Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Willy Tarreau
Hi Michael, On Tue, Apr 12, 2016 at 08:12:48PM -0400, Michael Ezzell wrote: > On Apr 12, 2016 8:09 AM, "Willy Tarreau" wrote: > > > > > I learned it 18 years ago when QNX was shipping a fully working OS and > browser > > on a single diskette. The browser used to connect to

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Willy Tarreau
On Wed, Apr 13, 2016 at 12:37:37AM +0200, Daniel Schneller wrote: > > > On 12.04.2016, at 14:07, Willy Tarreau wrote: > > > >> I will at least provide a documentation patch then, soon. > > > > OK. > > As promised, a few words, hopefully clarifying things in the docs. That's very

TLS+PSK with HAProxy

2016-04-12 Thread Roshan Pradeep
Hi Could someone please shed some lights how to configure HAProxy to use TLS+PSK? Thanks Roshan -- This communication contains information which is confidential and the copyright of Whispir or a third party. If you have received this email in error please notify us by return email or

Re: Multiple front ends listening to the same address/port -- want a config error

2016-04-12 Thread Dennis Jacobfeuerborn
On 12.04.2016 21:11, Baptiste wrote: > On Tue, Apr 12, 2016 at 7:39 PM, Shawn Heisey wrote: >> I copied a front end to set up a new service on my haproxy install. I >> changed the name of the front end, but forgot to change the port number >> on the "bind" option. >> >>

Votre coupon pour 1 mois gratuit de lentilles progressives !

2016-04-12 Thread lucie
Cliquez ici si ce message ne s'affiche pas correctement

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Michael Ezzell
On Apr 12, 2016 8:09 AM, "Willy Tarreau" wrote: > > I learned it 18 years ago when QNX was shipping a fully working OS and browser > on a single diskette. The browser used to connect to http://127.1/ and since > then I don't think I have ever typed 127.0.0.1 anymore. Same for most

Translation and Advertorial marketing services

2016-04-12 Thread John (Etrans, HK)
 Dear Friend,It's been a long time not to contact you.We can provide the services for many language pairs:Simplified Chinese;Traditional Chinese; Japanese; Korean; Thai; Indonesian; Vietnamese; Malay; Tagalog; Vietnamese; ItalianFrench; German; Spanish;

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Daniel Schneller
On 12.04.2016, at 14:07, Willy Tarreau wrote:I will at least provide a documentation patch then, soon.OK.As promised, a few words, hopefully clarifying things in the docs. 0001-DOC-Clarify-IPv4-address-mask-notation-rules.patch Description: Binary data Cheers,Daniel

[ANNOUNCE] haproxy-1.5.17

2016-04-12 Thread Willy Tarreau
Hi, As planned, I've just released HAProxy 1.5.17 which fixes the CPU usage regression introduced in 1.5.16 after improperly fixing the buffer space calculation code. It also fixes another bug impacting header captures when there are exactly MAX_HDR_HISTORY headers captured (10 by default), in

Re: Multiple front ends listening to the same address/port -- want a config error

2016-04-12 Thread Shawn Heisey
On 4/12/2016 1:11 PM, Baptiste wrote: > This is not an error, this type of configuration is valid. You should > write a script which check this on your own. I know it's not a config error, and I would not want effective behavior in any current versions to be changed. The mistake was mine, not

Re: Multiple front ends listening to the same address/port -- want a config error

2016-04-12 Thread Baptiste
On Tue, Apr 12, 2016 at 7:39 PM, Shawn Heisey wrote: > I copied a front end to set up a new service on my haproxy install. I > changed the name of the front end, but forgot to change the port number > on the "bind" option. > > Haproxy didn't complain about this

Multiple front ends listening to the same address/port -- want a config error

2016-04-12 Thread Shawn Heisey
I copied a front end to set up a new service on my haproxy install. I changed the name of the front end, but forgot to change the port number on the "bind" option. Haproxy didn't complain about this configuration when I tested for validity, so I didn't realize I'd made a mistake until the

[SPAM] compressionsolution

2016-04-12 Thread jack
Dear Sirs, We are a professional Compression Stocking/NURSE SOCKS OEM/ODM Manufacturer in Taiwan with 20 years experiences. We specialized in manufacturing and designing all types of stockings/supports for Medical & Sports. Please see attachment for some of our representative

unsubscribe

2016-04-12 Thread bala bhaskar
unsubscribe

Re: Increased CPU usage after upgrading 1.5.15 to 1.5.16

2016-04-12 Thread Willy Tarreau
Hi Lukas, On Tue, Apr 12, 2016 at 02:09:29PM +0200, Lukas Tribus wrote: > Jokes aside, what troubles me here is that if it wouldn't be for 1.5, we > would probably not have found this bug at all. Then it would not have existed at all until we found the case where buffer filling was again

Re: Increased CPU usage after upgrading 1.5.15 to 1.5.16

2016-04-12 Thread Lukas Tribus
Hi, Am 11.04.2016 um 23:20 schrieb Willy Tarreau: Excellent, thanks very much for confirming! I feel like I'm not completely obsolete yet if I can still spot such an issue by reading the code then write the reproducer :-) Nah, you're the buffer and polling man, you will never be obsolete :)

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Willy Tarreau
On Tue, Apr 12, 2016 at 02:02:14PM +0200, Vincent Bernat wrote: > ??? 12 avril 2016 12:08 +0200, Willy Tarreau  : > > >> > With your change it's fine on my side so I guess it's version agnostic. > >> > We > >> > can merge this one if you want. > >> > >> Yes, I am totally fine with

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Willy Tarreau
Hi Daniel, On Tue, Apr 12, 2016 at 01:47:25PM +0200, Daniel Schneller wrote: > Hi Willy! > > Thanks for looking into this. As mentioned in an earlier post I don???t have > any relevant C skills (but have been writing Java other languages); but still > I went into the code, telling myself ???how

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Vincent Bernat
❦ 12 avril 2016 12:08 +0200, Willy Tarreau  : >> > With your change it's fine on my side so I guess it's version agnostic. We >> > can merge this one if you want. >> >> Yes, I am totally fine with it. :) > > OK merged now. I gues you'd like it backported as well to ease your >

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Daniel Schneller
Hi Willy! Thanks for looking into this. As mentioned in an earlier post I don’t have any relevant C skills (but have been writing Java other languages); but still I went into the code, telling myself “how hard could it be to add a warning for less than three dots with a mask”. I quickly

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Vincent Bernat
❦ 12 avril 2016 11:43 +0200, Willy Tarreau  : >> I don't understand, because for me, those rules at the top were masked >> by, for example, "!/contrib". Maybe it's a matter of git version? I am >> using 2.8.0.rc3. > > Possible indeed. I have 1.7.12.1 here, and 2.8 at home (which I

Re: CIDR Notation in ACL -- silent failure

2016-04-12 Thread Willy Tarreau
Hi guys, On Sat, Apr 09, 2016 at 03:38:39PM +0200, Pavlos Parissis wrote: > On 09/04/2016 02:59 , Daniel Schneller wrote: > > Hi Pavlos! > > > >> On 09.04.2016, at 11:39, Pavlos Parissis > >> wrote: > >> > >> On 08/04/2016 11:59 , Daniel Schneller wrote: >

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Willy Tarreau
On Tue, Apr 12, 2016 at 10:52:42AM +0200, Vincent Bernat wrote: > I don't understand, because for me, those rules at the top were masked > by, for example, "!/contrib". Maybe it's a matter of git version? I am > using 2.8.0.rc3. Possible indeed. I have 1.7.12.1 here, and 2.8 at home (which I use

Re: [PATCH 2/2] BUG/MEDIUM: dns: fix alignment issue when building DNS queries

2016-04-12 Thread Willy Tarreau
On Tue, Apr 12, 2016 at 11:00:17AM +0200, Vincent Bernat wrote: > ??? 12 avril 2016 10:38 +0200, Willy Tarreau  : > > > BTW, armv5 is very handy to test alignment. By default it does crap > > (silent read of the wrong word) but you can configure it to fault or > > to emulate the

Re: Patch documentation 1.5.x

2016-04-12 Thread Willy Tarreau
Hi Coen, On Mon, Apr 11, 2016 at 11:33:49AM +0200, Coen Rosdorff wrote: > Hi, > > There is small discrepancy in the documentation for version 1..5.x. > req.uri is used where it should be capture.req.uri. > Also no scheme is used resulting in a redirect loop. Thanks. Part of it was already fixed

Re: [PATCH 4/4]: CLEANUP: proto_uxst: initialize socket before setting.

2016-04-12 Thread Willy Tarreau
On Fri, Apr 08, 2016 at 11:43:52AM +0100, David CARLIER wrote: > Subject: [PATCH 4/4] CLEANUP: proto_uxst: initialize socket before setting. > > Initializes the socket before usage. However, there might > be then a slight impact performance hit. > --- > src/proto_uxst.c | 2 ++ > 1 file changed,

Re: [PATCH 3/4] : CLEANUP: sample: initialize the pointer before parse_binary call.

2016-04-12 Thread Willy Tarreau
On Fri, Apr 08, 2016 at 11:43:49AM +0100, David CARLIER wrote: > Hi, > > Here this is a tiny change, hope it finds its way. > > Kind regards. > From 321074b31d9561ea1af51c65c9a912f8a08f555c Mon Sep 17 00:00:00 2001 > From: David Carlier > Date: Fri, 8 Apr 2016 10:37:02

[PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Vincent Bernat
From: Vincent Bernat .gitignore is an odd beast. All the stuff at the beginning is useless since in the bottom part starts with /.* and /*. Therefore, the top part is useless. Moreover, the bottom part makes unignore *.o and friends. Add it back at the bottom. --- .gitignore

Re: haproxy hangs on old linux kernels (2.6.24)

2016-04-12 Thread Willy Tarreau
On Tue, Apr 12, 2016 at 12:53:47PM +0530, Krishna Kumar (Engineering) wrote: > This is actually a kernel Oops as it is accessing an invalid memory > location: fff4 (bug in code). Only kernel upgrade can fix that. Yes and quite frankly with my kernel maintainer hat on, I'm having a

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Vincent Bernat
❦ 12 avril 2016 10:47 +0200, Willy Tarreau  : > I guess most of them come from the following rules that are not covered > anymore : > > -*~ > -*.bak > -*.orig > -*.rej > -*.service > -dlmalloc.c > > and contrib/* and -tests/test_hashes. I don't understand, because for

Re: [PATCH] CLEANUP: .gitignore cleanup

2016-04-12 Thread Willy Tarreau
Hi Vincent, On Fri, Apr 08, 2016 at 10:22:13PM +0200, Vincent Bernat wrote: > From: Vincent Bernat > > .gitignore is an odd beast. All the stuff at the beginning is useless > since in the bottom part starts with /.* and /*. Therefore, the top part > is useless. Moreover, the

Re: [PATCH 2/2] BUG/MEDIUM: dns: fix alignment issue when building DNS queries

2016-04-12 Thread Willy Tarreau
On Fri, Apr 08, 2016 at 10:27:00PM +0200, Vincent Bernat wrote: > ??? 8 avril 2016 22:17 +0200, Vincent Bernat  : > > > On some architectures, unaligned access is not authorized. On most > > architectures, it is just slower. Therefore, we have to use memcpy() > > when an

Re: [PATCH 1/2] BUG/MINOR: dns: fix DNS header definition

2016-04-12 Thread Willy Tarreau
Baptiste, could you please confirm that you're OK with merging these patches ? I think they're good but you're supposed to be the one who knows best. Also they might make you think about other areas possibly in need for other fixes. Thanks, Willy On Fri, Apr 08, 2016 at 10:17:44PM +0200,

Re: haproxy hangs on old linux kernels (2.6.24)

2016-04-12 Thread Krishna Kumar (Engineering)
This is actually a kernel Oops as it is accessing an invalid memory location: fff4 (bug in code). Only kernel upgrade can fix that. On Tue, Apr 12, 2016 at 12:43 PM, Alexey Vlasov wrote: > Hi, > > I have some linux boxes with very old kernels. Unfortunately, I