Re: Weird stick-tables / peers behaviour

2016-03-25 Thread Sylvain Faivre
On 03/24/2016 04:07 PM, Christian Ruppert wrote: Hi all, I've just upgraded some hosts to 1.6.4 (from 1.5) and immediately got a [...] and two for doing some "curl -Lvs http://127.0.0.1:8080"; by hand. If you do some on the first and some on the second host you'll notice different values on

Re: Protecting against slow HTTP POST queries

2016-02-04 Thread Sylvain Faivre
On 02/04/2016 12:06 PM, Baptiste wrote: On Thu, Feb 4, 2016 at 9:44 AM, Sylvain Faivre wrote: Hi, Is there a timeout setting in HAproxy that can help protect against slow HTTP POST queries ? >> [...] please run the same test against HAProxy 1.6 and enable "option buffer-h

Protecting against slow HTTP POST queries

2016-02-04 Thread Sylvain Faivre
Hi, Is there a timeout setting in HAproxy that can help protect against slow HTTP POST queries ? I'm not talking about "slow loris" type attacks (where the client sleeps between request headers) but "slow HTTP POST" (where the client sleeps between POST data lines). Here is an example : -

Re: stick table replication problem

2015-12-24 Thread Sylvain Faivre
Hi Tom, According to Emeric Brun, this bug was fixed by two commits, a few days ago. Unfortunately, I didn't have time to check this yet. Quoting Emeric : It outputs two major bugs in peersv1 and v2 protocol implementation (present from 1.4 haproxy version) This bug have been fixed in the la

Re: stick table replication problem

2015-12-03 Thread Sylvain Faivre
Hi Willy, Thanks for your help. On 12/03/2015 03:25 PM, Willy Tarreau wrote: > > [...] Thanks for this precision. All I can say for now is that you clearly encountered a bug but that we don't know what this bug is. We'll have to check in the code for something which could cause this. It would b

stick table replication problem

2015-12-03 Thread Sylvain Faivre
Hi, We just had a strange replication problem on our staging environment. We have 2 HAproxy servers. They were running for 2 weeks now. At the beginning, I checked that the stick tables were properly synced. Today, stick tables were not synced, for example : root@proxy1>: echo "show table front

Re: Email checks in defaults section

2015-11-30 Thread Sylvain Faivre
On 11/01/2015 06:34 PM, Tommy Atkinson wrote: I want to enable email alerts for all my backends so I added the "email-alert" options to the defaults section and a mailers section at the top level. The documentation indicates this is supported but it doesn't seem to work. HAProxy connects to the m

Re: appsession replacement in 1.6

2015-11-19 Thread Sylvain Faivre
Hi Willy, On 11/18/2015 09:31 PM, Willy Tarreau wrote: Hi Sylvain, On Tue, Nov 17, 2015 at 03:09:49PM +0100, Sylvain Faivre wrote: option http-buffer-request maybe you should stick on the header ;-) OK I added "option http-buffer-request", it will help for sure ! What do you m

Re: appsession replacement in 1.6

2015-11-17 Thread Sylvain Faivre
Replying to myself : On 11/17/2015 10:58 AM, Sylvain Faivre wrote: Hi Aleks, and thanks again for your help. Concerning this point : On 11/16/2015 11:16 PM, Aleksandar Lazic wrote: As described here http://git.haproxy.org/?p=haproxy-1.6.git;a=blob;f=doc/configuration.txt;h

Re: appsession replacement in 1.6

2015-11-17 Thread Sylvain Faivre
Hi Aleks, and thanks again for your help. Concerning this point : On 11/16/2015 11:16 PM, Aleksandar Lazic wrote: As described here http://git.haproxy.org/?p=haproxy-1.6.git;a=blob;f=doc/configuration.txt;h=45d1aacfbe0d2d53193f7956a0dd03e5f8151ea6;hb=HEAD#l5043 option http-buffer-request ma

Re: appsession replacement in 1.6

2015-11-16 Thread Sylvain Faivre
Hi Aleks, On 11/10/2015 10:56 PM, Aleksandar Lazic wrote: Dear Sylvain Faivre, Am 10-11-2015 12:48, schrieb Sylvain Faivre: On 11/10/2015 12:00 AM, Aleksandar Lazic wrote: Hi Sylvain Faivre. Am 09-11-2015 17:31, schrieb Sylvain Faivre: [snipp] So, I've got this so far : backend

Re: appsession replacement in 1.6

2015-11-10 Thread Sylvain Faivre
On 11/10/2015 12:00 AM, Aleksandar Lazic wrote: Hi Sylvain Faivre. Am 09-11-2015 17:31, schrieb Sylvain Faivre: Hi, Sorry I'm late on this discussion, following this thread : https://marc.info/?l=haproxy&m=143345620219498&w=2 We are using appsession with HAproxy 1.5 like th

appsession replacement in 1.6

2015-11-09 Thread Sylvain Faivre
Hi, Sorry I'm late on this discussion, following this thread : https://marc.info/?l=haproxy&m=143345620219498&w=2 We are using appsession with HAproxy 1.5 like this : backend http appsession JSESSIONID len 24 timeout 1h request-learn We would like to be able to do the same thing with HApro

Re: use several gpc's ?

2015-11-05 Thread Sylvain Faivre
On 11/05/2015 03:30 PM, Baptiste wrote: On Thu, Nov 5, 2015 at 2:48 PM, Sylvain Faivre wrote: Hi, Is there a way to use several gpc's ? I already use gpc0 to track client IPs generating too many errors, and I need to use another counter to track client IPs requesting some pages too

use several gpc's ?

2015-11-05 Thread Sylvain Faivre
Hi, Is there a way to use several gpc's ? I already use gpc0 to track client IPs generating too many errors, and I need to use another counter to track client IPs requesting some pages too fast. Here are the relevant parts of my current setup : frontend web stick-table type ip size 500k

log SSL/TLS protocol version

2015-06-09 Thread Sylvain Faivre
Hello, We use Haproxy in front of HTTP servers, SSL termination is done on HAproxy. Is there a way to have HAproxy log the SSL or TLS protocol version (TLS 1.0 / 1.1 / 1.2) or specific cipher that was used for requests ? I know this is negociated between each client and the HAproxy server, b

Re: add header or query parameter when redirecting

2015-06-03 Thread Sylvain Faivre
On 06/03/2015 04:02 PM, Baptiste wrote: On Wed, Jun 3, 2015 at 11:58 AM, Sylvain Faivre wrote: Hello, I use the redirect directive to redirect users from old sites to a new site, eg: redirect prefix http://new-site.com code 301 if old-site I would like to redirect requests from many old

add header or query parameter when redirecting

2015-06-03 Thread Sylvain Faivre
Hello, I use the redirect directive to redirect users from old sites to a new site, eg: redirect prefix http://new-site.com code 301 if old-site I would like to redirect requests from many old sites to the same new site, so I need a way to add info about the old host in the new redirecte

understanding HAproxy stats

2015-02-26 Thread Sylvain Faivre
Hello, I have trouble understanding stats reports from our HAproxy servers, can anyone please shed some light on this ? 1. On a backend with only one server, scur(BACKEND) > scur(server). How can this be ? # pxname,svname,qcur,qmax,scur,smax,slim,stot,bin,bout,dreq,dresp,ereq,econ,eresp,wre

Send client to a specific backend if header found in previous reply from server

2015-01-07 Thread Sylvain Faivre
Hello, This is a followup to my post and Baptiste's answer on 20141120. Unfortunately, I couldn't get this to work. I am trying to achieve the following : when a response from the application server contains a header named "X-test", send the following requests from the client IP to another bac

Send client to a specific backend if header found in previous reply from server

2014-11-20 Thread Sylvain Faivre
ok good so far ? I am wondering what to use in place of the ???, because no action is to be taken in the backend, this serves only as a way to use the ACL and mark the IP using gpc1 so that the frontend sends its further connections to another backend. Thanks in advance. Sylvain Faivre.