Re[2]: Tcp logging in haproxy

Hi -- Originalnachricht -- Von: "kushal bhattacharya" An: haproxy@formilux.org Gesendet: 27.10.2017 12:47:37 Betreff: Re: Tcp logging in haproxy Sorry if it is generated as a new topic i am attaching my configuration until now below On UDP

Re: confusion regarding usage of haproxy for large number of connections

Hi, Op 27-10-2017 om 14:58 schreef kushal bhattacharya: Hi, I am confused regarding the readme text ' This is a development version, so it is expected to break from time to time, to add and remove features without prior notification and it should not be used in production' .Here I am testing

Re: [PATCH] cleanup and add ALPN to proxy-protocol-v2

Hi Manu, On Fri, Oct 27, 2017 at 05:02:41PM +0200, Emmanuel Hocdet wrote: > > Hi Willy, > > It's a serie of patch about proxy-protocol-v2 > 1) Report #define from doc/proxy-protocol.txt. > 2) cleanup after first work on implement SRV_PP_V2_SSL_CRYPTO > (send-proxy-v2-ssl-crypto > not yet

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

On Fri, Oct 27, 2017 at 03:54:27PM +0200, Emmanuel Hocdet wrote: > > Le 27 oct. 2017 à 15:02, Olivier Houchard a écrit : > > > > The attached patch does use the ssl_conf, instead of abusing ssl_options. > > I also added a new field in global_ssl, I wasn't so sure about

Re: HAProxy 1.7.5: conn_cur value problem with peer stick-table

Le 27/05/2017 à 08:49, Willy Tarreau a écrit : Hi Maxime, On Fri, May 19, 2017 at 02:28:40PM +0200, Maxime Guillet wrote: 2/ If I launch the same test on both haproxy servers and peers configuration activated, I can see the conn_cur counter always increasing $ ab -n 2000 -c 20

[PATCH] cleanup and add ALPN to proxy-protocol-v2

Hi Willy, It’s a serie of patch about proxy-protocol-v2 1) Report #define from doc/proxy-protocol.txt. 2) cleanup after first work on implement SRV_PP_V2_SSL_CRYPTO (send-proxy-v2-ssl-crypto not yet in the serie because add key/hash info need more work) 3) add ALPN information to

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

> Le 27 oct. 2017 à 15:02, Olivier Houchard a écrit : > > The attached patch does use the ssl_conf, instead of abusing ssl_options. > I also added a new field in global_ssl, I wasn't so sure about this, but > decided people may want to enable 0RTT globally. > > Emmanuel,

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

Hi, On Fri, Oct 27, 2017 at 12:45:36PM +0200, Olivier Houchard wrote: > On Fri, Oct 27, 2017 at 12:36:31PM +0200, Emmanuel Hocdet wrote: > > > > > Le 27 oct. 2017 ?? 11:22, Emmanuel Hocdet a ??crit : > > > > > > Hi Olivier > > > > > >> Le 27 oct. 2017 ?? 01:08, Olivier

confusion regarding usage of haproxy for large number of connections

Hi, I am confused regarding the readme text ' This is a development version, so it is expected to break from time to time, to add and remove features without prior notification and it should not be used in production' .Here I am testing for 8000 connections being distributed to three virtual mqtt

Re: [PATCH] lua: add regexes

On Fri, Oct 27, 2017 at 02:36:29PM +0200, Thierry Fournier wrote: > > On 27 Oct 2017, at 14:33, Willy Tarreau wrote: > > > > On Fri, Oct 27, 2017 at 02:18:05PM +0200, Thierry Fournier wrote: > >> It seems that you push my first version of the patchn so I put a fix in > >>

Re: [PATCH] lua: add regexes

> On 27 Oct 2017, at 14:33, Willy Tarreau wrote: > > On Fri, Oct 27, 2017 at 02:18:05PM +0200, Thierry Fournier wrote: >> It seems that you push my first version of the patchn so I put a fix in >> attachment. > > huh ? no I didn't, I just sent it in attachment. However I can easily

Re: [PATCH] lua: add regexes

On Fri, Oct 27, 2017 at 02:18:05PM +0200, Thierry Fournier wrote: > It seems that you push my first version of the patchn so I put a fix in > attachment. huh ? no I didn't, I just sent it in attachment. However I can easily apply this on top of your other patch. Thanks, Willy

Re: [PATCH] lua: add regexes

On Fri, 27 Oct 2017 11:28:47 +0200 Willy Tarreau wrote: > On Fri, Oct 27, 2017 at 11:19:48AM +0200, Thierry Fournier wrote: > > It is really sad because the Lua ensure that the final '\0' is set :-( Maybe > > it will be clever to add a function like regex_prepare_string which copy a

Re: Tcp logging in haproxy

Sorry if it is generated as a new topic i am attaching my configuration until now below defaults mode tcp timeout connect22m timeout client 22m timeout server 22m frontend localnodes bind *:9875 option tcplog log global default_backend

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

On Fri, Oct 27, 2017 at 12:36:31PM +0200, Emmanuel Hocdet wrote: > > > Le 27 oct. 2017 ?? 11:22, Emmanuel Hocdet a ??crit : > > > > Hi Olivier > > > >> Le 27 oct. 2017 ?? 01:08, Olivier Houchard a > >> ??crit : > >> > >> Hi, > >> > >> You'll find

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

On Fri, Oct 27, 2017 at 11:22:15AM +0200, Emmanuel Hocdet wrote: > Hi Olivier > > > Le 27 oct. 2017 ?? 01:08, Olivier Houchard a ??crit > > : > > > > Hi, > > > > You'll find attached updated patches, rebased on the latest master, and on > > top of Emmanuel's latest

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

> Le 27 oct. 2017 à 11:22, Emmanuel Hocdet a écrit : > > Hi Olivier > >> Le 27 oct. 2017 à 01:08, Olivier Houchard a écrit : >> >> Hi, >> >> You'll find attached updated patches, rebased on the latest master, and on >> top of Emmanuel's latest patches

Re: [PATCH] lua: add regexes

On Fri, Oct 27, 2017 at 11:19:48AM +0200, Thierry Fournier wrote: > It is really sad because the Lua ensure that the final '\0' is set :-( Maybe > it will be clever to add a function like regex_prepare_string which copy a > const string or not according with the compilation options and the final

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

Hi Olivier > Le 27 oct. 2017 à 01:08, Olivier Houchard a écrit : > > Hi, > > You'll find attached updated patches, rebased on the latest master, and on > top of Emmanuel's latest patches (also attached for reference). > This version allows to enable 0RTT per SNI. > It

Re: [PATCH] lua: add regexes

> On 27 Oct 2017, at 10:45, Willy Tarreau wrote: > > Hi Thierry, > > On Wed, Oct 25, 2017 at 01:02:18PM +0200, Thierry Fournier wrote: >> Hi, >> >> This is a patch for lua which adds HAProxy internal regexes support. > > Thanks but I'm having a doubt regarding the risk that it

Re: [PATCHES][ssl] Add 0-RTT support with OpenSSL 1.1.1

Hi Olivier, On Fri, Oct 27, 2017 at 01:08:05AM +0200, Olivier Houchard wrote: > Hi, > > You'll find attached updated patches, rebased on the latest master, and on > top of Emmanuel's latest patches (also attached for reference). > This version allows to enable 0RTT per SNI. > It unfortunately

Re: [PATCH] lua: add regexes

Hi Thierry, On Wed, Oct 25, 2017 at 01:02:18PM +0200, Thierry Fournier wrote: > Hi, > > This is a patch for lua which adds HAProxy internal regexes support. Thanks but I'm having a doubt regarding the risk that it introduces bugs : > +static int hlua_regex_match(struct lua_State *L) > +{ > +

Re: PATCH: Lua: add UUID to the Proxy Class

Hi Baptiste, On Thu, Oct 26, 2017 at 09:59:58PM +0200, Baptiste wrote: > I saw that the UUID was missing in the Proxy Class in Lua, so I added it. > The patch is in attachment. Merged, thanks! Willy

Re: [PATCH] BUG/MEDIUM: prevent buffers being overwritten during build_logline() execution

Hi Dragan, On Thu, Oct 26, 2017 at 11:53:11AM +0200, Dragan Dosen wrote: > Hi all, > > Here's a patch that fixes the problem with trash buffers being > overwritten during build_logline() execution. Now merged, thanks! I think this are will need another lifting during 1.9-dev because what