Re: haproxy duplicate http_request_counter values (BUG)

2013-08-31 Thread Willy Tarreau
Hi guys, On Wed, Aug 28, 2013 at 04:41:57PM +0200, William Lallemand wrote: On Tue, Aug 20, 2013 at 04:14:05PM -0400, Patrick Hemmer wrote: I see 2 ways of handling this. 1) Move the code that populates the session unique_id member to http_process_req_common (or to http_wait_for_request

Re: junk at end of syslog packets in 1.5dev19

2013-08-31 Thread Willy Tarreau
On Fri, Aug 30, 2013 at 02:43:03PM +0200, William Lallemand wrote: On Thu, Aug 29, 2013 at 10:50:09PM +0200, Lukas Tribus wrote: The behavior also depends on the syslog facility; I used syslog in my tests. With the current git tree I see the following behavior: ntp and local7:

Re: Add verifyhost to server statements for checking cert hostname

2013-08-31 Thread Willy Tarreau
Hi Evan, On Sun, Aug 04, 2013 at 07:44:11PM +0100, Evan Broder wrote: Although HAProxy can verify the SSL certs of an SSL-enabled server against a CA chain, it currently doesn't check the actual hostname on the cert, meaning that it will accept any cert signed by any major CA (and thus can be

Re: 1.5-dev19 crashes

2013-08-31 Thread Willy Tarreau
Hi, On Thu, Aug 29, 2013 at 01:35:49PM +0200, Nick Jennings wrote: On Thu, Aug 29, 2013 at 4:40 AM, Amyas am...@yasmolive.com wrote: Nick Jennings nick@... writes: I'm running CentOS 6 with a 2.6.18 kernel, aside from a few additional packages via the EPEL, there are no

Re: Issue with tcp-request content and keep alive

2013-08-31 Thread Willy Tarreau
Hello Ricardo, On Fri, Aug 30, 2013 at 11:27:45AM +0200, Ricardo F wrote: Hello, I have an issue when trying to track a connection based on a header, with tcp-request, and with keep alive enable in a listen section. Over the haproxy i have a cdn, which pass the ip of the client at the

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Willy Tarreau
Hi Lukas, On Fri, Aug 30, 2013 at 10:27:34AM +0200, Lukas Tribus wrote: Is there a way to redispatch the requests to other servers ignoring the persistence on queue timeout? No; after a queue timeout (configurable by timeout queue), haproxy will drop the request. Think of what would

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Willy Tarreau
On Fri, Aug 30, 2013 at 02:10:50PM +0530, Sachin Shetty wrote: Thanks Lukas. Yes, I was hoping to workaround by setting a smaller maxqueue limit and queue timeout. So what other options do we have, I need to: 1. Send all requests for a host (mytest.mydomain.com) to one backend as long as

Re: PFS

2013-08-31 Thread Willy Tarreau
On Tue, Aug 27, 2013 at 12:26:18PM -0700, Bryan Talbot wrote: On Sat, Aug 24, 2013 at 4:29 AM, Erwin Schliske erwin.schli...@sevenval.com wrote: bind0.0.0.0:443 ssl crt /etc/ssl/private/concat cert + privkey ciphers ECDHE-RSA-AES256-GCM-SHA384:**ECDHE-ECDSA-AES256-GCM-SHA384:**

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Sachin Shetty
Thanks Willy. I am precisely using it for caching. I need requests to go to the same nodes for cache hits, but when the node is already swamped I would prefer a cache miss over a 503. Thanks Sachin On 8/31/13 12:57 PM, Willy Tarreau w...@1wt.eu wrote: On Fri, Aug 30, 2013 at 02:10:50PM +0530,

Re: ACL '-f' option not working

2013-08-31 Thread Willy Tarreau
See that header in your e-mail ? In-Reply-To: 20130822070159.gb26...@1wt.eu It causes your mail to be part of the thread about Simon's patches. This is because instead of sending a new e-mail, your preferred to reply to an unrelated one. Please do not do that in the future, it makes it harder

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Sachin Shetty
We did try consistent hashing, but I found better distribution without it. We don¹t add or remove servers often so we should be ok. Our total pool is sized correctly and we are able to serve 100% requests when we use roundrobin, however sticky on host is what causes some nodes to hit maxconn. My

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Willy Tarreau
On Sat, Aug 31, 2013 at 01:27:41PM +0530, Sachin Shetty wrote: We did try consistent hashing, but I found better distribution without it. That's known and normal. We don¹t add or remove servers often so we should be ok. It depends on what you do with them in fact, because most places will not

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Sachin Shetty
Yes, no-queue is what I am looking for. If consistent hashing is easier to accommodate this change, I won't mind switching to consistent hashing when the fix is available. Right now with no support for maxqueue failover, consistent hashing is even more severe for our use case. Thanks again Willy.

Re: How to redispatch a request after queue timeout

2013-08-31 Thread Willy Tarreau
On Sat, Aug 31, 2013 at 02:25:47PM +0530, Sachin Shetty wrote: Yes, no-queue is what I am looking for. If consistent hashing is easier to accommodate this change, I wouldn't say it's easier, better that it's less complicated :-/ I won't mind switching to consistent hashing when the fix is

You can help a child go to school

2013-08-31 Thread World Vision India
Unable to view this properly, click here http://ui3.mailzbrain.com/mailz/lt.php?id=ZU0ABAQMVlYHT1FQSlBUUlJWAg%3D%3D to see it in your browser http://ui3.mailzbrain.com/mailz/lt.php?id=ZU0ABAQMVlYET1FQSlBUUlJWAg%3D%3D http://ui3.mailzbrain.com/mailz/lt.php?id=ZU0ABAQMVlYET1FQSlBUUlJWAg%3D%3D

Issue with 1.5-dev19 and acl foo sc1_inc_gpc0 gt 0 in backend

2013-08-31 Thread Toni Mattila
Hi, I'm having issues implementing http://blog.exceliance.fr/2013/04/26/wordpress-cms-brute-force-protection-with-haproxy/ described configuration with dev19 due to what seems that following construct doesn't work: backend xyz acl foo sc1_inc_gpc gt 0 http-request deny if foo In the full

Re: Issue with 1.5-dev19 and acl foo sc1_inc_gpc0 gt 0 in backend

2013-08-31 Thread Willy Tarreau
Hi Toni, On Sat, Aug 31, 2013 at 02:14:55PM +0300, Toni Mattila wrote: Hi, I'm having issues implementing http://blog.exceliance.fr/2013/04/26/wordpress-cms-brute-force-protection-with-haproxy/ described configuration with dev19 due to what seems that following construct doesn't work:

[notify] Change of List-Membership details

2013-08-31 Thread Webmaster
This message is to inform you of a change of your details on our newsletter database You are currently member of the following newsletters: No Lists The information on our system for you is as follows: Email : haproxy@formilux.org Send HTML email : No If this is

[Paragraf] Savetovanja u septembru - pridruzite nam se

2013-08-31 Thread Paragraf Co - savetovanja
Title: Savetovanje 2013 Ovaj email sadrži grafičke elemente. Ukoliko imate problema sa otvaranjem istih, pogledajte sadržaj OVDE. www.paragraf.rs Pozivamo Vas da se prijavite na Paragrafova savetovanja za septembar 2013.

Designer_Fashion handbags for August

2013-08-31 Thread Tyler

Re: Issue with 1.5-dev19 and acl foo sc1_inc_gpc0 gt 0 in backend

2013-08-31 Thread Toni Mattila
Hi, As to respond to my own post.. I have gotten the sc1_inc_gpc0 working when I define in my frontend: stick-table type ip size 50k expire 120m store gpc0 tcp-request content track-sc1 src But if I add to that tcp-request content track-sc1 src if METH_POST then it doesn't work anymore..

夫妻生活不协调,1haps

2013-08-31 Thread pywbt128

Premier sur Google

2013-08-31 Thread E-visibilite
Pour vous, être présent sur Google c’est trouver de nouveaux clients. Mais combien coûte un bon référencement ? http://www.e-visibilite.com/referencement3.php

Re: Add verifyhost to server statements for checking cert hostname

2013-08-31 Thread Willy Tarreau
Hi Evan, On Sat, Aug 31, 2013 at 04:20:38PM -0700, Evan Broder wrote: It is very clean and well documented, good job! It looks OK to me. Do you want me to merge it now or do you prefer to resend it with the doc ? It's as you like, just tell me what you prefer. I've attached a new version