Is this in the specifications?(HTTP responses randomly getting RST)

2014-08-01 Thread cloudpack 川原 洋平
Hi, I setting up HAProxy 1.5.3. I obtained the RST randomly http response when verifying the following settings. State that contains the RST or would specification ## tcpdump result 05:31:17.738871 IP ${haproxy-host}.49167 ${Apache-host}.http: Flags [R.], seq 275, ack 269, win 149,

█♠♥♦♦♦

2014-08-01 Thread 胡灵君
U--haproxy---T-h--haproxy下午 04:26:51正衙法座,香木为之,加金饰,四足,堕角,其前小偃,织藤冒之。每车驾出幸,则使老内臣马上抱之,曰“驾头”。辇后曲盖谓之“筤”。两扇夹心,通谓之“扇筤”。皆绣,亦有销金者,即古之华盖也。

Re: HAProxy graceful restart old process not going away

2014-08-01 Thread Willy Tarreau
Hi Stefan, On Thu, Jul 24, 2014 at 03:32:30PM +0200, Stefan Majer wrote: Hi Willy, coming back to this old thread. We still have the problem that from time to time that after doing a # service haproxy reload which actually does # /usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg -D -p

Client timeout with chrome and html5 video

2014-08-01 Thread NublaII Lists
I have a strange and reproducible problem with Chrome and an html5 video player. The video starts playing and after 15-20 secods it stops with this error Failed to load resource: net::ERR_CONTENT_LENGTH_MISMATCH The same video plays perfectly on safari and firefox, windows and mac (don't have a

Re: Client timeout with chrome and html5 video

2014-08-01 Thread Lukas Tribus
Hi, I have a strange and reproducible problem with Chrome and an html5 video player. The video starts playing and after 15-20 secods it stops with this error Failed to load resource: net::ERR_CONTENT_LENGTH_MISMATCH The same video plays perfectly on safari and firefox, windows

Re: Client timeout with chrome and html5 video

2014-08-01 Thread NublaII Lists
I tried it and it happens again... neither nginx nor haproxy report an error... it's all on Chrome's side. The only safe way of fixing this is setting timeout client to a high value, like 60s or more, but I'm not sure that's something I want to leave on the config for good...

How to return 429 error code when limiting HTTP request rate

2014-08-01 Thread Zbyněk Vymazal
Hello, I'd like to ask for an advice how return custom HTTP error code when rate limit rule is triggered. I have sort of followed the configuration described here: http://blog.haproxy.com/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/ (Limiting the HTTP request rate)

RE: Client timeout with chrome and html5 video

2014-08-01 Thread Lukas Tribus
Hi, I tried it and it happens again... neither nginx nor haproxy report an error... it's all on Chrome's side. Then you didn't configure logging probably. Fix it, and post the exact log output when this happens. Lukas

Re: Client timeout with chrome and html5 video

2014-08-01 Thread NublaII Lists
My configuration is on the first email... anyway, the only lines that appear on /var/log/haproxy.log are: for chrome Aug 1 16:52:31 ritapavone haproxy[3671]: 79.152.236.x:53792 [01/Aug/2014:16:52:26.878] public static/statsrv1 0/0/0/0/5011 206 3838688 - - cD-- 0/0/0/0/0 0/0 GET

RE: Client timeout with chrome and html5 video

2014-08-01 Thread Lukas Tribus
Hi, My configuration is on the first email... anyway, the only lines that appear on /var/log/haproxy.log are: for chrome Aug 1 16:52:31 ritapavone haproxy[3671]: 79.152.236.x:53792 [01/Aug/2014:16:52:26.878] public static/statsrv1 0/0/0/0/5011 206 3838688 - - cD-- 0/0/0/0/0 0/0

Re: Client timeout with chrome and html5 video

2014-08-01 Thread NublaII Lists
Thank you Lukas, that is exactly what I was saying on my email. What I was asking is not necessarily a fix from haproxy (specially since it's not haproxy's but chrome's fault). I was interested in knowing if, besides setting timeout client to a high value, there are any other options for

RE: Client timeout with chrome and html5 video

2014-08-01 Thread Lukas Tribus
Hi, I was interested in knowing if, besides setting timeout client to a high value, there are any other options for mitigating this issue... Our production servers had timeout client 5000 and that showed intermittent problems, so we ended up changing it to timeout client 6.

Re: Is this in the specifications?(HTTP responses randomly getting RST)

2014-08-01 Thread Pavlos Parissis
On 01/08/2014 08:00 πμ, cloudpack 川原 洋平 wrote: Hi, I setting up HAProxy 1.5.3. I obtained the RST randomly http response when verifying the following settings. State that contains the RST or would specification ## tcpdump result 05:31:17.738871 IP ${haproxy-host}.49167

Re: Client certs on tcp and securing stats socket

2014-08-01 Thread Meyers, Donovan
Hi Conrad, Thanks for your excellent suggestion! I did a quick test and got the same results with https. I was able to connect with no client certificate, despite my config that should require one. I've moved on to other things, since it looks like I won't need this functionality after all.