Re: haproxy with sFlow instrumentation

2013-05-09 Thread Neil Mckee
For more info on haproxy + sFlow, see http://blog.sflow.com/2013/05/haproxy.html Neil On Apr 30, 2013, at 1:50 PM, Neil Mckee wrote: > Hello All, > > I had a go at adding standard sFlow instrumentation to haproxy: > https://github.com/sflow/haproxy > > This implements the exact same binary-

Re: Add X-Forwarded-For

2013-05-09 Thread Cyril Bonté
Hi Sander, Le 08/05/2013 22:26, Sander Klein a écrit : Thanks everyone for answering. I'll play around a bit with my config and the suggestions. To complete the suggestions, here is the configuration I've used for months on a personal website : acl FROM_CLOUDFLARE src -f /etc/haproxy/cl

Re: TProxy debugging

2013-05-09 Thread Eduard Martinescu
Thank you for your help. It turns out the problem was beyond my control and in the network/routing layer. There were some rules in place preventing address spoofing. I'm all set now and things are working correctly. Ed -- ✉ Eduard Martinescu | ✆ (585) 708-9685 | [i

Re: log X-Forwarded-For in haproxy log

2013-05-09 Thread Pedro Mata-Mouros
Hi, Picking up this old thread, is there a way of actually replacing the client_ip in the logs with this captured header X-Forwarded-For? I'm using AWS and the current setup uses AWS LBs to deliver traffic to my HAProxy box, and this way every single client_ip I'm seeing in the logs is from the

Peer/Failover options for HAProxy

2013-05-09 Thread Connelly, Zachary (CGI Federal)
HAProxy list, I wanted to confirm what I've read in the documentation and on other posts concerning HAProxy and failover using the Peer functionality. HAProxy does not automatically failover for you - if two HAProxy instances are linked as peers, if an instance go down (or a frontend and/or bac

Re: HAProxy on FreeBSD 8.3 with transparent proxying (TProxy?)

2013-05-09 Thread PiBa-NL
Hi Willy, Thanks the patches look good, and when applied separately all compile without issues on FreeBSD. (Except when using the USE_LINUX_TPROXY flag, but that shouldn't be used on FreeBSD anyway.) And transparent proxying works correctly on FreeBSD as was expected. Ive included a "transpar

HTTP body manipulation

2013-05-09 Thread Nathan Reilly
Hello all, Is content manipulation is possible with haproxy, similar to mod_sed or mod_ext_filter, not just for http headers but response body text? Thanks Nathan

Re: HTTP body manipulation

2013-05-09 Thread Baptiste
Hi, No, it's not possible. HAProxy can manipulate only URLs and headers, in both requests and responses. Baptiste On Fri, May 10, 2013 at 7:21 AM, Nathan Reilly wrote: > Hello all, > > Is content manipulation is possible with haproxy, similar to mod_sed or > mod_ext_filter, not just for http h

Re: Peer/Failover options for HAProxy

2013-05-09 Thread Baptiste
Hi Zack, The peers in HAProxy are available only for synchronizing data content from stick tables. If you want a failover to occur you must use a tool to force an IP failover, like keepalived's vrrp ability. Baptiste On Thu, May 9, 2013 at 9:56 PM, Connelly, Zachary (CGI Federal) wrote: > HAPro

Re: keep alive on both client and server side and x-forwarded-for

2013-05-09 Thread Baptiste
Hi, No, there is no way for this for now. If you need to know client IP, you can switch to Transparent proxy or to the Proxy protocol (but this option may ask you to rewrite some code on your server). Baptiste On Thu, May 9, 2013 at 4:10 PM, wrote: > Hi All, > > I have situation where setting

Re: log X-Forwarded-For in haproxy log

2013-05-09 Thread Baptiste
Hi Pedro, You can use the log-format statement available in HAProxy 1.5. Everything is explained in the doc. If you need more help, please let us know. Baptiste On Thu, May 9, 2013 at 3:21 PM, Pedro Mata-Mouros wrote: > Hi, > > Picking up this old thread, is there a way of actually replacing th