Re: Rewrite image path based on HTTP_REQUEST

On 17/05/2018, Lotic Lists wrote: > Hi experts > > How can I rewrite a image path based on URL? > > Example, users request the url www.example.com/images/logo.png, haproxy just > balance to backend servers normally. > > Now users request www.newdomain.com, I need rewrite URI to >

Re: 1.8.8 & 1.9dev, lua, xref_get_peer_and_lock hang / 100% cpu usage after restarting haproxy a few times

Hi Thierry, Op 18-5-2018 om 20:00 schreef Thierry FOURNIER: Hi Pieter, Could you test the attached patch ? It seems to fix the problem, but I have some doubts about the reliability of the patch. Thierry The crash seems 'fixed' indeed.. but the lua scipt below now takes 5seconds instead of

Re: [ANNOUNCE] haproxy-1.8.9

Hi. The image is also updated. https://hub.docker.com/r/me2digital/haproxy18/ Regards Aleks Ursprüngliche Nachricht Von: William Lallemand Gesendet: 18. Mai 2018 16:02:23 MESZ An: haproxy@formilux.org Betreff: [ANNOUNCE] haproxy-1.8.9 Hi, HAProxy

Re: 1.8.8 & 1.9dev, lua, xref_get_peer_and_lock hang / 100% cpu usage after restarting haproxy a few times

Hi Pieter, Could you test the attached patch ? It seems to fix the problem, but I have some doubts about the reliability of the patch. Thierry On Fri, 11 May 2018 20:13:25 +0200 PiBa-NL wrote: > Hi Thierry, > > Okay found a simple reproduction with tcploop with a 6

[RFC PATCH] MINOR: ssl: set SSL_OP_PRIORITIZE_CHACHA

Sets OpenSSL 1.1.1's SSL_OP_PRIORITIZE_CHACHA unconditionally, as per [1]: When SSL_OP_CIPHER_SERVER_PREFERENCE is set, temporarily reprioritize ChaCha20-Poly1305 ciphers to the top of the server cipher list if a ChaCha20-Poly1305 cipher is at the top of the client cipher list. This helps those

Re: Show: h-app-proxy – Application server inside haproxy

On Fri, 18 May 2018 16:30:46 +0200 Tim Düsterhus wrote: > Thierry, > > Am 18.05.2018 um 12:47 schrieb Thierry FOURNIER: > > Hi, > > > > This is a great usage of Lua. I add a link on my own blog: > > > >http://blog.arpalert.org/p/interesting-links.html > > Thank you!

Re: Show: h-app-proxy – Application server inside haproxy

Thierry, Am 18.05.2018 um 12:47 schrieb Thierry FOURNIER: > Hi, > > This is a great usage of Lua. I add a link on my own blog: > >http://blog.arpalert.org/p/interesting-links.html Thank you! Don't forget to fix the typo in your redis connection pool I mentioned in my mail. Best regards

[ANNOUNCE] haproxy-1.8.9

Hi, HAProxy 1.8.9 was released on 2018/05/18. It added 20 new commits after version 1.8.8. This version fixes a crash which can occurs when haproxy is built using certain version of GCC (<= 3.x or >= 5.x). It also fixes the way fd were shared by mutiple threads which was leading to missed event

Re: SPOE patchs

On Fri, May 18, 2018 at 02:58:44PM +0200, Christopher Faulet wrote: > And because this is Friday and the sun shines, 2 more patches to do some > cleanup in the SPOE. Because it's Friday and the sun shines, they were merged. thanks, Willy

Re: SPOE patchs

Le 18/05/2018 à 14:53, Christopher Faulet a écrit : Le 18/05/2018 à 12:38, Thierry FOURNIER a écrit : Hi, In attachment two patches for SPOE. The first fix an error message, and the second fix a mistake in the protocol. Thanks Thierry for these patches. Here are fixes for the SPOAs

Re: SPOE patchs

Le 18/05/2018 à 12:38, Thierry FOURNIER a écrit : Hi, In attachment two patches for SPOE. The first fix an error message, and the second fix a mistake in the protocol. Thanks Thierry for these patches. Here are fixes for the SPOAs modsecurity and mod_defender. -- Christopher Faulet >From

Re: Modifying TCP payload via LUA action & yield issues

Hi, I can reproduce the bug, forgot my previous workaround proposition and just add an inspect delay: https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#4-tcp-request%20inspect-delay tcp-request inspect-delay 10s If some actions can't be executed because it have no data,

Re: Modifying TCP payload via LUA action & yield issues

Could you change your configuration to test a workaround ? After the line: tcp-request content lua.enrich_query if !has_client_version Add a fake action: tcp-request set-var(req.wa) int(0) Tell me if this work around fix the issue. Thierry On Tue, 15 May 2018 01:11:46 + Grant

Re: Modifying TCP payload via LUA action & yield issues

Hi Grant, It seems to be a bug. The action should allow yield. Could you have a method for reproducing the bug ? Thierry On Tue, 15 May 2018 01:11:46 + Grant Byers wrote: > Hi all, > > Is it at all feasible to modify a TCP payload via a custom LUA action > in a stable

Re: SPOE patchs

On Fri, May 18, 2018 at 12:38:07PM +0200, Thierry FOURNIER wrote: > Hi, > > In attachment two patches for SPOE. > The first fix an error message, and the second fix a mistake in the protocol. Thank you, now applied, Willy

Re: [PATCH] BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.

On Fri, May 18, 2018 at 12:46:07PM +0200, thierry.fourn...@arpalert.org wrote: > Hi Sada, > > Thanks for the patch, > Willy, can you apply ? Now done, thanks! Willy

Re: Show: h-app-proxy – Application server inside haproxy

Hi, This is a great usage of Lua. I add a link on my own blog: http://blog.arpalert.org/p/interesting-links.html Thierry On Sat, 12 May 2018 11:23:31 +0200 Aleksandar Lazic wrote: > Hi Tim. > > Am 11.05.2018 um 20:57 schrieb Tim Düsterhus: > > Hi list, > > > > I

Re: [PATCH] BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.

Hi Sada, Thanks for the patch, Willy, can you apply ? BR, Thierry On Fri, 11 May 2018 11:48:18 -0700 sada wrote: > Function `hlua_socke_close` expected exactly one argument on the Lua stack. > But when `hlua_socket_close` was called from `hlua_socket_write_yield`, >

SPOE patchs

Hi, In attachment two patches for SPOE. The first fix an error message, and the second fix a mistake in the protocol. BR, Thierry >From c0274215ed91e90e127bda790b785b698fb149e7 Mon Sep 17 00:00:00 2001 From: Thierry FOURNIER Date: Thu, 10 May 2018 16:41:26 +0200

Re: Dynamically adding/deleting SSL certificates

Hello, On Wed, Apr 18, 2018 at 9:34 PM, Aurélien Nephtali wrote: > Hello, > > I have some patches to support dynamically loading and unloading PEM > certificates through the CLI. It is mainly a big refactoring of some > part of the SSL code (thanks Thierry for your