Re: Is this in the specifications?(HTTP responses randomly getting RST)

On Fri, Aug 01, 2014 at 10:00:18PM +0200, Pavlos Parissis wrote: > On 01/08/2014 08:00 , cloudpack ??? wrote: > > Hi, > > > > I setting up HAProxy 1.5.3. > > I obtained the RST randomly http response when verifying the following > > settings. > > State that contains the RST or woul

Re: [PATCH] Remove more global state from systemd wrapper

Hi Conrad, On Thu, Aug 21, 2014 at 07:52:11AM +0200, Conrad Hoffmann wrote: > Hi, > > this is the next step in my ongoing quest to give some lovin' to the > systemd wrapper. > > It's against 1.6, I guess there is no reason to backport this to 1.5. > > Does it look acceptable? Seems fine to me,

Re: [PATCH] Re: timeout tarpit ignored in 1.5

On Fri, Aug 22, 2014 at 10:40:18AM -0700, Bryan Talbot wrote: > I tested the head of 1.5 and patch you backported there fixes the issue for > me. Thanks Bryan for confirming! Willy

Re: [PATCH] New Bit in Proxy Protocol V2

On Sat, Aug 23, 2014 at 07:32:42AM +0200, Willy Tarreau wrote: > Ah yes indeed. I saw that you changed ssl_sock_get_cert_used() with > *_sess() and used to set the _SESS(=4) flag but the code itself which > tests the flag on the connection still sets the same bit (2), so indeed > that's fine. And

Re: [PATCH] New Bit in Proxy Protocol V2

Hi Dave, On Thu, Aug 21, 2014 at 05:22:37PM -0400, Dave McCowan wrote: > On Tue, Aug 12, 2014 at 1:11 AM, Willy Tarreau wrote: > > > Hi Dave, > > > > On Mon, Aug 11, 2014 at 10:28:15AM -0400, Dave McCowan wrote: > > > Hi Willy-- > > >I see the value of have both session and connection level

Re: Per-client simultaneous connection limiting with enqueueing (not with 503 rejecting)

...to clarify the question: frontend http mode http bind *: stick-table type ip size 100k expire 1000s store conn_cur tcp-request inspect-delay 1000s tcp-request content track-sc1 src tcp-request content accept if { src_conn_cur le 1 } tcp-request content accept if

Questions on ACLs

First, nice work on 1.5, having ssl termination sure makes ssl setups much easier when needing stickiness. I have a little tougher setup using 1.5 and am at the moment stuck after spend a full day on it. I am running version 1.5.3 I am using ssl on the frontend and also sending ssl to the backend

Devenez propriétaire grâce à vos impôts et sans apport

Title: Guide Duflot Cliquez ici pour lire cet e-mail dans votre navigateur.Désinscrivez vous ici

hdr_val does not work properly with very large integers

I hope this is the right place to report a bug. With the rule http-request deny if { hdr_cnt(content-length) gt 0 } { hdr_val(content-length) gt 33554432 } # 32M in my haproxy.cfg, the following request gets 403 correctly: curl -v -H"Content-Length: 33554433" localhost:8080/internal/haprox

Per-client simultaneous connection limiting with enqueueing (not with 503 rejecting)

Hello. I need to limit the number of simultaneous HTTP requests PER CLIENT (e.g. no more than 5 HTTP requests in progress per client); but DO NOT REJECT exceeded request, just enqueue them until the current number of concurrent requests from this client drops below 5. So, assume I run ab -n 1000

Re: [PATCH] Re: timeout tarpit ignored in 1.5

I tested the head of 1.5 and patch you backported there fixes the issue for me. Thanks! -Bryan On Thu, Aug 21, 2014 at 10:09 PM, Thierry FOURNIER wrote: > Hi, > > Thanks for the analysis. In fact, the patch reset the tarpit timeout > before exiting the function. > > I join a fix. > > Thierry

RE: TCP Port Forwarding

Hi, > - Can haproxy be use as a tcp proxy to forward traffic to many backend > server without any load balancing? You can certainly configure it to just failover from one server to another, is that what you mean? > - Just perform as tcp forwarding to many clients with no balancing > algorithms

Re: agent-check server in DRAIN state when the weight is not 100%

Smana, I don't get that result on my system, which build are you running? [root@lbmaster ~]# echo "show stat" | socat unix-connect:/var/run/haproxy.stat stdio # pxname,svname,qcur,qmax,scur,smax,slim,stot,bin,bout,dreq,dresp,ereq,econ,eresp,wretr,wredis,status,weight,act,bck,chkfail,chkdown,lastc

Check other server for missing content when 404?

Hi All. Just a quick question (i think) >From time to time, our load balanced servers from a content perspective will >become out of sync. So for example, images may be present on one server but >have not been syncd to the other. Is there a way that I can configure haproxy to check the alternate

agent-check server in DRAIN state when the weight is not 100%

Hello all, Maybe i misunderstood how the agent-check works. Actually when i have a weight other than "100%" the server switches to "DRAIN" state. In my current setup i just have a unique server working. echo 'show stat' | socat /var/run/haproxy/socket1 stdio | grep ^bk_global bk_global,cache1,0,

TCP Port Forwarding

Hi : - Can haproxy be use as a tcp proxy to forward traffic to many backend server without any load balancing ? - Just perform as tcp forwarding to many clients with no balancing algorithms. Thank you. BR//TK

Re: 1.5.3: Potential issue with request mangling

On Thu, Aug 21, 2014 at 8:20 PM, Jeff Buchbinder wrote: > I have been experiencing an odd phenomena which appears to indicate that > haproxy is mangling certain requests with version 1.5.3. It looks as though > '%' is being reencoded as '%25', such that encodings like '%3D' are being > reencode