Re: lua socket settimeout has no effect

2018-08-13 Thread Willy Tarreau
Hi Cyril, On Sun, Aug 12, 2018 at 10:49:13PM +0200, Cyril Bonté wrote: > 2. hlua_socket_settimeout() initializes rto/wto values, maybe it should also > compute the rex/wex values : > socket->s->req.rex = tick_add_ifset(now_ms, tmout); > socket->s->req.wex = tick_add_ifset(now_ms, tmout

Re: WAF with HA Proxy.

2018-08-13 Thread DHAVAL JAISWAL
Trying to configure mod security on HA Proxy server with the following way. However, it throws error. https://fossies.org/linux/haproxy/contrib/modsecurity/README ./modsecurity.h -h ./modsecurity.h: line 1: /bin: Is a directory ./modsecurity.h: line 2: acmp.h: command not found ./modsecurity

Re: WAF with HA Proxy.

2018-08-13 Thread Willy Tarreau
On Mon, Aug 13, 2018 at 01:09:58PM +0530, DHAVAL JAISWAL wrote: > Trying to configure mod security on HA Proxy server with the following way. > However, it throws error. > > https://fossies.org/linux/haproxy/contrib/modsecurity/README > > ./modsecurity.h -h You are sourcing a C include file. T

Re: WAF with HA Proxy.

2018-08-13 Thread DHAVAL JAISWAL
/usr/local/src/modsecurity-2.9.1/hapmodeconfig/INSTALL/include/ ./modsecurity -h -bash: ./modsecurity: No such file or directory On Mon, Aug 13, 2018 at 1:14 PM, Willy Tarreau wrote: > On Mon, Aug 13, 2018 at 01:09:58PM +0530, DHAVAL JAISWAL wrote: > > Trying to configure mod security on HA P

Re: WAF with HA Proxy.

2018-08-13 Thread Willy Tarreau
On Mon, Aug 13, 2018 at 02:24:00PM +0530, DHAVAL JAISWAL wrote: > /usr/local/src/modsecurity-2.9.1/hapmodeconfig/INSTALL/include/ Well, I'm sorry, I don't know what type of help you expect by simply dumping a path like this. > ./modsecurity -h > > -bash: ./modsecurity: No such file or directory

Re: WAF with HA Proxy.

2018-08-13 Thread DHAVAL JAISWAL
Thanks Willy, It's solved. Now, checking further on configuring Rules. On Mon, Aug 13, 2018 at 2:32 PM, Willy Tarreau wrote: > On Mon, Aug 13, 2018 at 02:24:00PM +0530, DHAVAL JAISWAL wrote: > > /usr/local/src/modsecurity-2.9.1/hapmodeconfig/INSTALL/include/ > > Well, I'm sorry, I don't know w

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

2018-08-13 Thread Aleksandar Lazic
On 11/08/2018 14:48, Patrick Hemmer wrote: [snipp] To answer one of the earlier questions, I do plan on writing a blog article yes. The question is when. I'm considering backporting this feature to 1.8 for my own use at work, and if done, might wait for that so I have some real world usage t

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

2018-08-13 Thread Patrick Hemmer
On 2018/8/13 09:17, Aleksandar Lazic wrote: > On 11/08/2018 14:48, Patrick Hemmer wrote: >> > > [snipp] > >> To answer one of the earlier questions, I do plan on writing a blog >> article yes. The question is when. I'm considering backporting this >> feature to 1.8 for my own use at work, and if

Re: Segfault on haproxy 1.7.10 with state file and slowstart

2018-08-13 Thread Raghu Udiyar
Hi Willy, Baptiste On Fri, 29 Jun 2018 at 08:12 Willy Tarreau wrote: > Hi Raghu, > [...] > >[ALERT] 248/130258 (21960) : parsing [/etc/haproxy/test.cfg:53] : > 'server bla' : no method found to resolve address '(null)' >[ALERT] 248/130258 (21960) : Failed to initialize server(s)

[PATCH] DOC: add documentation for prio_class and prio_offset sample fetches.

2018-08-13 Thread Patrick Hemmer
This adds documentation that was missed as part of 268a707. --- doc/configuration.txt | 11 +++ 1 file changed, 11 insertions(+) diff --git a/doc/configuration.txt b/doc/configuration.txt index 48b69a5bd..d11b63185 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -13857,

Re: lua socket settimeout has no effect

2018-08-13 Thread Cyril Bonté
Hi Willy, Le 13/08/2018 à 09:28, Willy Tarreau a écrit : Hi Cyril, On Sun, Aug 12, 2018 at 10:49:13PM +0200, Cyril Bonté wrote: 2. hlua_socket_settimeout() initializes rto/wto values, maybe it should also compute the rex/wex values : socket->s->req.rex = tick_add_ifset(now_ms, tmout);

[PATCH] MINOR: ssl: Use consistent naming for TLS protocols

2018-08-13 Thread Bertrand Jacquin
In most cases, "TLSv1.x" naming is used across and documentation, lazy people tend to grep too much and may not find what they are looking for. Fixing people is hard. --- doc/configuration.txt | 2 +- src/ssl_sock.c| 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/

Re: HaProxy question

2018-08-13 Thread Jonathan Opperman
On Mon, Aug 13, 2018 at 12:55 AM Igor Cicimov < ig...@encompasscorporation.com> wrote: > Hi Jonathan, > > I'll keep bottom posting otherwise the thread will become a real mess and > very hard to follow historically. > > On Sun, Aug 12, 2018 at 9:19 PM Jonathan Opperman > wrote: > >> Hi Igor, >> >