Re: tcp-mode session hangs on server restart

2016-07-20 Thread Willy Tarreau
On Wed, Jul 20, 2016 at 02:27:28PM -0600, Tim Butler wrote: > Hi Willy, > > First of all thanks for your time and your quick reply. > This is my first dive into the code, so that is why the lack of polling > seemed suspicious. I see the cached events no to avoid polling. > > I applied both the

Re: tcp-mode session hangs on server restart

2016-07-20 Thread Tim Butler
Hi Willy, First of all thanks for your time and your quick reply. This is my first dive into the code, so that is why the lack of polling seemed suspicious. I see the cached events no to avoid polling. I applied both the 'timeout server-fin' and 'tcp-ut' changes with no affect. > The fact that

Re: the site needs some love

2016-07-20 Thread Willy Tarreau
On Wed, Jul 20, 2016 at 10:03:17PM +0200, Matt . wrote: > I could try to hug it, I'm quite good at it :) Well, if you want to give it a try, you're welcome! If you want you can look at what the HTML looks like, and see how to produce it from the last 4 announces (1.6.5-1.6.7, 1.5.18). If this

Re: the site needs some love

2016-07-20 Thread Willy Tarreau
On Wed, Jul 20, 2016 at 09:56:48PM +0200, Pavlos Parissis wrote: > On 20/07/2016 08:57 , Willy Tarreau wrote: > > Hi Pavlos, > > > > On Sat, Jul 16, 2016 at 09:43:24PM +0200, Pavlos Parissis wrote: > >> Hi, > >> > >> www.haproxy.org needs some love as the last update on 'Quick news' section >

Re: the site needs some love

2016-07-20 Thread Matt .
I could try to hug it, I'm quite good at it :) 2016-07-20 21:56 GMT+02:00 Pavlos Parissis : > On 20/07/2016 08:57 μμ, Willy Tarreau wrote: >> Hi Pavlos, >> >> On Sat, Jul 16, 2016 at 09:43:24PM +0200, Pavlos Parissis wrote: >>> Hi, >>> >>> www.haproxy.org needs some

Re: the site needs some love

2016-07-20 Thread Pavlos Parissis
On 20/07/2016 08:57 μμ, Willy Tarreau wrote: > Hi Pavlos, > > On Sat, Jul 16, 2016 at 09:43:24PM +0200, Pavlos Parissis wrote: >> Hi, >> >> www.haproxy.org needs some love as the last update on 'Quick news' section >> was on April 13th and mentions older releases. > > Yes I know and I'm sad

Re: tcp-mode session hangs on server restart

2016-07-20 Thread Tim Butler
Here is a better trace of the success and failure scenarios, with messages flushed in the proper order and socket creation and close events included. The difference in the success and failure is that the second reconnecting client fd=0009 ends up in state en=22 on the success scenario and is

Re: counters for specific http status code

2016-07-20 Thread Willy Tarreau
Hi Ruoshan, On Thu, Jul 14, 2016 at 03:24:42PM +0800, Ruoshan Huang wrote: > hi, > here is my (final?) patch for implementing `http-response track-sc*` > directive. mainly I have: > - duplicate config parsing (`parse_http_res_cond`) and validation > (`check_config_validity`) code for

Re: Host name resolution in IPv6 only entry in /etc/hosts

2016-07-20 Thread Willy Tarreau
Hi Nenad, On Tue, Jul 19, 2016 at 03:06:30PM +0200, Nenad Merdanovic wrote: > Adding Vincent here, as he maintains the Debian package. > > On 7/19/2016 2:21 PM, Albert Casademont wrote: > > Makes sense, I assumed that the Debian package was compiled with that > > option by default...it's a PITA

Re: tcp-mode session hangs on server restart

2016-07-20 Thread Willy Tarreau
Hi Tim, On Tue, Jul 19, 2016 at 09:42:44PM -0600, Tim Butler wrote: > Hi, > > I'm looking for any enlightenment or suggestions on pursuing > the following problem. > > After bouncing a server with two tcp-mode sessions, > my second reconnecting session hangs, > even though the frontend socket

Re: 100% CPU by epoll loop, while waiting for connection timeout

2016-07-20 Thread Willy Tarreau
Hi Tobias, On Thu, Jul 14, 2016 at 04:52:29PM +0200, Tobias Vau wrote: > Hi, > > a small follow up to an older thread from November 2015, where massive > numbers of epoll_wait calls lead to 100% CPU consumption. > > My installation showed the same pattern. As it's also easily > reproducible for

Re: the site needs some love

2016-07-20 Thread Willy Tarreau
Hi Pavlos, On Sat, Jul 16, 2016 at 09:43:24PM +0200, Pavlos Parissis wrote: > Hi, > > www.haproxy.org needs some love as the last update on 'Quick news' section > was on April 13th and mentions older releases. Yes I know and I'm sad about it. We've fixed so many bugs that it's hard to emit a

Re: Segmentation fault in 1.6.6

2016-07-20 Thread Willy Tarreau
On Mon, Jul 18, 2016 at 05:05:03PM +0200, Pavlos Parissis wrote: > On 18/07/2016 04:59 , Micha?? ??owicki wrote: > > Will do but SSL is terminated before reaching HAProxy. Still possible it > > could > > affect us? > > > > I don't think so, but you should use 1.6.7 anyway in order to avoid

Re: how to put stick tables values and src_conn_rate into headers

2016-07-20 Thread Nenad Merdanovic
Hello, On 07/20/2016 05:55 PM, Thomas Heil wrote: > Hi, > > I would like to put the actual value from a stick tables into a request > header. this way i could inform the backend e.g how many connections > this ip allready made. > > The same I would like to do e.g for src_conn_rate and

Re: 1.6 vs 1.5 http-request add-header format

2016-07-20 Thread Cyril Bonté
Hi, Le 20/07/2016 à 11:48, hapr...@abisoft.biz a écrit : Sure thing. Here is the full config (Haproxy 1.6.7): [...] defaults mode http [...] log-format %ci:%cp\ [%t]\ %ft\ %b/%s\ %Tq/%Tw/%Tc/%Tr/%Tt\ %tsc\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq\ %{+Q}r\ %ST\ "%CC"\ "%hr"\ "%CS"\ "%hs"\

how to put stick tables values and src_conn_rate into headers

2016-07-20 Thread Thomas Heil
Hi, I would like to put the actual value from a stick tables into a request header. this way i could inform the backend e.g how many connections this ip allready made. The same I would like to do e.g for src_conn_rate and http_req_rate. To protect the backend I can write rules defines the upper

Re: Wrong http_err_rate on standby peer

2016-07-20 Thread Frederic Lecaille
Hi Kay, On 07/20/2016 11:27 AM, Willy Tarreau wrote: Hi Kay, On Wed, Jul 20, 2016 at 11:17:57AM +0200, Kay Fuchs wrote: Hi! 2016-07-19 11:26 GMT+02:00 Kay Fuchs : i'm using a stick-table with HAProxy 1.6.7 on an active/standby configuration like this: stick-table type

Re: 1.6 vs 1.5 http-request add-header format

2016-07-20 Thread haproxy
Sure thing. Here is the full config (Haproxy 1.6.7): global log 127.0.0.1:514 local0 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 25000 # 33KB per established connection; raise after upgrading instance type userhaproxy group

Re: Wrong http_err_rate on standby peer

2016-07-20 Thread Willy Tarreau
Hi Kay, On Wed, Jul 20, 2016 at 11:17:57AM +0200, Kay Fuchs wrote: > Hi! > > 2016-07-19 11:26 GMT+02:00 Kay Fuchs : > > i'm using a stick-table with HAProxy 1.6.7 on an active/standby > > configuration like this: > > > > stick-table type ipv6 size 500k expire 60s peers

Re: rate limiting question

2016-07-20 Thread haproxy
Hello Cyril, Thank you for the reply! My current config for rate limiting is: tcp-request content track-sc0 src stick-table type ip size 500k expire 30s store conn_cur,conn_rate(10s),http_req_rate(10s),http_err_rate(10s) tcp-request content reject if { src -f /etc/haproxy/blacklist.lst }

Re: Wrong http_err_rate on standby peer

2016-07-20 Thread Kay Fuchs
Hi! 2016-07-19 11:26 GMT+02:00 Kay Fuchs : > i'm using a stick-table with HAProxy 1.6.7 on an active/standby > configuration like this: > > stick-table type ipv6 size 500k expire 60s peers hacluster store > gpc0,conn_cur,http_req_rate(10s),http_err_rate(10s) > http-request

Re: Haproxy with SNI and http2 seperation

2016-07-20 Thread Matthias Fechner
Hi Cyril, Am 19.07.2016 um 00:27 schrieb Cyril Bonté: > You probably have an issue here : hdr(host) won't work with mode tcp. > If you wan't to check the domain provided by SNI, you should use > req.ssl_sni instead. > > Have a look to the example provided in the documentation : >