Re: Check backend servers

2012-02-10 Thread Baptiste
On Fri, Feb 10, 2012 at 4:00 PM, Graeme Donaldson wrote: > On 10 February 2012 16:57, Baptiste wrote: >> >> Configure it like that: >> option                  httpchk HEAD /index.php HTTP/1.0\r\nHost:\ >> www.domain.com >> ==> please note the backslashes ( \ ) before the spaces. >> > You should u

Re: (haproxy) How-TO get HAPROXY to balanace 2 SSL encypted Webservers ?

2012-02-10 Thread Baptiste
Hi, Assuming you're running stunnel 4.50 and HAProxy 1.5: Stunnel conf: [frontend_ssl_offloading] cert = /path/to/certificate key = /path/to/key accept = LISTENING_IP:443 connect = 127.0.0.1:80 protocol = proxy [server1_ssl_connection] cert = /path/to/certificate key = /path/to/key accept = 127

Re: (haproxy) How-TO get HAPROXY to balanace 2 SSL encypted Webservers ?

2012-02-10 Thread haproxy
Hi. Willy. I am interested in your haproxy and stunnel setting "about re-encrypt the traffic between haproxy and tomcat". could you post it, please? Thanks Jie --- posted at http://www.serverphorums.com http://www.serverphorums.com/read.php?10,230949,444281#msg-444281

Re: rabbitmq and haproxy

2012-02-10 Thread Baptiste
Hi, Sounds like you reached the client or server timeout. So either you increase any values (or both) or you implement some kind of keepalive method inside your application in order to avoid HAProxy to shut it down. The logs may provide some usefull information about which time out has expired.

Log 400 bad request

2012-02-10 Thread Sander Klein
Hi All, I'm having a small problem with non RFC2616 requests. I would like to log them, but haproxy only logs: cluster1-in cluster1-in/ -1/-1/-1/-1/0 400 1951 - - PR-- 235/235/0/0/0 0/0 {|||} {} "" Is there a way to log them with the full host header and URL? I know I can show them with 'e

rabbitmq and haproxy

2012-02-10 Thread Robert Recchia
We are trying to use haproxy to load balance rabbitmq nodes in a cluster. Here is the config we are using listen rabbitmq1-cluster-5672 192.168.72.26:5672        balance roundrobin        server atuapp22 192.168.72.71:5672 check port 5672        server atuapp18 192.168.72.67:5672 check port 5672

Re: Check backend servers

2012-02-10 Thread Graeme Donaldson
On 10 February 2012 16:57, Baptiste wrote: > Configure it like that: > option httpchk HEAD /index.php HTTP/1.0\r\nHost:\ > www.domain.com > ==> please note the backslashes ( \ ) before the spaces. > > You should use HTTP/1.1 if you're sending a Host: header. Graeme.

Re: Check backend servers

2012-02-10 Thread Baptiste
Hi, First, I can tell you which realm you have to use. You're the only one to know ;) You can use the hostname your clients use. Configure it like that: option httpchk HEAD /index.php HTTP/1.0\r\nHost:\ www.domain.com ==> please note the backslashes ( \ ) before the spaces. chee

Re: Check backend servers

2012-02-10 Thread Sebastian Fohler
so I could use: adserver.dev.local/www/admin/index.php as uri part? Regards Sebastian On 10.02.2012 15:13, Baptiste wrote: option httpchk -- Sebastian Fohler Far-Galaxy Networks Web: http://www.far-galaxy.de Tel.: +49 (0)173 8796211 E-Mail: i...@far-galaxy.de

Re: Check backend servers

2012-02-10 Thread Sebastian Fohler
This is my backend definition: listen adserver.dev.adworxs.net bind192.168.10.70:80 modehttp log global option dontlognull option httpclose option

Re: Check backend servers

2012-02-10 Thread Baptiste
It uses the configured server IP and the URL provided by 'option httpchk'. cheers On Fri, Feb 10, 2012 at 1:48 PM, Sebastian Fohler wrote: > What URL does haproxy use exactly to check the service? > Is it the realm + the url part or something else? > Just to be sure to test the correct option. >

Re: Re: Check backend servers

2012-02-10 Thread Graeme Donaldson
On 10 February 2012 14:50, Sebastian Fohler wrote: > > What URL does haproxy use exactly to check the service? > Is it the realm + the url part or something else? > Just to be sure to test the correct option. > > Hi Sebastian If you are just using the "check" option for the backends, then the he

Fwd: Re: Check backend servers

2012-02-10 Thread Sebastian Fohler
What URL does haproxy use exactly to check the service? Is it the realm + the url part or something else? Just to be sure to test the correct option. Best regards Sebastian On 10.02.2012 09:56, Baptiste wrote: Hi, Maybe you're server require a Host header in the health check. Have you trie

Re: question about reloading haproxy

2012-02-10 Thread Michele Mazzucco
OK, thanks. On Feb 10, 2012, at 12:00 PM, Baptiste wrote: > On Fri, Feb 10, 2012 at 10:59 AM, "Brane F. Gračnar" > wrote: >> On 02/10/2012 10:53 AM, Michele Mazzucco wrote: >>> Hello Brane, >>> >>> yes, but that is equivalent to running the script as root... the effective >>> user ID is 0. >>>

Re: question about reloading haproxy

2012-02-10 Thread Baptiste
On Fri, Feb 10, 2012 at 10:59 AM, "Brane F. Gračnar" wrote: > On 02/10/2012 10:53 AM, Michele Mazzucco wrote: >> Hello Brane, >> >> yes, but that is equivalent to running the script as root... the effective >> user ID is 0. >> > > Nope, it's not :) You can configure sudo to allow specific user to

Re: question about reloading haproxy

2012-02-10 Thread Brane F. Gračnar
On 02/10/2012 10:53 AM, Michele Mazzucco wrote: > Hello Brane, > > yes, but that is equivalent to running the script as root... the effective > user ID is 0. > Nope, it's not :) You can configure sudo to allow specific user to run only "/etc/init.d/haproxy reload" without entering password. Yo

Re: question about reloading haproxy

2012-02-10 Thread Michele Mazzucco
Hello Brane, yes, but that is equivalent to running the script as root... the effective user ID is 0. Cheers, Michele On Feb 10, 2012, at 11:52 AM, Brane F. Gračnar wrote: > On 02/10/2012 10:35 AM, Michele Mazzucco wrote: >> Currently my script runs as a root. Would it be possible to restart

Re: question about reloading haproxy

2012-02-10 Thread Brane F. Gračnar
On 02/10/2012 10:35 AM, Michele Mazzucco wrote: > Currently my script runs as a root. Would it be possible to restart haproxy > (e.g. by issuing the command "/etc/init.d/haproxy restart") with lower > privileges? > The problem seems to be that I cannot re-bind port 80, unless the script runs > w

question about reloading haproxy

2012-02-10 Thread Michele Mazzucco
Hello, I am trying to control a haproxy instance running as a daemon via python: my script monitors the status of haproxy (e.g., number of queued requests), adds/remove some apache servers and updates the configuration of haproxy. Currently my script runs as a root. Would it be possible to resta

Re: Check backend servers

2012-02-10 Thread Baptiste
Hi, Maybe you're server require a Host header in the health check. Have you tried running the check using wget or curl on the server IP address? cheers On Fri, Feb 10, 2012 at 9:00 AM, Sebastian Fohler wrote: > Hi > > Is there some way to check the backendservers manually? > I'm always get thi