[PATCH] DOC: fix "needed" typo

2016-04-01 Thread Thiago Farina
While at it use "You" instead of "They" as in the context it seems to make more sense to refer to "you", as it is you that are going to be running the command, there is no "they". Signed-off-by: Thiago Farina --- CONTRIBUTING |4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --g

[PATCH] BUG/MINOR: dumpstats: fix write to global chunk

2016-04-01 Thread Conrad Hoffmann
Hi, there is a small bug in dumpstats.c, stats_dump_fields_csv(). One of the writes is to the global `trash` chunk, which happens to be the right one, but it should be to what gets passed in as argument (out). Not even sure this was worth a patch, but it is attached if you like. Otherwise, feel f

Re: Q: about HTTP/2

2016-04-01 Thread Shawn Heisey
On 4/1/2016 4:25 AM, Baptiste wrote: > Do you guys, on the ML, really need HTTP/2? If so what's your deadline?? Need? Perhaps not. Want? Very much so. Deadline: ASAP, but don't be in a hurry. I definitely prefer to have a battle-tested solution that takes a year than a lousy implementation d

Re: ssl offloading

2016-04-01 Thread Andrew Hayworth
Hi there - Have you considered HAProxy in multiprocess mode? You could have a frontend spread across multiple threads that terminates SSL. We're experimenting with such a design here. On Fri, Apr 1, 2016 at 5:31 AM, Gerd Mueller wrote: > Ok sounds good. Thanks for the input. > > Gerd > > --

Re: Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Baptiste. Am 01-04-2016 12:25, schrieb Baptiste: On Fri, Apr 1, 2016 at 12:18 PM, Aleksandar Lazic wrote: Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and plans for HTTP/2. Do you

Re: Q: about HTTP/2

2016-04-01 Thread Craig Craig
Hi, > Do you guys, on the ML, really need HTTP/2? > If so what's your deadline?? Yea, we will definitively need it, our customers started asking about it two months ago. Management will probably start to worry about pissing off premium managed hosting customers if they keep asking and we can't ad

Re: ssl offloading

2016-04-01 Thread Gerd Mueller
Ok sounds good. Thanks for the input. Gerd Weitergeleitete Nachricht Von: Vincent Bernat An: Conrad Hoffmann Kopie: Gerd Mueller , haproxy@formilux.org Betreff: Re: ssl offloading Datum: Fri, 1 Apr 2016 11:29:16 +0200  ❦  1 avril 2016 11:11 +0200, Conrad Hoffmann  : > > I

Re: Q: about HTTP/2

2016-04-01 Thread Andrew Smalley
Hello Baptiste, We have been asked questions about HTTP/2 but it does not seem to be a block when we say its not fully supported in Layer7 Regards Andrew Smalley Loadbalancer.org http://www.loadbalancer.org On 1 April 2016 at 11:25, Baptiste wrote: > On Fri, Apr 1, 2016 at 12:18 PM, Aleksan

Re: Q: about HTTP/2

2016-04-01 Thread Baptiste
On Fri, Apr 1, 2016 at 12:18 PM, Aleksandar Lazic wrote: > Hi Willy & other core devs/pms. > > I know that HTTP/2 is on the road-map but not ready yet. > > Would you be so kind and share some of your thoughts, stats and plans for > HTTP/2. > > Thank you very much. > > Best regards > Aleks > Do y

Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and plans for HTTP/2. Thank you very much. Best regards Aleks

RE: Increased CPU usage after upgrading 1.5.15 to 1.5.16

2016-04-01 Thread Lukas Tribus
> However, if I configure multiple listening sockets, to take advantage > of SO_REUSEPORT (and that is exactly what I have on my production > haproxy 1.5): > bind :443 process 1 ssl alpn http/1.1 crt /etc/ssl/snakeoil.pem > bind :443 process 2 ssl alpn http/1.1 crt /etc/ssl/snakeoil.pem > bind :443

Re: ssl offloading

2016-04-01 Thread Vincent Bernat
❦ 1 avril 2016 11:11 +0200, Conrad Hoffmann  : > I can't really back this up with reliable numbers, but a company I once > worked for experimented with such hardware. The outcome was, and I would > still always recommend this today, to rather throw more regular hardware at > the problem. Modern

peers synchronization doesn't work on 1.6

2016-04-01 Thread Marko Bencek
Hello, I have Haproxy 1.5 in production with peers which synchronize properly. I have been testing version 1.6, but can't get peers to synchronize. As a template for my lab I used example from the official documentation (https://cbonte.github.io/haproxy-dconv/configuration-1.6.html#3.5-peer).

Re: ssl offloading

2016-04-01 Thread Conrad Hoffmann
I can't really back this up with reliable numbers, but a company I once worked for experimented with such hardware. The outcome was, and I would still always recommend this today, to rather throw more regular hardware at the problem. Modern processors have a lot special instructions specifically fo

Re: ssl offloading

2016-04-01 Thread Gerd Mueller
We are experiencing 100% cpu load by this specific haproxy thread during huge ssl load. With haproxy .4 we first used stunnel, than apache with mod_ssl. I think haproxy with ssl performance much better than the other 2 but I am thinking about offloading to a specific ssl device. Does anybody kno