BUG: cannot take the address of an rvalue of type 'unsigned long'

Trying to compile current master on OS-X, and get: gcc -Iinclude -Iebtree -Wall -O0 -g -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -fno-strict-overflow -Wno-address-of-packed-member -Wno-null-dereference -Wno-unused-label -DTPROXY -DUSE_ZLIB -DENABLE_POLL -DENABLE_K

BUG: Tw is negative with lua sleep

When using core.msleep in lua, the %Tw metric is a negative value. For example with the following config: haproxy.cfg: global lua-load /tmp/haproxy.lua frontend f1 mode http bind :8000 default_backend b1 log 127.0.0.1:123

Re: BUG: Tw is negative with lua sleep

Ping? -Patrick On 2018/6/22 15:10, Patrick Hemmer wrote: > When using core.msleep in lua, the %Tw metric is a negative value. > > For example with the following config: > haproxy.cfg: > global > lua-load /tmp/haproxy.lua > > frontend f1

Re: haproxy and changing ELB IPs

On 2018/8/7 05:45, Lukas Tribus wrote: > Hello, > > >> We recently had an outage for short time related to NameServer's h/w failure >> (both primary and secondary went down). >> We were told that it is possible for these IPs to change in the future. It >> never happened so far though. > So you

haproxy processing request of a disconnected client

So I just noticed the behavior that when a request is queued and the client closes the connection, once a server slot frees up that request is still sent to the server which processes it and sends a response back. What's even more interesting is that the log indicates that everything was processed

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

even be further improved to avoid manipulating the stream > from the queue : > - queue_idx = initial position when enqueuing > - queue_idx = measured position when dequeuing Because the stream can pass through multiple queues, we'd have to make sure that every time we de-queue,

[PATCH 2/2] MINOR: Add srv_conn_free sample fetch

This adds the 'srv_conn_free([/])' sample fetch. This fetch provides the number of available connections on the designated server. --- doc/configuration.txt | 21 ++--- src/backend.c | 22 ++ 2 files changed, 40 insertions(+), 3 deletions(-) diff --gi

[PATCH 0/2] sample fetches for available connections

priority queuing, so you can see how many connections are available, perhaps for taking action when the number is low. For example by reserving connections for high-priority requests, and rejecting low priority ones. -Patrick Patrick Hemmer (2): MINOR: add be_conn_free sample fetch MINOR: Add

[PATCH 1/2] MINOR: add be_conn_free sample fetch

This adds the sample fetch 'be_conn_free([])'. This sample fetch provides the total number of unused connections across available servers in the specified backend. --- doc/configuration.txt | 15 ++- src/backend.c | 38 ++ 2 files changed, 5

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/10 09:19, Willy Tarreau wrote: > Hi Patrick, > > On Thu, Aug 09, 2018 at 06:29:33PM -0400, Patrick Hemmer wrote: >> I also went and removed the queue position counter code from >> stream_process_counters(), and the logging still appears to work fine >> (but

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/11 11:25, Aleksandar Lazic wrote: > Hi Willy. > > > On 11/08/2018 11:04, Willy Tarreau wrote: >> Hi Aleks, >> >> On Sat, Aug 11, 2018 at 10:27:42AM +0200, Aleksandar Lazic wrote: >>> I think it is a requeue mechanism for the connection and not a >>> selector for >>> a server or a backen

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/13 09:17, Aleksandar Lazic wrote: > On 11/08/2018 14:48, Patrick Hemmer wrote: >> > > [snipp] > >> To answer one of the earlier questions, I do plan on writing a blog >> article yes. The question is when. I'm considering backporting this >> feat

[PATCH] DOC: add documentation for prio_class and prio_offset sample fetches.

This adds documentation that was missed as part of 268a707. --- doc/configuration.txt | 11 +++ 1 file changed, 11 insertions(+) diff --git a/doc/configuration.txt b/doc/configuration.txt index 48b69a5bd..d11b63185 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -13857,

BUG: LUA txn:get_priv() scoped to connection, not transaction

There is a bug in the current stable haproxy (1.8.13) where the LUA function txn:get_priv() is returning data stored from other transactions. This was discovered as we have code that triggers on certain requests, and it was triggering on requests it should not have been. You can reproduce with thi

Re: BUG: Tw is negative with lua sleep

On 2018/7/18 09:03, Frederic Lecaille wrote: > Hello Patrick, > > On 07/17/2018 03:59 PM, Patrick Hemmer wrote: >> Ping? >> >> -Patrick >> >> On 2018/6/22 15:10, Patrick Hemmer wrote: >>> When using core.msleep in lua, the %Tw metric is a negati

Re: [PATCH] MINOR: crypto: Add digest and hmac converters

On 2018/6/17 14:02, Baptiste wrote: > > > Le dim. 17 juin 2018 à 14:10, Patrick Gansterer > a écrit : > > > > On 17 Jun 2018, at 13:36, Baptiste > wrote: > > > > Can they be used to validate oauth tokens too? > > Depends on

Re: [PATCH 0/2] sample fetches for available connections

On 2018/8/9 18:46, Patrick Hemmer wrote: > These are 2 new sample fetches which provide the available connections. > The be_conn_free fetch is similar to connslots, but has significant > difference in that it does not count queue slots, nor backup servers > (unless all serv

Re: haproxy processing request of a disconnected client

On 2018/8/9 13:00, Patrick Hemmer wrote: > So I just noticed the behavior that when a request is queued and the > client closes the connection, once a server slot frees up that request > is still sent to the server which processes it and sends a response back. > What's even mo

Re: connection leak (stuck in CLOSE_WAIT) on master

On 2018/8/9 01:01, Patrick Hemmer wrote: > There's an issue on current master (287527a) where haproxy is losing > track of its connections, and they're getting stuck in CLOSE_WAIT. And > it's counting these connections towards limits (such as maxconn). > Eventu

Re: BUG: LUA txn:get_priv() scoped to connection, not transaction

> data = 0 >> end >> data = data + 1 >> print(string.format("set to %d", data)) >> txn:set_priv(data) >> end) > > BR, > Thierry > > >> On 22 Aug 2018, at 05:57, Patrick Hemmer > <mailto:ha

[PATCH] MEDIUM: reset lua transaction between http requests

Not sure if this is the right approach, but this addresses the issue for me. This should be backported to 1.8. -Patrick From 9087400de99a3925380cac4128a431cd48a09145 Mon Sep 17 00:00:00 2001 From: Patrick Hemmer Date: Wed, 22 Aug 2018 10:02:00 -0400 Subject: [PATCH] MEDIUM: reset lua transaction

Re: [PATCH 1/2] MINOR: add be_conn_free sample fetch

On 2018/8/22 04:04, Willy Tarreau wrote: > Hi Patrick, > > On Thu, Aug 09, 2018 at 06:46:28PM -0400, Patrick Hemmer wrote: >> This adds the sample fetch 'be_conn_free([])'. This sample fetch >> provides the total number of unused connections across available serv

Re: [PATCH 1/2] MINOR: add be_conn_free sample fetch

On 2018/8/25 01:30, Willy Tarreau wrote: > On Fri, Aug 24, 2018 at 06:18:23PM -0400, Patrick Hemmer wrote: >>> I disagree with making a special case above for maxconn 0. In fact for me >>> it just means that such a server cannot accept connections, so it simply >>>

Re: [PATCH 2/2] MINOR: Add srv_conn_free sample fetch

On 2018/8/22 04:05, Willy Tarreau wrote: > On Thu, Aug 09, 2018 at 06:46:29PM -0400, Patrick Hemmer wrote: >> This adds the 'srv_conn_free([/])' sample fetch. This fetch >> provides the number of available connections on the designated server. > Fine with this as wel

lua time tracking

What are the thoughts around putting time tracking stats around LUA calls? Just really basic info like how long a request spent running LUA code. Similar to how we already have metrics for time spent in queue, connecting, waiting on response, etc. Currently I accomplish this manually by grabbing t

Re: Does anyone *really* use 51d or WURFL ?

On 2019/1/21 09:36, Willy Tarreau wrote: > Hi all, > > recently it was figured that the buffer API changes caused some breakage > to da.c and 51d.c (both fixed since), I don't know if wurfl builds at all > by the way since the last update to the module is its introduction more > than 2 years ago.

Compilation fails on OS-X

Trying to compile haproxy on my local machine for testing purposes and am running into the following: # make TARGET=osx src/proto_http.c:293:1: error: argument to 'section' attribute is not valid for this target: mach-o section specifier requires a segment and section separated by

Re: Compilation fails on OS-X

On 2019/2/13 09:40, Aleksandar Lazic wrote: > Am 13.02.2019 um 14:45 schrieb Patrick Hemmer: >> Trying to compile haproxy on my local machine for testing purposes and am >> running into the following: > Which compiler do you use? # gcc -v Configured with: --pr

Re: Compilation fails on OS-X

On 2019/2/13 10:29, Olivier Houchard wrote: > Hi Patrick, > > On Wed, Feb 13, 2019 at 10:01:01AM -0500, Patrick Hemmer wrote: >> >> On 2019/2/13 09:40, Aleksandar Lazic wrote: >>> Am 13.02.2019 um 14:45 schrieb Patrick Hemmer: >>>> Trying to compi

Re: Compilation fails on OS-X

On 2019/2/14 08:20, Frederic Lecaille wrote: > On 2/14/19 1:32 PM, Frederic Lecaille wrote: >> On 2/13/19 7:30 PM, Patrick Hemmer wrote: >>> >>> >>> On 2019/2/13 10:29, Olivier Houchard wrote: >>>> Hi Patrick, >>>> >>>>

Re: Compilation fails on OS-X

On 2019/2/14 12:45, Olivier Houchard wrote: > Hi Patrick, > > On Thu, Feb 14, 2019 at 09:12:18AM -0500, Patrick Hemmer wrote: >> >> On 2019/2/14 08:20, Frederic Lecaille wrote: >>> On 2/14/19 1:32 PM, Frederic Lecaille wrote: >>>> On 2/13/19 7:30 PM, P

Re: Error parsing commas in str() fetch

On 2019/2/23 18:18, Nick Ramirez wrote: > > If I set a variable like this: > > > /http-request set-var(txn.allowed_methods) str("GET,POST,PUT")/ > > > Then I get an error: > > > /parsing [/etc/haproxy/haproxy.cfg:20] : error detected in frontend > 'fe_proxy' while parsing 'http-request set-var(tx

http/2 server-push support

Now that we have h2 support on frontends, backends, trailers, etc, I'm hoping that server side server-push is somewhere on the roadmap. By "server side" I mean not this middleware based server-push methodology frequently used where a "Link" header is converted to a server push. But instead where th

Re: Issue with systemd haproxy.service on RHEL 7.4

On 2019/3/7 11:08, Badari Prasad wrote: > Hi > RHEL 7.4 comes with haproxy 1.5.18, I wanted use latest version of > haproxy 1.9.4. So source code comes with haproxy.service.in > > [https://github.com/haproxy/haproxy/blob/master/contrib/systemd/haproxy.service.in] >

Re: Adding Configuration parts via File

On 2019/3/8 08:17, Philipp Kolmann wrote: > Hi, > > I have ACLs for Source-IPs for Admins for several services. These ACLs > are identical for multiple listener-sections. > > Would it be possible to have a file with several acl snipplets and > source that at the proper section of the config file

`stats bind-process` broken

With haproxy 1.9.6 the `stats bind-process` directive is not working. Every connection to the socket is going to a random process: Here's a simple reproduction: Config:    global        nbproc 3        stats socket /tmp/haproxy.sock level admin        stats bind-process 1 Testing:    # for i i

Re: `stats bind-process` broken

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Thursday, April 11, 2019, 13:23 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org, wlallem...@haproxy.com *Subject:* `stats bind-process` broken On Thu, Apr 11, 2019

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Tim Düsterhus [mailto:t...@bastelstu.be] *Sent:* Friday, April 26, 2019, 14:30 EDT *To:* William Lallemand *Cc:* haproxy@formilux.org, w...@1wt.eu *Subject:* [PATCH] MINOR: systemd: Make use of master socket in sys

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Tim Düsterhus [mailto:t...@bastelstu.be] *Sent:* Friday, April 26, 2019, 15:03 EDT *To:* Patrick Hemmer , William Lallemand *Cc:* haproxy@formilux.org, w...@1wt.eu *Subject:* [PATCH] MINOR: systemd: Make use of

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Monday, April 29, 2019, 23:55 EDT *To:* William Lallemand *Cc:* Tim Düsterhus , Patrick Hemmer , haproxy@formilux.org *Subject:* [PATCH] MINOR: systemd: Make use of

HAProxy 1.9.6 unresponsive

We are running HAProxy 1.9.6 and managed to get into a state where HAProxy was completely unresponsive. It was pegged at 100% like many of the other experiences here on the mailing list lately. But in addition it wouldn't respond to anything. The stats socket wasn't even responsive. When I att

Re: [PATCH v2 1/2] MINOR: systemd: Use the variables from /etc/default/haproxy

*From:* Tim Duesterhus [mailto:t...@bastelstu.be] *Sent:* Monday, May 6, 2019, 07:00 EDT *To:* haproxy@formilux.org *Cc:* Apollon Oikonomopoulos , wlallem...@haproxy.com, w...@1wt.eu, ber...@debian.org, Tim Duesterhus *S

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Monday, May 6, 2019, 08:42 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive On Sun, May 05, 2019 at 09:40:02AM +0200, Willy

systemd watchdog support?

So with the prevalence of the issues lately where haproxy is going unresponsive and consuming 100% CPU, I wanted to see what thoughts were on implementing systemd watchdog functionality. In our case, haproxy going unresponsive is extremely problematic as our clustering software (pacemaker+syst

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Tuesday, May 7, 2019, 14:46 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive Hi Patrick, On Tue, May 07, 2019 at 02:01:33PM

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Saturday, May 11, 2019, 06:10 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive Hi Patrick, On Fri, May 10, 2019 at 09:17:25AM

haproxy 1.9.6 segfault in srv_update_status

We haven't had a chance to update to 1.9.8 yet, so we're still running 1.9.6 (Linux) in production, and just had 2 segfaults happen a little over an hour apart. When I look at the core dumps from them, the stack trace is the same. I'm not sure if this is an issue already fixed, so providing jus

Capturing headers from http/2 trailers?

Is there a way to capture (and log) headers from http/2 response trailers? The documentation doesn't mention trailers, and when I try to reference headers which are present in the trailers (e.g. "res.fhdr(grpc-status)"), it doesn't get captured. At the end of the day I'm trying to log the grpc

Re: Capturing headers from http/2 trailers?

*From:* Aleksandar Lazic [mailto:al-mob...@none.at] *Sent:* Friday, May 24, 2019, 20:30 EDT *To:* Patrick Hemmer *Cc:* Haproxy *Subject:* Capturing headers from http/2 trailers? Hi. Fri May 24 15:00:55 GMT+02:00 2019

Re: Capturing headers from http/2 trailers?

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Saturday, May 25, 2019, 01:42 EDT *To:* Patrick Hemmer *Cc:* Haproxy *Subject:* Capturing headers from http/2 trailers? Hi Patrick, On Fri, May 24, 2019 at 09:00:25AM

Lua logging to syslog & not stderr

Is there a way to have Lua log to syslog only, and not to stderr? When I call `TXN.log(...)`, the message shows up in syslog AND stderr. The Lua documentation implies this is possible as it has this statement (http://www.arpalert.org/src/haproxy-lua-api/1.9/index.html): > The log is sent, acc

http_first_req not working with http2

As subject says, it appears that the http_first_req sample is not working with http2. Config:   frontend f1     bind :8000     option http-use-htx     log-format http_first_req=%[http_first_req] With `curl http://localhost:8000` Outputs:   <30>Jun  3 17:16:36 haproxy[47767]: http_first_req=1

Re: http_first_req not working with http2

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Monday, June 3, 2019, 17:21 EDT *To:* haproxy@formilux.org *Subject:* http_first_req not working with http2 As subject says, it appears that the

segfault in tcp-request session set-var

In haproxy 1.9.8, if you do `tcp-request session set-var()` with a variable in any scope other than sess, it segfaults. For example: tcp-request session set-var(txn.foo) ... tcp-request session set-var(req.foo) ... * thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code

unset-var doesn't support conditions

It appears that all usages of unset-var don't support conditions. Meaning none of the following work: http-request unset-var(txn.foo) if { always_true } tcp-request content unset-var(txn.foo) if { always_true } etc. The error presented is: [ALERT] 153/175307 (58641) : parsing [haproxy-minimal.c

[PATCH] MINOR: SSL: add client/server random sample fetches

This adds 4 sample fetches: - ssl_fc_client_random - ssl_fc_server_random - ssl_bc_client_random - ssl_bc_server_random These fetches retrieve the client or server random value sent during the handshake. Their use is to be able to decrypt traffic sent using ephemeral ciphers. Tools like wireshar

Re: http_first_req not working with http2

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Tuesday, June 4, 2019, 10:08 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* http_first_req not working with http2 Hi Patrick, On Mon, Jun 03, 2019 at

[PATCH] MINOR: SSL: add client/server random sample fetches

Re-send of earlier patch due to formatting issues (upgraded thunderbird and lost a bunch of stuff :-( ). As an attachment this time, so should be safe. -Patrick From 0947dc1faf7a0a90631adcebc2e65fc191da8473 Mon Sep 17 00:00:00 2001 From: Patrick Hemmer Date: Tue, 4 Jun 2019 08:13:03 -0400

Re: [PATCH] MINOR: SSL: add client/server random sample fetches

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Tuesday, June 4, 2019, 16:38 EDT *To:* haproxy@formilux.org *Subject:* [PATCH] MINOR: SSL: add client/server random sample fetches Re-send of earlier patch

haproxy inappropriately sending rst_stream on http/2

I'm running haproxy 1.9.8 and am having an issue where haproxy is sending a http/2 rst_stream message to the client for some reason. When I look in the haproxy logs, the state termination flags are "CD--". However I know the client didn't abort the request as I have a packet capture showing th

Re: Case Sensitive Headers

*From:* Luke Seelenbinder [mailto:l...@sermonaudio.com] *Sent:* Wednesday, June 26, 2019, 10:07 EDT *To:* HAProxy *Subject:* Case Sensitive Headers Hello List, I have a painful case of noncompliance to report and figure

fullconn not working

I'm trying to get fullconn working, and can't seem to do so. I dunno if it's a bug, or if it's my understanding that's wrong. Basically my goal is to prevent the cumulative total of all connections to all servers in a pool from exceeding a certain value. For example I might have 10 servers, each

Re: DOC: Suggest to replace the netstat commands

*From:* Alain Belkadi [mailto:xigu...@linuxbeach.be] *Sent:* Monday, July 8, 2019, 10:51 EDT *To:* haproxy@formilux.org *Subject:* DOC: Suggest to replace the netstat commands Hello, As the "netstat" command is deprecat

Re: haproxy inappropriately sending rst_stream on http/2

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Wednesday, June 26, 2019, 08:06 EDT *To:* haproxy@formilux.org *Subject:* haproxy inappropriately sending rst_stream on http/2 I'm running haproxy 1.9.

Re: fullconn not working

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Friday, June 28, 2019, 11:50 EDT *To:* HAProxy *Subject:* fullconn not working I'm trying to get fullconn working, and can't seem to do so. I dunn

Re: fullconn not working

*From:* Pavlos Parissis [mailto:pavlos.paris...@gmail.com] *Sent:* Tuesday, July 16, 2019, 09:32 EDT *To:* haproxy@formilux.org *Cc:* Patrick Hemmer *Subject:* fullconn not working On Παρασκευή, 28 Ιουνίου 2019 5:50:48

Re: fullconn not working

*From:* Jerome Magnin [mailto:jmag...@haproxy.com] *Sent:* Tuesday, July 16, 2019, 10:19 EDT *To:* Patrick Hemmer *Cc:* Pavlos Parissis , haproxy@formilux.org *Subject:* fullconn not working Hi Patrick, On Tue, Jul 16

mailing list archives dead

It looks like the mailing list archives stopped working mid-December. https://marc.info/?l=haproxy -Patrick

format string fetch method?

While working with the `http-request set-var` (and a few other places, but primarily here), it would be very useful to be able to use haproxy format strings to define the variable. For example http-request set-var(txn.foo) fmt(%ci:%cp:%Ts) Or even http-request set-var(txn.foo) fmt(%ci:%cp:%Ts)

missing documentation on 51degrees samples

The documentation doesn't mention the sample fetcher `51d.all`, nor the converter `51d.single`. The only place they're mentioned is the repo README. Also the documentation for `51degrees-property-name-list` indicates it takes an optional single string argument (`[]`), rather than multiple string a

configure peer namespace

Can we get the ability to configure the peer namespace? Right now haproxy uses the default namespace, but in our system we have an "internal" interface which is able to talk to the other haproxy nodes, and this interface is in another network namespace. Additionally, the error output for failure t

trouble with sc0_conn_cur

I'm trying to limit concurrent connections but having trouble getting it working with sc0_conn_cur. The relevant portion of my config looks like: frontend www log-format %ac\ %tsc\ %[sc0_conn_cur] stick-table type ip size 1 expire 10s peers cluster store conn_cur tcp-requ

deviceatlas issues

After using the addon, I've run across a few issues trying to get it running. The first are mostly documentation issues: 1. The example for `da-csv-conv` has `da-csv()` instead of `da-csv-conv()`. 2. The documentation lists the parameter `deviceatlas-separator`. The param is really `deviceatlas-pro

capture header VS set-var

I was mostly just wondering about differences between using things like `capture request header`/`http-request capture` and `http-request set-var`. set-var seems to have all the capabilities of captures, and are much easier to work with. You don't have to pre-declare them, you don't have to set th

using comma in argument to sample fetch & converter

How do you use a comma inside an argument to a sample fetcher or converter? For example, the sample fetch str, if I try to do `str(foo,bar)` I get the error fetch method 'str' : end of arguments expected at position 2, but got ',bar' All variations such as `str('foo,bar')`, `str(foo\,bar)`, e

Re: capture header VS set-var

On 2016/12/5 03:35, thierry.fourn...@arpalert.org wrote: > On Sun, 4 Dec 2016 09:17:00 -0500 > Patrick Hemmer wrote: > >> I was mostly just wondering about differences between using things like >> `capture request header`/`http-request capture` and `http-request set-var`. &

Re: using comma in argument to sample fetch & converter

On 2016/12/7 19:15, Cyril Bonté wrote: > Hi, > > On 07/12/2016 21:40, Patrick Hemmer wrote: >> How do you use a comma inside an argument to a sample fetcher or >> converter? >> For example, the sample fetch str, if I try to do `str(foo,bar)` I get >> the error &

Re: Define path of configuration files in systemd unit

On 2016/12/13 11:14, Ricardo Fraile wrote: > Hello Jarno, > > > Yes, you are right, this is not an elegant solution, and reloading > doesn't work. This is the systemd report: > > > # systemctl status haproxy.service -l > ● haproxy.service - HAProxy Load Balancer >Loaded: loaded (/etc/systemd/sy

Re: Is it possible to avoid 503 error when one backend server has down and health check hasn't been launched yet

On 2016/12/24 10:42, Alex.Chen wrote: > for my scenario, i need to using "balance source" to keep the > persistence of haproxy's balancing, I find that when one of my backend > server (s1) has been killed, and if the next round health check is > still not launched, then s1 is still be marked as UP

Re: ssl offloading and send-proxy-v2-ssl

On 2016/12/23 09:28, Arnall wrote: > Hi everyone, > > i'm using a nbproc > 1 configuration for ssl offloading : > > listen web_tls > mode http > bind *:443 ssl crt whatever.pem process 2 > bind *:443 ssl crt whatever.pem process 3 > > ../.. > server web_plain u...@plain.sock send-

Re: ALERT:sendmsg logger #1 failed: Resource temporarily unavailable (errno=11)

On 2017/1/5 02:15, Igor Cicimov wrote: > Hi all, > > On one of my haproxy's I get the following message on reload: > > >

Re: [PATCH] MINOR: systemd unit works with cfgdir and cfgfile

On 2017/1/12 06:42, Ricardo Fraile wrote: > Hello, > > > As 1.7 release allow to load multiple files from a directory: > > > https://cbonte.github.io/haproxy-dconv/1.7/management.html > > -f : adds to the list of configuration files > to be loaded. If is a directory, all the files (and only f

haproxy consuming 100% cpu - epoll loop

So on one of my local development machines haproxy started pegging the CPU at 100% `strace -T` on the process just shows: ... epoll_wait(0, {}, 200, 0) = 0 <0.03> epoll_wait(0, {}, 200, 0) = 0 <0.03> epoll_wait(0, {}, 200, 0) = 0 <0.03> epoll_w

Re: unique-id-header and req.hdr

On 2017/1/27 14:38, Cyril Bonté wrote: > Le 27/01/2017 à 20:11, Ciprian Dorin Craciun a écrit : >> On Fri, Jan 27, 2017 at 9:01 PM, Cyril Bonté >> wrote: >>> Instead of using "unique-id-header" and temporary headers, you can >>> use the >>> "unique-id" fetch sample [1] : >>> >>> frontend public

Re: unique-id-header and req.hdr

On 2017/1/27 15:31, Ciprian Dorin Craciun wrote: > On Fri, Jan 27, 2017 at 10:24 PM, Patrick Hemmer > wrote: >> Something that might satisfy both requests, why not just append to the >> existing request-id? >> >> unique-id-format %[req.hdr(X-Request-ID)],%{+X

clarification on documentation for sticky counter tracking duration

I'm looking to get some clarification around the documentation for the duration of sticky counter tracking. There are 2 specific points I'm a little confused on. 1. Under the documentation for `tcp-request content`, it says: > In case of HTTP keep-alive with the client, all tcp-request content rul

add dynamic header to http response?

With haproxy 1.5, Is there any way to add a dynamic header to the http response (like the `http-request add-header` option for request headers)? I'm adding a X-Request-Id header to requests before forwarding them on to the back end, but would also like to be able to send this same header back in th

syslog timestamp with millisecond

The current syslog implementation (via UDP) sends log entries with the millisecond portion of the timestamp stripped off. Our log collector is capable of handling timestamps with millisecond accuracy and I would like to have it do so. Is there any way to accomplish this? I know you can add an addi

haproxy duplicate http_request_counter values

I'm using the %rt field in the "unique-id-format" config parameter (the full value is "%{+X}o%pid-%rt"), and am getting lots of duplicates. In one specific case, haproxy added the same http_request_counter value to 70 different http requests within a span of 61 seconds (from various client hosts to

Re: haproxy duplicate http_request_counter values (BUG)

On 2013/08/11 15:45, Patrick Hemmer wrote: > I'm using the %rt field in the "unique-id-format" config parameter > (the full value is "%{+X}o%pid-%rt"), and am getting lots of > duplicates. In one specific case, haproxy added the same > http_request_counte

Re: haproxy duplicate http_request_counter values

On 08/13/2013 11:53 AM, Willy Tarreau wrote: > Hi Patrick, > > On Sun, Aug 11, 2013 at 03:45:36PM -0400, Patrick Hemmer wrote: >> I'm using the %rt field in the "unique-id-format" config parameter (the >> full value is "%{+X}o%pid-%rt"), and am getti

Re: haproxy duplicate http_request_counter values (BUG)

; -Patrick > > On 08/13/2013 07:13 PM, Patrick Hemmer wrote: >> >> On 2013/08/11 15:45, Patrick Hemmer wrote: >>> I'm using the %rt field in the "unique-id-format" config parameter >>> (the full value is "%{+X}o%pid-%rt"),

Re: haproxy duplicate http_request_counter values (BUG)

On 2013/08/15 16:35, Patrick Hemmer wrote: > > On 08/13/2013 08:46 PM, hapr...@stormcloud9.net wrote: >> Oh, for some reason my mail client wasn't showing the response from >> Willy when I made this reply. Not sure if this info is really >> necessary any more. Will tr

content based routing with rewrite (reqrep)

So I'm trying to come up with the best way of doing this, but am having a heck of a time. Basically I have several different backend service pools, and I have one externally facing haproxy router. I want to take a map of public URLs and route them to specific backend URLs. For example public.examp

Client timeout on http put shows as a server timeout with error 504

We have this case with haproxy 1.5-dev19 where when a client is uploading data via a HTTP PUT request, the client will fail to send all it's data and haproxy will timeout the connection. The problem is that haproxy is reporting this an error 504 and connection flags of "sH--", meaning it timed out

Re: Client timeout on http put shows as a server timeout with error 504

*From: *Willy Tarreau *Sent: * 2013-09-18 01:46:50 E *To: *Patrick Hemmer *CC: *haproxy@formilux.org *Subject: *Re: Client timeout on http put shows as a server timeout with error 504 > Hi Patrick, > > On Tue, Sep 17, 2013 at 06:29:13PM -0400, Patrick Hemmer wrote: >> We have

Re: AW: GA Release of 1.5

*From: *Jinn Ko *Sent: * 2013-09-24 10:22:49 E *To: *haproxy@formilux.org *Subject: *Re: AW: GA Release of 1.5 > Hi, > > It's good to get a better idea of what's needed to see a GA release of > 1.5. We've been keenly awaiting the GA release, and I certainly > understand the need to ensure the h

Re: Client timeout on http put shows as a server timeout with error 504

*From: *Patrick Hemmer *Sent: * 2013-09-18 10:26:36 E *To: *haproxy@formilux.org *Subject: *Re: Client timeout on http put shows as a server timeout with error 504 > *From: *Willy Tarreau > *Sent: * 2013-09-18 01:46:50 E > *To: *Patrick Hemmer > *CC: *haproxy@formilux.org >

handling hundreds of reqrep statements

I'm currently using haproxy (1.5-dev19) as a content based router. It takes an incoming request, looks at the url, rewrites it, and sends it on to the appropriate back end. The difficult part is that we need to all parsing and rewriting after the first match. This is because we might have a url suc

Re: handling hundreds of reqrep statements

*From: *Patrick Hemmer *Sent: * 2013-10-22 19:13:08 E *To: *haproxy@formilux.org *Subject: *handling hundreds of reqrep statements > I'm currently using haproxy (1.5-dev19) as a content based router. It &g

  1   2   3   >