Re: HAProxy with native SSL support !

2012-09-13 Thread Willy Tarreau
Hi David, On Wed, Sep 12, 2012 at 10:07:58PM +, David Torgerson wrote: haproxy SSL termination... Awesome!! I have been in the process of replacing our hardware appliances with a software based solution running in a virtualized environment. We currently have a project running

Re: Shared SSL cache across multiple servers

2012-09-13 Thread Willy Tarreau
Hi again David, On Wed, Sep 12, 2012 at 11:40:04PM -0600, David Torgerson wrote: I have been benchmarking the haproxy SSL implementation for the past few days and the results are very impressive. We have multiple ssl terminators setup for redundancy and capacity. I took one of our terminators

Re: HAProxy with native SSL support !

2012-09-13 Thread Baptiste
A few links on our blogs related to Willy's mail and your problem: - SSLID persistence: http://blog.exceliance.fr/2011/07/04/maintain-affinity-based-on-ssl-session-id/ - Content switching based on SNI in HAProxy:

persistent (but sporadic) mailinglist issues

2012-09-13 Thread Christian Parpart
Hey all, while being at this list for quite a few months now, I repeately receive mails from the mailinglist software, that it could not deliver one or more (e.g. up to 4) messages within a given time. That really hurts me, especially where HAproxy is a subject of interest, and I expect that

Re: persistent (but sporadic) mailinglist issues

2012-09-13 Thread Oct
In case anybody is willing to investigate, I have the same issue, using Gmail for domain... -- Pierre o...@fotopedia.com Server Shepherd at http://www.fotopedia.com/

[PATCH] Small doc fix

2012-09-13 Thread Guillaume Castagnino
I noticed that the ssl_sni section is duplicated in configuration. Here is the (very) small fix. Thanks ! Guillaume Castagnino (1): DOC: duplicate ssl_sni section doc/configuration.txt | 9 - 1 file changed, 9 deletions(-) -- 1.7.12

[PATCH] DOC: duplicate ssl_sni section

2012-09-13 Thread Guillaume Castagnino
--- doc/configuration.txt | 9 - 1 file changed, 9 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 7be3335..227b50f 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -8085,15 +8085,6 @@ req_ssl_ver decimal SSL data layer, so this will not

Haproxy not logging captured request headers with custom log format

2012-09-13 Thread Gagandeep Singh
Hi all I am having some pain setting up some of the haproxy logging options. Earlier i was not specifying a log format, and the captured request headers were getting printed. I wanted to log the unique-id-header, but could not find any way of doing so. So i copy pasted the log-format mentioned on

Re: persistent (but sporadic) mailinglist issues

2012-09-13 Thread Willy Tarreau
On Thu, Sep 13, 2012 at 01:24:08PM +0200, Oct wrote: In case anybody is willing to investigate, I have the same issue, using Gmail for domain... We've all seen them from time to time. Normally they mean that the ML could not reach your server for some time and that everything went fine again.

Re: haproxy listen to random udp port

2012-09-13 Thread Willy Tarreau
Hello Sergey, On Thu, Sep 13, 2012 at 01:01:17PM +0400, Sergey Pinchuk wrote: Hello everybody, I have noticed that haproxy opens random udp port and listen on it. In fact it does not really listen, it's just that the port is bound. After search around that problem I have found this

Re: Haproxy not logging captured request headers with custom log format

2012-09-13 Thread William Lallemand
On Thu, Sep 13, 2012 at 11:22:16PM +0530, Gagandeep Singh wrote: Hi all Hi, were getting printed. I wanted to log the unique-id-header, but could not find any way of doing so. So i copy pasted the log-format mentioned on the

Redirect an entire URL

2012-09-13 Thread Aaron Golub
Hi, So I've tried this a number of ways and so far I'm not have any luck (other than doing it via 301 redirect in Apache). I need to redirect some specific urls to other specific urls on a different site (re-branding and new servers setup, but we want to maintain our SEO juice for these specific

Re: [ANNOUNCE] haproxy 1.5-dev12

2012-09-13 Thread Duncan Hall
On 10/09/12 19:23, Willy Tarreau wrote: Hi Duncan, On Mon, Sep 10, 2012 at 07:16:30PM +1000, Duncan Hall wrote: On 10/09/12 18:10, Willy Tarreau wrote: Many bugs were fixes, and many were certainly introduced. If you observe any bug, please report it, as I'd rather issue -dev13 quickly with

Re: Redirect an entire URL

2012-09-13 Thread Baptiste
On Fri, Sep 14, 2012 at 1:55 AM, Aaron Golub aaron.go...@turnhere.com wrote: Hi, So I've tried this a number of ways and so far I'm not have any luck (other than doing it via 301 redirect in Apache). I need to redirect some specific urls to other specific urls on a different site (re-branding

Re: [ANNOUNCE] haproxy 1.5-dev12

2012-09-13 Thread Willy Tarreau
Hi Duncan, On Fri, Sep 14, 2012 at 01:34:04PM +1000, Duncan Hall wrote: Thanks for your help on this, there was a network issue in the VPN I use to access my dev environment that was causing the delays. OK, thanks for the feedback. One thing I did notice on CentOS 5.8 and 6.3 is that at

Re: Redirect an entire URL

2012-09-13 Thread Willy Tarreau
On Fri, Sep 14, 2012 at 06:29:40AM +0200, Baptiste wrote: On Fri, Sep 14, 2012 at 1:55 AM, Aaron Golub aaron.go...@turnhere.com wrote: Hi, So I've tried this a number of ways and so far I'm not have any luck (other than doing it via 301 redirect in Apache). I need to redirect some specific