Hi Thierry,
On Thu, Aug 23, 2018 at 09:37:43AM +0200, Thierry Fournier wrote:
> Hi,
>
> Your patch make sense, that's the right appoach, but I have a doubt about
> the place to use for doing the reinitialization.
>
> I add Willy in this thread in order to have http2 advisor.
>
> Before the
Hi Daniel,
We had similar issue in 2015, and the answer was: server timeout was too
short. Simple.
On Thu, 23 Aug 2018 9:56 pm Daniel Schneller <
daniel.schnel...@centerdevice.com> wrote:
> Friendly bump.
> I'd volunteer to do some documentation amendments once I understand the
> issue better
Actually items 2 and 3 below are what I want:
If hostname "ucp.mydomain.com" then "reencrypt" i.e. https -> https
else normal SSL termination - "edge" i.e. https -> http.
-Original Message-
From: Aleksandar Lazic
Sent: Thursday, August 23, 2018 4:30 PM
To: Norman Branitsky ;
yes it looks complicated but you only need the edge one as I understood your
requirement.
TCP -> HTTP only if some name
-> else go further with TCP
And it's great that this is possible with this software ;-)))
Regards
Aleks
Ursprüngliche Nachricht
Von: Norman
Hi.
First of all i suggest to update the haproxy via rpm
https://haproxy.hongens.nl/.
I don't think think that's possible but I can be wrong on this.
Can't you use dns for this as a name is possible as server address.
Regards
Aleks
Ursprüngliche Nachricht
Von: Phani Gopal
I want to dynamically route to a server by making use of a request
variable ssl_fc_sni.
Is it possible to configure haproxy server statement to use a variable for
server address and/or port?
Example
backend citest3bk_spice_default
server compute1 %[ssl_fc_sni] ssl verify required crt
Looking at the openshift router definition, I can see it implements what I want:
2. If termination is type 'edge': This is https -> http. Create a
be_edge_http: backend.
Incoming https traffic is terminated and sent as http to the pods.
3. If termination is type
Hi.
How about to use the following setup.
frontend tcp
mode tcp
bind 443
use_backend default
backend default
mode http
bind 444
...
You can take a look into the openshift router for a more detailed solution.
My plan was to by default terminate SSL and send http traffic to the worker
servers on port 88 while traffic with a "ucp.mydomain.com" header
would be passed thru as https to the UCP management servers on port 8443.
Docker Enterprise Manager nodes insist on seeing incoming commands as https and
On Thu, Aug 23, 2018 at 03:43:59PM +0200, Willy Tarreau wrote:
> Does this mean I should merge Adis' patch or do you want to verify
> other things ? Just let me know.
Willy,
I'll submit new patch later today with simplified filter definitions and
then we can ask Thierry for final ack for the
On Thu, Aug 23, 2018 at 09:01:45AM +0200, Frederic Lecaille wrote:
> Hi ML,
>
> Here are two patches for haproxy reg testing.
(...)
Applied, thanks Fred!
Willy
On Thu, Aug 23, 2018 at 02:11:27PM +0200, Jens Bissinger wrote:
> Fix spelling error in logging section of configuration doc.
now applied, thank you!
Willy
Hi Thierry,
On Thu, Aug 23, 2018 at 10:53:15AM +0200, Thierry Fournier wrote:
(...)
> Ok, it sounds good. I think this kind of syntax is easily understandable
> and it allow a good way for filtering values.
Does this mean I should merge Adis' patch or do you want to verify
other things ? Just
Fix spelling error in logging section of configuration doc.
---
doc/configuration.txt | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/doc/configuration.txt b/doc/configuration.txt
index 4e66aad8..6e33f599 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@
Hi
[...]
>> I miss also the relation between oprators and between the content
>> of operators. I mean AND or OR. How I understand your example:
>>
>> +local filter = {
>> + lt={{"gpc0", 1}, {"gpc1", 2}},
>> + gt={{"conn_rate", 3}},
>> + eq={{"conn_cur", 4}}
>> +}
>>
>>
> On 22 Aug 2018, at 06:00, Patrick Hemmer wrote:
>
>
>
> On 2018/7/18 09:03, Frederic Lecaille wrote:
>> Hello Patrick,
>>
>> On 07/17/2018 03:59 PM, Patrick Hemmer wrote:
>>> Ping?
>>>
>>> -Patrick
>>>
>>> On 2018/6/22 15:10, Patrick Hemmer wrote:
When using core.msleep in
Hi,
Your patch make sense, that’s the right appoach, but I have a doubt about
the place to use for doing the reinitialization.
I add Willy in this thread in order to have http2 advisor.
Before the 1.8 the Lua context was reinitialized with the stream because
the stream was reinitialized
Hello, enabling http log on one of our frontends I found this in the haproxy
logs when I see the ‘broken pipe’ error on the application log. Note the two
calls are separated by just 11 milliseconds.
[23/Aug/2018:08:38:46.731] b2b~ b2b-ssl-servers/web3 0/0/1/-1/7 -1 0 - - CDVN
36/20/0/0/0 0/0
Hi ML,
Here are two patches for haproxy reg testing.
Note that we have recently added an new feature to varnishtest so that
to send commands to the CLI without running a shell, socat etc
(https://varnish-cache.org/docs/trunk/reference/vtc.html#haproxy). This
breaks reg-tests/spoe/h0.vtc
19 matches
Mail list logo