Re: proper way to use an acl + stick-table to filter based on conn_cur

Hi Cyril, On Tue, Mar 15, 2011 at 10:34:51PM +0100, Cyril Bonté wrote: > Hi Willy and Cory, > > Le mardi 15 mars 2011 22:17:50, Willy Tarreau a écrit : > > > Whether I use "src_conn_cur" or sc1_conn_cur, with or without the table > > > argument, this does not work. No matter how many concurrent c

Re: Question about using "force-persist"

On Tue, Mar 15, 2011 at 05:07:02PM -0500, Shaw, Christopher wrote: > Willy, > > Thanks for the reply. We are attempting to use an ACL to (1) > test for the existence of an RDP cookie using "acl > req_rdp_cookie_cnt gt 0" and then (2) use the "force-persist if > " statement. Our end goal is

Re: proper way to use an acl + stick-table to filter based on conn_cur

Interesting... I was able to get it to work using a stick-table on the front-end, as bartavelle mentioned from this URL: http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/ I don't know enou

Re: Question about using "force-persist"

I have a similar interest. I'd love to see the full config that you have come up with. LES Sent from my iPad On Mar 15, 2011, at 6:07 PM, "Shaw, Christopher" wrote: > Willy, > >Thanks for the reply. We are attempting to use an ACL to (1) > test for the existence of an RDP cookie using "

RE: Question about using "force-persist"

Willy, Thanks for the reply. We are attempting to use an ACL to (1) test for the existence of an RDP cookie using "acl req_rdp_cookie_cnt gt 0" and then (2) use the "force-persist if " statement. Our end goal is to make sure that if a user has an existing session on a server that was remo

Re: proper way to use an acl + stick-table to filter based on conn_cur

Hi Willy and Cory, Le mardi 15 mars 2011 22:17:50, Willy Tarreau a écrit : > > Whether I use "src_conn_cur" or sc1_conn_cur, with or without the table > > argument, this does not work. No matter how many concurrent connections > > per ip in the stick table, they never get denied. > > > > Any sugg

Re: [PATCH 0/3] Moving pinging of master into a task

Thank you Simon ! I could not start the review yesterday, but tomorrow at the end of the day looks very likely. Cheers, Willy On Mon, Mar 14, 2011 at 06:14:15PM +0900, Simon Horman wrote: > This short series moves the pinging of a master process by > its workers into a task to alleviate performa

Re: Question about using "force-persist"

On Mon, Mar 14, 2011 at 02:18:36PM -0500, Shaw, Christopher wrote: > We are attempting to implement a "force-persist" rule using HAProxy, but > aren't having much success. Is the "force-persist" option available to > be used with TCP connections? How are you trying to use it ? There are very littl

Re: TCP proxy capabilities

On Mon, Mar 14, 2011 at 05:49:05PM -0700, g...@desgames.com wrote: > That's something I considered, but the ultimate problem is that the backend > service we're running (gearman) sometimes gets backed up with requests from > our web servers. In this case, the server still looks 'up' (I *think*) but

Re: proper way to use an acl + stick-table to filter based on conn_cur

Hi Cory, On Tue, Mar 15, 2011 at 01:41:18PM -0500, Cory Forsyth wrote: > I have an haproxy.conf like so. I'm trying to limit based on the concurrent > connections. > > backend thebackend > stick-table type ip size 8k expire 5m store gpc0,conn_cur > tcp-request content track-sc1 s

Re: State sync

Jamie, Cookies dont need state replication. Source IP has a new replication feature, example here: peers mypeers peer haproxy1 192.168.0.1:1024 peer haproxy2 192.168.0.2:1024 peer haproxy3 10.2.0.1:1024 backend mybackend mode tcp balance roundrobin

proper way to use an acl + stick-table to filter based on conn_cur

I have an haproxy.conf like so. I'm trying to limit based on the concurrent connections. backend thebackend stick-table type ip size 8k expire 5m store gpc0,conn_cur tcp-request content track-sc1 src acl mark_seen sc1_inc_gpc0 acl needs_increment src_get_gpc0(union

Re: State sync

On Tue, Mar 15, 2011 at 23:45, Jaime Nebrera wrote: > >  Hi all list members, > >  I'm wondering if its possible to share the connection affinity / state > between a > couple of HA proxies, in such a way, in case of failure the backup server will > redirect the user to the same end server as it w

State sync

Hi all list members, I'm wondering if its possible to share the connection affinity / state between a couple of HA proxies, in such a way, in case of failure the backup server will redirect the user to the same end server as it was using when going through the main haproxy. I'm aware t