Re: Q: about HTTP/2

2016-04-01 Thread Craig Craig
Hi, > Do you guys, on the ML, really need HTTP/2? > If so what's your deadline?? Yea, we will definitively need it, our customers started asking about it two months ago. Management will probably start to worry about pissing off premium managed hosting customers if they keep asking and we can't

haproxy as a login portal

2016-02-05 Thread Craig Craig
Hi, I'd like to use haproxy as login portal, has anyone done a configuration like that? I've got some users connecting from dynamic IPs to access a 3rd party content management system which I don't want to expose globally and would like to authenticate them not by IP, but by session/actual user

RE: No TCP RST on tcp-request connection reject

2015-01-16 Thread Craig Craig
Hi, I don't see how. The socket is immediately close()'ed when it hits tcp-request connection reject, this is as cheap as it gets. If you're getting attacked, you try to send as few unnecessary packets as possible, I guess a silent drop could be nice. a) HAProxy (configured with rate

consistent server status between config reloads

2014-02-24 Thread Craig Craig
Hi, I'm running some scripts that can disable a server for maintainance/application deployments. However a config reload enables the server again, and we have frequent changes to our haproxy config. Would it be possible to leave disabled servers in that state between reloads? Maybe with an

Re: External Monitoring of https on LB's

2012-08-27 Thread Craig Craig
Hi, a patch is already upstream. I put some effort into getting patches upstream:

Re: Re: balance (hdr) problem (maybe bug?)

2011-02-11 Thread Craig Craig
Hi, I decided to narrow the bug a bit and deleted all other backends/frontends we have; I've defined three servers in the backend which all query www.google.de. Thus you do not have to set up your own server if you want to test this config, google can take the load. ;) The problem is

balance (hdr) problem (maybe bug?)

2011-02-03 Thread Craig Craig
Hi, I've stumbled upon a problem with balance(hdr), specefically with X-Forwarded-For. When you use the config that I've attached, you get different results wheather you send a X-Forwarded-For or not. The source IP does not change when I perform those queries, hosts did not change state:

haproxy bug or wrong kernel settings?

2010-06-30 Thread Craig Craig
Hi list, I'm having a strange problem with haproxy 1.3.24, when the server gets more connections. Load is still ok by then (about 0.5), througput is about 50-100MBit. Right now, everything is fine, I'm seeing: Server connection states (it also runs a squid, which is not used for this