Allowing gzip compression of non-chunked responses?

2017-05-09 Thread Stéphane Claret
Good morning, In the current version (1.7.5), haproxy documentation states that compression is disabled if the response is not chunked and does not include a Content-length. Unfortunately, it seems a bit limitating because some Java application servers (Jetty for sure, and some netty-based framew

Re: [Patches] TLS methods configuration reworked

2017-05-09 Thread Emeric Brun
Hi, On 05/05/2017 06:12 PM, Emmanuel Hocdet wrote: > >> Le 5 mai 2017 à 17:21, Emmanuel Hocdet a écrit : >> >> Hi Emeric, >> >>> Le 28 avr. 2017 à 17:57, Emmanuel Hocdet a écrit : >>> >>> Hi Emeric, Willy >>> >>> Up the thread with a compatible configuration view. >>> >>> 1) force-xx force-tlsv

Re: OpenSSL engine and async support

2017-05-09 Thread Emeric Brun
Hi Grant, On 05/06/2017 12:41 AM, Grant Zhang wrote: > Hi Emeric, > > Thanks for your review! Please see the updated patches and let me know if > your comments have been properly addressed. > > Thanks, > > Grant > > > > > > > >> On May 2, 2017, at 04:49, Emeric Brun wrote: >> >> Hi Gra

Re: Issues with redirects for POST requests with payload

2017-05-09 Thread Jarno Huuskonen
Hi, On Sat, May 06, Ciprian Dorin Craciun wrote: > Hello all! > > In last weeks I've started encountering a problem, that for our > particular use-case is seriously breaking some of our sites, namely: > > * a client makes a POST request which has a "largish" payload, one > that does not manage t

Re: Automatic Certificate Switching Idea

2017-05-09 Thread Daniel Schneller
Hi! > On 9. May. 2017, at 00:30, Lukas Tribus wrote: > > [...] > I'm opposed to heavy feature-bloating for provisioning use-cases, that > can quite easily fixed where the fix belongs - the provisioning layer. You are right, that this can be handled outside / in the provisioning layer. And I ha

Re: awesome article from Willy for seamless reload

2017-05-09 Thread Willy Tarreau
On Sun, May 07, 2017 at 11:23:30AM +0200, Pavlos Parissis wrote: > Hi, > > For those (I am on of them) who don't follow twitter/blogs/fb and all these > noisy > stuff, check Willy's article about seamless reload here > https://www.haproxy.com/blog/truly-seamless-reloads-with-haproxy-no-more-hacks

Re: clarification on documentation for sticky counter tracking duration

2017-05-09 Thread Aleksandar Lazic
Hi Patrick Hemmer. Patrick Hemmer have written on Thu, 4 May 2017 19:41:59 -0400: > I'm looking to get some clarification around the documentation for the > duration of sticky counter tracking. There are 2 specific points I'm a > little confused on. > > 1. Under the documentation for `tcp-reques

Re: Allowing gzip compression of non-chunked responses?

2017-05-09 Thread Willy Tarreau
Hello Stéphane, On Tue, May 09, 2017 at 09:37:35AM +0200, Stéphane Claret wrote: > Good morning, > > In the current version (1.7.5), haproxy documentation states that > compression is disabled if the response is not chunked and does not include > a Content-length. > > Unfortunately, it seems a b

Re: Issues with redirects for POST requests with payload

2017-05-09 Thread Willy Tarreau
On Tue, May 09, 2017 at 02:54:45PM +0300, Jarno Huuskonen wrote: > My firefox(52.1 on linux) was able to send 128k file, > but 800k file results in connection reset. My chrome sent 16k file, but > fails (ERR_CONNECTION_RESET) on 17k file (few times even the 17k file > worked). Hmmm that sounds bad

Question

2017-05-09 Thread Hackworth, Russell
I love the product, but have an issue. I have a config that works if I have any 1 of the 3 servers in the backend uncommented, but if I have two or more uncommented it fails. Is there something I'm missing? global log 127.0.0.1 local2 pidfile

Re: Question

2017-05-09 Thread Aleksandar Lazic
Hi Hackworth, Russell. Hackworth, Russell have written on Tue, 9 May 2017 19:19:57 +: > I love the product, but have an issue. Please can you also add the output of haproxy -vv thanks Aleks > I have a config that works if I have any 1 of the 3 servers in the > backend uncommented, but if

Re: Issues with redirects for POST requests with payload

2017-05-09 Thread Ciprian Dorin Craciun
On Tue, May 9, 2017 at 9:47 PM, Willy Tarreau wrote: > On Tue, May 09, 2017 at 02:54:45PM +0300, Jarno Huuskonen wrote: >> My firefox(52.1 on linux) was able to send 128k file, >> but 800k file results in connection reset. My chrome sent 16k file, but >> fails (ERR_CONNECTION_RESET) on 17k file (f

Bug: DNS changes in 1.7.3+ break UNIX socket stats in daemon mode with resolvers on FreeBSD

2017-05-09 Thread Jim Pingle
With HAProxy 1.7.3 and later on FreeBSD, recent DNS-related code changes in HAProxy appear to have broken the UNIX socket in daemon mode when resolvers are present in the configuration. How to reproduce: * Install HAProxy 1.7.x (where x > 2) on FreeBSD 10.3 or FreeBSD 11, even HAProxy 1.7.5 * Co

HAProxy console question

2017-05-09 Thread Alexander Bernstein
Hello, Our system uses load balancer with cookie session affinity. What would be the most obvious signs visible on the console that something is not working right? For example, load balancing not working, too much incoming traffic is delayed by buffering, anything else? And how to track the rea

Re: OpenSSL engine and async support

2017-05-09 Thread Grant Zhang
> On May 9, 2017, at 02:38, Emeric Brun wrote: > > Hi Grant, > > On 05/06/2017 12:41 AM, Grant Zhang wrote: >> Hi Emeric, >> >> Thanks for your review! Please see the updated patches and let me know if >> your comments have been properly addressed. >> >> Thanks, >> >> Grant >> >> >> >>

Re: haproxy not creating stick-table entries fast enough

2017-05-09 Thread Lukas Tribus
Hello, Am 09.05.2017 um 02:52 schrieb redundantl y: > The way ab is being executed is inline with our real world use. A > separately hosted application will generate HTML with several (20-30) > elements that will be loaded simultaneously by the end user's > browser. There isn't a delay, the ele

Re: haproxy not creating stick-table entries fast enough

2017-05-09 Thread redundantl y
On Tue, May 9, 2017 at 2:11 PM, Lukas Tribus wrote: > Hello, > > > Am 09.05.2017 um 02:52 schrieb redundantl y: > > The way ab is being executed is inline with our real world use. A > > separately hosted application will generate HTML with several (20-30) > > elements that will be loaded simulta