Re: [PATCH] MEDIUM: reset lua transaction between http requests

2018-08-23 Thread Willy Tarreau
Hi Thierry, On Thu, Aug 23, 2018 at 09:37:43AM +0200, Thierry Fournier wrote: > Hi, > > Your patch make sense, that's the right appoach, but I have a doubt about > the place to use for doing the reinitialization. > > I add Willy in this thread in order to have http2 advisor. > > Before the

Re: Clarification re Timeouts and Session State in the Logs

2018-08-23 Thread Igor Cicimov
Hi Daniel, We had similar issue in 2015, and the answer was: server timeout was too short. Simple. On Thu, 23 Aug 2018 9:56 pm Daniel Schneller < daniel.schnel...@centerdevice.com> wrote: > Friendly bump. > I'd volunteer to do some documentation amendments once I understand the > issue better

RE: Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
Actually items 2 and 3 below are what I want: If hostname "ucp.mydomain.com" then "reencrypt" i.e. https -> https else normal SSL termination - "edge" i.e. https -> http. -Original Message- From: Aleksandar Lazic Sent: Thursday, August 23, 2018 4:30 PM To: Norman Branitsky ;

RE: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
yes it looks complicated but you only need the edge one as I understood your requirement. TCP -> HTTP only if some name -> else go further with TCP And it's great that this is possible with this software ;-))) Regards Aleks Ursprüngliche Nachricht Von: Norman

Re: HAProxy dynamic server address based off of variable

2018-08-23 Thread Aleksandar Lazic
Hi. First of all i suggest to update the haproxy via rpm https://haproxy.hongens.nl/. I don't think think that's possible but I can be wrong on this. Can't you use dns for this as a name is possible as server address. Regards Aleks Ursprüngliche Nachricht Von: Phani Gopal

HAProxy dynamic server address based off of variable

2018-08-23 Thread Phani Gopal Achanta
I want to dynamically route to a server by making use of a request variable ssl_fc_sni. Is it possible to configure haproxy server statement to use a variable for server address and/or port? Example backend citest3bk_spice_default server compute1 %[ssl_fc_sni] ssl verify required crt

RE: Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
Looking at the openshift router definition, I can see it implements what I want: 2. If termination is type 'edge': This is https -> http. Create a be_edge_http: backend. Incoming https traffic is terminated and sent as http to the pods. 3. If termination is type

Re: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
Hi. How about to use the following setup. frontend tcp mode tcp bind 443 use_backend default backend default mode http bind 444 ... You can take a look into the openshift router for a more detailed solution.

Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
My plan was to by default terminate SSL and send http traffic to the worker servers on port 88 while traffic with a "ucp.mydomain.com" header would be passed thru as https to the UCP management servers on port 8443. Docker Enterprise Manager nodes insist on seeing incoming commands as https and

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Adis Nezirovic
On Thu, Aug 23, 2018 at 03:43:59PM +0200, Willy Tarreau wrote: > Does this mean I should merge Adis' patch or do you want to verify > other things ? Just let me know. Willy, I'll submit new patch later today with simplified filter definitions and then we can ask Thierry for final ack for the

Re: [PATCH] REGTEST/MINOR

2018-08-23 Thread Willy Tarreau
On Thu, Aug 23, 2018 at 09:01:45AM +0200, Frederic Lecaille wrote: > Hi ML, > > Here are two patches for haproxy reg testing. (...) Applied, thanks Fred! Willy

Re: [PATCH] DOC: Fix spelling error in configuration doc

2018-08-23 Thread Willy Tarreau
On Thu, Aug 23, 2018 at 02:11:27PM +0200, Jens Bissinger wrote: > Fix spelling error in logging section of configuration doc. now applied, thank you! Willy

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Willy Tarreau
Hi Thierry, On Thu, Aug 23, 2018 at 10:53:15AM +0200, Thierry Fournier wrote: (...) > Ok, it sounds good. I think this kind of syntax is easily understandable > and it allow a good way for filtering values. Does this mean I should merge Adis' patch or do you want to verify other things ? Just

[PATCH] DOC: Fix spelling error in configuration doc

2018-08-23 Thread Jens Bissinger
Fix spelling error in logging section of configuration doc. --- doc/configuration.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 4e66aad8..6e33f599 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Thierry Fournier
Hi [...] >> I miss also the relation between oprators and between the content >> of operators. I mean AND or OR. How I understand your example: >> >> +local filter = { >> + lt={{"gpc0", 1}, {"gpc1", 2}}, >> + gt={{"conn_rate", 3}}, >> + eq={{"conn_cur", 4}} >> +} >> >>

Re: BUG: Tw is negative with lua sleep

2018-08-23 Thread Thierry Fournier
> On 22 Aug 2018, at 06:00, Patrick Hemmer wrote: > > > > On 2018/7/18 09:03, Frederic Lecaille wrote: >> Hello Patrick, >> >> On 07/17/2018 03:59 PM, Patrick Hemmer wrote: >>> Ping? >>> >>> -Patrick >>> >>> On 2018/6/22 15:10, Patrick Hemmer wrote: When using core.msleep in

Re: [PATCH] MEDIUM: reset lua transaction between http requests

2018-08-23 Thread Thierry Fournier
Hi, Your patch make sense, that’s the right appoach, but I have a doubt about the place to use for doing the reinitialization. I add Willy in this thread in order to have http2 advisor. Before the 1.8 the Lua context was reinitialized with the stream because the stream was reinitialized

Re: Multiple connections to the same URL with H2

2018-08-23 Thread Ing. Andrea Vettori
Hello, enabling http log on one of our frontends I found this in the haproxy logs when I see the ‘broken pipe’ error on the application log. Note the two calls are separated by just 11 milliseconds. [23/Aug/2018:08:38:46.731] b2b~ b2b-ssl-servers/web3 0/0/1/-1/7 -1 0 - - CDVN 36/20/0/0/0 0/0

[PATCH] REGTEST/MINOR

2018-08-23 Thread Frederic Lecaille
Hi ML, Here are two patches for haproxy reg testing. Note that we have recently added an new feature to varnishtest so that to send commands to the CLI without running a shell, socat etc (https://varnish-cache.org/docs/trunk/reference/vtc.html#haproxy). This breaks reg-tests/spoe/h0.vtc