Re: Bug: send-proxy-v2 sends PROXY protocol on agent checks

On Fri, May 05, 2017 at 08:56:15AM -0700, James Brown wrote: > I had to move it down a couple of lines because I'm on 1.7.5 not master but > it seems to work fine. Great, thanks for the feedback, I've merged it now. Willy

Re: Passing SNI value ( ssl_fc_sni ) to backend's verifyhost.

On 6 May 2017 2:04 am, "Kevin McArthur" wrote: When doing tls->haproxy->tls (bridged https) re-encryption with SNI, we need to verify the backend certificate against the SNI value requested by the client. Something like server options: server app1 app1.example.ca:443 ssl no-sslv3 sni ssl_fc_sni

[PATCH] Add b64dec sample converter

Hi all, This patch against current master adds a new b64dec converter. It takes a base64 encoded string and returns its decoded binary representation. This converter can be used to e.g. extract the username of a basic auth header to add it to the log: acl BASIC_AUTH hdr_beg(Authorization) "Basic

World's ONLY news and sentiment app

Dear colleague, We got your email address from our own search engine crawler. We are glad to introduce to you Lexxe's new app News & Moods, which is the world's only smartphone app reflecting sentiment from news. The app comes in iOS and Android versions. Similar service will usua

Re: OpenSSL engine and async support

Hi Emeric, Thanks for your review! Please see the updated patches and let me know if your comments have been properly addressed. Thanks, Grant 0001-ssl-add-basic-support-for-OpenSSL-crypto-engine.patch Description: Binary data 0002-ssl-add-openssl-async-mode-support.patch Description: Bin

Re: [Patches] TLS methods configuration reworked

> Le 5 mai 2017 à 17:21, Emmanuel Hocdet a écrit : > > Hi Emeric, > >> Le 28 avr. 2017 à 17:57, Emmanuel Hocdet a écrit : >> >> Hi Emeric, Willy >> >> Up the thread with a compatible configuration view. >> >> 1) force-xx force-tlsv12 no-tlsv12 >> old: do a force-tlsv12 (no-xx ignored witho

Passing SNI value ( ssl_fc_sni ) to backend's verifyhost.

When doing tls->haproxy->tls (bridged https) re-encryption with SNI, we need to verify the backend certificate against the SNI value requested by the client. Something like server options: server app1 app1.example.ca:443 ssl no-sslv3 sni ssl_fc_sni verify required verifyhost ssl_fc_sni Howe

Re: action on server state change

We address this kind of thing using an external daemon which receives and parses syslog messages from haproxy. On Fri, May 5, 2017 at 1:10 AM, Stephan Mueller wrote: > Hi, > > is it possible to define some custom action on a server state > change, e.g. execution of a script? > > Background: Rece

Re: Bug: send-proxy-v2 sends PROXY protocol on agent checks

I had to move it down a couple of lines because I'm on 1.7.5 not master but it seems to work fine. Thanks for the quick response as always, Willy. On Wed, May 3, 2017 at 10:23 PM, Willy Tarreau wrote: > On Wed, May 03, 2017 at 08:21:12PM -0700, James Brown wrote: > > If the send-proxy-v2 flag i

Re: [Patches] TLS methods configuration reworked

Hi Emeric, > Le 28 avr. 2017 à 17:57, Emmanuel Hocdet a écrit : > > Hi Emeric, Willy > > Up the thread with a compatible configuration view. > > 1) force-xx force-tlsv12 no-tlsv12 > old: do a force-tlsv12 (no-xx ignored without warning) > new: warning "all SSL/TLS versions are disabled » >

action on server state change

Hi, is it possible to define some custom action on a server state change, e.g. execution of a script? Background: Recently, I had some issues with a flapping service - it worked well without load ;p - but rapidly degraded in UP state. In result it was flapping UP/DOWN. rise/fall could only scale