Re: ip_nonlocal_bind=1 set but sometimes get "cannot bind socket" on reload (-sf)

2016-02-10 Thread Burhan S Ahmed
Chris Riley writes: > > Hello, > I'm seeing some inconsistent/strange behavior with HAProxy (1.5.14 and 1.6.1) not being able to bind to a socket despite 'net.ipv4.ip_nonlocal_bind = 1' being set. HAProxy starts up without issue initially but after several reloads, the command 'service haprox

advise on updating backends for 0-downtime

2013-07-03 Thread S Ahmed
Hi, Say I have 3 backend servers running my website. I want to update the servers, but do it in a way where I don't have any downtime. So say I have 3 new backend servers that I start and have the updated code on it, how can I update the haproxy config file without having any downtime? Is this

Re: how to update config w/o stopping the haproxy service

2013-06-15 Thread S Ahmed
Hi, The goal was to swap the haproxy configuraiton file with a new updated one w/o any downtime. On Sun, Apr 28, 2013 at 1:54 PM, Christian Ruppert wrote: > On 04/28/13 at 01:00PM -0400, S Ahmed wrote: > > Hi, > > > > 1. Is there a way to update the config file without

RE: how to update config w/o stopping the haproxy service

2013-04-28 Thread S Ahmed
Hi, 1. Is there a way to update the config file without having to stop/start the haproxy service? e.g. when I need to update the ip addresses of the backend servers (using ec2) 2. During migrations, say I have 10 backend servers, what if I want to stop taking requests for 5 of the 10 servers, is

RE: how hard is it to understand the codebase?

2013-04-26 Thread S Ahmed
I'm not that well versed in the c language, but on a scale of 1-10, how hard is it for someone to understand the codebase? Do you think this is something someone who wants to learn C could understand after a few months?

Re: urls in stick-table, any timeline?

2013-04-26 Thread S Ahmed
I made it out of my head, > any issues, please let me know. > > And please let me know if it works in your case. > > Baptiste > > > > On Thu, Apr 25, 2013 at 4:49 PM, S Ahmed wrote: > > Each client (might be upto 100K of them) will have a unique URL, let me >

Re: urls in stick-table, any timeline?

2013-04-25 Thread S Ahmed
f requests per minute, if > > they go over, just drop the request until the rate limit has expired). > > > > > > On Tue, Apr 23, 2013 at 1:39 AM, Baptiste wrote: > >> > >> Hi Ahmed, > >> > >> Yes, it has been implemented.

Re: urls in stick-table, any timeline?

2013-04-24 Thread S Ahmed
s been implemented. > You can store a URL and rate limited on it. > > Baptiste > > On Mon, Apr 22, 2013 at 11:15 PM, S Ahmed wrote: > > Hello, > > > > Has this feature been released yet by any change? :) > > > > Again my initial request was to do: > >

do I still need nginx for static file serving?

2013-04-22 Thread S Ahmed
My backend servers run jetty, and currently I am using nginx that runs on port 80 to route traffic to the backend that runs on e.g. port 8081. I also using nginx to serve the static files for the folder: /assets/ So all requests that have this folder do net get proxied to jetty on port 8081, but

Re: urls in stick-table, any timeline?

2013-04-22 Thread S Ahmed
gt; Maybe for Christmas :) > > cheers > > On Tue, Aug 21, 2012 at 5:19 PM, S Ahmed wrote: > > Hello, > > > > Any updates or guestimates on if sticky-table feature will be released? > > > > Just haven't been watching this list for a while and curious if

Re: could a single ha proxy server sustain 1500 requests per second

2013-02-07 Thread S Ahmed
a problem? On Wed, Dec 5, 2012 at 2:00 AM, Willy Tarreau wrote: > On Tue, Dec 04, 2012 at 02:19:30PM -0500, S Ahmed wrote: > > Hi, > > > > So 500 Mbits is 1/2 usage of a 1 Gbps port (haproxy and the back-end > > servers will have 1 Gbps connections). > >

Re: urls in stick-table, any timeline?

2012-08-21 Thread S Ahmed
:16:22PM -0400, S Ahmed wrote: > > I was told that soon you will be able to store a URL in a stick-table, > so I > > could block a particular url and then remove the block by making a > request. > > > > I situation is I will be blocking up to 250K urls (for rate limiting

Re: urls in stick-table, any timeline?

2012-06-26 Thread S Ahmed
So would you say weeks away, or months away, or a year away? (rough estimate) Appreciate your time! On Sun, Jun 24, 2012 at 1:28 AM, Willy Tarreau wrote: > Hi, > > On Thu, Jun 21, 2012 at 05:16:22PM -0400, S Ahmed wrote: > > I was told that soon you will be able to store a URL i

Re: could haproxy call redis for a result?

2012-05-24 Thread S Ahmed
, S Ahmed wrote: > Yes it is the lookup that I am worried about. > > > On Tue, May 8, 2012 at 5:46 PM, Baptiste wrote: > >> Hi, >> >> Willy has just released 1.5-dev9, but unfortunately the track >> functions can't yet track strings (and so URLs). >&g

Re: could haproxy call redis for a result?

2012-05-08 Thread S Ahmed
it and we could > work on a proof of concept configuration. > > Concerning 250K URLs, that should not be an issue at all to store them. > Maybe looking for one URL could have a performance impact, we'll see. > > cheers > > On Tue, May 8, 2012 at 10:00 PM, S Ahmed wrote:

Re: could haproxy call redis for a result?

2012-05-08 Thread S Ahmed
Great. So any ideas how many urls one can story in these sticky tables before it becomes a problem? Would 250K be something of a concern? On Tue, May 8, 2012 at 11:26 AM, Baptiste wrote: > On Tue, May 8, 2012 at 3:25 PM, S Ahmed wrote: > > Ok that sounds awesome, how will that wo

Re: could haproxy call redis for a result?

2012-05-08 Thread S Ahmed
e header that will unblock it? When do you think this will go live? On Tue, May 8, 2012 at 4:26 AM, Baptiste wrote: > On Tue, May 8, 2012 at 4:39 AM, S Ahmed wrote: > > I agree it will add overheard for each call. > > > > Well would there a way for me to somehow tell hap

Re: could haproxy call redis for a result?

2012-05-07 Thread S Ahmed
. On Mon, May 7, 2012 at 7:39 PM, Baptiste wrote: > On Tue, May 8, 2012 at 12:26 AM, S Ahmed wrote: > > I'm sure this isn't possible but it would be cool if it is. > > > > My backend services write to redis, and if a client reaches a certain > > threshold, I w

could haproxy call redis for a result?

2012-05-07 Thread S Ahmed
I'm sure this isn't possible but it would be cool if it is. My backend services write to redis, and if a client reaches a certain threshold, I want to hard drop all further requests until x minutes have passed. Would it be possible, for each request, haproxy performs a lookup in redis, and if a 0

Re: could a single ha proxy server sustain 1500 requests per second

2012-05-04 Thread S Ahmed
t; > On Thu, May 3, 2012 at 9:35 PM, S Ahmed wrote: > > I have a service where people will be http posting documents that will > be 20 > > KB in size. > > The rate at which these documents will be http posted is 1500 requests > per > > second. > > > >

Re: redirect to backend server during initial tcp handshake

2012-01-30 Thread S Ahmed
affic will flow through the haproxy server which is the bottleneck in high throughput environments like image uploading). On Fri, Jan 6, 2012 at 1:58 AM, Willy Tarreau wrote: > On Wed, Jan 04, 2012 at 03:53:59PM -0500, S Ahmed wrote: > > In my situation clients will be sending 1K of data, a

Re: rate limiting addon

2012-01-25 Thread S Ahmed
ly Tarreau wrote: > On Sat, Jan 07, 2012 at 07:11:02PM -0500, S Ahmed wrote: > > I was reading this: http://blog.serverfault.com/2010/08/26/1016491873/ > > > > A bit confused, the link to the src is version 1.5 but version 1.4 seems > to > > have a modified date of sep

Re: rate limiting addon

2012-01-08 Thread S Ahmed
nn_rate value: > acl abuser src_conn_rate gt 100 > block if abuser > > So the 101st request and above in a minute would be blocked. > > cheers > > > On Sun, Jan 8, 2012 at 10:53 PM, S Ahmed wrote: > > Actually my requirements are as follows: > > > > To block all f

Re: rate limiting addon

2012-01-08 Thread S Ahmed
then correct? On Sun, Jan 8, 2012 at 2:24 AM, Willy Tarreau wrote: > On Sat, Jan 07, 2012 at 07:11:02PM -0500, S Ahmed wrote: > > I was reading this: http://blog.serverfault.com/2010/08/26/1016491873/ > > > > A bit confused, the link to the src is version 1.5 but version 1.4

Re: simple rate limiting

2012-01-07 Thread S Ahmed
to some domains or URLs, just use content > switching and apply this limitation on a backend only. > > Cheers > > > On Sat, Jan 7, 2012 at 1:16 PM, S Ahmed wrote: > > Can haproxy be used to rate limit clients by either ipaddress or > > hostname(domain name)? > > >

rate limiting addon

2012-01-07 Thread S Ahmed
I was reading this: http://blog.serverfault.com/2010/08/26/1016491873/ A bit confused, the link to the src is version 1.5 but version 1.4 seems to have a modified date of sept 2011 while 1.5 is august 2010. Is this an addon module or? Is it being maintained? Ok my main question is this: When

simple rate limiting

2012-01-07 Thread S Ahmed
Can haproxy be used to rate limit clients by either ipaddress or hostname(domain name)? If yes, will it rate limit by simply streaming in the request header? The reason I am asking, say the client's request contains 100K of http post data. Currently for me to rate limit at the application level,

Re: how do people have multiple haproxy servers?

2012-01-04 Thread S Ahmed
gt; > On Wed, Jan 4, 2012 at 6:48 PM, S Ahmed wrote: > > How is it possible for a single domain like www.example.com which maps > to a > > public i.p of xx.xx.xx.xx work when there are multiple haproxy servers? > > > > The only way I can think of is if somehow your doma

how do people have multiple haproxy servers?

2012-01-04 Thread S Ahmed
How is it possible for a single domain like www.example.com which maps to a public i.p of xx.xx.xx.xx work when there are multiple haproxy servers? The only way I can think of is if somehow your domain name maps to 2 different ipaddresses (if you can 2 haproxy servers). I'm not talking about a si

Re: redirect to backend server during initial tcp handshake

2012-01-04 Thread S Ahmed
In my situation clients will be sending 1K of data, and I believe I can do this with a http get request safely since the limit is I think 4k. Ok so the benefit of this approach is you get to spread the load when the solutions requires it, but at the cost of latency. i.e. if it take 30ms for my cl

redirect to backend server during initial tcp handshake

2012-01-03 Thread S Ahmed
Hi, People access my web service using: services.example.com/some/path I am planning on having the url services.example.com map to my HAProxy server. Now I have 5 backend servers that I want HAProxy to redirect requests. Clients will make a single http GET request and their "session" will end.