-XEXCH50 250 XSHADOW MAIL FROM:loadbha1@domain 250 2.1.0 Sender OK RCPT TO:alerts@domain 250 2.1.5 Recipient OK DATA 354 Start mail input; end with CRLF.CRLF From: loadbha1@domain To: alerts@domain Date: Wed, 15 Jul 2015 12:50:48 +0200 (CEST) Subject: [HAproxy Alert] Server backend/webhost1 is DOWN, reason: Layer4 timeout, check duration: 5002ms. 1 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue Server backend/webhost1 is DOWN, reason: Layer4 timeout, check duration: 5002ms. 1 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue . 250 2.6.0 7c4f8f74-8d6b-446e-a504-e7a45fc58baf@MAIL [InternalId=293812] Queued mail for delivery Entering manually all these commands we correctly receive the email. Dr. Roberto Cazzato Divisione ICT e Sicurezza Senior IT Designer gsm +39 348 22 00 850 A.P. SYSTEMS s.r.l. 20013 Magenta (Milano) Via Milano 89/91 (ang.Via Cimarosa) Italia - www.apsystems.it tel. +39 02 97226.1 - fax 02 97226.339 -Original Message- From: Baptiste [mailto:bed...@gmail.com] Sent: mercoledì 15 luglio 2015 12.01 To: mlist Cc: haproxy@formilux.org Subject: Re: Mailer does not work On Wed, Jul 15, 2015 at 9:48 AM, mlist ml...@apsystems.it wrote: We compiled from source haproxy-1.6-dev2.tar.gz. New Mailers mechanism does not seems to work, we configured as on manual: mailers apsmailer1 mailer smtp1 mailserver ip:10025 … … backend somebackend_https mode http balance roundrobin … email-alert mailers apsmailer1 email-alert from from mail email-alert to to mail email-alert level info … We see in haproxy.log server status change: Jul 15 09:42:00 localhost.localdomain haproxy[3342]: Server …/server1 is UP, reason: Layer4 check passed, check duration: 0ms. 2 active and 0 backup servers online. 0 sessions requeued, 0 total in queue. Jul 15 09:42:00 localhost.localdomain haproxy[3342]: Server …/server1 is UP, reason: Layer6 check passed, check duration: 1ms. 2 active and 0 backup servers online. 0 sessions requeued, 0 total in queue. But no mail alerts are sent, no error or warning logged about sending mail. haproxy -f /etc/haproxy/haproxy.cfg –c does not return any error. All seems to be right, but mail alerts are not sent. Roberto Hi Roberto, Could you please take a tcpdump on port 10025 and confirm HAProxy tries to get connected to the SMTP server? Baptiste -- Il messaggio e' stato analizzato alla ricerca di virus o contenuti pericolosi da MailScanner, ed e' risultato non infetto. -- Atte Jorge Severino Numero movil Personal: 08-7775834
unsubscribe
unsubscribe
Re: Active/Active
Openbsd carp El 16-02-2015 7:16, Mathieu Sergent mathieu.sergent...@gmail.com escribió: Hi, Now i use two HAProxy active/passive with keepalived, which make the load balancing on web servers. I would know if it's possible to use two HAProxy in active/active mode ? I know keepalived can't managed it, because it uses the protocol VRRP. I made researches and it seems to be impossible. Regards, Mathieu.
Re: New to haproxy questions
For lb i use rsync+vrrp+ifstated. Atte. Jsd El 16-01-2015 21:48, Benjamin Smith li...@benjamindsmith.com escribió: We recently switched our web cluster to use HaProxy 1.5.x from a combination of pound and xrctl. So far, we're loving it! Some questions have come up, though, that we'd like to entertain: 1) Logging performance data: A) How long before the page started putting out data? (implying that the server side is done processing, though not necessarily) B) How long did the whole cycle take from initial connection to end of download? 2) Is there a way to anti-DDOS based on a cookie? (Really, we want to filter based on user/login but that isn't actually part of the HTTP session, that's determined by the cookie) W 3) Is there a repo for 1.5.x for RHEL 6 / CentOS 6 ? (I couldn't find one) 4) As loads and uptimes vary on our logic servers, we have a script that sets the weight for each of our 5 logic servers every 5 seconds, to a weight of 0 if a fault is detected. Is there a way to have haproxy set the weight to 0 if the script doesn't report in to the load balancer after a timeout? EG: 60 seconds. 5) Is there a relatively simple way to get true HA with a redundant load balancer? We have two identical machines side-by-side running EL6 and haproxy, one is a disk dd of the other. In the past we used heartbeat with limited success; pacemaker has been very problematic for us. For now, we're managing manually. Ben Smith
Re: email alerts
My configs: In haproxy.cfg: global log 127.0.0.1:514 local1 notice In syslog.conf: !!haproxy local1.*/var/log/haproxy.log !* In logpp.conf root@haproxy01 $ cat /etc/logpp.conf input var-log-haproxy { file /var/log/haproxy.log } output send-mail { exec /usr/bin/mail -s Alarm LB HAProxy adm...@x.com operat...@.com -f haproxy.moni...@x.com } filter down-haproxy { regexp Server (.+)\/(.+) is DOWN template Server backend $2 Service frontend $1 state DOWN } filter up-haproxy { regexp Server (.+)\/(.+) is UP template Server backend $2 Service frontend $1 state UP } flow haproxy { input var-log-haproxy filter down-haproxy filter up-haproxy output send-mail } 2014-11-03 12:04 GMT-03:00 Andrey Zakabluk a.zakab...@velcom.by: No ( I have read manual and I want see you config fali for example ) For example, I have And I can not see in log haproxy informations about DOWN interface… or I not understand your idea? *From:* Jorge Severino [mailto:severino.jo...@gmail.com] *Sent:* Monday, November 3, 2014 3:51 PM *To:* Andrey Zakabluk *Subject:* RE: email alerts You a create config file? El 02-11-2014 8:55, Andrey Zakabluk a.zakab...@velcom.by escribió: Hi! Maybe You can send me your config file for logpp ? For example. I want try use LogPP. I am created [root@srv-lb-prod2:/opt/install/logpp-0.16/src]# file logpp logpp: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, not stripped *From:* Jorge Severino [mailto:severino.jo...@gmail.com] *Sent:* Friday, October 24, 2014 3:29 PM *To:* Andrey Zakabluk *Cc:* HAProxy *Subject:* Re: email alerts I use logpp for read log and send email alert. El 24-10-2014 9:01, Andrey Zakabluk a.zakab...@velcom.by escribió: Hi! I use HA-Proxy version 1.5.6 2014/10/18/ . Red hat 6. I want use alert via mail. I find informations about this: --- Patch HAProxy So this brings us on to option 3 patch HAProxy to send the alerts, after all how hard can it be? As I don’t really want to write my own SMTP client or use any other library’s lets go with the easy option of using mailx from the mailutils package as we know it works. The following was written for HAProxy dev18. Now I’m no developer so take the code more of a proof of concept instead of something to add to your production environment. Most of the work is already done for us, as HAProxy has functions for setting a server up or down and also has an array containing the server name, server’s status etc. So all we need to do is add our own function to send the email and parse the email address from the configuration file. This done in the following patch files: cfgparse.c checks.c log.c global.h So in the configuration file I have added the option “email_alert” to the global section with to and from address. http://blog.loadbalancer.org/3-ways-to-send-haproxy-health-check-email-alerts/ - I try add text from patch file in the end original file and make haproxy file. /opt/haproxy/global.h.diff /opt/haproxy/include/types/global.h cat /opt/haproxy/cfgparse.diff /opt/haproxy/haproxy-1.5.6/src/cfgparse.c cat /opt/haproxy/log.diff /opt/haproxy/haproxy-1.5.6/src/log.c cat /opt/haproxy/checks.diff /opt/haproxy/haproxy-1.5.6/src/checks.c And while compiling I have error: [webadmin@srv-lb-qa haproxy-1.5.6_with_diff]$ make TARGET=linux2628 CPU=generic gcc -Iinclude -Iebtree -Wall -O2 -g -fno-strict-aliasing -DCONFIG_HAP_LINUX_SPLICE -DTPROXY -DCONFIG_HAP_LINUX_TPROXY -DCONFIG_HAP_CRYPT -DENABLE_POLL -DENABLE_EPOLL -DUSE_CPU_AFFINITY -DASSUME_SPLICE_WORKS -DUSE_ACCEPT4 -DNETFILTER -DUSE_GETSOCKNAME -DCONFIG_HAPROXY_VERSION=\1.5.6\ -DCONFIG_HAPROXY_DATE=\2014/10/18\ \ -DBUILD_TARGET='linux2628' \ -DBUILD_ARCH='' \ -DBUILD_CPU='generic' \ -DBUILD_CC='gcc' \ -DBUILD_CFLAGS='-O2 -g -fno-strict-aliasing' \ -DBUILD_OPTIONS='' \ -c -o src/haproxy.o src/haproxy.c In file included from include/proto/proxy.h:28, from include/common/cfgparse.h:30, from src/haproxy.c:61: include/types/global.h:207: error: expected identifier or ‘(’ before ‘--’ token include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:213: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:215: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:216: error: expected identifier
Re: email alerts
I use logpp for read log and send email alert. El 24-10-2014 9:01, Andrey Zakabluk a.zakab...@velcom.by escribió: Hi! I use HA-Proxy version 1.5.6 2014/10/18/ . Red hat 6. I want use alert via mail. I find informations about this: --- Patch HAProxy So this brings us on to option 3 patch HAProxy to send the alerts, after all how hard can it be? As I don’t really want to write my own SMTP client or use any other library’s lets go with the easy option of using mailx from the mailutils package as we know it works. The following was written for HAProxy dev18. Now I’m no developer so take the code more of a proof of concept instead of something to add to your production environment. Most of the work is already done for us, as HAProxy has functions for setting a server up or down and also has an array containing the server name, server’s status etc. So all we need to do is add our own function to send the email and parse the email address from the configuration file. This done in the following patch files: cfgparse.c checks.c log.c global.h So in the configuration file I have added the option “email_alert” to the global section with to and from address. http://blog.loadbalancer.org/3-ways-to-send-haproxy-health-check-email-alerts/ - I try add text from patch file in the end original file and make haproxy file. /opt/haproxy/global.h.diff /opt/haproxy/include/types/global.h cat /opt/haproxy/cfgparse.diff /opt/haproxy/haproxy-1.5.6/src/cfgparse.c cat /opt/haproxy/log.diff /opt/haproxy/haproxy-1.5.6/src/log.c cat /opt/haproxy/checks.diff /opt/haproxy/haproxy-1.5.6/src/checks.c And while compiling I have error: [webadmin@srv-lb-qa haproxy-1.5.6_with_diff]$ make TARGET=linux2628 CPU=generic gcc -Iinclude -Iebtree -Wall -O2 -g -fno-strict-aliasing -DCONFIG_HAP_LINUX_SPLICE -DTPROXY -DCONFIG_HAP_LINUX_TPROXY -DCONFIG_HAP_CRYPT -DENABLE_POLL -DENABLE_EPOLL -DUSE_CPU_AFFINITY -DASSUME_SPLICE_WORKS -DUSE_ACCEPT4 -DNETFILTER -DUSE_GETSOCKNAME -DCONFIG_HAPROXY_VERSION=\1.5.6\ -DCONFIG_HAPROXY_DATE=\2014/10/18\ \ -DBUILD_TARGET='linux2628' \ -DBUILD_ARCH='' \ -DBUILD_CPU='generic' \ -DBUILD_CC='gcc' \ -DBUILD_CFLAGS='-O2 -g -fno-strict-aliasing' \ -DBUILD_OPTIONS='' \ -c -o src/haproxy.o src/haproxy.c In file included from include/proto/proxy.h:28, from include/common/cfgparse.h:30, from src/haproxy.c:61: include/types/global.h:207: error: expected identifier or ‘(’ before ‘--’ token include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:213: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:215: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:216: error: expected identifier or ‘(’ before ‘+’ token In file included from src/haproxy.c:76: include/types/global.h:207: error: expected identifier or ‘(’ before ‘--’ token include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:213: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:215: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:216: error: expected identifier or ‘(’ before ‘+’ token In file included from include/proto/channel.h:35, from src/haproxy.c:85: include/types/global.h:207: error: expected identifier or ‘(’ before ‘--’ token include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:209: error: stray ‘@’ in program include/types/global.h:213: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:215: error: expected identifier or ‘(’ before ‘+’ token include/types/global.h:216: error: expected identifier or ‘(’ before ‘+’ token make: *** [src/haproxy.o] Error 1 Pls help me! I don't know how use patch(
Re: Ubuntu 14.04 package
Yes, this a myth but bsd scale very well with correct tuning parameters. Linux is more relax and open in defaults parameters. And pfctl -d :-) El 18/04/2014 03:27, Willy Tarreau w...@1wt.eu escribió: On Thu, Apr 17, 2014 at 08:04:04PM -0300, Jorge Severino wrote: Any pkg for openbsd? The most secure unix :-) Imho openbsd+haproxy+carp+ifstated is a excelent choice for solid lb. Yes, except that it is very slow on this platform and pf makes it even slower unfortunately. But for most usages (moderate loads), it can be a good choice for a drop and forget solution. Willy
Re: Ubuntu 14.04 package
Any pkg for openbsd? The most secure unix :-) Imho openbsd+haproxy+carp+ifstated is a excelent choice for solid lb. El 17/04/2014 17:25, pablo platt pablo.pl...@gmail.com escribió: I've just installed it with the new ubuntu trusty release. Great timing. Thank you for providing this ppa. On Thu, Apr 17, 2014 at 12:05 PM, Vincent Bernat ber...@luffy.cx wrote: ❦ 17 avril 2014 08:59 CEST, Vincent Bernat ber...@luffy.cx : Is there a 1.5~dev22 deb package for Ubuntu 14.04 (trusty)? I've found the following ppa but it only has package for Ubuntu 13.10 and below. https://launchpad.net/~vbernat/+archive/haproxy-1.5 I will update the repository this week-end to get a package for 14.04. I have just uploaded a version for Trusty. Instructions here: http://haproxy.debian.net/ -- panic(huh?\n); 2.2.16 /usr/src/linux/arch/i386/kernel/smp.c
Re: RFC: removal of bsd and osx Makefiles
Migrating to linux. El 14/04/2014 06:28, Lukas Tribus luky...@hotmail.com escribió: Hi list, this is to request comments regarding the removal of bsd and osx Makfiles. Its was proposed by Willy Tarreau, the reason are: - osx and bsd Makefiles don't support USE flag, so they can't be used if SSL, ZLIB and other specific features requiring USE flags are needed - it can be confusing for the users having multiple Makefiles - GNU make (gmake) is commonly used noawdays - regressions in bsd and osx Makefiles are reported very late (also see [1]) I agree with Willy's proposal. I'm wondering whether we should not simply remove these files at all, as it seems that everyone is using gmake nowadays, so their presence is more confusing than anything else, and the occasional breakage they cause is always reported very late. Yes, its also a additional maintenance burden plus those makefiles lack support of the USE flags, so they become less and less useful anyway. Agreed. Anyone has any objection against removing these files which do not even offer the option to enable SSL ? Any comments appreciated. Regards, Lukas [1] http://haproxy.1wt.eu/git?p=haproxy.git;a=commit;h=01193d6efbb731dd83eeb9addc14cecb16c431af
RE: Compile ZLIB in OpenBSD 5.4
Hello. Sorry for my little problem. My workstation is linux centos. I edit Makefile.bsd direct with vi in openbsd. Maybe makefile.bsd corrupt in dev22, in dev19 no problem for compile. I will Tomorrow install gmake. Haproxy is a production system. El 12/04/2014 07:01, Lukas Tribus luky...@hotmail.com escribió: Hi Jorge, I changed line 72 for include -lz root@haproxy01 $ make -f Makefile.bsd USE_ZLIB=1 gcc -Wall -Iinclude -Iebtree -O2 -DENABLE_POLL -DENABLE_KQUEUE -fno-strict-aliasing -DBUFSIZE=8030 -DMAXREWRITE=1030 -DSYSTEM_MAXCONN=1024 -DCONFIG_HAPROXY_VERSION=\1.5-dev22-1a34d57 \ -DCONFIG_HAPROXY_DATE=\2014-02-03 00:41:29 +0100 2014/02/03\ -DTPROXY -g -DBUILD_TARGET='openbsd' -DBUILD_CC='gcc' -DBUILD_CPU='generic' -DBUILD_REGEX='libc' -DBUILD_OPTS='-Iinclude -Iebtree -O2 -DENABLE_POLL -DENABLE_KQUEUE -fno-strict-aliasing -DBUFSIZE=8030 -DMAXREWRITE=1030 -DSYSTEM_MAXCONN=1024 -DCONFIG_HAPROXY_VERSION=\1.5-dev22-1a34d57 \ -DCONFIG_HAPROXY_DATE=\2014-02-03 00:41:29 +0100 2014/02/03\ -DTPROXY' -c -o src/haproxy.o src/haproxy.c gcc: : No such file or directory gcc: 00:41:29: No such file or directory gcc: +0100: No such file or directory gcc: 2014/02/03: No such file or directory command-line: warning: missing terminating character command-line: warning: missing terminating character src/haproxy.c: In function 'display_version': src/haproxy.c:213: error: missing terminating character src/haproxy.c:213: error: expected ')' before string constant src/haproxy.c:213: error: missing terminating character *** Error 1 in /tmp/haproxy-1.5-dev22 (Makefile.bsd:139 'src/haproxy.o') root@haproxy01 $ gcc gcc: no input files root@haproxy01 $ I don't understand at all what happens here. Building haproxy worked for you when using no modifications in the makefile and a simple: $ make -f Makefile.bsd right (expect that zlib is missing)? So I don't get why adding -lz would cause this mess above, expect the Makefile.bsd was somehow corrupted (broken newlines or something like that). You did not use some editor on a Windows machine to edit the Makefile, right? Whats the md5sum after the -lz change? It should be: $ md5sum Makefile.bsd 105ea0f9e57a0fae3e69db78a9141e79 Makefile.bsd If its not, restore the original Makefile.bsd and apply the diff attached, recheck the md5sum and retry. Is required ZLIB for HTTP compression? Yes. The alternative to the BSD makefile hacks is that you install GNU make and simply use the default Makefile and enable zlib via USE flags: $ gmake TARGET=openbsd CPU=native USE_ZLIB=1 The latter is probably the most simple and efficient way to build HAProxy, it will also allow you to build with PCRE and SSL if needed, by just adding additional USE flags. Please remember to respond to the mailing list. Regards, Lukas
Re: haproxy HTML documentation
How contributed translation doc. a spanish? 2014-04-11 10:20 GMT-03:00 Cyril Bonté cyril.bo...@free.fr: Hi all, I took some time this week to make changes to the HTML documentation. One important thing concerns the links to it : now you can find a documentation coming from the snapshots (the previous behaviour) and for stable releases (the latest release tag). Stable releases replaces previous links, and snapshot ones are put in a snapshot subdirectory. As a reminder, this gives - Haproxy 1.5 stable : http://cbonte.github.io/haproxy-dconv/configuration-1.5.html - Haproxy 1.5 snapshot : http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.5.html - Haproxy 1.4 stable : http://cbonte.github.io/haproxy-dconv/configuration-1.4.html - Haproxy 1.4 snapshot : http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.4.html Other changes were made on the frameworks used, which may break things : - Migration from Bootsrtrap 2 to Bootstrap 3 - Use of Twitter typeahead.js for the search field - Use of cdn.js to provide those frameworks instead of embedding them. If you see issues that weren't there before, please give me some feedbacks in order to fix it. -- Cyril Bonté -- Atte Jorge Severino Numero movil Personal: 08-7775834
Re: Compile ZLIB in OpenBSD 5.4
) *** Parse error: Need an operator in 'endif' (Makefile:452) *** Parse error: Missing dependency operator (Makefile:454) *** Parse error: Need an operator in 'endif' (Makefile:458) *** Parse error: Missing dependency operator (Makefile:460) *** Parse error: Need an operator in 'endif' (Makefile:463) *** Parse error: Missing dependency operator (Makefile:465) *** Parse error: Need an operator in 'endif' (Makefile:468) *** Parse error: Missing dependency operator (Makefile:470) *** Parse error: Need an operator in 'endif' (Makefile:473) *** Parse error: Missing dependency operator (Makefile:475) *** Parse error: Need an operator in 'endif' (Makefile:478) *** Parse error: Missing dependency operator (Makefile:480) *** Parse error: Need an operator in 'endif' (Makefile:483) *** Parse error: Missing dependency operator (Makefile:485) *** Parse error: Need an operator in 'endif' (Makefile:488) *** Parse error: Missing dependency operator (Makefile:490) *** Parse error: Need an operator in 'endif' (Makefile:493) *** Parse error: Missing dependency operator (Makefile:495) *** Parse error: Need an operator in 'endif' (Makefile:498) *** Parse error: Missing dependency operator (Makefile:501) *** Parse error: Need an operator in 'endif' (Makefile:503) *** Parse error: Missing dependency operator (Makefile:505) *** Parse error: Missing dependency operator (Makefile:507) *** Parse error: Need an operator in 'endif' (Makefile:509) *** Parse error: Need an operator in 'endif' (Makefile:510) *** Parse error: Missing dependency operator (Makefile:512) *** Parse error: Need an operator in 'endif' (Makefile:516) *** Parse error: Missing dependency operator (Makefile:518) *** Parse error: Missing dependency operator (Makefile:528) *** Parse error: Need an operator in 'else' (Makefile:530) *** Parse error: Missing dependency operator (Makefile:531) *** Parse error: Need an operator in 'else' (Makefile:533) *** Parse error: Need an operator in 'endif' (Makefile:535) *** Parse error: Need an operator in 'endif' (Makefile:536) *** Parse error: Need an operator in 'endif' (Makefile:537) *** Parse error: Missing dependency operator (Makefile:539) *** Parse error: Missing dependency operator (Makefile:548) *** Parse error: Need an operator in 'endif' (Makefile:551) *** Parse error: Missing dependency operator (Makefile:553) *** Parse error: Need an operator in 'else' (Makefile:558) *** Parse error: Need an operator in 'endif' (Makefile:563) *** Parse error: Missing dependency operator (Makefile:565) *** Parse error: Need an operator in 'endif' (Makefile:568) *** Parse error: Need an operator in 'endif' (Makefile:569) *** Parse error: Missing dependency operator (Makefile:572) *** Parse error: Need an operator in 'endif' (Makefile:575) *** Parse error: Need an operator in ',)' (Makefile:586) *** Parse error: Need an operator in 'endif' (Makefile:588) *** Parse error: Need an operator in ',)' (Makefile:590) *** Parse error: Need an operator in 'endif' (Makefile:592) *** Parse error: Missing dependency operator (Makefile:594) *** Parse error: Need an operator in 'endif' (Makefile:598) *** Parse error: Missing dependency operator (Makefile:605) *** Parse error: Need an operator in 'else' (Makefile:625) *** Parse error: Need an operator in 'endif' (Makefile:627) *** Parse error: Missing dependency operator (Makefile:647) *** Parse error: Need an operator in 'endif' (Makefile:649) root@haproxy01 $ 2014-04-05 14:26 GMT-03:00 Lukas Tribus luky...@hotmail.com: You should use bsd make with Makefile.bsd provided in HAProxy source archive or git. Problem is bsd and osx Makefiles don't support USE flags, so they can't be used to enable zlib, ssl, etc. If using GNU make is not an option, add -lz to ADDLIB in Makefile.bsd (72nd line): ADDLIB = -lz and then compile with the USE flag (so that you workaround the #ifdefs): make -f Makefile.bsd USE_ZLIB=1 Thats should make it work. Regards, Lukas -- Atte Jorge Severino Numero movil Personal: 08-7775834
Re: Compile ZLIB in OpenBSD 5.4
If install gmake for compile in openbsd, i work? 2014-04-07 12:34 GMT-03:00 Jorge Severino severino.jo...@gmail.com: The same error, i add -lz in ADDLIB the Makefile.bsd and run: root@haproxy01 $ make Makefile.bsd USE_ZLIB=1 *** Parse error in /tmp/haproxy-1.5-dev22: Missing dependency operator (Makefile:202) *** Parse error: Need an operator in 'else' (Makefile:206) *** Parse error: Missing dependency operator (Makefile:207) *** Parse error: Need an operator in 'else' (Makefile:213) *** Parse error: Missing dependency operator (Makefile:214) *** Parse error: Need an operator in 'else' (Makefile:221) *** Parse error: Missing dependency operator (Makefile:222) *** Parse error: Need an operator in 'else' (Makefile:231) *** Parse error: Missing dependency operator (Makefile:232) *** Parse error: Need an operator in 'else' (Makefile:241) *** Parse error: Missing dependency operator (Makefile:242) *** Parse error: Need an operator in 'else' (Makefile:256) *** Parse error: Missing dependency operator (Makefile:257) *** Parse error: Need an operator in 'else' (Makefile:267) *** Parse error: Missing dependency operator (Makefile:268) *** Parse error: Need an operator in 'else' (Makefile:274) *** Parse error: Missing dependency operator (Makefile:275) *** Parse error: Need an operator in 'else' (Makefile:281) *** Parse error: Missing dependency operator (Makefile:282) *** Parse error: Need an operator in 'else' (Makefile:287) *** Parse error: Missing dependency operator (Makefile:288) *** Parse error: Need an operator in 'else' (Makefile:294) *** Parse error: Missing dependency operator (Makefile:295) *** Parse error: Missing dependency operator (Makefile:301) *** Parse error: Missing dependency operator (Makefile:302) *** Parse error: Missing dependency operator (Makefile:303) *** Parse error: Missing dependency operator (Makefile:304) *** Parse error: Missing dependency operator (Makefile:305) *** Parse error: Missing dependency operator (Makefile:306) *** Parse error: Missing dependency operator (Makefile:307) *** Parse error: Missing dependency operator (Makefile:308) *** Parse error: Missing dependency operator (Makefile:309) *** Parse error: Missing dependency operator (Makefile:310) *** Parse error: Missing dependency operator (Makefile:311) *** Parse error: Missing dependency operator (Makefile:312) *** Parse error: Missing dependency operator (Makefile:323) *** Parse error: Need an operator in '' (Makefile:325) *** Parse error: Need an operator in 'endif' (Makefile:326) *** Parse error: Missing dependency operator (Makefile:328) *** Parse error: Need an operator in '' (Makefile:330) *** Parse error: Need an operator in 'endif' (Makefile:331) *** Parse error: Missing dependency operator (Makefile:334) *** Parse error: Need an operator in '' (Makefile:336) *** Parse error: Need an operator in 'endif' (Makefile:337) *** Parse error: Missing dependency operator (Makefile:345) *** Parse error: Need an operator in ',)' (Makefile:347) Bad modifier: %ci | cut -f1 -d' ' | tr '-' '/') *** Parse error: Need an operator in 'endif' (Makefile:351) *** Parse error: Need an operator in 'endif' (Makefile:352) *** Parse error: Need an operator in ',)' (Makefile:355) *** Parse error: Need an operator in 'endif' (Makefile:357) *** Parse error: Need an operator in ',)' (Makefile:358) *** Parse error: Need an operator in 'endif' (Makefile:360) Bad modifier: %ci | cut -f1 -d' ' | tr '-' '/') *** Parse error: Missing dependency operator (Makefile:361) *** Parse error: Need an operator in 'endif' (Makefile:363) *** Parse error: Missing dependency operator (Makefile:381) *** Parse error: Need an operator in '' (Makefile:382) *** Parse error: Need an operator in 'endif' (Makefile:383) *** Parse error: Missing dependency operator (Makefile:385) *** Parse error: Need an operator in 'endif' (Makefile:388) *** Parse error: Missing dependency operator (Makefile:390) *** Parse error: Need an operator in 'endif' (Makefile:394) *** Parse error: Missing dependency operator (Makefile:396) *** Parse error: Need an operator in 'endif' (Makefile:399) *** Parse error: Missing dependency operator (Makefile:401) *** Parse error: Need an operator in 'endif' (Makefile:404) *** Parse error: Missing dependency operator (Makefile:406) *** Parse error: Need an operator in 'endif' (Makefile:410) *** Parse error: Missing dependency operator (Makefile:412) *** Parse error: Need an operator in 'endif' (Makefile:415) *** Parse error: Missing dependency operator (Makefile:417) *** Parse error: Need an operator in 'endif' (Makefile:420) *** Parse error: Missing dependency operator (Makefile:422) *** Parse error: Need an operator in 'endif' (Makefile:429) *** Parse error: Missing dependency operator (Makefile:431) *** Parse error: Need an operator in 'endif' (Makefile:435) *** Parse error: Missing dependency operator (Makefile:437) *** Parse error: Need an operator in 'endif
Re: timeout after USR1 signal
My experience is not good. With sf and st duplicated and created children process for any reload. With st lost pid and zombie process make. With sf and st so much conections in state CLOSE WAIT. El 07/04/2014 16:30, Patrick Viet patrick.v...@gmail.com escribió: Hi, I'm wondering if there is some way to have some kind of timeout after haproxy receives the USR1 soft stop signal sent by haproxy -sf old process. I don't want to kill everyone brutally, but if I have a client that's hanging on for a connection way too long after a reconfiguration, may he die!! For now I'm thinking about something that sends a TERM after an hour or so, but there might be something that's a bit cleaner. Didn't find anything in the docs. Or am I looking badly? Hints? Experience? Ideas? Thanks! Patrick
Re: Compile ZLIB in OpenBSD 5.4
What is a option for enable zlib in makefile.bsd? El 05/04/2014 09:26, Baptiste bed...@gmail.com escribió: You should use bsd make with Makefile.bsd provided in HAProxy source archive or git. Baptiste On Sat, Apr 5, 2014 at 1:43 AM, William Lallemand wlallem...@irq6.net wrote: On Fri, 4 Apr 2014 18:36:10 -0300 Jorge Severino severino.jo...@gmail.com wrote: root@haproxy01 $ make TARGET=openbsd CPU=native USE_ZLIB=1 ZLIB_INC=/usr/include ZLIB_LIB=/usr/lib *** Parse error in /tmp/haproxy-1.5-dev22: Missing dependency operator (Makefile:202) *** Parse error: Need an operator in 'else' (Makefile:206) *** Parse error: Missing dependency operator (Makefile:207) *** Parse error: Need an operator in 'else' (Makefile:213) [...] You should install and use GNU Make, not the BSD one. -- William Lallemand
Compile ZLIB in OpenBSD 5.4
Hello: I tried the enable ZLIB Compression in OpenBSD 5.4 amd64 but not work: root@haproxy01 $ ./haproxy -vv HA-Proxy version 1.5-dev19 2013/06/17 Copyright 2000-2013 Willy Tarreau w...@1wt.eu Build options : TARGET = openbsd CPU = generic CC = gcc Default settings : maxconn = 65535, bufsize = 16060, maxrewrite = 10300, maxpollevents = 200 Encrypted password support via crypt(3): no Built without zlib support (USE_ZLIB not set) Compression algorithms supported : identity Built without OpenSSL support (USE_OPENSSL not set) Built without PCRE support (using libc's regex instead) Built with transparent proxy support using: SO_BINDANY Available polling systems : kqueue : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use kqueue. I tried with change Makefile.bsd and make -f Makefile.bsd USE_ZLIB=1 But not compile with ZLIB Support. Thanks... -- Atte Jorge Severino
ZLIB in OpenbSD
Hello: I tried the enable ZLIB Compression in OpenBSD 5.4 amd64 but not work: root@haproxy01 $ ./haproxy -vv HA-Proxy version 1.5-dev19 2013/06/17 Copyright 2000-2013 Willy Tarreau w...@1wt.eu Build options : TARGET = openbsd CPU = generic CC = gcc Default settings : maxconn = 65535, bufsize = 16060, maxrewrite = 10300, maxpollevents = 200 Encrypted password support via crypt(3): no Built without zlib support (USE_ZLIB not set) Compression algorithms supported : identity Built without OpenSSL support (USE_OPENSSL not set) Built without PCRE support (using libc's regex instead) Built with transparent proxy support using: SO_BINDANY Available polling systems : kqueue : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use kqueue. I tried with change Makefile.bsd and make -f Makefile.bsd USE_ZLIB=1 But not compile with ZLIB Support. Thanks...
Re: Compile ZLIB in OpenBSD 5.4
In OpenBSD library is libZ? I have in /usr/lib oot@haproxy01 $ ls -l /usr/lib/libz* -r--r--r-- 1 root bin 296850 Jul 30 2013 /usr/lib/libz.a -r--r--r-- 1 root bin 201378 Jul 30 2013 /usr/lib/libz.so.4.1 -r--r--r-- 1 root bin 305920 Jul 30 2013 /usr/lib/libz_p.a 2014-04-04 13:07 GMT-03:00 Lukas Tribus luky...@hotmail.com: Hi Jorge, Date: Fri, 4 Apr 2014 12:53:26 -0300 Subject: Re: Compile ZLIB in OpenBSD 5.4 From: severino.jo...@gmail.com haproxy not support ZLIB in OpenBSD? No, I don't think this is intentional. Please try with current code, if it still doesn't work, we will take a look at it. Just make sure you the devel package of zlib is installed on the system. Also, please always respond to the mailing list, so others see your reply as well. Regards, Lukas -- Atte Jorge Severino Numero movil Personal: 08-7775834
Re: Compile ZLIB in OpenBSD 5.4
: Need an operator in 'endif' (Makefile:452) *** Parse error: Missing dependency operator (Makefile:454) *** Parse error: Need an operator in 'endif' (Makefile:458) *** Parse error: Missing dependency operator (Makefile:460) *** Parse error: Need an operator in 'endif' (Makefile:463) *** Parse error: Missing dependency operator (Makefile:465) *** Parse error: Need an operator in 'endif' (Makefile:468) *** Parse error: Missing dependency operator (Makefile:470) *** Parse error: Need an operator in 'endif' (Makefile:473) *** Parse error: Missing dependency operator (Makefile:475) *** Parse error: Need an operator in 'endif' (Makefile:478) *** Parse error: Missing dependency operator (Makefile:480) *** Parse error: Need an operator in 'endif' (Makefile:483) *** Parse error: Missing dependency operator (Makefile:485) *** Parse error: Need an operator in 'endif' (Makefile:488) *** Parse error: Missing dependency operator (Makefile:490) *** Parse error: Need an operator in 'endif' (Makefile:493) *** Parse error: Missing dependency operator (Makefile:495) *** Parse error: Need an operator in 'endif' (Makefile:498) *** Parse error: Missing dependency operator (Makefile:501) *** Parse error: Need an operator in 'endif' (Makefile:503) *** Parse error: Missing dependency operator (Makefile:505) *** Parse error: Missing dependency operator (Makefile:507) *** Parse error: Need an operator in 'endif' (Makefile:509) *** Parse error: Need an operator in 'endif' (Makefile:510) *** Parse error: Missing dependency operator (Makefile:512) *** Parse error: Need an operator in 'endif' (Makefile:516) *** Parse error: Missing dependency operator (Makefile:518) *** Parse error: Missing dependency operator (Makefile:528) *** Parse error: Need an operator in 'else' (Makefile:530) *** Parse error: Missing dependency operator (Makefile:531) *** Parse error: Need an operator in 'else' (Makefile:533) *** Parse error: Need an operator in 'endif' (Makefile:535) *** Parse error: Need an operator in 'endif' (Makefile:536) *** Parse error: Need an operator in 'endif' (Makefile:537) *** Parse error: Missing dependency operator (Makefile:539) *** Parse error: Missing dependency operator (Makefile:548) *** Parse error: Need an operator in 'endif' (Makefile:551) *** Parse error: Missing dependency operator (Makefile:553) *** Parse error: Need an operator in 'else' (Makefile:558) *** Parse error: Need an operator in 'endif' (Makefile:563) *** Parse error: Missing dependency operator (Makefile:565) *** Parse error: Need an operator in 'endif' (Makefile:568) *** Parse error: Need an operator in 'endif' (Makefile:569) *** Parse error: Missing dependency operator (Makefile:572) *** Parse error: Need an operator in 'endif' (Makefile:575) *** Parse error: Need an operator in ',)' (Makefile:586) *** Parse error: Need an operator in 'endif' (Makefile:588) *** Parse error: Need an operator in ',)' (Makefile:590) *** Parse error: Need an operator in 'endif' (Makefile:592) *** Parse error: Missing dependency operator (Makefile:594) *** Parse error: Need an operator in 'endif' (Makefile:598) *** Parse error: Missing dependency operator (Makefile:605) *** Parse error: Need an operator in 'else' (Makefile:625) *** Parse error: Need an operator in 'endif' (Makefile:627) *** Parse error: Missing dependency operator (Makefile:647) *** Parse error: Need an operator in 'endif' (Makefile:649) root@haproxy01 $ 2014-04-04 16:59 GMT-03:00 Lukas Tribus luky...@hotmail.com: Hi, In OpenBSD library is libZ? I have in /usr/lib root@haproxy01 $ ls -l /usr/lib/libz* -r--r--r-- 1 root bin 296850 Jul 30 2013 /usr/lib/libz.a -r--r--r-- 1 root bin 201378 Jul 30 2013 /usr/lib/libz.so.4.1 -r--r--r-- 1 root bin 305920 Jul 30 2013 /usr/lib/libz_p.a Ok, the lib is there. Please: - use current code, get dev22 from http://haproxy.1wt.eu/ - use the generic makefile, not the BSD one, try: make TARGET=openbsd CPU=native USE_ZLIB=1 - try to force the path, which is probably (otherwise lookup the header files, your already found .a file): make TARGET=openbsd CPU=native USE_ZLIB=1 ZLIB_INC=/usr/include ZLIB_LIB=/usr/lib - if it still doesn't work, post the full make process somewhere Regards, Lukas -- Atte Jorge Severino Numero movil Personal: 08-7775834
Re: Generating a haproxy cluster
CARP + ifstated 2014-03-24 13:52 GMT-03:00 Thomas Heil h...@terminal-consulting.de: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On 24.03.2014 17:40, Juan Pablo Lorier wrote: Hi, I'm trying to create a high available solution of load balancers and I found haproxy that looks like all I need. The only thing I'm not shure is if I can create a cluster of haproxy server as a built in function of haproxy (all docs I find refer of a cluster of web servers, not the load balancers) or if it's like nginx that need to manage HA with pacemaker or somthing like that. Its like nginx. You would need to manage either with pacemaker or keepalived. There is no built-in high availability. In case of pacemaker you could setup: - floating ip and lsb service haproxy (in case of failover you should just clone the lsb ressource to all nodes, so that haproxy is running on all nodes all the time. - cluster_ip and lsb service haproxy. if your environment supports it In case of keepalived: - create a master slave VIP and ensure that haproxy is running. if it fails let keepalived do a switchover to the over node, hopefully haproxy runs there. Regards, Juan Pablo Lorier cheers thomas -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTMGLBAAoJEOH/xsXYK8GtfC8P/Rhp7nh9gnhx80A9gBddNkDL IcfukVhPeYrKtn5ZFzWeHyKilPU3AX7XPACWVU9BQ55+wdF74ZbZMCcd7gQ/9DNt 9LmyhwWqQhanb2JkDyFJR/DpZXNo9nHqF6q5w948KlOp7AvQRzHzgp7VlXG9Kkj3 i7Kmgl7qYGWyFrrCQKsjgv+ZzYDjgUrQAkLZPy6Rv1WYnOqP33MRtQmbjo2zLH+8 uiOz0b0SWYHurWWDM9JwIVjymKG2OApupPk4hT3hLm5xiBv866bNVHfyT2VO+3SV 95G8DRs/73jFCElutbxBcHQGT95pcQ1Dcj4VI2Kq2yH7tm7lTX5tEhbRrnTIC2cN u33q5NfzBaAiIBQBz/JowZdrnqoPcfQ8eyQqhzKWzscL5Aq72A+A+UYGASq9vxdI ND7ybDyf1pZw6wkPzlLeRsvldFmvtNsR4a7+IxU6YSK6dBRk4V5F5irdcOx6v7zv b2sIbVA5f8tXu1Yy//jQeJlF0WFRGoOghBqItz+xalTypshn2C1c8uAUykhKatof gyRlg4Kk0wPVq1A1awP+GWNdJKSw82WpN+eeV+VrSX5KYToGVIww+Mk/Jqtz0bR0 KNBOG2sggwQz1NwavxC5PkNgjdVu3LU41I0JT2u23eMcY3MA3daX357HeDr4lN9t tH07VV9PMpbOQ93wa4sP =R6lh -END PGP SIGNATURE- -- Atte Jorge Severino Numero movil Personal: 08-7775834
Re: Equivalent Weblogic and BigIP
I will tomorrow test with users. I replicated answer with. Indirect preserve httponly El 06/03/2014 18:34, PiBa-NL piba.nl@gmail.com escribió: not sure if this would fix your issue. but seems at least you should change the used name of the cookie from JSESSIONID to BIGipServervipf5-PRD As currently your overwriting the session cookie the application needs. Jorge Severino schreef op 6-3-2014 22:14: Hi Guys: I replaced one F5 BigIP for haproxy and everything works fine. The only thing that not works for me is a weblogic cluster, if it works in F5. I can help put the equivalent parameters? I test with indirect cookie, prefix, direct, mode http, etc. Send Off the curl query outputs to real server, virtual Ip by F5 and haproxy. Direct Query a real server Weblogic: [jseverino@jseverino Desktop]$ curl -v http://wls2:7101/BrowserWeb/servlet/BrowserServlet * About to connect() to wls2 port 7101 (#0) * Trying x.x.x.x... connected * Connected to wls2 (x.x.x.x) port 7101 (#0) GET /BrowserWeb/servlet/BrowserServlet HTTP/1.1 User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/ 3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2 Host: wls2:7101 Accept: */* HTTP/1.1 200 OK Cache-Control: no-cache,no-store Date: Thu, 06 Mar 2014 21:07:53 GMT Pragma: no-cache Content-Length: 6825 Content-Type: text/html;charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:00 GMT X-FRAME-OPTIONS: SAMEORIGIN Set-Cookie: JSESSIONID=hGg6TYjJR82C0lhDFy5w9Qc50qlfDR74SKlHM3LykJj2XhtkMyHH!2087482587!1453328874; path=/; HttpOnly X-Powered-By: Servlet/3.0 JSP/2.2 Query a F5 VS: [jseverino@jseverino Desktop]$ curl -v http://vipf5/BrowserWeb/servlet/BrowserServlet * About to connect() to x.x.x.x port 80 (#0) * Trying x.x.x.x... connected * Connected to x.x.x.x (x.x.x.x) port 80 (#0) GET /BrowserWeb/servlet/BrowserServlet HTTP/1.1 User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/ 3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2 Host: x.x.x.x Accept: */* HTTP/1.1 200 OK Cache-Control: no-cache,no-store Date: Thu, 06 Mar 2014 21:09:59 GMT Pragma: no-cache Content-Length: 6825 Content-Type: text/html;charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:00 GMT X-FRAME-OPTIONS: SAMEORIGIN Set-Cookie: JSESSIONID=nzLTTYkHGQ4h2gnB2hJc3tH3rqngyyhmtp2Jn4bS1LLrZ1SJMjb2!2087482587!1453328874; path=/; HttpOnly X-Powered-By: Servlet/3.0 JSP/2.2 Set-Cookie: BIGipServervipf5-PRD=1992818698.48411.; path=/ Vary: Accept-Encoding And Query through Haproxy: [jseverino@jseverino Desktop]$ curl -v http://haproxy/BrowserWeb/servlet/BrowserServlet * About to connect() to haproxy port 80 (#0) * Trying x.x.x.x... connected * Connected to haproxy (x.x.x.x) port 80 (#0) GET /BrowserWeb/servlet/BrowserServlet HTTP/1.1 User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/ 3.14.0.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2 Host: haproxy Accept: */* HTTP/1.1 200 OK Cache-Control: no-cache,no-store Date: Thu, 06 Mar 2014 21:12:28 GMT Pragma: no-cache Content-Length: 6825 Content-Type: text/html;charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:00 GMT X-FRAME-OPTIONS: SAMEORIGIN X-Powered-By: Servlet/3.0 JSP/2.2 Set-Cookie: JSESSIONID=server01; path=/ Thaks for helpme. Atte. Jorge Severino