Re: HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

I have open all port by setting firewall rules, But still get the same error Vào Th 4, 21 thg 4, 2021 lúc 23:01 thủy bùi đã viết: > I have change my configuration to TCP mode as below and restart haproxy > but still got the same error: > global maxconn 100defaults log global mode tcp retries 2 t

[PATCH 1/4] DOC: Fix indentation for `path-strip-dot` normalizer

The long explanation should be indented two additional spaces. --- doc/configuration.txt | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index de9100439..92d5ce315 100644 --- a/doc/configuration.txt +++ b/doc/configuratio

[PATCH 2/4] DOC: Fix RFC reference for the percent-to-uppercase normalizer

The section is 6.2.2.1, not 6.2.21 (missing dot). --- doc/configuration.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 92d5ce315..3330f5d43 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -6072,7 +6072,7

[PATCH 4/4] MINOR: uri_normalizer: Add a `percent-decode-unreserved` normalizer

This normalizer decodes percent encoded characters within the RFC 3986 unreserved set. See GitHub Issue #714. --- doc/configuration.txt | 44 +++- include/haproxy/action-t.h | 2 + include/haproxy/uri_normalizer.h | 1 + reg-tests/http-rules/normalize_

[PATCH 3/4] DOC: Add RFC references for the path-strip-dot(dot)? normalizers

This is RFC 3986#6.2.2.3. --- doc/configuration.txt | 7 +-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 3330f5d43..322932b5e 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -6036,7 +6036,8 @@ http-request

Re: [PATCH 0/3] Add a `strip-dot` normalizer

Willy, On 4/21/21 7:03 PM, Willy Tarreau wrote: $ curl -v https://example.com/foo///bar 2>&1 |grep GET GET /foo///bar HTTP/2 $ curl -v https://example.com/foo/../bar 2>&1 |grep GET GET /bar HTTP/2 $ curl -v https://example.com/foo//../bar 2>&1 |grep GET GET /foo/bar HTTP/2 I'm fine with p

Re: [2.2.11] 100% CPU again

On Wed, Apr 21, 2021 at 01:53:32PM +0200, Christopher Faulet wrote: > Le 21/04/2021 à 08:48, Maciej Zdeb a écrit : > > I'm very happy you managed to reproduce a similar issue! :) > The fix was merge in upstream : > > * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers >

Re: [PATCH 0/3] Add a `strip-dot` normalizer

On Wed, Apr 21, 2021 at 06:48:20PM +0200, Tim Düsterhus wrote: > Willy, > > On 4/21/21 12:11 PM, Willy Tarreau wrote: > > > For the existing path ones I'd suggest: > > > > > >http-request normalize-uri filesystem > > > > > > that combines path-strip-dot, path-strip-dotdot, path-merge-slashes

Re: [PATCH 0/3] Add a `strip-dot` normalizer

Willy, On 4/21/21 12:11 PM, Willy Tarreau wrote: For the existing path ones I'd suggest: http-request normalize-uri filesystem that combines path-strip-dot, path-strip-dotdot, path-merge-slashes in an useful order. The only thing is that "filesystem" doesn't imply at all that it applies t

Re: HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

I have change my configuration to TCP mode as below and restart haproxy but still got the same error: global maxconn 100defaults log global mode tcp retries 2 timeout client 30m timeout connect 4s timeout server 30m timeout check 5slisten stats mode tcp bind *:8009 stats enable stats uri /listen po

Re: HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

Hei, On Wed, 2021-04-21 at 16:27 +0100, Andrew Smalley wrote: > From the look of  your configuration you are using  HTTP Mode, for > PostgreSQL, you will need a TCP VIP > > I noted this because of the HTTP check > > try using  "mode tcp" > defaults has mode tcp: defaults log global mo

Re: HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

>From the look of your configuration you are using HTTP Mode, for PostgreSQL, you will need a TCP VIP I noted this because of the HTTP check try using "mode tcp" Andruw Smalley Loadbalancer.org Ltd. www.loadbalancer.org +1 888 867 9504 / +44 (0)330 380 1064 asmal...@loadbalancer.org Leave

Re: HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

Hi, On Wed, 2021-04-21 at 21:55 +0700, thủy bùi wrote: > Dear HAproxy dev,I have install all the requirement of HAproxy into the > system alongside with patroni and etcd, but finding error while call into > port 5000. > The information is provided as below. > Please help me find out the issue. > I

HAPROXY CAN NOT POINT IN TO PORT 5000 OF PATRONI

Dear HAproxy dev, I have install all the requirement of HAproxy into the system alongside with patroni and etcd, but finding error while call into port 5000. The information is provided as below. Please help me find out the issue. I have running HAproxy successfully [image: image]

Re: [2.2.11] 100% CPU again

Le 21/04/2021 à 08:48, Maciej Zdeb a écrit : I'm very happy you managed to reproduce a similar issue! :) The fix was merge in upstream : * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers (http://git.haproxy.org/?p=haproxy.git;a=commit;h=07f88d75) It has not been ba

Re: [PATCH 0/3] Add a `strip-dot` normalizer

Le 21/04/2021 à 00:22, Maximilian Mader a écrit : Hi Christopher, Tim and I were talking while he was working on the URI normalizers and as a fun evening exercise I decided to write a simple normalizer to remove single dots from the path component. While looking over his code to get an understan

Illegal instruction - 2.2 on AMD/Sempron ?

Stock 1.8.19-1+deb10u3 on Debian10 runs fine, but when I install 2.2.8-1~bpo10+1 from buster-backports, I get "Illegal instruction" ? Is my CPU just too historic ? # strace -f ./haproxy -f ~/haproxy.cfg ... openat(AT_FDCWD, "/etc/haproxy/errors/504.http", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|06

Re: [PATCH 0/3] Add a `strip-dot` normalizer

Hi Tim, On Wed, Apr 21, 2021 at 12:02:58PM +0200, Tim Düsterhus wrote: > Yes, I already replied to Christopher during the initial review that > providing combined normalizers definitely makes sense. Ah OK I didn't understand that it was what you meant. > For the existing path ones I'd suggest: >

Re: [PATCH 0/3] Add a `strip-dot` normalizer

Willy, On 4/21/21 6:57 AM, Willy Tarreau wrote: This whole series looks good to me (of course) :-) I'm fine with this one at first glance, but I *really* think that we need to seriously think about merging all the path* normalizers into a single "path". There is no reason for having users ite

Re: Proposal about libslz integration into haproxy

On Wed, Apr 21, 2021 at 10:03:16AM +0200, William Lallemand wrote: > Hello, > > On Wed, Apr 21, 2021 at 08:04:08AM +0200, Willy Tarreau wrote: > > [...] > > > > So after changing my mind, I would go with the following approach: > > > > - building with USE_SLZ=1 => always use the embedded one

Re: Proposal about libslz integration into haproxy

Hello, On Wed, Apr 21, 2021 at 08:04:08AM +0200, Willy Tarreau wrote: > [...] > > So after changing my mind, I would go with the following approach: > > - building with USE_SLZ=1 => always use the embedded one > - building with USE_ZLIB=1 => always build using the user-provided zlib > > We

Re: Proposal about libslz integration into haproxy

On Wed, Apr 21, 2021 at 09:36:52AM +0200, Tim Düsterhus wrote: > Willy, > > [cleaning CC List] > > On 4/21/21 8:04 AM, Willy Tarreau wrote: > > Does anyone have any opinion, objection or suggestion on this (especially > > those in CC who participated to the first discussion or who could have > >

Re: [2.2.11] 100% CPU again

Le 21/04/2021 à 08:48, Maciej Zdeb a écrit : I'm very happy you managed to reproduce a similar issue! :) Does it affect 2.3.9? I've experienced 100% cpu on it also. But on 2.3 ALL threads loops on _do_poll/epoll_wait and threads did not hang on a particular h2 session. :( I'll check twice and

Re: Proposal about libslz integration into haproxy

Willy, [cleaning CC List] On 4/21/21 8:04 AM, Willy Tarreau wrote: Does anyone have any opinion, objection or suggestion on this (especially those in CC who participated to the first discussion or who could have packaging concerns) ? Barring any comment I think I'm going to do this tomorrow so