Re: HAProxy 2.5 performs 302 redirect before responding with a 503 when httpchk fails

2022-01-25 Thread Bruno Henc
Regards, Bruno Henc

Re: TLS handshake error

2020-09-17 Thread Bruno Henc
clock secs ( 1.74 usr  0.10 sys + 75.96 > cusr  9.72 csys = 87.52 CPU) > Result: FAIL > Makefile:207: recipe for target '_tests' failed > > What did you mean by thrown that test out? Now that test failed. > > Br, > > Jouni > > On 9/15/20 4:36 PM, Bruno Henc wrote: &

Re: TLS handshake error

2020-09-15 Thread Bruno Henc
Hi, Last time I saw this error it involved TLS decryption by firewalls that didn't support RSA-PSS. Why they blow up when the new, more secure RSA-PSS signature algorithms are used beats me, but it's principally _on them_ for not supporting the latest IETF standards. Attached is a patch that

Re: Debugging ssl handshake failures

2020-09-09 Thread Bruno Henc
Corrected build instructions attached. openssl-2.2.2.2 should be haproxy-2.2.3. Regards, Bruno apt-debuild Description: Binary data

Re: Debugging ssl handshake failures

2020-09-09 Thread Bruno Henc
Hi, > I take it that means theres no internal debug logging for the tls errors that > we can just expose via logfile? Proof of concept patches are attached with build instructions. You may wish to edit the haproxy-2.2.3/rules/debian folder to increase the -j setting to your current number of

Re: Debugging ssl handshake failures

2020-09-01 Thread Bruno Henc
‐‐‐ Original Message ‐‐‐ On Tuesday, September 1, 2020 6:57 PM, Kevin McArthur wrote: > Hi haproxy > > I'm wondering if there is any way to debug the error message "www-https/1: > SSL handshake failure"? I've tried increasing log levels to debug etc, but > nothing seems to log about

Re: max header size

2020-08-12 Thread Bruno Henc
Hi Ionel, Could you please try setting tune.bufsize 32768 in the global section? (See the associated configuration manual entry for tune.bufsize for a possible answer to both of your questions and for the memory-usage implications). Regards, Bruno ‐‐‐ Original Message ‐‐‐ On

HAProxy 2.0 "stick on src table mypeers/mytable" does not result in peers binding to socket address

2019-08-30 Thread Bruno Henc
89a](https://github.com/haproxy/haproxy/commit/1b8e68e89a) Regards, Bruno Henc

Re: HA Proxy Support for RedHat 8 Enquiries

2019-08-21 Thread Bruno Henc
://www.haproxy.com/documentation/hapee/1-9r1/getting-started/os-hardware/ Please advise, thank you! Regards *LiJwee Eng* Systems Engineer *Dell Technologies**| *Data Protection Solutions Mobile +65 97516931 lijwee@dell.com <mailto:lijwee@dell.com>** -- Bruno Henc Support Engineer H

Re: FW: HAProxy??

2019-07-11 Thread Bruno Henc
will reach out to you with further information. Regards, On 7/11/19 3:15 PM, Austin Getz wrote: Hello Team, Can you please provide two quotes for the below for ETS? -- Bruno Henc Support Engineer HAProxy Technologies

Re: httplog clf missing values

2019-05-20 Thread Bruno Henc
Hello Aleksandar, The Common Log Format is defined as: log-format "%{+Q}o %{-Q}ci - - [%trg] %r %ST %B \"\" \"\" %cp \ %ms %ft %b %s %TR %Tw %Tc %Tr %Ta %tsc %ac %fc \ %bc %sc %rc %sq %bq %CC %CS %hrl %hsl" The empty fields are expected if you haven't configured http request and response

Re: Clarification needed on memory use behavior when using cache & nbthread

2019-03-27 Thread Bruno Henc
recommend checking out the performance section of the configuration manual to help with capacity planning. https://www.haproxy.com/documentation/hapee/1-8r2/onepage/#3.2 Hope this helps. Regards, Bruno Henc ‐‐‐ Original Message ‐‐‐ On Wednesday, March 27, 2019 8:39 PM, Robin Björklin

Re: DNS Resolver Issues

2019-03-21 Thread Bruno Henc
the instances to query all records from the resolver. Can you please retest with the updated configuration and report back the results? Best regards, Bruno Henc ‐‐‐ Original Message ‐‐‐ On Thursday, March 21, 2019 12:09 PM, Daniel Schneller wrote: > Hello! > > Friendly bump :) > I'

Re: High CPU with Haproxy 1.9.4 (and 1.9.2)

2019-03-13 Thread Bruno Henc
details like IPs, passwords etc.) and operating system version here, and the estimated number of requests per second, I'll see if I can reproduce the issue in a lab setting (and do the aforementioned bisecting). Best regards, Bruno Henc On 3/13/19 2:08 PM, Mark Janssen wrote: Hi, I've recenly

Re: Adding Configuration parts via File

2019-03-08 Thread Bruno Henc
rules. For a more detailed overview of ACLs, check out this blog post: https://www.haproxy.com/blog/introduction-to-haproxy-acls/ I do have to admit that including ACLs is a neat idea. Alternatively, global ACLs would be nice. Does this workaround solve your use case? Best regards, Bruno

Re: %[] in use-server directives

2019-02-19 Thread Bruno Henc
a development version of HAProxy to take advantage of the latest features. Let me know if you get stuck. Best regards, Bruno Henc On 2/19/19 9:45 PM, Joao Morais wrote: Em 19 de fev de 2019, à(s) 05:57, Willy Tarreau escreveu: In the past it was not possible to dynamically create servers I think

Re: haproxy reverse proxy to https streaming backend

2019-02-16 Thread Bruno Henc
. If I have any more information, I will try to share it as soon as possible. Thank you for your patience and the detailed report on the issue you are experiencing. Best regards, Bruno Henc This looks like an interesting problem, though it is sad that On 2/16/19 4:06 PM, Thomas Schmiedl wrote

Re: Weighted Backend's

2019-02-11 Thread Bruno Henc
performing A/B testing (production, development, staging), the scale you are working at, and which part of the stack you are A/B testing, it is difficult to come up with a recommendation. Let me know if you have any questions. Best regards, Bruno Henc On 2/11/19 10:15 PM, James Root wrote:

Re: Anyone heard about DPDK?

2019-02-10 Thread Bruno Henc
Hi, Another good explanation on what DPDK does is available here: https://learning.oreilly.com/videos/oscon-2017/9781491976227/9781491976227-video306685 https://wiki.fd.io/images/1/1d/40_Gbps_IPsec_on_commodity_hardware.pdf On 2/10/19 12:21 PM, Aleksandar Lazic wrote: Am 10.02.2019 um

Re: Automatic Redirect transformations using regex?

2019-01-22 Thread Bruno Henc
Best regards, Bruno Henc On 1/21/19 11:40 PM, Joao Guimaraes wrote: Hi Haproxy team! I've been trying to figure out how to perform automatic redirects based on source URL transformations. *Basically I need the following redirect: * mysite.*abc* redirected to *abc*.mysite.com <http://m

Re: SOAP service healthcheck

2018-12-05 Thread Bruno Henc
. Best regards, Bruno Henc On 12/6/18 8:28 AM, Māra Grīnberga wrote: Hi, I'm new to Haproxy and I've a task for which I can't seem to find a solution online. Probably, I'm not looking in the right places. I need to check if a SOAP service responds before sending requests to the server

Re: Regarding Client IP

2018-11-15 Thread Bruno Henc
-and-load-balancers/ how it can be implemented. For more information about proxy protocol support in different software  see also https://www.haproxy.com/blog/haproxy/proxy-protocol/ . Which smtp server are you using and which operating system are you running it on? Best regards, Bruno Henc

Re: Balance based on network/cpu load

2018-11-13 Thread Bruno Henc
to decide if a server needs to be disabled or re-enabled. Hope this helps. Best regards, Bruno Henc On 11/13/18 9:27 AM, Jessy van Baal wrote: Hi there! Is there a way that HAProxy 1.8 can balance based on the network or CPU load on the backend servers? Let’s say, a backend server has 90