Re: rewrite header http:// to https://

2015-03-30 Thread Abdelouahed Haitoute
Hello Lukas, Based on the haproxy documentation http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-reqirep I have changed the configuration. Beside changing rspirep, I saw the traffic in wireshark and saw “GET

Re: ldap-check with Active Directory

2015-03-30 Thread Baptiste
you should believe it :) On Mon, Mar 30, 2015 at 11:34 PM, Neil - HAProxy List wrote: > Hello > > Thanks so much. That worked well, I now get > L7OK/0 in 0ms > not sure I believe the 0ms but maybe I should > > Thanks again, > > Neil > > On 30 March 2015 at 22:14, Baptiste wrote: >> >> On Mon, Ma

Re: ldap-check with Active Directory

2015-03-30 Thread Neil - HAProxy List
Hello Thanks so much. That worked well, I now get *L7OK/0 in 0ms* not sure I believe the 0ms but maybe I should Thanks again, Neil On 30 March 2015 at 22:14, Baptiste wrote: > On Mon, Mar 30, 2015 at 10:33 PM, Neil - HAProxy List > wrote: > > Hello > > > > I'm trying to use ldap-check with

Re: using a fetcher in wrong context, performance tip

2015-03-30 Thread Baptiste
On Mon, Mar 30, 2015 at 10:11 PM, Pavlos Parissis wrote: > Hi all, > > During a stress test I discovered a drop of 5% performance at rate of > 380K req/s when the following 3 statements were added in a frontend > where HTTPS is not used > > http-request add-header X-Cipher-Name %sslc > htt

Re: ldap-check with Active Directory

2015-03-30 Thread Baptiste
On Mon, Mar 30, 2015 at 10:33 PM, Neil - HAProxy List wrote: > Hello > > I'm trying to use ldap-check with active directory and the response active > directory gives is not one ldap-check is happy to accept > > when I give a 389 directory backend ldap server all is well, when I use AD I > get 'Not

[SPAM] Hot Sale Smart Watch,simliar with MOTO360

2015-03-30 Thread David
Title: Dear Friend Dear Friend, How are you?   As the Apple Watch launching,smart watch is becoming very hot product. We have several hot sale smart watches for your reference,such as D360,round circle,similar with MOTO 360. More details,pls contact with me directly.thanks.

How can I secure multiple haproxy ssl certs at rest?

2015-03-30 Thread Kirsten Stewart
To not fill this up with text, I'll link directly to my post. Surely someone else has run into this problem before. http://stackoverflow.com/questions/29354110/how-to-protect-haproxy-ssl-certificates-as-a-service

ldap-check with Active Directory

2015-03-30 Thread Neil - HAProxy List
Hello I'm trying to use ldap-check with active directory and the response active directory gives is not one ldap-check is happy to accept when I give a 389 directory backend ldap server all is well, when I use AD I get 'Not LDAPv3 protocol' I've done a little poking about and found that

Re: [haproxy]: Performance of haproxy-to-4-nginx vs direct-to-nginx

2015-03-30 Thread Pavlos Parissis
On 30/03/2015 07:13 πμ, Krishna Kumar Unnikrishnan (Engineering) wrote: > Hi all, > > I am testing haproxy as follows: > > System1: 24 Intel(R) Xeon(R) CPU E5-2697 v3 @ 2.60GHz, 64 GB. This system > is running 3.19.0 kernel, and hosts the following servers: > 1. nginx1 server - cpu 1-

using a fetcher in wrong context, performance tip

2015-03-30 Thread Pavlos Parissis
Hi all, During a stress test I discovered a drop of 5% performance at rate of 380K req/s when the following 3 statements were added in a frontend where HTTPS is not used http-request add-header X-Cipher-Name %sslc http-request add-header X-Cipher-Version %sslv http-request add-header

RE: [SPAM] jBoss thread count issue while upgrading from 1.5dev21 to 1.5.11

2015-03-30 Thread Lukas Tribus
Hi Willy, >> Put "option http-tunnel" in your default section, this will restore pre >> 1.5dev22 >> behavior. Read more about this here: >> http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20http-tunnel > > Hmmm no, there's option forceclose, so the two are supposed to close. >

RE: rewrite header http:// to https://

2015-03-30 Thread Lukas Tribus
> I have the following configuration: > > frontend http1 127.0.0.10:1080 > rspirep ^Location:\ http://(.*):80(.*) Location:\ https://\1:443\2 > rspirep ^Location:\ http://(.*) Location:\ https://\1 > default_backend ssl1 > > backend ssl1 > server sslserver 192.168.68.100:443 ssl verify requ

Re: rewrite header http:// to https://

2015-03-30 Thread Abdelouahed Haitoute
By the way, just to be complete. The HTTP-traffic is proxied from a squid proxy server. Abdelouahed > Op 30 mrt. 2015, om 16:26 heeft Abdelouahed Haitoute het > volgende geschreven: > > Hello, > > I’m trying to rewrite the HTTP header, rewriting http to https. Using the > following article

rewrite header http:// to https://

2015-03-30 Thread Abdelouahed Haitoute
Hello, I’m trying to rewrite the HTTP header, rewriting http to https. Using the following article http://blog.haproxy.com/2013/02/26/ssl-offloading-impact-on-web-applications/ . I have the following configuration

Re: [SPAM] jBoss thread count issue while upgrading from 1.5dev21 to 1.5.11

2015-03-30 Thread Willy Tarreau
Hi Lukas, On Mon, Mar 30, 2015 at 02:55:32PM +0200, Lukas Tribus wrote: > Hi Sarvesh, > > > > Dear Team,  > >  > > We upgraded my haproxy from 1.5dev21 to 1.5.11 stable version with same  > > configuration. At the backend, we are using jBoss.  > > As soon as we upgraded, we encountered serious i

RE: [SPAM] jBoss thread count issue while upgrading from 1.5dev21 to 1.5.11

2015-03-30 Thread Lukas Tribus
Hi Sarvesh, > Dear Team,  >  > We upgraded my haproxy from 1.5dev21 to 1.5.11 stable version with same  > configuration. At the backend, we are using jBoss.  > As soon as we upgraded, we encountered serious issue regarding jBoss  > thread counts. It has been increased tremendously.  > After rollb

[SPAM] jBoss thread count issue while upgrading from 1.5dev21 to 1.5.11

2015-03-30 Thread Sarvesh padwal
Dear Team, We upgraded myhaproxyfrom 1.5dev21 to 1.5.11 stable version with same configuration. At the backend, we are using jBoss. As soon as we upgraded, we encountered serious issue regarding jBoss thread counts. It has been increased tremendously. After rollback to 1.5dev21, everything wor