Re: [PATCH] use better ec curves manipulation detection

2020-11-04 Thread Илья Шипицин
ср, 4 нояб. 2020 г. в 20:14, Willy Tarreau : > Hi Ilya, > > On Wed, Nov 04, 2020 at 12:43:44AM +0500, ??? wrote: > > Hi, > > > > let us use macros instead of openssl versions. > > > > Cheers, > > Ilya > > > From 278857e7d21e593e1b5a05a05605c89bdb08581d Mon Sep 17 00:00:00 2001 > > From:

[PATCH] do not run "slow" and "broken" tests for openssl no-deprecated builds

2020-11-03 Thread Илья Шипицин
Hi, occasionely all tests were run (weekly) for openssl special mode tests. let us remove "broken" and "slow" from those runs. Ilya From 507b061c7c8cac8c16a05f44fdc2e926f9ba6be5 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 4 Nov 2020 00:41:39 +0500 Subject: [PATCH 2/2] CI: github

[PATCH] use better ec curves manipulation detection

2020-11-03 Thread Илья Шипицин
Hi, let us use macros instead of openssl versions. Cheers, Ilya From 278857e7d21e593e1b5a05a05605c89bdb08581d Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 4 Nov 2020 00:39:07 +0500 Subject: [PATCH 1/2] BUILD: ssl: use feature macros for detecting ec curves manipulation support let

[PATCH] check ssl keylog by feature, not by version defined

2020-11-03 Thread Илья Шипицин
Hi, the less we use HA_OPENSSL_VERSION_NUMBER, the better. cheers, Ilya From 0b38595c44b42008fd3e31eb6cbdb28f8b518427 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Tue, 3 Nov 2020 14:15:38 +0500 Subject: [PATCH] BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions let us use

Re: [ANNOUNCE] haproxy-2.3-dev9

2020-11-03 Thread Илья Шипицин
вт, 3 нояб. 2020 г. в 13:51, William Lallemand : > On Mon, Nov 02, 2020 at 05:17:53PM +0500, Илья Шипицин wrote: > > сб, 31 окт. 2020 г. в 17:53, Willy Tarreau : > > > > > Hi, > > > > > > HAProxy 2.3-dev9 was released on 2020/10/31. It added 2

Re: [ANNOUNCE] haproxy-2.3-dev9

2020-11-02 Thread Илья Шипицин
сб, 31 окт. 2020 г. в 17:53, Willy Tarreau : > Hi, > > HAProxy 2.3-dev9 was released on 2020/10/31. It added 27 new commits > after version 2.3-dev8. > > Things have cooled down quite a bit, I really appreciate it. To be > honest, I've really been hesitating between releasing 2.3-final now > or

[PATCH] improve openssl feature detection

2020-10-30 Thread Илья Шипицин
hi, let us use SSL_CTRL_GET_RAW_CIPHERLIST instead of versions. cheers, Ilya From bdc70715eab6e1b036c31a8a49c6e3b6ae6407e7 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 31 Oct 2020 02:10:02 +0500 Subject: [PATCH] BUILD: ssl: use SSL_CTRL_GET_RAW_CIPHERLIST instead of OpenSSL

Re: [PATCH] SNI: switch to feature based detection instead of version based

2020-10-28 Thread Илья Шипицин
please ignore this patch. I'll send better one ср, 28 окт. 2020 г. в 11:17, Илья Шипицин : > hi, > > it is ongoing simplification process. > we want to depend on versions as less as possible. > > Ilya >

[PATCH] SNI: switch to feature based detection instead of version based

2020-10-28 Thread Илья Шипицин
hi, it is ongoing simplification process. we want to depend on versions as less as possible. Ilya From e84681e9ba4ae98cca727554a94e0760dd7066df Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 28 Oct 2020 11:13:32 +0500 Subject: [PATCH] BUILD: ssl: use more elegant way for detection

Re: [PATCH] refactor specific openssl early data detection check

2020-10-27 Thread Илья Шипицин
Good good good On Tue, Oct 27, 2020, 5:10 PM William Lallemand wrote: > On Sat, Oct 24, 2020 at 11:51:57PM +0500, Илья Шипицин wrote: > > Hi, > > > > "#ifdef SSL_READ_EARLY_DATA_SUCCESS" seem to be better > > than version based check. > > > &g

Re: [PATCH] refactor specific openssl early data detection check

2020-10-27 Thread Илья Шипицин
ping :) сб, 24 окт. 2020 г. в 23:51, Илья Шипицин : > Hi, > > "#ifdef SSL_READ_EARLY_DATA_SUCCESS" seem to be better > than version based check. > > it is preparation to unlocking BoringSSL 1.1.1 compatibility version. > > > > cheers, > Ilya >

Re: [PATCH] BUG/MEDIUM: ssl: OCSP must work with BoringSSL

2020-10-26 Thread Илья Шипицин
it should backported to 2.2, 2.1, right ? пн, 26 окт. 2020 г. в 18:35, : > ‌‌Hi, > > It's a fix for a regression with OCSP and BoringSSL. > OCSP work with BorginSSL, not at the same way than openssl, but it work: > OCSP data is simply link to CTX context. > > ++ > Manu > > >

[PATCH] update h2spec to 2.6.0

2020-10-25 Thread Илья Шипицин
Hi, we missed couple of releases. Ilya From 69f09380ea4f41364921f945c81cf4d3b83d751e Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 25 Oct 2020 19:36:02 +0500 Subject: [PATCH] CI: github actions: update h2spec to 2.6.0 --- .github/workflows/h2spec.yml | 2 +- 1 file changed, 1

[PATCH] refactor specific openssl early data detection check

2020-10-24 Thread Илья Шипицин
Hi, "#ifdef SSL_READ_EARLY_DATA_SUCCESS" seem to be better than version based check. it is preparation to unlocking BoringSSL 1.1.1 compatibility version. cheers, Ilya From 9839ce3ca71090270f3b44b5ad71112b8aa8f81c Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 24 Oct 2020 23:42:30

ongoing 2.3 release / libressl / tls 1.3

2020-10-22 Thread Илья Шипицин
hi, when 2.3 is scheduled ? do we have time and will to test tls 1.3 on libressl ? release notes: We have released LibreSSL 3.2.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 3.2 series, which is included with

Re: stable-bot: Bugfixes waiting for a release 2.2 (20), 2.1 (16), 2.0 (15), 1.8 (20)

2020-10-22 Thread Илья Шипицин
can we backport http://git.haproxy.org/?p=haproxy.git;a=commit;h=b3201a3e077198b3f75ebe8661aa45589b811552 to 2.1 as well ? it was not scheduled, but it is required to fix BoringSSL builds чт, 22 окт. 2020 г. в 20:19, : > Hi, > > This is a friendly bot that watches fixes pending for the next >

Re: [PATCH] update trvis-ci to Ubuntu 20.04

2020-10-22 Thread Илья Шипицин
чт, 22 окт. 2020 г. в 13:16, William Lallemand : > Hello Ilya, > > On Wed, Oct 21, 2020 at 03:15:13PM +0500, Илья Шипицин wrote: > >apt: > > update: true > > -packages: [ liblua5.3-dev, libsystemd-dev, libpcre2-dev, clang-9, > socat, ninja-build ] >

[PATCH] update trvis-ci to Ubuntu 20.04

2020-10-21 Thread Илья Шипицин
hello, we were blocked by https://github.com/vtest/VTest/issues/20 now we can update. Ilya From 3851d6bb00338dc7cc485014af0ca7adb258cb6d Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 21 Oct 2020 15:12:29 +0500 Subject: [PATCH] CI: travis-ci: switch to Ubuntu 20.04 we were blocked by

Re: [PATCH] change BoringSSL emulated version back to 1.1.0

2020-10-19 Thread Илья Шипицин
I've just tested, this patch is required for 2.1 as well (it was applied today for 2.2 and master) вс, 18 окт. 2020 г. в 09:14, Илья Шипицин : > this is only for master > > вс, 18 окт. 2020 г. в 09:04, Илья Шипицин : > >> Hi, >> >> this is straightfo

Re: [PATCH] guard RAND_keep_random_devices_open from BoringSSL

2020-10-19 Thread Илья Шипицин
пн, 19 окт. 2020 г. в 16:17, William Lallemand : > On Sat, Oct 17, 2020 at 12:19:09AM +0500, Илья Шипицин wrote: > > while BoringSSL claims to be 1.1.1 compatible, it still misses few > > functions. > > let us add guards (there'll be more in next few days) > > >

Re: [PATCH] change BoringSSL emulated version back to 1.1.0

2020-10-19 Thread Илья Шипицин
пн, 19 окт. 2020 г. в 13:18, William Lallemand : > On Sun, Oct 18, 2020 at 09:04:51AM +0500, Илья Шипицин wrote: > > Hi, > > > > this is straightforward patch, which is supposed to be backported to all > > versions. > > master also requires another small patch, w

Re: [PATCH] change BoringSSL emulated version back to 1.1.0

2020-10-17 Thread Илья Шипицин
this is only for master вс, 18 окт. 2020 г. в 09:04, Илья Шипицин : > Hi, > > this is straightforward patch, which is supposed to be backported to all > versions. > master also requires another small patch, will be sent later. > > cheers, > Ilya > From b34b5ccd8ef31

[PATCH] change BoringSSL emulated version back to 1.1.0

2020-10-17 Thread Илья Шипицин
Hi, this is straightforward patch, which is supposed to be backported to all versions. master also requires another small patch, will be sent later. cheers, Ilya From 8cec1c658607a1370bd87682717f5f6512f242d6 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 18 Oct 2020 08:55:39 +0500

Re: From 2.1.9 compilation fails with BoringSSL

2020-10-16 Thread Илья Шипицин
will be released next few days. вс, 11 окт. 2020 г. в 23:50, Илья Шипицин : > for master branch (I sent travis-ci patch): > > > > sr/include -DCONFIG_HAPROXY_VERSION=\"2.3-dev6\" > -DCONFIG_HAPROXY_DATE=\"2020/10/10\" -c -o src/ssl_crtlist.o > src/ssl_c

[PATCH] guard RAND_keep_random_devices_open from BoringSSL

2020-10-16 Thread Илья Шипицин
while BoringSSL claims to be 1.1.1 compatible, it still misses few functions. let us add guards (there'll be more in next few days) cheers, Ilya From da98de10e55183319f773032f1518121227396b3 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 17 Oct 2020 00:07:53 +0500 Subject: [PATCH]

Re: From 2.1.9 compilation fails with BoringSSL

2020-10-11 Thread Илья Шипицин
l_sock_free_ocsp(struct certificate_ocsp *ocsp) | ^~ cc1: all warnings being treated as errors вс, 11 окт. 2020 г. в 23:19, Илья Шипицин : > seems, our CI for boringssl is broken. I see "openssl" there > > https://travis-ci.com/github/haproxy/hapr

[PATCH] CI: fix BoringSSL builds

2020-10-11 Thread Илья Шипицин
Hello, it's shame, we got BoringSSL broken for some time for no reason. Ilya From 8aa0885f38147572974e434518f1e4f3ab44398d Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 11 Oct 2020 23:42:51 +0500 Subject: [PATCH] CI: travis-ci: replace not defined SSL_LIB, SSL_INC for BotringSSL

Re: From 2.1.9 compilation fails with BoringSSL

2020-10-11 Thread Илья Шипицин
seems, our CI for boringssl is broken. I see "openssl" there https://travis-ci.com/github/haproxy/haproxy/jobs/397911591#L1102-L1103 вс, 11 окт. 2020 г. в 15:06, László Soós : > Hi Willy, All, > > Starting from 2.1.9 compilation fails with: > > src/ssl_sock.c:1231:39: warning: 'struct

[PATCH] help coverity to detect BUG_ON as a real stop

2020-10-08 Thread Илья Шипицин
Hello,, I added DEBUG_STRICT=1 to coverity build definition. hopefully, it will resolve 1 coverity issue. Cheers, Ilya Shipitcin From ab5ab86b0398eb063f3d6ee392207b0238e9e083 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 9 Oct 2020 03:05:11 +0500 Subject: [PATCH] CI: travis-ci: help

Re: [PR] SOCKS4(A)

2020-10-02 Thread Илья Шипицин
пт, 2 окт. 2020 г. в 12:58, Willy Tarreau : > On Fri, Oct 02, 2020 at 12:49:02PM +0500, ??? wrote: > > > Alex also sent me a piece of config supposed to reproduce the socks4 > > > regression regarding the checks, but I haven't tested yet, and since it > > > seems to include some private

Re: [PR] SOCKS4(A)

2020-10-02 Thread Илья Шипицин
пт, 2 окт. 2020 г. в 11:58, Willy Tarreau : > Guys, > > quick note, Alex contacted me offline saying his PR will be deleted > soon, asked me to save it before this happens (which I did) and not to > be contacted anymore (which I totally respect and kindly ask anyone else > to respect). > > He

Re: [PR] SOCKS4(A)

2020-10-01 Thread Илья Шипицин
чт, 1 окт. 2020 г. в 17:25, Willy Tarreau : > On Thu, Oct 01, 2020 at 01:45:05PM +0200, Nicolas CARPi wrote: > > Yes Willy, we want to know! Why the hell you keep using C and don't > > switch to C++? > > Seriously, do you know any single more tasteless language ? Even > brainfuck is more

Re: [PATCH] BUILD: makefile: Enable closefrom() support on Solaris

2020-09-30 Thread Илья Шипицин
there also several documentation files like this one https://github.com/haproxy/haproxy/blob/master/INSTALL#L159 can you please review documentation as well ? чт, 1 окт. 2020 г. в 00:49, Brad Smith : > Solaris 9 (released 2002) added support for closefrom(). > > I bumped the version in the

Re: [PATCH] REGTESTS: replace "which" with POSIX "command"

2020-09-26 Thread Илья Шипицин
On Sat, Sep 26, 2020, 1:39 PM Willy Tarreau wrote: > On Sat, Sep 26, 2020 at 01:21:22PM +0500, ??? wrote: > > Fedora docker also comes without "find" utility > > > > ## Gathering tests to run > ## > > ./scripts/run-regtests.sh: line 131:

Re: [PATCH] REGTESTS: replace "which" with POSIX "command"

2020-09-26 Thread Илья Шипицин
сб, 26 сент. 2020 г. в 13:14, Willy Tarreau : > Hi Ilya, > > On Sat, Sep 26, 2020 at 11:58:48AM +0500, ??? wrote: > > Hello, > > > > I've found that "socat" was not properly detected under Fedora docker > image. > > Thanks, now applied. > > > (maybe we should introduce "set -e" as well)

[PATCH] REGTESTS: replace "which" with POSIX "command"

2020-09-26 Thread Илья Шипицин
Hello, I've found that "socat" was not properly detected under Fedora docker image. (maybe we should introduce "set -e" as well) Cheers, Ilya Shipitcin From 0063a45f37c18f305ea3e1155c87e071ccce7600 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 26 Sep 2020 11:54:27 +0500 Subject:

Re: Is spoa thread safe?

2020-09-22 Thread Илья Шипицин
Can try to rebuild haproxy with thread sanitizer? Or describe repro steps On Mon, Sep 21, 2020, 9:49 PM Reinhard Vicinus wrote: > Hi, > > if I try to connect to a spoa server with haproxy 2.2.3 and nbthread > greater then 1, then if n is the nbthread value, only the first and > thereafter n-th

Re: Right way to get file version with Data Plane API?

2020-09-21 Thread Илья Шипицин
version is required if you wish to perform complex change, "transaction" in terms of dataplane api. for simple change indeed it is not required. пн, 21 сент. 2020 г. в 14:29, Jonathan Matthews : > I’ve not used the API yet, but my reading of those docs, alongside some > previous experience,

Re: Right way to get file version with Data Plane API?

2020-09-21 Thread Илья Шипицин
you can get version by REST api. here's an example in PowerShell *$version* = Invoke-RestMethod -Method 'GET' -Uri 'http://xxx.xxx.xxx:/v1/services/haproxy/sites' -Credential $Cred -AllowUnencryptedAuthentication $transaction = Invoke-RestMethod -Method 'POST' -Uri

Re: Right way to get file version with Data Plane API?

2020-09-18 Thread Илья Шипицин
what do you mean by "file version" ? пт, 18 сент. 2020 г. в 12:57, Ricardo Fraile : > Hello, > > Getting the file version seems to be one of the first things to do at > the beginning of using the API, but I can't find an easy and clear way > to get it. > > It seems extrange that that thing

Re: Haproxy 2.2.3 source

2020-09-16 Thread Илья Шипицин
ср, 16 сент. 2020 г. в 16:33, Carlos Goncalves : > > > On Wed, Sep 9, 2020 at 7:53 PM Willy Tarreau wrote: > >> On Wed, Sep 09, 2020 at 07:20:17PM +0200, Willy Tarreau wrote: >> > Feel free to pick this patch if that helps for your builds, I'm going >> > to backport it to 2.2 once all platforms

Re: [PATCH] BUILD: makefile: Update feature flags for Solaris / FreeBSD / NetBSD / OpenBSD

2020-09-15 Thread Илья Шипицин
Brad, can you also review cirrus-ci job for freebsd? On Tue, Sep 15, 2020, 1:06 PM Brad Smith wrote: > On 9/15/2020 3:45 AM, Lukas Tribus wrote: > > On Tue, 15 Sep 2020 at 09:05, Brad Smith wrote: > NetBSD 8.0 adds support for accept4() and closefrom(). Enable > getaddrinfo(). > >>> We

Re: [PATCH] travis-ci: report asan findings in more intelligent way

2020-09-15 Thread Илья Шипицин
ping пт, 4 сент. 2020 г. в 11:53, Илья Шипицин : > any attention to this ? > > чт, 27 авг. 2020 г. в 21:08, Илья Шипицин : > >> Hello, >> >> asan findings were mixed with reg-tests errors and it was hard to >> investigate. >> >> Cheers, >> Ilya Shipitcin >> >

Re: [PATCH] BUILD: makefile: change default value of CC from gcc to cc

2020-09-14 Thread Илья Шипицин
вт, 15 сент. 2020 г. в 02:42, Brad Smith : > On 9/14/2020 5:26 AM, Willy Tarreau wrote: > > Hi Brad, > > > > On Sun, Sep 13, 2020 at 02:53:06AM -0400, Brad Smith wrote: > >> Change the default value of CC from gcc to cc to be more appropriate > >> for modern day mix of compilers. On GCC based

Re: [PATCH] ci: travis-ci: help coverity to recognize abort

2020-09-12 Thread Илья Шипицин
so, it is good time to adjust .gitignore :) I also added commit message with explanation. I'm ok if you modify it by your will. чт, 10 сент. 2020 г. в 22:34, Willy Tarreau : > Hi Ilya, > > On Thu, Sep 10, 2020 at 09:45:08PM +0500, ??? wrote: > > ping :) > > Ah sorry, thanks for the

Re: [PATCH] ci: travis-ci: help coverity to recognize abort

2020-09-10 Thread Илья Шипицин
ping :) вс, 6 сент. 2020 г. в 13:40, Илья Шипицин : > Hello, > > based on discussion https://github.com/haproxy/haproxy/issues/755 > > cheers, > Ilya Shipitcin >

Re: Haproxy 2.2.3 source

2020-09-09 Thread Илья Шипицин
how do you build armh ? can you share details ? if that's cross build, we can easily add to github actions, for example. unfortunately, it is hard to get armh native CI. ср, 9 сент. 2020 г. в 20:01, Willy Tarreau : > On Tue, Sep 08, 2020 at 11:47:25PM +0200, Vincent Bernat wrote: > > ? 8

[PATCH] ci: travis-ci: help coverity to recognize abort

2020-09-06 Thread Илья Шипицин
Hello, based on discussion https://github.com/haproxy/haproxy/issues/755 cheers, Ilya Shipitcin From f02b672daf08cb94eff13dd07f575f37ae6a Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 6 Sep 2020 13:34:25 +0500 Subject: [PATCH 2/2] CI: travis-ci: help Coverity to recognize abort()

Re: [PATCH] travis-ci: report asan findings in more intelligent way

2020-09-04 Thread Илья Шипицин
any attention to this ? чт, 27 авг. 2020 г. в 21:08, Илья Шипицин : > Hello, > > asan findings were mixed with reg-tests errors and it was hard to > investigate. > > Cheers, > Ilya Shipitcin >

Re: HAProxy and Apache reverse proxy with TLS passthrough

2020-09-03 Thread Илья Шипицин
seems, you are talking about SNI routing. i.e. L7 routing based on server name extension sent in SSL Client Helo. will the following work for you ? https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/ чт, 3 сент. 2020 г. в 00:42, Tom Browder :

[PATCH] travis-ci: report asan findings in more intelligent way

2020-08-27 Thread Илья Шипицин
Hello, asan findings were mixed with reg-tests errors and it was hard to investigate. Cheers, Ilya Shipitcin From 1fb2b510a2c5b5c7cc0522f8013dcb1474ab5314 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 27 Aug 2020 21:00:09 +0500 Subject: [PATCH] CI: travis-ci: split asan step out of

Re: Large difference between response time as measured by nginx and as measured by HAProxy

2020-08-26 Thread Илья Шипицин
nginx buffers output by default. can you try proxy_request_buffering off; proxy_buffering off; ? ср, 26 авг. 2020 г. в 16:02, Tim Düsterhus, WoltLab GmbH < duester...@woltlab.com>: > Hi List, > > please keep this email in Cc for all responses, I am not subscribed to > the list. > > We are

http/2 fine tuning

2020-08-25 Thread Илья Шипицин
just in case someone missed https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/

Re: HAProxy 2.2.2 CE issue report

2020-08-24 Thread Илья Шипицин
please open an issue at https://github.com/haproxy/haproxy/issues also, do you have collected dump file (as your output says "core dumped"), maybe coredumpctl or so ? if you do, it would be great to provide gdb backtrace вт, 25 авг. 2020 г. в 00:02, Milen Simeonov : > I've got an issue after

Re: graceful tcp shutdown ?

2020-08-04 Thread Илья Шипицин
Yeah, I mean server of course. Thank for the link On Tue, Aug 4, 2020, 5:28 PM Jarno Huuskonen wrote: > Hi, > > On Tue, 2020-08-04 at 16:54 +0500, Илья Шипицин wrote: > > for example, I'm running tcp balancing with several backend. > > is it possible to mark first bac

graceful tcp shutdown ?

2020-08-04 Thread Илья Шипицин
Hello, for example, I'm running tcp balancing with several backend. is it possible to mark first backend for "established" connections ? i.e. all connections that established, still go to marked backend. no new connection are established (once I see there are no more connections, I can turn it

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-08-04 Thread Илья Шипицин
I've modified build system again. please consider that as a final effort from me. If you are not happy enough with it, you are free to improve it. пт, 31 июл. 2020 г. в 14:24, Илья Шипицин : > > > пт, 31 июл. 2020 г. в 14:14, Willy Tarreau : > >> On Fri, Jul 31, 2020 a

Re: VTest issue when built on Ubuntu 20.04

2020-08-02 Thread Илья Шипицин
It reproduced as many times as I ran it On Sun, Aug 2, 2020, 3:09 AM Willy Tarreau wrote: > On Sun, Aug 02, 2020 at 02:28:09AM +0500, ??? wrote: > > it is /c2.2 subtest > > > > somehow server decided to reply earlier > > > > 20.04 > >

Re: VTest issue when built on Ubuntu 20.04

2020-08-01 Thread Илья Шипицин
it is /c2.2 subtest somehow server decided to reply earlier 20.04 https://travis-ci.com/github/chipitsine/haproxy/jobs/367551643#L642-L644 18.04 https://travis-ci.com/github/chipitsine/haproxy/jobs/367551644#L618-L620 сб, 1 авг. 2020 г. в 11:36, Илья Шипицин : > s390 is big endian, am

Re: VTest issue when built on Ubuntu 20.04

2020-08-01 Thread Илья Шипицин
s390 is big endian, amd64 is little endian сб, 1 авг. 2020 г. в 02:25, Илья Шипицин : > > > пт, 31 июл. 2020 г. в 14:29, Willy Tarreau : > >> On Fri, Jul 31, 2020 at 12:18:14PM +0500, ??? wrote: >> > Hello, >> > >> > I see permanent error on

Re: VTest issue when built on Ubuntu 20.04

2020-07-31 Thread Илья Шипицин
пт, 31 июл. 2020 г. в 14:29, Willy Tarreau : > On Fri, Jul 31, 2020 at 12:18:14PM +0500, ??? wrote: > > Hello, > > > > I see permanent error on Ubuntu 20.04 / s390 > > > > https://travis-ci.com/github/chipitsine/haproxy/jobs/366958312#L623 > > > > I will report to VTest, but if anyone

Re: [PATCH] suppress "return value is not checked" warnings

2020-07-31 Thread Илья Шипицин
пт, 31 июл. 2020 г. в 14:26, Willy Tarreau : > Hi Ilya, > > On Sun, Jul 26, 2020 at 03:06:06PM +0500, ??? wrote: > > From e5a49969d374e3e8e9da695dca48cb6fa82ca13d Mon Sep 17 00:00:00 2001 > > From: Ilya Shipitsin > > Date: Sun, 26 Jul 2020 15:01:10 +0500 > > Subject: [PATCH] CLEANUP:

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-31 Thread Илья Шипицин
пт, 31 июл. 2020 г. в 14:14, Willy Tarreau : > On Fri, Jul 31, 2020 at 01:01:49PM +0500, ??? wrote: > > From 2fd7431ed6e94fb48332e57ae569f194e38c1b11 Mon Sep 17 00:00:00 2001 > > From: Ilya Shipitsin > > Date: Fri, 31 Jul 2020 12:57:33 +0500 > > Subject: [PATCH] BUILD: simplify usage of

Re: [PATCH] typo fixes

2020-07-31 Thread Илья Шипицин
ping чт, 23 июл. 2020 г. в 00:34, Илья Шипицин : > Hello, > > another patch attached. > > Ilya Shipitcin >

Re: [PATCH] suppress "return value is not checked" warnings

2020-07-31 Thread Илья Шипицин
ping. вс, 26 июл. 2020 г. в 15:06, Илья Шипицин : > Hello, > > cleanup patch attached. > > > Ilya Shipitcin >

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-31 Thread Илья Шипицин
sorry, one more patch пт, 31 июл. 2020 г. в 07:48, Willy Tarreau : > On Fri, Jul 31, 2020 at 02:13:14AM +0500, ??? wrote: > > Hello, > > > > I repaired SLZ build. > > > > it used to work earlier because of SSL_LIB, SSL_INC variables. > > Makes sense indeed, applied now, thanks! > Willy

VTest issue when built on Ubuntu 20.04

2020-07-31 Thread Илья Шипицин
Hello, I see permanent error on Ubuntu 20.04 / s390 https://travis-ci.com/github/chipitsine/haproxy/jobs/366958312#L623 I will report to VTest, but if anyone has an idea, please let me know. it is a blocker for upgrading to Ubuntu 20.04 Cheers, Ilya Shipitcin

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-30 Thread Илья Шипицин
Hello, I repaired SLZ build. it used to work earlier because of SSL_LIB, SSL_INC variables. чт, 30 июл. 2020 г. в 16:14, Илья Шипицин : > SLZ also copied lib and headers to ${HOME}/opt > > > I do not want to use SSL_INC, SSL_LIB for SLZ. > I will send patch tomorrow (or earl

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-30 Thread Илья Шипицин
SLZ also copied lib and headers to ${HOME}/opt I do not want to use SSL_INC, SSL_LIB for SLZ. I will send patch tomorrow (or earlier) чт, 30 июл. 2020 г. в 07:48, Willy Tarreau : > Hi Ilya, > > thanks for this. Two minor comments (just let me know, I can adjust > the patches before merging

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-30 Thread Илья Шипицин
Tim, let us move this activity to GH issue ? as for failing osx builds, I think it might be due to long folder name https://github.com/TimWolla/haproxy/runs/924097118?check_suite_focus=true#step:10:361 it is 100+ characters. there's also unix socket in that dir, which has limitation on

Re: [PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-29 Thread Илья Шипицин
чт, 30 июл. 2020 г. в 07:48, Willy Tarreau : > Hi Ilya, > > thanks for this. Two minor comments (just let me know, I can adjust > the patches before merging them if you confirm): > > >- os: linux > > if: type == cron > > compiler: clang > > env: TARGET=linux-glibc

[PATCH] CI: rework SSL_LIB, SSL_INC in more elegant way, improve build speed by switching to stock lib for openssl-1.1.1 builds

2020-07-29 Thread Илья Шипицин
Hello, I did not like SSL_LIB, SSL_INC after arm64 switched to stock lib (in an ugly way). let us make stock lib first class citizen. Cheers, Ilya Shipitcin From 6ff056e7ded7784fcb4020ea8f37b12b23c855b6 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 30 Jul 2020 01:47:55 +0500

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
ср, 29 июл. 2020 г. в 22:33, Tim Düsterhus : > Ilya, > > Am 29.07.20 um 19:05 schrieb Илья Шипицин: > >> Known issues: > >> - Apparently the git commit is not properly detected during build. The > HEAD > >> currently shows as 2.3-dev1. > >> &

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
ср, 29 июл. 2020 г. в 22:27, Tim Düsterhus : > Ilya, > > Am 29.07.20 um 19:22 schrieb Илья Шипицин: > > there's also gitlab official mirror (ran by William) > > https://gitlab.com/haproxy.org/haproxy > > > > > > in theory we can use gitlab-ci as well :) &

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
Tim, there's also gitlab official mirror (ran by William) https://gitlab.com/haproxy.org/haproxy in theory we can use gitlab-ci as well :) ср, 29 июл. 2020 г. в 21:49, Tim Duesterhus : > Travis is becoming overall increasingly unreliable lately. We've already > seen that the timing sensitive

SLZ vs ZLIB

2020-07-29 Thread Илья Шипицин
Hello, I am running pretty big LB installation with http compression and SSL termination enabled. I was very surprised that 70-80% of cpu is spent on "gzip". Also, I found that SLZ is much better than ZLIB in terms of cpu usage. however, ZLIB is enabled by default in many distros and docker

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
ср, 29 июл. 2020 г. в 21:49, Tim Duesterhus : > Travis is becoming overall increasingly unreliable lately. We've already > seen that the timing sensitive tests regularly fail and thus they were > disabled. > > GitHub Actions VMs are working well, possibly allowing to use custom > runners > for

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
generally, there was an idea of keeping "developer velocity" as high as possible. i.e. to perform check in 3-5 min after the push. Github Actions allows 4 parallel builds (same as Travis CI), I thought of moving some builds to GH actions. also, that was a reason to move some rare configurations

Re: [PATCH] CI: Expand use of GitHub Actions for CI

2020-07-29 Thread Илья Шипицин
ср, 29 июл. 2020 г. в 21:49, Tim Duesterhus : > Travis is becoming overall increasingly unreliable lately. We've already > seen that the timing sensitive tests regularly fail and thus they were > disabled. > > GitHub Actions VMs are working well, possibly allowing to use custom > runners > for

[PATCH] suppress "return value is not checked" warnings

2020-07-26 Thread Илья Шипицин
Hello, cleanup patch attached. Ilya Shipitcin From e5a49969d374e3e8e9da695dca48cb6fa82ca13d Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 26 Jul 2020 15:01:10 +0500 Subject: [PATCH] CLEANUP: suppress coverity warnings Coverity is not happy when return value is not examined. Those

Re: Show: GitHub Action for easy installation of HAProxy and VTest

2020-07-25 Thread Илья Шипицин
it might be interesting for haproxy dataplane api testing вс, 26 июл. 2020 г. в 02:10, Tim Düsterhus : > Hi List, > Ilya, > Adis, > > some of you might know my haproxy-auth-request Lua script [1]. After > having good experiences with VTest for HAProxy itself I started building > VTest based

Re: Load testing HAProxy 2.2 on x86_64 and aarch64 VMs

2020-07-23 Thread Илья Шипицин
ar CPUPROFILESIGNAL=12 to start/stop the profiler > manually but again no success. > > I could share with you reports from Linux 'perf' command. Just let me know > which events you'd be interested in! > perf is somewhat strange, I recall really weird reports from it. maybe something

[PATCH] typo fixes

2020-07-22 Thread Илья Шипицин
Hello, another patch attached. Ilya Shipitcin From 32ae9da5a78af3768bc325e04eed1352b1b13119 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 23 Jul 2020 00:32:55 +0500 Subject: [PATCH] CLEANUP: assorted typo fixes in the code and comments This is 12th iteration of typo fixes ---

Re: [ANNOUNCE] haproxy-2.0.16

2020-07-18 Thread Илья Шипицин
What is freebsd version? On Sat, Jul 18, 2020, 2:32 PM Dmitry Sivachenko wrote: > > > > On 17 Jul 2020, at 17:34, Christopher Faulet > wrote: > > > > > > Hi, > > > > HAProxy 2.0.16 was released on 2020/07/17. It added 45 new commits after > version > > 2.0.15. > > Hello, > > Here are new

Re: Load testing HAProxy 2.2 on x86_64 and aarch64 VMs

2020-07-18 Thread Илья Шипицин
Hello, Martin! Can you please compare load profiles using google perftools ? I never tried to use gperf on ARM64, also, my trial at Linaro is over, I do not have an access to any ARM64 anymore. in short, gperf can be found https://github.com/gperftools/gperftools please follow "CPU profiling

Re: [PATCH] fix #660

2020-07-15 Thread Илья Шипицин
I attached only the first patch at a time. ср, 15 июл. 2020 г. в 13:08, Илья Шипицин : > > > ср, 15 июл. 2020 г. в 12:00, Willy Tarreau : > >> Hi Ilya, >> >> > From 4f62799eba5db5fe6400d458877677f098da3b13 Mon Sep 17 00:00:00 2001 >> > From: Ilya Shipi

Re: [PATCH] fix #660

2020-07-15 Thread Илья Шипицин
ср, 15 июл. 2020 г. в 12:00, Willy Tarreau : > Hi Ilya, > > > From 4f62799eba5db5fe6400d458877677f098da3b13 Mon Sep 17 00:00:00 2001 > > From: Ilya Shipitsin > > Date: Sun, 12 Jul 2020 15:24:55 +0500 > > Subject: [PATCH] src/server.c: add extra guards when loading state file > > > > this should

Re: [PATCH] fix #660

2020-07-12 Thread Илья Шипицин
v2 commit message adjusted сб, 27 июн. 2020 г. в 12:42, Илья Шипицин : > Hello, > > I added extra checks to fix #660 > > Cheers, > Ilya Shipitcin > From 4f62799eba5db5fe6400d458877677f098da3b13 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 12 Jul 2020 15:24:55

Re: OSX builds in Travis

2020-07-11 Thread Илья Шипицин
I decided to switch to the latest osx available (list: https://docs.travis-ci.com/user/reference/osx/#macos-version ) I attached updated patch сб, 11 июл. 2020 г. в 14:37, Vincent Bernat : > ❦ 11 juillet 2020 12:45 +05, Илья Шипицин: > > >> > he-he, brew bundle is depreca

Re: OSX builds in Travis

2020-07-11 Thread Илья Шипицин
сб, 11 июл. 2020 г. в 10:06, Vincent Bernat : > ❦ 11 juillet 2020 00:48 +05, Илья Шипицин: > > > he-he, brew bundle is deprecated (does not work) > > > > > https://apple.stackexchange.com/questions/148454/brew-bundle-reporting-error-unknown-command-bundle > >

Re: [ANNOUNCE] haproxy-2.2.0

2020-07-10 Thread Илья Шипицин
instead of disabling Lua support, is it possible to build against Lua-5.3 ? I recall there's Lua-5.3 on Fedora-33 пт, 10 июл. 2020 г. в 21:20, Ryan O'Hara : > > > On Thu, Jul 9, 2020 at 2:24 PM Tim Düsterhus wrote: > >> Ryan, >> >> Am 09.07.20 um 20:34 schrieb Ryan O'Hara: >> > I'm currently

Re: OSX builds in Travis

2020-07-10 Thread Илья Шипицин
I attached a patch which speeds up osx builds by 10 minutes, сб, 11 июл. 2020 г. в 00:48, Илья Шипицин : > he-he, brew bundle is deprecated (does not work) > > > https://apple.stackexchange.com/questions/148454/brew-bundle-reporting-error-unknown-command-bundle > > пт, 10 ию

Re: OSX builds in Travis

2020-07-10 Thread Илья Шипицин
he-he, brew bundle is deprecated (does not work) https://apple.stackexchange.com/questions/148454/brew-bundle-reporting-error-unknown-command-bundle пт, 10 июл. 2020 г. в 14:55, Илья Шипицин : > > > пт, 10 июл. 2020 г. в 14:21, Vincent Bernat : > >> ❦ 9 juillet 2020 13:12

Re: OSX builds in Travis

2020-07-10 Thread Илья Шипицин
пт, 10 июл. 2020 г. в 14:21, Vincent Bernat : > ❦ 9 juillet 2020 13:12 +05, Илья Шипицин: > > > do you think does it make sense to use scripted brew instead of travis > > plugin ? > > > > if so, we can try to "brew instal blah-blah-blah || ok, we failed, le

Re: OSX builds in Travis

2020-07-09 Thread Илья Шипицин
let it settle down a bit/ I'll have a look in few days чт, 9 июл. 2020 г. в 13:29, Willy Tarreau : > On Thu, Jul 09, 2020 at 12:19:32PM +0500, ??? wrote: > > We install socat, because it is (or was?) needed for some tests. OSX > > requires to update whole brew for that. Otherwise it

Re: OSX builds in Travis

2020-07-09 Thread Илья Шипицин
Dinko, do you think does it make sense to use scripted brew instead of travis plugin ? if so, we can try to "brew instal blah-blah-blah || ok, we failed, lets' update and install one more time" чт, 9 июл. 2020 г. в 13:07, Илья Шипицин : > we have homebrew --> update --

Re: OSX builds in Travis

2020-07-09 Thread Илья Шипицин
uld), pinning will cause none of > dependancies to be installed automatically and only through manual install: > > brew list | xargs brew pin > brew install socat > > > On 9 Jul 2020, at 09:19, Илья Шипицин wrote: > > We install socat, because it is (or was?) needed

Re: OSX builds in Travis

2020-07-09 Thread Илья Шипицин
We install socat, because it is (or was?) needed for some tests. OSX requires to update whole brew for that. Otherwise it works unstable On Thu, Jul 9, 2020, 9:16 AM Willy Tarreau wrote: > Hi Ilya, > > is it normal that the OSX build procedure in travis pulls gigabytes of > ruby and python

Re: [PATCH] DOC: typo fixes for configuration.txt

2020-07-07 Thread Илья Шипицин
Daniel, can you please tell what spellchecker do you use ? (codespell does not see those typos) вт, 7 июл. 2020 г. в 08:34, Daniel Corbett : > Hello, > > > Here's a quick round of typo corrections for configuration.txt > > > Thanks, > -- Daniel > > >

Re: [PATCH v2 0/2] Certificate Generation Enhancements

2020-07-06 Thread Илья Шипицин
Hello, Gersner. smal question. what will happen if client does not provide SNI (and we are supposed to create certificate)? пн, 6 июл. 2020 г. в 05:12, : > From: Shimi Gersner > > Hi Team, Ilya, > > Following the conversation yesterday I have added a fix and manually > tested the following

<    1   2   3   4   5   6   7   8   9   10   >