[ANNOUNCE] haproxy-1.5-dev23

2014-04-23 Thread Willy Tarreau
Hi, here comes dev23, addressing half of what was planned before 1.5-final. Among the user-visible changes, these ones come to mind : - use_backend now support dynamic backend names built using the log-format string like %[expression], and the condition is now optional ; - SSL supports

Re: [ANNOUNCE] haproxy-1.5-dev23

2014-04-23 Thread Godbach
On 2014/4/23 15:26, Willy Tarreau wrote: Hi, here comes dev23, addressing half of what was planned before 1.5-final. Among the user-visible changes, these ones come to mind : - use_backend now support dynamic backend names built using the log-format string like %[expression], and the c

Re: [PATCH] FEATURE Implementing send-proxy version 2

2014-04-23 Thread Willy Tarreau
Hi David, On Tue, Apr 22, 2014 at 10:29:13PM -0400, David S wrote: > Here's an updated diff. I like it a lot better. > It addresses all of your comments, except adding support for > check-send-proxy-v2. Indeed. I've checked how SRV_SEND_PROXY is used, and it could clearly be merged into ->pp_op

Dynamic server names in backend

2014-04-23 Thread Mark Howells
I've been casting around for a while for a solution but as yet I'm still stuck I want to proxy an entire domain, say example.com. There are very many subdomains - site1.example.com, games.example.com etc I need to intercept traffic to a handful of these, but pass the uninteresting ones onward to

Re: haproxy incorrectly reporting connection flags

2014-04-23 Thread Patrick Hemmer
*From: *Cyril Bonté *Sent: * 2014-04-23 02:37:07 E *To: *Patrick Hemmer *CC: *haproxy@formilux.org *Subject: *Re: haproxy incorrectly reporting connection flags > Hi Patrick, > > Le 23/04/2014 03:25, Patrick Hemmer a écr

RE: haproxy incorrectly reporting connection flags

2014-04-23 Thread Lukas Tribus
> Sorry about that. I see it on the mailing list archive, but not in my > client :-( Probably catched by a spam filter, I did respond directly to you and the mailing list. > Yes, I can reliably reproduce the issue. Here's another one with pcaps > of the eth0 and lo interfaces. Can you als

Re: haproxy incorrectly reporting connection flags

2014-04-23 Thread Patrick Hemmer
*From: *Lukas Tribus *Sent: * 2014-04-23 12:16:01 E *To: *Patrick Hemmer *CC: *haproxy@formilux.org *Subject: *RE: haproxy incorrectly reporting connection flags > >> Sorry about that. I see it on the mailing list archive, but not in my >> client :-( > Probably catched by a spam filter, I did

haproxy-1.5-dev23 and ssl handshake failure

2014-04-23 Thread Markus Rietzler
today i have switch to dev23. everything is working very well in our environment. haproxy works perfect in http mode. load balancing our two backend servers with master/slave and backup setup. i also use haproxy for ssl terminiation. exakt: haproxy takes ssl requests to our shop and then do ssl

Re: haproxy incorrectly reporting connection flags

2014-04-23 Thread Willy Tarreau
Hi Patrick, On Wed, Apr 23, 2014 at 12:17:44PM -0400, Patrick Hemmer wrote: > >> Yes, I can reliably reproduce the issue. Here's another one with pcaps > >> of the eth0 and lo interfaces. Your pcaps were extremely useful. While I initially failed to reproduce your issue by breaking connections,

Re: haproxy-1.5-dev23 and ssl handshake failure

2014-04-23 Thread Willy Tarreau
Hi Markus, On Wed, Apr 23, 2014 at 08:00:21PM +0200, Markus Rietzler wrote: > today i have switch to dev23. everything is working very well in our > environment. haproxy works perfect in http mode. > load balancing our two backend servers with master/slave and backup setup. > > i also use haprox

Re: [PATCH] FEATURE Implementing send-proxy version 2

2014-04-23 Thread David S
On Wed, Apr 23, 2014 at 5:45 AM, Willy Tarreau wrote: > (...) > Otherwise your patch looks fine. Do you want me to merge it ? If so, > please could you provide a commit message with it ? > > Thanks, > Willy > First, I'll update the documentation to keep it in sync with the code. Thinking ahead

Re: [PATCH] FEATURE Implementing send-proxy version 2

2014-04-23 Thread Willy Tarreau
On Wed, Apr 23, 2014 at 04:19:17PM -0400, David S wrote: > On Wed, Apr 23, 2014 at 5:45 AM, Willy Tarreau wrote: > > > (...) > > Otherwise your patch looks fine. Do you want me to merge it ? If so, > > please could you provide a commit message with it ? > > > > Thanks, > > Willy > > > > First, I

Re: haproxy-1.5-dev23 and ssl handshake failure

2014-04-23 Thread Willy Tarreau
Hi again Markus, I've checked my own logs and found SSL handshake failures starting on April 8th, or the day after Heartbleed was disclosed, as can be seen below with the number of errors per day : # err date 2 Mar 27 2 Mar 28 1 Mar 29 2 Mar 30 3 Mar 31 3 Apr

Re: cR, Tq, & timeout http-request

2014-04-23 Thread Lukas Tribus
Hi Chris, > We are running 1.4.24 for an application that sees almost entirely small > http requests. We have the following timeouts: > timeout client 7s > timeout server 4s > timeout connect 4s > timeout http-request 7s > > There are a significant number of cR/http-408 responses in the logs. > T

Re: cR, Tq, & timeout http-request

2014-04-23 Thread Bryan Talbot
On Thu, Apr 17, 2014 at 11:49 AM, Chris Burroughs wrote: > > We are running 1.4.24 for an application that sees almost entirely small http > requests. We have the following timeouts: > timeout client 7s > timeout server 4s > timeout connect 4s > timeout http-requ

Re: haproxy-1.5-dev23 and ssl handshake failure

2014-04-23 Thread Stefan
Hello, We also have the same issue. A lot of "SSL handshake failure" records in log file.

Re: haproxy-1.5-dev23 and ssl handshake failure

2014-04-23 Thread Stefan
We also have a lot of "SSL handshake failure" records in log file Here some details on configs: - haproxy -vv: HA-Proxy version 1.5-dev23-8317b28 2014/04/23 Copyright 2000-2014 Willy Tarreau Build options : TARGET = linux2628 CPU = native CC = gcc CFLAGS = -m64 -march=x86-64