Re: Passing SNI value ( ssl_fc_sni ) to backend's verifyhost.

2017-07-21 Thread Kevin McArthur
Further... the odd/broken behavior might be being caused related to no sni indication on the health checks... This config sort of works: *server app2 ssltest.example.ca:443 ssl verify required /verifyhost ssltest.example.ca/ sni ssl_fc_sni ca-file /etc/ssl/certs/ca-certificates.crt check che

Re: Passing SNI value ( ssl_fc_sni ) to backend's verifyhost.

2017-07-21 Thread Kevin McArthur
Ok finally got around to testing this out today; running into a bit of an issue with the new syntax. What I'm trying to achieve is: frontend www-https bind :::443 v4v6 ssl crt /etc/haproxy/certs/www.example.org.pem crt /etc/haproxy/certs/ backend www-backend-https server ssl 10.0.0

AWS ELB as a backend

2017-07-21 Thread DHAVAL JAISWAL
I have used ELB (public) as a front of Haproxy and ELB (internal) as a backend for the apps server. so structure is like as follows. Currently using Haproxy 1.7. However, request is not going to the backend server. ELB -> HAPROXY -> ELB -> APPS server. Following config in my haproxy. Let me k

Re: Proposal: modify stat socket command feedback

2017-07-21 Thread Andjelko Iharos
On 07/03/2017 01:46 PM, Andjelko Iharos wrote: > On 07/02/2017 09:52 PM, Willy Tarreau wrote: >> On Sat, Jul 01, 2017 at 01:37:52AM +0200, Dennis Jacobfeuerborn wrote: >>> This could either be introduced only in the current development version >>> because of the compatibility breakage or a paramet

Re: [PATCH]: using custom allocators into regex.

2017-07-21 Thread David CARLIER
After discussion with Willy I finally drop this change. Kind regards. On 21 July 2017 at 08:23, Willy Tarreau wrote: > On Fri, Jul 21, 2017 at 08:17:14AM +0100, David CARLIER wrote: > > Hi Willy, fair points. > > I don't understand, this the patch still uses MALLOC/FREE. > > Willy >

Re: [PATCH]: using custom allocators into regex.

2017-07-21 Thread Willy Tarreau
On Fri, Jul 21, 2017 at 08:17:14AM +0100, David CARLIER wrote: > Hi Willy, fair points. I don't understand, this the patch still uses MALLOC/FREE. Willy

Re: [PATCH]: using custom allocators into regex.

2017-07-21 Thread David CARLIER
Hi Willy, fair points. Kind regards. On 21 July 2017 at 08:10, Willy Tarreau wrote: > Hi Aleks, > > On Fri, Jul 21, 2017 at 09:03:27AM +0200, Aleksandar Lazic wrote: > > I thought something like > > > > `my_pcrealloc` use `create_pool` inside and `my_pcrefree` use > > `pool_destroy2` but one of

Re: [PATCH]: using custom allocators into regex.

2017-07-21 Thread Willy Tarreau
Hi Aleks, On Fri, Jul 21, 2017 at 09:03:27AM +0200, Aleksandar Lazic wrote: > I thought something like > > `my_pcrealloc` use `create_pool` inside and `my_pcrefree` use > `pool_destroy2` but one of the main question is how does the pcre2 > handle the custom memory struct we have in the pools. >

Re: [PATCH]: using custom allocators into regex.

2017-07-21 Thread Aleksandar Lazic
Hi Willy Tarreau, Willy Tarreau wrote on 21.07.2017: > Hi David, > On Fri, Jul 21, 2017 at 07:36:37AM +0100, David CARLIER wrote: >> Hi all, >> >> hopefully it will be revealed useful, in this patch, we re trying to use >> the MALLOC/FREE macros since pcre* libraries are capable of overriding >