Re: [ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Vincent Bernat
❦ 19 mars 2021 17:34 +01, Christopher Faulet: > HAProxy 1.6.16 was released on 2021/03/19. It added 71 new commits > after version 1.6.15. 1.6 was EOL last year, I don't understand why there is a last release. Both 1.6 and 1.7 are marked for critical fixes but many fixes are pushed in it. The ri

[PATCH] cleanup #1162 coverity "finding"

2021-03-19 Thread Илья Шипицин
Hello, pure cleanup, should fix #1162 Ilya From 7915f3ed189e0db371699fa8c8eb74a69584ed27 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 19 Mar 2021 23:06:36 +0500 Subject: [PATCH] CLEANUP: move "tmp_ssl" definition and usage only when it is required if we do not have HAVE_SSL_CTX_get

Re: [PATCH] update libressl to 3.2.5, enable tls session resumption in reg-tests

2021-03-19 Thread Tim Düsterhus
Willy, Am 19.03.21 um 18:52 schrieb Илья Шипицин: > let us update libressl to 3.2.5 and revert previously disabled tls session > resumption in reg-test > Both of these look good to me. Best regards Tim Düsterhus

[PATCH] update libressl to 3.2.5, enable tls session resumption in reg-tests

2021-03-19 Thread Илья Шипицин
Hello, let us update libressl to 3.2.5 and revert previously disabled tls session resumption in reg-test Ilya From 6453e067c877db1ac98f92220dccebab572eaaf1 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 19 Mar 2021 22:29:16 +0500 Subject: [PATCH 1/2] CI: github actions: update LibreSS

Re: [ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Willy Tarreau
On Fri, Mar 19, 2021 at 06:30:27PM +0100, Tim Düsterhus wrote: > Willy, > > Am 19.03.21 um 18:29 schrieb Willy Tarreau: > > [...] I know Christopher will harrass me if I > > forget anyway :-) > > Be assured, I will as well :-) No doubt :-) And that offloads my brain quite a lot! Cheers, Willy

Re: [ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Tim Düsterhus
Willy, Am 19.03.21 um 18:29 schrieb Willy Tarreau: > [...] I know Christopher will harrass me if I > forget anyway :-) Be assured, I will as well :-) Best regards Tim Düsterhus

Re: [ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Willy Tarreau
On Fri, Mar 19, 2021 at 06:25:24PM +0100, Tim Düsterhus wrote: > Christopher, > Willy, > > Am 19.03.21 um 17:34 schrieb Christopher Faulet: > > The 1.6 branch is EOL now. Thus, it is the last 1.6 release. No further > > Don't forget to update the color of the table on haproxy.org :-) Same > proba

Re: [ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Tim Düsterhus
Christopher, Willy, Am 19.03.21 um 17:34 schrieb Christopher Faulet: > The 1.6 branch is EOL now. Thus, it is the last 1.6 release. No further Don't forget to update the color of the table on haproxy.org :-) Same probably applies to 2.1, even if you don't rule out critical fixes for it. And I als

[ANNOUNCE] haproxy-2.4-dev13

2021-03-19 Thread Willy Tarreau
Hi, HAProxy 2.4-dev13 was released on 2021/03/19. It added 40 new commits after version 2.4-dev12. The number of bug fixes is shrinking (only 6 this week), this is a good sign! I personally haven't made progress on any of the parts I expected to work on last week, so these are just postponed. In

Re: [ANNOUNCE] haproxy-2.3.7

2021-03-19 Thread Willy Tarreau
On Fri, Mar 19, 2021 at 08:15:34PM +0300, Dmitry Sivachenko wrote: > No, it does not, just the message has changed slightly: > > src/mux_h2.c:4032:49: warning: implicit conversion from 'unsigned int' to > 'unsigned short' changes value from 4294934527 to 32767 > [-Wconstant-conversion] >

[PATCH] spelling fixes

2021-03-19 Thread Илья Шипицин
Hello, yet another spelling fix. Ilya From 19b36c9c9b227d918a44dcc830ea197da145cd32 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 19 Mar 2021 22:15:12 +0500 Subject: [PATCH 1/2] CI: codespell: whitelist "Dragan Dosen" let us tell codespell that "Dosen" is legitimate spelling --- .gi

Re: [ANNOUNCE] haproxy-2.3.7

2021-03-19 Thread Dmitry Sivachenko
> On 19 Mar 2021, at 19:13, Willy Tarreau wrote: > > > Grrr... And C compiler authors are still wondering why people hate C > when it's that their compilers are this pedantic :-( > > Could you please try to append a 'U' after "0x8000" in > include/haproxy/task-t.h, > like this: > > #defin

is it possible to rotate TLS keys in scheduled way ?

2021-03-19 Thread Илья Шипицин
Hello, can we have the following ? 1) TLS tickets are persistent, i.e. they survive reload 2) we can specify ttl of tickets Ilya

[ANNOUNCE] haproxy-1.6.16

2021-03-19 Thread Christopher Faulet
Hi, HAProxy 1.6.16 was released on 2021/03/19. It added 71 new commits after version 1.6.15. The 1.6 branch is EOL now. Thus, it is the last 1.6 release. No further release should be expected. It contains all pending patches marked to be backported to the 1.6 to leave it in a proper state. Have

HTTP2 concurrent streams and connection count

2021-03-19 Thread Olivier D
Hello, I'm investigating an issue on specific rules for a customer. The rules are the following : stick-table type ipv6 size 6 expire 1h store conn_cur,conn_rate(10s) http-request deny deny_status 429 if { src_conn_cur ge 100 } http-request deny deny_status 429 if { src_conn_rate

[ANNOUNCE] haproxy-1.7.13

2021-03-19 Thread Christopher Faulet
Hi, HAProxy 1.7.13 was released on 2021/03/19. It added 114 new commits after version 1.7.12. The previous release is quite old now. So this one is emitted to flush the pipe. Honestly it will be too long to remember the context of all fixes, most of them quite old now. Refer to the following cha

Re: [ANNOUNCE] haproxy-2.3.7

2021-03-19 Thread Willy Tarreau
Hi Dmitry, On Tue, Mar 16, 2021 at 10:34:15PM +0300, Dmitry Sivachenko wrote: > > > > On 16 Mar 2021, at 18:01, Christopher Faulet wrote: > > > > Hi, > > > > HAProxy 2.3.7 was released on 2021/03/16. It added 62 new commits > > after version 2.3.6. > > > > This release is mainly about two su

Re: Unexpectedly high memory usage when loading large maps

2021-03-19 Thread Willy Tarreau
Hello, On Tue, Mar 16, 2021 at 11:16:35PM +, Bren wrote: > Hello, > > (I tried subscribing to this list a few times but it appears that subscribing > isn't working. Any responses will probably have to be CCed to me for now. > Thank you.) Strange, you should have received a message to confirm

Re: [2.2.9] 100% CPU usage

2021-03-19 Thread Christopher Faulet
Le 16/03/2021 à 13:46, Maciej Zdeb a écrit : Sorry for spam. In the last message I said that the old process (after reload) is consuming cpu for lua processing and that's not true, it is processing other things also. I'll take a break. ;) Then I'll verify if the issue exists on 2.3 and maybe 2

[ANNOUNCE] haproxy-1.8.29

2021-03-19 Thread Amaury Denoyelle
Hi, HAProxy 1.8.29 was released on 2021/03/19. It added 40 new commits after version 1.8.28. As again, this is mainly a release with a collection of fixes which improve the overall quality and stability of haproxy. Here is a list of the most notables changes : - William D. and Christopher give s