DDoS Mitigtation

2014-08-28 Thread Viet Nguyen Chan
Hi all, I'm trying to use HAProxy 1.5.3 with the technique in article http://blog.haproxy.com/2012/07/03/http-request-flood-mitigation/ for mitigating HTTP flood, this is (a part of) my config : frontend ft_waf ... stick-table type ip size 1m expire 10s store gpc0,http_req_rate(10s) tcp-request

Re: DDoS Mitigtation

2014-08-28 Thread Baptiste
On Thu, Aug 28, 2014 at 11:23 AM, Viet Nguyen Chan viet...@gmail.com wrote: Hi all, I'm trying to use HAProxy 1.5.3 with the technique in article http://blog.haproxy.com/2012/07/03/http-request-flood-mitigation/ for mitigating HTTP flood, this is (a part of) my config : frontend ft_waf ...

Re: Busy Poll Support

2014-08-28 Thread Willy Tarreau
Hi Ben, On Wed, Aug 27, 2014 at 06:03:54PM -0700, Ben Burkert wrote: Hello, The 3.11 release of the Linux kernel added a new feature for low latency network polling. Using the SO_BUSY_POLL socket option, an application can enable busy polling. This instructs the kernel to poll the network

Re: DDoS Mitigtation

2014-08-28 Thread Viet Nguyen Chan
Great, It works like a charm. Thank you so much :D Best Regards, 2014-08-28 16:41 GMT+07:00 Baptiste bed...@gmail.com: On Thu, Aug 28, 2014 at 11:23 AM, Viet Nguyen Chan viet...@gmail.com wrote: Hi all, I'm trying to use HAProxy 1.5.3 with the technique in article

RE: Application Persistence with WebSockets

2014-08-28 Thread Ryan Brock
I can do it. I should learn the process for submitting changes anyway. I'll base it on 1.6. Thanks for the help. Really appreciate it. - Ryan On Aug 28, 2014 7:18 AM, Lukas Tribus luky...@hotmail.com wrote: Hi Willy, I think that experimenting with (txn-status 200 txn-status != 101)

Re: Application Persistence with WebSockets

2014-08-28 Thread Willy Tarreau
On Thu, Aug 28, 2014 at 07:25:07AM -0500, Ryan Brock wrote: I can do it. I should learn the process for submitting changes anyway. I'll base it on 1.6. Thanks for the help. Really appreciate it. Thanks Ryan. There's nothing fundamental in the way to submit changes. If you want to ensure

Get upto 18.8% discount on Health Insurance!

2014-08-28 Thread CignaTTK Health
If you're having trouble viewing this email, please click here.       With our comprehensive health insurance

Re: ssl nbproc 1 and chrome

2014-08-28 Thread Lukas Tribus
Hi Jarno, I'm testing ssl offloading with nbproc 1, and I'm having a (random?) problems with chrome. (This is could related to chrome 408 errors (http://blog.haproxy.com/2014/05/26/haproxy-and-http-errors-408-in-chrome/)). Note that the 408 bug should be fixed in Chrome 37, which was

Re: ssl nbproc 1 and chrome

2014-08-28 Thread Jarno Huuskonen
Hi, On Thu, Aug 28, Lukas Tribus wrote: Hi Jarno, I'm testing ssl offloading with nbproc 1, and I'm having a (random?) problems with chrome. (This is could related to chrome 408 errors (http://blog.haproxy.com/2014/05/26/haproxy-and-http-errors-408-in-chrome/)). Note that the

Re: Busy Poll Support

2014-08-28 Thread Ben Burkert
OK, thanks for the pointers Willy. On Thu, Aug 28, 2014 at 3:13 AM, Willy Tarreau w...@1wt.eu wrote: Hi Ben, On Wed, Aug 27, 2014 at 06:03:54PM -0700, Ben Burkert wrote: Hello, The 3.11 release of the Linux kernel added a new feature for low latency network polling. Using the SO_BUSY_POLL

Can you balance-out service-checks better?

2014-08-28 Thread Rainer Duffner
Hi, we will put haproxy in front of a Zimbra infrastructure (which we have split-up, so that there is a „front end“, with pop, imap, smtp and a „back end“, where the mail sits). I have too haproxy-servers (active/standby via CARP) that are checking the front-ends. I check: - smtp - smtps

Re: Can you balance-out service-checks better?

2014-08-28 Thread Baptiste
On Thu, Aug 28, 2014 at 10:31 PM, Rainer Duffner rai...@ultra-secure.de wrote: Hi, we will put haproxy in front of a Zimbra infrastructure (which we have split-up, so that there is a front end, with pop, imap, smtp and a back end, where the mail sits). I have too haproxy-servers

Re: Can you balance-out service-checks better?

2014-08-28 Thread Rainer Duffner
Am 28.08.2014 um 22:41 schrieb Baptiste bed...@gmail.com: Hi, maybe you could share your HAProxy configuration :) By default, HAProxy tests a service every 3s, which is fine. It just does a tcp connect, so nothing complicated for your server to handle. Since we switched to

Re: Can you balance-out service-checks better?

2014-08-28 Thread Baptiste
On Thu, Aug 28, 2014 at 10:51 PM, Rainer Duffner rai...@ultra-secure.de wrote: Am 28.08.2014 um 22:41 schrieb Baptiste bed...@gmail.com: Hi, maybe you could share your HAProxy configuration :) By default, HAProxy tests a service every 3s, which is fine. It just does a tcp connect, so

Re: Can you balance-out service-checks better?

2014-08-28 Thread Rainer Duffner
Am 28.08.2014 um 23:21 schrieb Baptiste bed...@gmail.com: Ok, I would create a monitoring backend, such as below: Hey, thanks a lot! I will try this and report back. Best Regards, Rainer

Re: error when start haproxy with init script

2014-08-28 Thread Viet Nguyen Chan
Hi Daniel , Yup, I have used the init.haproxy but it doesn't include $ROOT/sbin/init.d/default. Anyway, I switched to haproxy.init and it's ok now. Thank you so much. Best Regards, 2014-08-28 22:34 GMT+07:00 Daniel Dubovik ddubo...@godaddy.com: Hey there! There are three different init

[PATCH] MEDIUM: enable low latency polling on systems which support it

2014-08-28 Thread Ben Burkert
Hi all, I've started a patch to enable busy poll support for listener sockets. It can be enabled by adding busy-poll in the bind line. For systems that don't define SO_BUSY_POLL, building with the USE flag USE_BPS is required. I built tested this on a ubuntu trusty machine (3.13.0 kernel) and