Re: [PATCH] MINOR: cli: ability to set per-server maxconn

2015-10-28 Thread Willy Tarreau
On Tue, Oct 27, 2015 at 04:50:35PM -0500, Andrew Hayworth wrote: > Ah, thanks - I hadn't thought about the case where connections were > queued up. In my tests, I had a very low queue timeout. The code you > suggested seems to do the trick. Updated patch below. Applied, thanks. I fixed a minor ind

[LUA] Lua advanced documentation

2015-10-28 Thread Thierry FOURNIER
Hi List, I wrote a Lua advanced documentation. This explain the Lua integration in HAProxy, the reason of some choices. Some traps and Lua code with advanced comments. This doc is not terminated, but I want to release a first version. I will fill the missing points later. unfortunatelly I have s

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 2:18 AM, Baptiste wrote: > Ben, > > I found a couple of bugs: > #1 an incomplete end of processing when the queried hostname can't be > found in the response. This lead to the query loop you may have > observed. > #2 an error in the way we parse CNAME responses, leading to

Re: HA Proxy - packet capture functionality

2015-10-28 Thread Lukas Erlacher
Hi, On 10/27/2015 08:34 PM, Amol Kedar wrote: Hi Javier, yes tcpdump is always an option but my question is can tcpdump on eth0 won’t be unencrypted so what more can we get from it than what you already have? If Haproxy doesn't terminate the encryption there is nothing you can do in any cas

[SPAM] Ouvrez, vous allez adorer...

2015-10-28 Thread Monoprix Mode via capdecision
http://lb.enquete-en-or.com/r/?id=t2e412517,20680eb,2068298&p1=haproxy@formilux.org&p2=haproxy@formilux.org Signaler comme indésirable Pour visualiser ce message au format html,

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 10:15 AM, Ben Tisdall wrote: > > Thanks Baptiste, will get on this today. > Ok this in the test environment now and the "other" counter now increments in step with "valid", eg: Resolvers section aws nameserver aws_0: sent: 208 valid: 104 update: 0 cname: 0 cnam

DOC: deviceatlas

2015-10-28 Thread David Carlier
Hello, This is a simple diff to the main README for adding more DeviceAtlas's convertor / sample fetch use cases. Regards. From e584020d80f9f1e9878ca07b9df2a32a2d3e4492 Mon Sep 17 00:00:00 2001 From: David Carlier Date: Wed, 28 Oct 2015 11:08:15 + Subject: [PATCH] DOC: deviceatlas: more exam

RE: HA Proxy - packet capture functionality

2015-10-28 Thread Lukas Tribus
> If Haproxy doesn't terminate the encryption there is nothing you can do in > any case. > If it does, you can listen for the unencrypted traffic going between haproxy > and the > backend using tcpdump with appropriate filtering as well. Also, if you for whatever reason need to decrypt the traff

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
On Wed, Oct 28, 2015 at 11:36 AM, Ben Tisdall wrote: > On Wed, Oct 28, 2015 at 10:15 AM, Ben Tisdall > wrote: >> >> Thanks Baptiste, will get on this today. >> > > Ok this in the test environment now and the "other" counter now > increments in step with "valid", eg: > > Resolvers section aws >

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 1:55 PM, Baptiste wrote: > > Have you forced resolution to ipv4 only? > if not, could you give it a try? > Right, with "resolver-prefer ipv4": Resolvers section aws nameserver aws_0: sent: 11 valid: 11 update: 0 cname: 0 cname_error: 0 any_err: 0 nx: 0 t

RE: HA Proxy - packet capture functionality

2015-10-28 Thread Javier Torres
I was not. Thanks for the info! -Original Message- From: Baptiste [mailto:bed...@gmail.com] Sent: Tuesday, October 27, 2015 8:44 PM To: Javier Torres Cc: HAProxy Subject: Re: HA Proxy - packet capture functionality Hi Javier, Are you aware of HAProxy logs and its termination states? It s

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
Now, you can simply use whatever tool (ab, httperf, wrk, etc...) hosted on a third party VM to inject traffic on ELB IP directly. After a few minutes (less than 5), ELB service will be moved automatically to an other instance, leading IP to change. On HAProxy stat socket, you should see the 'update

[SPAM] nouvelle collection : 2 chemises achetees = 1 offerte

2015-10-28 Thread CafeCoton par capdecision
http://lb.le-meilleur-de-la-mode.fr/r/?id=t2e58d1ac,206864e,20792bf&p1=haproxy@formilux.org&p2=haproxy@formilux.org Signaler comme indésirable Pour visualiser ce message au forma

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 3:04 PM, Baptiste wrote: > Now, you can simply use whatever tool (ab, httperf, wrk, etc...) > hosted on a third party VM to inject traffic on ELB IP directly. > After a few minutes (less than 5), ELB service will be moved > automatically to an other instance, leading IP to

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
Great, thanks for confirming! Baptiste On Wed, Oct 28, 2015 at 4:13 PM, Ben Tisdall wrote: > On Wed, Oct 28, 2015 at 3:04 PM, Baptiste wrote: >> Now, you can simply use whatever tool (ab, httperf, wrk, etc...) >> hosted on a third party VM to inject traffic on ELB IP directly. >> After a few mi

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 4:29 PM, Baptiste wrote: > Great, thanks for confirming! > Thanks for getting this sorted out Baptiste! Any idea of when the fixes would be likely to be released and make it into the ppa? -- Ben

Complex TCP "stickyness" problem

2015-10-28 Thread Engelmann Florian
Hi list, I have got a complex "routing" problem and I am sure there is a solution with haproxy but the ring doesn't bell. The problem in this case is that all users of a customer have to work on the same application server (because of the data broadcast feature of the java application framework

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Jesse Hathaway
On Tue, Oct 27, 2015 at 8:18 PM, Baptiste wrote: > #2 an error in the way we parse CNAME responses, leading to return an > error when validating a CNAME (this triggers bug #1). How does your patch for this issue change the logic? It appears functionally the same to me.

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
Jesse On Wed, Oct 28, 2015 at 5:25 PM, Jesse Hathaway wrote: > On Tue, Oct 27, 2015 at 8:18 PM, Baptiste wrote: >> #2 an error in the way we parse CNAME responses, leading to return an >> error when validating a CNAME (this triggers bug #1). > > How does your patch for this issue change the logi

Re: Multiplexing multiple services behind one agent (feature suggestion; patch attached)

2015-10-28 Thread James Brown
Sorry for being thickheaded, Willy, but what's your decision here — do you want me to make it per-Backend instead of per-Server, or do you want to merge it as-is? I'm glad to defer completely to your judgement on this. On Thu, Oct 22, 2015 at 1:12 PM, Willy Tarreau wrote: > On Thu, Oct 22, 2015

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 6:00 PM, Baptiste wrote: > > Ben, could you apply the patch below instead of 0001: > > [snip] Sure, will report back in the morning. Thanks Jesse and Baptiste :) Ben

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Ben Tisdall
On Wed, Oct 28, 2015 at 6:28 PM, Ben Tisdall wrote: > On Wed, Oct 28, 2015 at 6:00 PM, Baptiste wrote: >> >> Ben, could you apply the patch below instead of 0001: >> >> [snip] That patch is proving problematic to apply, to save me guessing can you provide it as an attachment please.

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Jesse Hathaway
On Wed, Oct 28, 2015 at 12:00 PM, Baptiste wrote: > Good catch, forget about patch 1, It was 2AM in the morning when I > wrote it :'(... > I wanted to apply the same code as DNS_UPD_NO_IP_FOUND, and increment > the OTHER error. That is interesting, but I was asking about the second patch, 000

Re: [LUA] Lua advanced documentation

2015-10-28 Thread PiBa-NL
Op 28-10-2015 om 9:28 schreef Thierry FOURNIER: Hi List, I wrote a Lua advanced documentation. This explain the Lua integration in HAProxy, the reason of some choices. Some traps and Lua code with advanced comments. This doc is not terminated, but I want to release a first version. I will fill

1.6.1: Backend DNS Resolution Error

2015-10-28 Thread Susheel Jalali
Dear Baptiste, Ben and Jesse, We have been facing the same issue that HAProxy backend is not able to pull the right Web servers using our local DNS. We applied Baptiste’s updated patches to server.c and dns.c and re-installed with a clean make/make install. Still the same erroneous result. H

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
On Wed, Oct 28, 2015 at 6:39 PM, Ben Tisdall wrote: > On Wed, Oct 28, 2015 at 6:28 PM, Ben Tisdall wrote: >> On Wed, Oct 28, 2015 at 6:00 PM, Baptiste wrote: >>> >>> Ben, could you apply the patch below instead of 0001: >>> >>> [snip] > > That patch is proving problematic to apply, to save me gu

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

2015-10-28 Thread Baptiste
On Wed, Oct 28, 2015 at 7:04 PM, Jesse Hathaway wrote: > On Wed, Oct 28, 2015 at 12:00 PM, Baptiste wrote: >> Good catch, forget about patch 1, It was 2AM in the morning when I >> wrote it :'(... >> I wanted to apply the same code as DNS_UPD_NO_IP_FOUND, and increment >> the OTHER error. > >

Re: 1.6.1: Backend DNS Resolution Error

2015-10-28 Thread Baptiste
On Wed, Oct 28, 2015 at 9:23 PM, Susheel Jalali wrote: > Dear Baptiste, Ben and Jesse, > > We have been facing the same issue that HAProxy backend is not able to > pull the right Web servers using our local DNS. We applied Baptiste’s > updated patches to server.c and dns.c and re-installed with a

Re: stick tables and url_param + post headers - counter‏

2015-10-28 Thread Baptiste
On Sun, Oct 25, 2015 at 12:22 PM, Roland RoLaNd wrote: > > Hello, > > I am trying to rate limit requests depending on their specific identifier > which is sent either as a post header or a query string parameter. > > Below is my starting config (am i mistaken to be using this ? ) > > stick-table t

[SPAM] L'evidence pour votre retraite

2015-10-28 Thread Retraite - Service Public
http://lb.notre-reponse.fr/r/?id=t2e633589,207b6c6,207b4b1&p1=haproxy@formilux.org&p2=haproxy@formilux.org Signaler comme indésirable Pour visualiser ce message au format html,