Admin socket ACL's

2017-01-25 Thread Alexey Zilber
Hi All, Is there way to do something like this from the admin socket: acl bad_ip src 184.66.248.33 tcp-request connection reject if bad_ip Thanks! Alex

Status code -1 with HA-Proxy version 1.5.15

2016-12-22 Thread Alexey Zilber
Hi All, I'm seeing the 'status code' as -1 in haproxy logs, whereas the documentation specifies: "The status code is always 3-digit." I do see the 'normal' result codes, but I also see a lot of -1's. Any idea what causes this? -Alex

subscribe

2016-12-22 Thread Alexey Zilber
Systems Architect SFG Media Group, LLC

Re: Round Robin not very random

2015-01-15 Thread Alexey Zilber
in this situation. Regards, Vivek On Jan 14, 2015 11:45 PM, Alexey Zilber alexeyzil...@gmail.com wrote: Hi All, We got hit with a bit of traffic and we saw haproxy dump most of the traffic to 3-4 app servers, sometimes even just one and driving load on there to 90. We were running

Round Robin not very random

2015-01-14 Thread Alexey Zilber
Hi All, We got hit with a bit of traffic and we saw haproxy dump most of the traffic to 3-4 app servers, sometimes even just one and driving load on there to 90. We were running 1.5.9, I upgraded to 1.5.10 and the same problem remained. Currently traffic is low so everything is load balanced

Re: Significant number of 400 errors..

2014-11-27 Thread Alexey Zilber
and not 2000. -Bryan On Mon, Nov 24, 2014 at 10:22 PM, Alexey Zilber alexeyzil...@gmail.com wrote: Hi Willy and Lukas, Here's snippets of the new config: - global maxconn 645000 maxpipes 645000 ulimit-n 645120 user haproxy

Re: Significant number of 400 errors..

2014-11-24 Thread Alexey Zilber
% - Thanks! -Alex On Mon, Nov 24, 2014 at 12:52 AM, Willy Tarreau w...@1wt.eu wrote: On Sun, Nov 23, 2014 at 11:57:50PM +0800, Alexey Zilber wrote: Hi Willy, I already do option dontlognull. These get logged anyway. We've actually seen a high amount of 400 errors happening

Re: Significant number of 400 errors..

2014-11-23 Thread Alexey Zilber
Hi Willy, I already do option dontlognull. These get logged anyway. We've actually seen a high amount of 400 errors happening. I'll post the configs in a day or two (the pre/post) configs. I've been able to knock down the 400 and 502 errors to about 10%, with 400 errors being around .6% of

Re: Significant number of 400 errors..

2014-11-22 Thread Alexey Zilber
On Nov 22, 2014 1:06 PM, Alexey Zilber alexeyzil...@gmail.com wrote: Hi All, I'm running v1.5.4 and I'm seeing a large amount of 400 BADREQ erros: Nov 21 22:46:06 srvr1 haproxy[28293]: 10.10.10.10:51184 [21/Nov/2014:22:45:50.323] www www/NOSRV -1/-1/-1/-1/16350 400 187 - - PRNN 445/445/0/0/3

Re: Significant number of 400 errors..

2014-11-22 Thread Alexey Zilber
Hi Lukas, I had decoded the error message and it didn't make sense. There is no connection limit reached, there are no filters. If you look at the rest of the log line, there were no cookies. In fact, the last part a security check which detected and blocked a dangerous error in server

Re: haproxy 1.5.8 segfault

2014-11-21 Thread Alexey Zilber
Hi Willy, Any ETA for the next release that incorporates this bugfix, or should I build from current source? Thanks! Alex On Fri, Nov 21, 2014 at 2:35 PM, Willy Tarreau w...@1wt.eu wrote: Hi Godbach! On Fri, Nov 21, 2014 at 11:02:52AM +0800, Godbach wrote: Hi Willy, On 2014/11/19

Significant number of 400 errors..

2014-11-21 Thread Alexey Zilber
Hi All, I'm running v1.5.4 and I'm seeing a large amount of 400 BADREQ erros: Nov 21 22:46:06 srvr1 haproxy[28293]: 10.10.10.10:51184 [21/Nov/2014:22:45:50.323] www www/NOSRV -1/-1/-1/-1/16350 400 187 - - PRNN 445/445/0/0/3 0/0 {|||} BADREQ Nov 21 22:47:46 srvr1 haproxy[28293]:

Re: Spam to this list?

2014-09-05 Thread Alexey Zilber
I think most of us are getting soft being gmail users. I haven't seen this amount of spam in my inbox today, probably in years. Personally, I would go with an automated sub/unsub list. People who need help will usually take the effort to subscribe to a list, so I'm not sure what the advantage

Re: Spam to this list?

2014-09-05 Thread Alexey Zilber
On Sat, Sep 6, 2014 at 7:09 AM, Willy Tarreau w...@1wt.eu wrote: snip Now please let me remind me something important : this list is provided for free to make it easier for developers and users to exchange together. It's managed on spare time, it's fast and free to subscribe just like it's

Filing bugs.. found a bug in 1.5.1 (http-send-name-header is broken)

2014-07-07 Thread Alexey Zilber
Hey guys, I couldn't a bug tracker for HAProxy, and I found a serious bug in 1.5.1 that may be a harbinger of other broken things in header manipulation. The bug is: I added 'http-send-name-header sfdev1' unde the defaults section of haproxy.cfg. When we would do a POST with that option