Re: Configure Haproxy to dynamically set backend server

On Fri, 22 May 2015 19:06:59 + (UTC) Mrunmayi Dhume wrote: > Hello, > I am using haproxy-1.6 with Lua. I have a use-case where I want to set the > destination (backend server) very dynamically, based on certain layer 7 > information (I am trying to avoid updating haproxy configuration and m

Re: Configure Haproxy to dynamically set backend server

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 22/05/2015 09:06 μμ, Mrunmayi Dhume wrote: > Hello, > > I am using haproxy-1.6 with Lua. I have a use-case where I want to > set the destination (backend server) very dynamically, based on > certain layer 7 information (I am trying to avoid upd

Listening only server within backend

Hi the list In my backend I've many servers, and I'd like to add some that receive a copy of all the requests arriving to the backend. Of course haproxy won't reply to them after sending the request. I don't find any option for 'server' in section 5 of the docs, that will allow me to define such '

2015 latest professional police camera

DearSirorMadam,Hopethingsarewell=withyou.Bytheway,Wesupp=ly oneofour policecameraswhichsellespeciallywellfor=yourreference.Everymonth ,weallexportover5pcstoUSA&=nbsp;and Europe.,welcomeyourinquiries ,thanks.&nbs=p;OEM,ODMareavaila=ble. ModelNo=.:SM-EH05 = = Welook=forwardtohearingfrom

RE: Listening only server within backend

> Hi the list > > In my backend I've many servers, and I'd like to add some that receive > a copy of all the requests arriving to the backend. Of course haproxy > won't reply to them after sending the request. > I don't find any option for 'server' in section 5 of the docs, that > will allow

Re: A few thoughts on Haproxy and weakdh/logjam

Hi, On 05/23/2015 08:47 AM, Willy Tarreau wrote: > Do you have any idea about the ratio of clients (on the net) which don't > support ECDHE right now but support DHE ? Basically, by totally removing DHE, we would be losing forward secrecy for: - Java <= 6 ; - OpenSSL <= 1.0.0 ; - Android <= 3. N

DOC: set-log-level in Logging section preamble

As best I can tell, no mention is made of "set-log-level" in the Logging [Section 8] of the doc. Something akin to the following in the doc would have saved a good chunk of time/angst in addressing a logging issue I encountered : diff --git a/doc/configuration.txt b/doc/configuration.txt index 9

Re: A few thoughts on Haproxy and weakdh/logjam

I think the new setting for a global dhparam file is a great idea. On May 26, 2015 11:12 AM, "Remi Gacogne" wrote: > Hi, > > On 05/23/2015 08:47 AM, Willy Tarreau wrote: > > Do you have any idea about the ratio of clients (on the net) which don't > > support ECDHE right now but support DHE ? > >

Haproxy with Wildcard Cert HTTPS/HSTS Termination and HTTPS on the Backend

Hi Everyone, I'm trying to set up an instance of haproxy v1.5.2 that will receive an SSL connection and then proxy that connection back to a cluster of webservers over HTTPS/HSTS like so: client==HTTPS/HSTS==>haproxy==HTTPS==>apache webservers I have a configuration that I believe should work

Re: A few thoughts on Haproxy and weakdh/logjam

Hi Rémi, On Tue, May 26, 2015 at 05:11:36PM +0200, Remi Gacogne wrote: > Hi, > > On 05/23/2015 08:47 AM, Willy Tarreau wrote: > > Do you have any idea about the ratio of clients (on the net) which don't > > support ECDHE right now but support DHE ? > > Basically, by totally removing DHE, we woul

Re: Configure Haproxy to dynamically set backend server

Thanks for your detailed reply Thierry. While this approach would solve the aspect of choosing the backend dynamically we still need to explicitly define each backend server separately in the haproxy config file. Our use-case involves having 100+ backends and we would prefer not to complicate th

Re: Haproxy with Wildcard Cert HTTPS/HSTS Termination and HTTPS on the Backend

Hmmm... Yes, I have seen that. I have tried that exactly. haproxy returns the 502 Bad Gateway error. Is there anyway to dump the headers that are passing between haproxy and apache so that I can see what is missing? With the same config switched to tcpmode, everything works. In https terminated mod

RE: Haproxy with Wildcard Cert HTTPS/HSTS Termination and HTTPS on the Backend

Hi Werner, > # Server definitions > server devhttps1 xxx.xxx.xxx.xxx:443 weight 1 check You need to tell haproxy to connect to your backend with SSL, otherwise it will connect in plain HTTP on port 443. To do this, just add the ssl keyword to your server line: server devhttps1 xxx.xxx.xxx.xxx:4

Sporadic 503 errors in logs

Hi guys, I've noticed a lot of these kind of errors lately: May 26 23:03:32 localhost haproxy[22628]: :50399 [26/May/2015:23:03:27.909] / 4344/0/-1/-1/4345 503 212 - - CCNN 271/75/13/4/0 0/0 {static.example.com|Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom