Problems putting a persistence cookie in the defaults section

2012-07-04 Thread Graeme Donaldson
Hi I wanted to put a persistence cookie in the defaults section of my config, but I ran into 2 problems on reloading HAproxy as a result: - Every tcp backend in my config throws a warning like this: [WARNING] 185/153532 (25427) : config : 'cookie' statement ignored for proxy

Re: Re: Check backend servers

2012-02-10 Thread Graeme Donaldson
On 10 February 2012 14:50, Sebastian Fohler i...@far-galaxy.de wrote: What URL does haproxy use exactly to check the service? Is it the realm + the url part or something else? Just to be sure to test the correct option. Hi Sebastian If you are just using the check option for the backends,

Re: Check backend servers

2012-02-10 Thread Graeme Donaldson
On 10 February 2012 16:57, Baptiste bed...@gmail.com wrote: Configure it like that: option httpchk HEAD /index.php HTTP/1.0\r\nHost:\ www.domain.com == please note the backslashes ( \ ) before the spaces. You should use HTTP/1.1 if you're sending a Host: header. Graeme.

Re: Does haproxy support cronolog?

2012-01-31 Thread Graeme Donaldson
On 31 January 2012 11:21, wsq003 wsq...@sina.com wrote: Hi Here we want haproxy to write logs to separate log files (i.e. /home/admin/haproxy/var/logs/haproxy_20120131.log), and we want to rotate the log files. Then cronolog seems to be a good candidate. HAproxy can only log to a syslog

Re: http to https redirection

2011-12-19 Thread Graeme Donaldson
On 19 December 2011 16:37, MEßNER Arthur,Ing.Mag. arthur.mess...@tilak.at wrote: hello, is there any method to do http to https redirection with variable Location my configuration: frontend someserver-clear      bind 10.16.246.9:80        acl clear      dst_port  80        redirect

Re: haproxy and interaction with VRRP

2011-12-12 Thread Graeme Donaldson
On 12 December 2011 11:18, Vincent Bernat ber...@luffy.cx wrote: Hi! When haproxy is bound to an IP address managed by VRRP, this IP address may be absent when haproxy starts. What is the best way to handle this?  1. Start haproxy only when the host is master.  2. Use transparent mode.  3.

Re: cannot bind socket Multiple backends tcp mode

2011-11-03 Thread Graeme Donaldson
On 3 November 2011 21:34, Saul s...@extremecloudsolutions.com wrote: My understanding was that multiple backends could use the same interface, perhaps I was wrong, if that is the case, any suggestions on how to be able to have multiple backends running tcp mode on port 443 so I can match the

Re: Remote IP’s with HAProxy

2011-10-24 Thread Graeme Donaldson
On 24 October 2011 11:42, Iceskysl icesk...@gmail.com wrote: I’m testing a new web server setup which is having a couple of issues. Essentially, we have a web server, where the code uses the remote IP for some interesting things, and also some apache directories secured down to some certain

Re: TCP health checking for redis

2011-09-09 Thread Graeme Donaldson
On 9 September 2011 13:49, John Helliwell john.helliw...@gmail.com wrote: I'm trying to have haproxy send requests to 4 backends which are redis servers. Only one of the four is master, and the other 3 are slaves. I want to health check by sending an INFO command, to which redis will reply

Re: TCP health checking for redis

2011-09-09 Thread Graeme Donaldson
On 9 September 2011 14:44, John Helliwell john.helliw...@gmail.com wrote: Indeed, the httchk is expecting a HTTP response header. I think I can fool it by installing a wrapper script on the target which inserts a valid HTTP response header - there is an example of that at

Re: Can't bind to Virtual IP

2011-08-11 Thread Graeme Donaldson
On 11 August 2011 16:16, Ran S r...@sheinberg.net wrote: Hello, I am trying to set up a binding to a Virtual IP in order to use master and slave HAProxy load balancers. I am following each of the two following guides:

Re: Question concerning option forwardfor and HTTP keep-alive

2011-08-04 Thread Graeme Donaldson
On 3 August 2011 17:56, Willy Tarreau w...@1wt.eu wrote: On Wed, Aug 03, 2011 at 11:41:03AM -0400, Guillaume Bourque wrote: Hi all, So to answer the secific question from what I have seen as soon as you use option http-server-close In the apache or any backend log you will only

Question concerning option forwardfor and HTTP keep-alive

2011-08-03 Thread Graeme Donaldson
Hi I've been looking at decreasing page load times, and as part of this I'm revisiting a decision that was made when we started using HAproxy back in the 1.3.x era. At the time, HAproxy had no support for HTTP keep-alive, and we needed to use option forwardfor. As a result, we added option

HAproxy returns HTTP 502 error when backend returns an HTTP 302 with a long Location:

2011-07-19 Thread Graeme Donaldson
Hi Using HAproxy 1.4.8. One of our applications generates an HTTP 302 redirect with a really long Location. In one instance I've looked at, the Location: header is 8,175 bytes. If we bypass HAproxy, the browser happily goes to the returned URL, if we instead go via HAproxy, the 302 is turned

Re: HAproxy returns HTTP 502 error when backend returns an HTTP 302 with a long Location:

2011-07-19 Thread Graeme Donaldson
On 19 July 2011 21:55, Willy Tarreau w...@1wt.eu wrote: On Tue, Jul 19, 2011 at 11:06:58AM -0700, carlo wrote: Check out tune.bufsize and tune.maxrewrite in the Performance Tuning section of the HAProxy docs. Indeed. I would add something : an application which generates headers or URLs that

Re: start haproxy not as root?

2011-06-08 Thread Graeme Donaldson
On 9 June 2011 00:05, Jacob Fenwick jacob.fenw...@gmail.com wrote: It seems like I must be root to start haproxy. I know that I can add a user line in global so that the process will change to say it is running as a non-root user once it is running, but it seems like I still need to be root

Email to the list not delivered -- anyone else?

2011-02-10 Thread Graeme Donaldson
Hi all Has anyone else noticed instances of messages sent to the list not being delivered? I just realised that a reply I sent to Kyle's question 2 days ago never made it to the list. Notice that until now there are no messages from me to the list shown on

Re: ACLs with Overlapping Subnets and IPs

2011-02-08 Thread Graeme Donaldson
On 8 February 2011 14:48, Kyle Brandt k...@stackoverflow.com wrote: Can I have an ACL that doesn't perform an action on a specific IP but will perform the action on the subnet that the IP is part of? For example: acl bad_subnet src 10.0.0.0/8 acl okay_ip src 10.0.1.5 use_backend blocked

Backend warnings retr/redis on stats page

2010-12-13 Thread Graeme Donaldson
Hi HAproxy 1.4.8. If I look at the stats page, on one of my backends I'm seeing these values under the warning column: retr (344) and redis (172). The backend has 8 servers and only 1 has non-zero values for this column. Can someone explain what the numbers mean, I've tried poking through the

Re: Get real source IP

2010-11-15 Thread Graeme Donaldson
On 15 November 2010 21:09, Maxime Ducharme m...@techboom.com wrote: Hi guys We are looking for a way to get real source IP that is connecting to our web services. We currently use option forwardfor, but some people are using this to bypass our checks. Is there other way to send real IP

Re: x-forwarded-for logging

2010-10-06 Thread Graeme Donaldson
Hi Joe Yes, it is possible, but there's a little more work involved than just applying the patch to stunnel. Firstly, you need to specify in your stunnel.conf that you want stunnel to add the X-Forwarded-For header: [https] accept = 1.2.3.4:443 connect = 1.2.3.4:80 TIMEOUTclose = 0

Re: HAProxy and DNS

2010-09-28 Thread Graeme Donaldson
Hi This is not currently possible. DNS queries use UDP as the transport in the vast majority of cases. TCP is rarely used. HAproxy does not do UDP load balancing. This was discussed on the list a while ago. See here for more info: http://en.wikipedia.org/wiki/Domain_Name_System#Protocol_details

Re: Matching the host header

2010-09-01 Thread Graeme Donaldson
Hi Julien While you could do this with multiple ACLs or a regex, there is a third option which is even better: use the hdr_end() function instead of hdr(). From the doc (http://haproxy.1wt.eu/download/1.4/doc/configuration.txt, see section 7.5.3. Matching at Layer 7): -8- hdr_end string

Re: Can't get server check to work with virtual hosts

2010-08-18 Thread Graeme Donaldson
test2.cluster6.corp.amiestreet.com:80 cookie B check inter 2s and it's sending the correct headers, at least for test1. The problem is that it's also sending Host: test1... to test2. I don't see how to configure it to send each host the correct header. On Aug 17, 2010, at 5:23 PM, Graeme

Re: Can't get server check to work with virtual hosts

2010-08-17 Thread Graeme Donaldson
Hi Roy You simply need to send an HTTP 1.1 request with a Host: header in the http check, like this: option httpchk GET /index.html\r\nHost: vhost.example.com Graeme. On 17 August 2010 23:19, Roy Smith r...@panix.com wrote: I'm running HA-Proxy version 1.3.22 on Ubuntu Linux. I've got

Re: Load balancing ..

2010-07-14 Thread Graeme Donaldson
Hi What you are trying to achieve is usually called link aggregation or line bonding. This has nothing to do with the load balancing functionality provided by HAProxy. Try these links for more information: http://www.google.com/search?q=adsl+bonding

Limit to number of items in an ACL matching src IP

2010-02-16 Thread Graeme Donaldson
Hi I'm playing around with something like this: acl src_goaway src 10.0.0.1 redirect location http://example.com/goaway.html I have seen examples in the docs where src is specified as multiple IPs in a single ACL, but I don't see any mention of how many IPs can be in a single ACL. Did I miss