Re: [PATCH] DOC: fix typo in comments

2013-10-01 Thread Willy Tarreau
Hi Godbach, On Mon, Sep 30, 2013 at 11:23:10AM +0800, Godbach wrote: Hi Willy, There is a patch to fix typo in comments, please check the attachment for you information. The commit log is as below: commit 9824d1b3740ac2746894f1aa611c795366c84210 Author: Godbach nylzhao...@gmail.com

Re: about stats socket per process

2013-10-01 Thread Willy Tarreau
On Mon, Sep 30, 2013 at 04:07:00PM +0400, Avatar wrote: I would like to ask you about any perspective in implementation statistics socket at each process in nbproc. Do you have any plans to work on it? It was started a few months ago but ended in a maelstorm where many other things had to be

Haproxy SSL certificat exception with root

2013-10-01 Thread Matthieu Boret
Hi, I've setup Haproxy 1.5 dev 19 to handle my http and https traffic. All works fine except when I request the root url in https: https://mydomain.com My certificate is a wildcard *.mydomain.com What is the solution to remove this error? An url rewrite and add www? My Haproxy configuration:

Re: Haproxy SSL certificat exception with root

2013-10-01 Thread David Coulson
You can't just add mydomain.com to the *.mydomain.com certificate? Not much you can do with HAProxy here. Since the cert is invalid for https://mydomain.com/, users are going to get a SSL error when they connect. On 10/1/13 6:51 AM, Matthieu Boret wrote: Hi, I've setup Haproxy 1.5 dev 19 to

Re: Haproxy SSL certificat exception with root

2013-10-01 Thread Jonathan Matthews
On 1 October 2013 11:51, Matthieu Boret mbore...@gmail.com wrote: Hi, I've setup Haproxy 1.5 dev 19 to handle my http and https traffic. All works fine except when I request the root url in https: https://mydomain.com My certificate is a wildcard *.mydomain.com This happens because your

server timeouts

2013-10-01 Thread Tom Huybrechts
Hi all, I'm using haproxy 1.4.23 on Windows Server 2008 to proxy tcp connections to a single backend server. Usually this is going well, but occasionally a client has issues: connections get dropped and they are unable to make new ones. Investigation of the logs show server-side timeouts:

Re: server timeouts

2013-10-01 Thread Baptiste
Hi tom, Can you share us your configuration? HAProxy seems to be queueing the connection (maxconn set to 1??) and the timeout queue (setup to 5s in your case??) has expired so the connection is not forwarded to the server. Of course, I want you to send us some comments with your configuration,

Re: server timeouts

2013-10-01 Thread Tom Huybrechts
I have maxconn 256 and timeout 5s. Full configuration below. I don't think there's anything special about it... Tom global daemon maxconn 256 log localhost local0 defaults balance source log global option log-separate-errors option tcplog mode tcp timeout connect

Re: Haproxy SSL certificat exception with root

2013-10-01 Thread Matthieu Boret
Hi David and Jonathan, Thanks a lot for your help. Regards, Matthieu 2013/10/1 Jonathan Matthews cont...@jpluscplusm.com On 1 October 2013 11:51, Matthieu Boret mbore...@gmail.com wrote: Hi, I've setup Haproxy 1.5 dev 19 to handle my http and https traffic. All works fine except

Re: [PATCH] DOC: fix typo in comments

2013-10-01 Thread Godbach
On 2013-10-1 15:49, Willy Tarreau wrote: Hi Godbach, On Mon, Sep 30, 2013 at 11:23:10AM +0800, Godbach wrote: Hi Willy, There is a patch to fix typo in comments, please check the attachment for you information. The commit log is as below: commit 9824d1b3740ac2746894f1aa611c795366c84210

Re: [PATCH] DOC: fix typo in comments

2013-10-01 Thread Willy Tarreau
On Wed, Oct 02, 2013 at 01:08:50AM +0800, Godbach wrote: It seems that you submit the whole text of mail as commit log to the git repository. Ah yes, you're right :-) At the moment I applied it, I was fooled by the subject into thinking it was just the patch itself. I'll be more careful

Re: [PATCH] DOC: fix typo in comments

2013-10-01 Thread Godbach
On 2013-10-2 1:12, Willy Tarreau wrote: On Wed, Oct 02, 2013 at 01:08:50AM +0800, Godbach wrote: It seems that you submit the whole text of mail as commit log to the git repository. Ah yes, you're right :-) At the moment I applied it, I was fooled by the subject into thinking it was just

Re: server timeouts

2013-10-01 Thread Baptiste
Hi Tom, Your global maxconn parameter is not responsible of your issue. That said it looks very low, so I recommend you to increase it (1000 sounds good to start, depends on your traffic level) Your server maxconn will queue connection when a server reaches 32 connections only. Is there any

Re: Can haproxy ACL on cookie -contents-?

2013-10-01 Thread Baptiste
Hi Dave, Well, you have more efficient ACLs in latest HAProxy version: acl shard5 cook(userState) ND Baptiste On Fri, Sep 27, 2013 at 8:34 PM, Dave Shevett shev...@pobox.com wrote: Oops, answering my own question here... we figured it out. The expression looks like this: acl shard5