Re: Tuning HAProxy for Production

2014-01-04 Thread Jordan Arentsen
Just wanted to bump this, see if anyone had any suggestions. Thanks. On Thu, Jan 2, 2014 at 2:09 PM, Jordan Arentsen wrote: > Hi Baptiste, > > Sorry about that, it makes sense that you would want that information. :) > > Mostly this will be routing to various front-end web servers based on the

RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lauri-Alo Adamson
Hello ! Many thanks for your help I´m using Apache web server 2.4.x I used three browsers under MS Windows 7 Professional Service Pack 1 64-bit operatingsystem Windows Internet Explorer Version 9.0.8112.16421 Update Versions 9.0.23 Chiper Strength 256-bit Firefox 25.0.1 Google Chrome Versio

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Hey, On 03.01.2014 22:52, Lukas Tribus wrote: You said that one of your backends is exchange 2012. What release are the other ntlm-auth backends exactly and is the issue the same on all of them? All backends are windows 2012 with the standard IIS that comes with it. I have the problem on all

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Heyz, On 03.01.2014 22:52, Lukas Tribus wrote: Hi, The problem I'm having (also tested with ss-20140101 yesterday) happens with http-keep-alive enabled and also when just running in tunnel mode. But, when http-keep-alive is enabled I get the problem with ~98% of the requests and in tunnel

Re: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Cyril Bonté
Hi, Le 04/01/2014 20:09, Lauri-Alo Adamson a écrit : Are you tcpdumping the frontent traffic? If undestood correctly tcpdump displays encrypted traffic without necessary information about affinity Yes it does. This will allow to check the SSL session id in each ClientHello/ServerHello messag

RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lauri-Alo Adamson
Hello ! I will try to answer qustions and explain my case https://X.X.X.X/index.txt and browse this page it displays server name One server file index.txt contains server name etee-live1 and other server the file contains this server name etee-live2. If affinity works browser displays always

RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lukas Tribus
Hi, > Have been wondering about if/how i could persist ssl sessions between > servers myself if i ever need it. > And found the concept of a SSL-session-id rather promising, then after > looking into how to use it and its reliability i found some articles > saying it might not be wise.. > > https