Re: [PATCH] [MINOR] Capture display more data from health checks

2009-10-09 Thread Krzysztof Oledzki
On Mon, 5 Oct 2009, Krzysztof Oledzki wrote: On Mon, 5 Oct 2009, Willy Tarreau wrote: On Mon, Oct 05, 2009 at 12:51:07AM +0200, Krzysztof Oledzki wrote: Non ascii or HTML control characters are masked. I don't see the reason for masking HTML characters, since the output is sent over

connslots and frontend/backend controls

2009-10-09 Thread Joe Williams
I am attempting to limit the number of connections on a per host header basis. Currently each host header has it's own ACL and backend. This allows me to use maxconns and limit the number of connections per host header even if the physical server is the same in both backends. ### frontend

ACLs in TCP mode

2009-10-09 Thread Shadburn, Kasey
I saw a post from October 2007 (http://www.formilux.org/archives/haproxy/0710/0124.html) where it was stated that ACLs weren't supported in TCP mode. Is that still the case? Specifically, I'm looking to use the source IP (src) ACL to route connections to one of several backends. Thanks,

Re: Connection Pooling

2009-10-09 Thread Joe Williams
I would be interested in hearing about this possibility too, however in my case HTTP is okay. I will be in a similar multi-datacenter HA situation soon and something like this would be very cool. -Joe On Thu, 8 Oct 2009 06:22:58 -0700 Chris Goffinet c...@chrisgoffinet.com wrote: I was

Re: Kernel tuning recommendations

2009-10-09 Thread Michael Marano
I tried to dig deep enough to disable the state module and nf_conntrack and was finally successful. I used the iptables script attached below to get there. I had to modify /etc/sysconfig/iptables-config to remove (comment out) the following line # IPTABLES_MODULES=ip_conntrack_netbios_ns

Re: ACLs in TCP mode

2009-10-09 Thread Willy Tarreau
On Fri, Oct 09, 2009 at 02:15:44PM -0400, Shadburn, Kasey wrote: I saw a post from October 2007 (http://www.formilux.org/archives/haproxy/0710/0124.html) where it was stated that ACLs weren't supported in TCP mode. Is that still the case? Specifically, I'm looking to use the source IP

Re: connslots and frontend/backend controls

2009-10-09 Thread Willy Tarreau
On Fri, Oct 09, 2009 at 11:08:09AM -0700, Joe Williams wrote: I am attempting to limit the number of connections on a per host header basis. Currently each host header has it's own ACL and backend. This allows me to use maxconns and limit the number of connections per host header even if the

Re: Connection Pooling

2009-10-09 Thread Willy Tarreau
On Thu, Oct 08, 2009 at 06:22:58AM -0700, Chris Goffinet wrote: I was wondering if anyone has considered or if its possible (am I missing something?) to do connection pooling in haproxy for TCP backends? We've been using haproxy internally at Digg and it's working out really well. Before

Re: Kernel tuning recommendations

2009-10-09 Thread Willy Tarreau
On Fri, Oct 09, 2009 at 12:22:57PM -0700, Michael Marano wrote: I tried to dig deep enough to disable the state module and nf_conntrack and was finally successful. I used the iptables script attached below to get there. I had to modify /etc/sysconfig/iptables-config to remove (comment

Re: 502 errors continue

2009-10-09 Thread Willy Tarreau
Hi Greg, On Thu, Oct 08, 2009 at 09:56:37PM -0400, Greg Gard wrote: hi all, i have been watching this thread with some interest and had a comment about mongrel and health checks. i have found that i can have mongrel serve up a static file as a health check that uses a separate thread from

Re: connslots and frontend/backend controls

2009-10-09 Thread Joe Williams
Thanks Willy, I appreciate you looking into it. Can you detail how this new verb might work? From your description it sounds like it will be just the total connections to a specific backend? Or will it be more similar to be_sess_rate but for total connections rather than rate? I am looking to do

Re: 500 errors not in stats page?

2009-10-09 Thread Greg Gard
ok thanks willy. it makes sense. we were using 1.3.15.5 so i guess we should upgrade to 1.3.15.20 as i see there is at least one critical bug and several other bugfixes that may clean up some of my issues. On Fri, Oct 9, 2009 at 5:14 PM, Willy Tarreau w...@1wt.eu wrote: On Fri, Oct 09, 2009 at