Re: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Willy Tarreau
On Tue, Jun 14, 2011 at 01:09:12PM +0530, Sachin Shetty wrote: > here is the tcp dump containing that precise request: > > tcpdump -s0 -npi lo port 9910 -w trace1.cap There is nothing abnormal there, the response was complete and not truncated. The connection was eventually closed before all of t

can't figure out why this is causing a CQ

2011-06-14 Thread Hank A. Paulson
I can't see what I am missing here. Any help is appreciated Jun 14 02:00:00 localhost haproxy[3052]: 10.101.1.2:2892 [14/Jun/2011:02:00:00.088] w wi/wi-9 35/111/-1/-1/146 503 212 W=9 - CQ-- 202/202/27/18/0 1/0 {w.x.y.z|Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.7 (KHTML, l

Re: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Willy Tarreau
On Tue, Jun 14, 2011 at 02:14:15PM +0530, Sachin Shetty wrote: > I looked at all the apache modules we have and haven't seen anything glaring > there. > > Attached tcpdump from cherrypy server when Apache is bypassing haproxy and > forwarding to cherrypy directly. Obviously cherrypy does it in ord

RE: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Sachin Shetty
Yeah, I understand. So what could we do? I am really stuck with this and not able to figure out any workaround either. -Original Message- From: Willy Tarreau [mailto:w...@1wt.eu] Sent: Tuesday, June 14, 2011 4:17 PM To: Sachin Shetty Cc: 'Cassidy, Bryan'; haproxy@formilux.org Subject: Re

Re: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Willy Tarreau
On Tue, Jun 14, 2011 at 04:27:00PM +0530, Sachin Shetty wrote: > Yeah, I understand. > > So what could we do? I am really stuck with this and not able to figure out > any workaround either. I really have no idea, because the server already replies before the data are sent. Maybe you could disable

RE: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Sachin Shetty
man We already had option httpclose in our config and removing it fixed it. We haven't tweaked any configs for a few months, I dont even know why we had this in the first place :) I read through the documentation, I dont think we need it. Do you have any reservations about taking it out? Tha

acl and multiple header values

2011-06-14 Thread John Fieber
I want to create an ACL based on X-Forwarded-For: acl whitelist hdr_ip(X-Forwarded-For) -f whitelist.txt block unless whitelist Which is just grand, EXCEPT I'm only interested in (and trust) the last address in the X-Forwarded-For header. The above acl matches any address in the header

Re: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Willy Tarreau
On Tue, Jun 14, 2011 at 06:16:23PM +0530, Sachin Shetty wrote: > man > > We already had option httpclose in our config and removing it fixed it. We > haven't tweaked any configs for a few months, I dont even know why we had > this in the first place :) > > I read through the documentation, I

Re: acl and multiple header values

2011-06-14 Thread Willy Tarreau
On Tue, Jun 14, 2011 at 04:43:47PM -0700, John Fieber wrote: > I want to create an ACL based on X-Forwarded-For: > > acl whitelist hdr_ip(X-Forwarded-For) -f whitelist.txt > block unless whitelist > > Which is just grand, EXCEPT I'm only interested in (and trust) the last > address in th

Re: can't figure out why this is causing a CQ

2011-06-14 Thread Willy Tarreau
Hi Hank, On Tue, Jun 14, 2011 at 03:12:27AM -0700, Hank A. Paulson wrote: > I can't see what I am missing here. > Any help is appreciated > > Jun 14 02:00:00 localhost haproxy[3052]: 10.101.1.2:2892 > [14/Jun/2011:02:00:00.088] w wi/wi-9 35/111/-1/-1/146 503 212 W=9 - CQ-- > 202/202/27/18/0 1/0

[PATCH 0/9] Enhance show/clear table socat commands

2011-06-14 Thread Simon Horman
Hi, This patch series unifies the arguments taken by the show table and clear table socat commands by allowing: * show table key * clear table data. It also allows non IPv4 keys to be used.

[PATCH 3/9] [MINOR] Break out processing of clear table

2011-06-14 Thread Simon Horman
This will allow the code to be reused for showing a table filtered by key --- src/dumpstats.c | 126 +-- 1 files changed, 66 insertions(+), 60 deletions(-) diff --git a/src/dumpstats.c b/src/dumpstats.c index 309651d..e99153a 100644 --- a/src/d

[PATCH 4/9] [MINOR] Allow listing of stick table by key

2011-06-14 Thread Simon Horman
--- doc/configuration.txt | 26 -- src/dumpstats.c | 32 +--- 2 files changed, 45 insertions(+), 13 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index b788c13..5455f7c 100644 --- a/doc/configuration.txt +++ b

[PATCH 1/9] [CLEANUP] dumpstats: make symbols static where possible

2011-06-14 Thread Simon Horman
--- include/proto/dumpstats.h |9 - src/dumpstats.c | 38 -- 2 files changed, 24 insertions(+), 23 deletions(-) diff --git a/include/proto/dumpstats.h b/include/proto/dumpstats.h index 89e656e..850819a 100644 --- a/include/proto/dumpstat

[PATCH 2/9] [MINOR] Break out dumping table

2011-06-14 Thread Simon Horman
This will allow the code to be reused for showing a table filtered by key Signed-off-by: Simon Horman --- src/dumpstats.c | 315 +-- 1 files changed, 165 insertions(+), 150 deletions(-) diff --git a/src/dumpstats.c b/src/dumpstats.c index bee

[PATCH 9/9] [MINOR] Allow showing and clearing by key of string stick tables

2011-06-14 Thread Simon Horman
--- doc/configuration.txt |6 -- src/dumpstats.c |4 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 1d334df..7dfa2b1 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -9345,7 +9345,8 @@ clear

[PATCH 7/9] [MINOR] Allow showing and clearing by key of ipv6 stick tables

2011-06-14 Thread Simon Horman
--- doc/configuration.txt |4 ++-- src/dumpstats.c | 16 +++- 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 538be58..00e83f1 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -9345,7 +9345

[PATCH 6/9] [MINOR] More flexible clearing of stick table

2011-06-14 Thread Simon Horman
* Allow clearing of all entries of a table * Allow clearing of all entries of a table that match a data filter --- doc/configuration.txt | 47 include/proto/dumpstats.h |1 + src/dumpstats.c | 41 ++---

[PATCH 8/9] [MINOR] Allow showing and clearing by key of integer stick tables

2011-06-14 Thread Simon Horman
--- doc/configuration.txt |4 ++-- src/dumpstats.c | 29 - 2 files changed, 26 insertions(+), 7 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 00e83f1..1d334df 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@

[PATCH 5/9] [MINOR] Break out all stick table socat command parsing

2011-06-14 Thread Simon Horman
This will allow reuse for clearing table entries other than by key --- src/dumpstats.c | 150 +++ 1 files changed, 73 insertions(+), 77 deletions(-) diff --git a/src/dumpstats.c b/src/dumpstats.c index bc1c2a4..6adcee2 100644 --- a/src/dumpstat

RE: Apache translates 500 to 502 from haproxy

2011-06-14 Thread Sachin Shetty
I also think apache is the issue. I think we have a few mischievous modules like mod_rpaf that I need to disable and test. I will keep you posted. For now do you see any severe problem if I disabe httpclose as a workaround? Thanks Sachin -Original Message- From: Willy Tarreau [mailto:w.

error with ipv6 backend www server

2011-06-14 Thread Delta Yeh
Hi, I run into error when I try to proxy http request to an ipv6 www server, the error is : debian:~/v6# ./haproxy -f v6.cfg [ALERT] 165/142945 (23488) : parsing [v6.cfg:28] : Unknown host in '3ffe::21da:7:3c06:7c4c:8215:2' [ALERT] 165/142945 (23488) : Error(s) found in configuration file :