Help with kQueue

2013-05-29 Thread Fred Pedrisa
De: Fred Pedrisa [mailto:fredhp...@hotmail.com] Enviada em: quinta-feira, 30 de maio de 2013 02:09 Para: 'haproxy@formilux.org' Assunto: Help with kQueue Hello, Guys. Sorry for disturbing, and for the first e-mail I sent, I thought it was an automated mailing list, requiring to subscribe J

Subscribe

2013-05-29 Thread Fred Pedrisa
Hello

Query

2013-05-29 Thread Ayaz Ahmed
Hi Sir, I am new to Haproxy,I have developed application on java with server as tomcat and deployed in Ec2 and OpenShift small gear.So want to scale my application and web potals with Haproxy with minimum of 80 hits/s.So please guide me. Best Regards MOHAMMED AYAZ AHMED Software Engineer Mobile:919

Re: Haproxy issues with rspirep

2013-05-29 Thread s...@siezeconsulting.com
Yes http it is in my config  too and not tcp (Away from my server ,hence sent an unedited config for your quick reference) -apologies. From: David Coulson Sent: Thu, 30 May 2013 02:10:35 To: s...@siezeconsulting.com Cc: "Cyril Bont " , "haproxy@formi

Re: Haproxy issues with rspirep

2013-05-29 Thread David Coulson
Does rspirep work with tcp? Does it not need to be using HTTP mode? David On May 29, 2013, at 4:28 PM, s...@siezeconsulting.com wrote: > Hi Cyril , > > Sorry for the brevity . > > Haproxy IP = 172.17.25.100 ( fiction IP for clarity) > Application server hostname = openamHost > Application ser

Re: Haproxy issues with rspirep

2013-05-29 Thread s...@siezeconsulting.com
Hi David, dev18 From: David Coulson Sent: Thu, 30 May 2013 01:34:31 To: "s...@siezeconsulting.com" Cc: "haproxy@formilux.org" Subject: Re: Haproxy issues with rspirep What version? I had a similar issue with dev17.  Sen

Re: Haproxy issues with rspirep

2013-05-29 Thread s...@siezeconsulting.com
Agreed since all requests coming in are ssl on port 443 , if {ssl_fc} isn't required  i guess. From: Cyril Bonté Sent: Thu, 30 May 2013 01:15:45 To: "s...@siezeconsulting.com" Cc: "haproxy@formilux.org" Subject: Re: Haproxy

Re: Haproxy issues with rspirep

2013-05-29 Thread s...@siezeconsulting.com
Hi Cyril , Sorry for the brevity . Haproxy IP = 172.17.25.100 ( fiction IP for clarity) Application server hostname = openamHost Application server IP = 172.17.25.101 Url for ssl offload access https://192.168.0.1/sso/Login Configured haproxy to ssl offload a tomcat based application running on

Re: Haproxy issues with rspirep

2013-05-29 Thread David Coulson
What version? I had a similar issue with dev17. Sent from my iPad On May 29, 2013, at 3:12 PM, "s...@siezeconsulting.com" wrote: > Hello, > > rspirep ^Location:\ http://(.*):80(.*) Location:\ https://\1:443\2 if { > ssl_fc } > > The above works but the following doesn't (Location URL

Re: Haproxy issues with rspirep

2013-05-29 Thread Cyril Bonté
Hi Syed, Le 29/05/2013 21:12, s...@siezeconsulting.com a écrit : Hello, rspirep ^Location:\ http://(.*):80(.*) Location:\ https://\1:443\2 if { ssl_fc } The above works but the following doesn't (Location URL is unchanged ) why ? rspirep ^Location:\ http://(.*):80(.*) Location:\ http://172.1

Haproxy issues with rspirep

2013-05-29 Thread s...@siezeconsulting.com
Hello, rspirep ^Location:\ http://(.*):80(.*)  Location:\ https://\1:443\2  ; if  { ssl_fc } The above works but the following doesn't (Location URL is unchanged ) why ? rspirep ^Location:\ http://(.*):80(.*)  Location:\ http://172.17.25.100:8080\2  ; if  { ssl_fc } Reference : http://blo

Re: HTTP Request still gets response from the server with weight 0 and src persistence

2013-05-29 Thread Godbach
Hi Baptiste Yeah, I got it. Thank you very much for your explanation. Best Regards, Godbach Actually, this is the purpose of dropping a weight to 0: being able to maintain sticky sessions. If you want to shutdown rudely your server, preventing everybody to access it, use the disable keyword.

Re: HTTP Request still gets response from the server with weight 0 and src persistence

2013-05-29 Thread Baptiste
Actually, this is the purpose of dropping a weight to 0: being able to maintain sticky sessions. If you want to shutdown rudely your server, preventing everybody to access it, use the disable keyword. Baptiste On Wed, May 29, 2013 at 5:55 PM, Godbach wrote: > Hi Baptiste > > It doesn't matter.

Re: HTTP Request still gets response from the server with weight 0 and src persistence

2013-05-29 Thread Godbach
Hi Baptiste It doesn't matter. :-) When the weight of server is set to 0 with the balance roundrobin algorithm, srv->eweight is update to 0 and fwrr_update_server_weight() (lb_fwrr.c) will be called as below: static void fwrr_update_server_weight(struct server *srv) { ... old_state

Re: Block clients based on header in real time?

2013-05-29 Thread Baptiste
Hi, With latest HAProxy version, you could use a stick table and insert IPs in the stick table through HAProxy socket. Then you can ban all IPs from the stick table. Baptiste On Wed, May 29, 2013 at 1:05 PM, Ricardo Fraile wrote: > Hello, > > >I'm looking for a solution for blocking users

Re: HTTP Request still gets response from the server with weight 0 and src persistence

2013-05-29 Thread Baptiste
AH, sorry, my mistake. I read your mail too quickly. Baptiste On Wed, May 29, 2013 at 9:18 AM, Godbach wrote: > Hi Baptiste > > Thanks for your replying. > > I am using the balance roundrobin algorithm and sticking on src, not the the > balance source algorithm. The configuration has been presen

Re: 403 - Forbidden: Access is denied with IIS7

2013-05-29 Thread Baptiste
Hi Prasad. You're in tunnel mode, so I guess the stats URI pass through haproxy without being analyzed. Maybe you need tunnel mode because of NTLM, and so the only way to have access to the stats URL would to use a different frontend/backend dedicated to stats only on a different port. Or maybe se

403 - Forbidden: Access is denied with IIS7

2013-05-29 Thread K G V S Prasad
Hi all, I am using HAProxy 1.4.23. I am getting *sometimes* following error while trying to access status page of HAProxy "403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied." This problem not coming while the targ

Block clients based on header in real time?

2013-05-29 Thread Ricardo Fraile
Hello,    I'm looking for a solution for blocking users based on a header, x-forwarded-for. I have yet an acl for this but is it possible to update the list of ips without restart haproxy? Thanks,

Re: LB Layout Question

2013-05-29 Thread joris dedieu
Hi Syd, > I'm guessing an an NFS share from the 2 webservers to the 1 fileserver. > However, from a bit of research with load balanced magento setups there seems > to be a lot of negative comments about using NFS in this way. It's always better to avoid NFS as it introduce a point of failure. So

Re: HTTP Request still gets response from the server with weight 0 and src persistence

2013-05-29 Thread Godbach
Hi Baptiste Thanks for your replying. I am using the balance roundrobin algorithm and sticking on src, not the the balance source algorithm. The configuration has been presented in my first mail as below: >> backend pool >> balance roundrobin. >> stick-table ty

LB Layout Question

2013-05-29 Thread Syd
Hi There, I've setup a few small load balanced environments with haproxy usually 2 LB's, 2+ webservers, 1 db server. However, I now have a client who needs the above but with an aditional file storage server for user uploads. So I'm arranging for an extra dedicated server with several TB that wil