Re: http-reuse and Proxy protocol

2020-07-27 Thread Arnall
Hello, Le 23/07/2020 à 14:34, Willy Tarreau a écrit : Hi Arnall, On Tue, Jul 21, 2020 at 01:27:31PM +0200, Arnall wrote: Hello everyone, I remember that in the past it was strongly discouraged to use http-reuse in combination with send-proxy, because of the client IP which is provided by the

Re: http-reuse and Proxy protocol

2020-07-27 Thread Willy Tarreau
On Mon, Jul 27, 2020 at 01:47:44PM +0200, Lukas Tribus wrote: > On Mon, 27 Jul 2020 at 13:14, Willy Tarreau wrote: > > > However on a unix domain socket like this we never had this issue in > > > the first place, as connection-reuse cannot be used on it by > > > definition, correct? > > > > No,

Re: http-reuse and Proxy protocol

2020-07-27 Thread Lukas Tribus
On Mon, 27 Jul 2020 at 13:14, Willy Tarreau wrote: > > However on a unix domain socket like this we never had this issue in > > the first place, as connection-reuse cannot be used on it by > > definition, correct? > > No, it doesn't change anything. We consider the connection, the protocol >

Re: http-reuse and Proxy protocol

2020-07-27 Thread Willy Tarreau
Hi Lukas, On Mon, Jul 27, 2020 at 12:58:29PM +0200, Lukas Tribus wrote: > Hello, > > > On Thu, 23 Jul 2020 at 14:34, Willy Tarreau wrote: > > > defaults > > > http-reuse always > > > > > > backend abuse > > > timeout server 60s > > > balance roundrobin > > > hash-balance-factor

Re: http-reuse and Proxy protocol

2020-07-27 Thread Lukas Tribus
Hello, On Thu, 23 Jul 2020 at 14:34, Willy Tarreau wrote: > > defaults > > http-reuse always > > > > backend abuse > > timeout server 60s > > balance roundrobin > > hash-balance-factor 0 > > server s_abuse u...@abuse.sock send-proxy-v2 maxconn 4 > > > > listen l_abuse > >

Re: http-reuse and Proxy protocol

2020-07-23 Thread Willy Tarreau
Hi Arnall, On Tue, Jul 21, 2020 at 01:27:31PM +0200, Arnall wrote: > Hello everyone, > > I remember that in the past it was strongly discouraged to use http-reuse in > combination with send-proxy, because of the client IP which is provided by > the proxy protocol. > > I have this configuration

http-reuse and Proxy protocol

2020-07-21 Thread Arnall
Hello everyone, I remember that in the past it was strongly discouraged to use http-reuse in combination with send-proxy, because of the client IP which is provided by the proxy protocol. I have this configuration : HA-Proxy version 2.0.14-1~bpo9+1 2020/04/16 - https://haproxy.org/

Re: http reuse and proxy protocol

2017-01-05 Thread Arnall
Le 03/01/2017 à 18:18, Lukas Tribus a écrit : Hi Arnall, Am 03.01.2017 um 16:15 schrieb Arnall: Is it possible that with "http-reuse always" the yyy.yyy.yyy.yyy request has used the xxx.xxx.xxx.xxx connection between https and http frontend with proxy protocol forwarding xxx.xxx.xxx.xxx

Re: http reuse and proxy protocol

2017-01-03 Thread Willy Tarreau
On Tue, Jan 03, 2017 at 06:18:23PM +0100, Lukas Tribus wrote: > Hi Arnall, > > > Am 03.01.2017 um 16:15 schrieb Arnall: > > > > Is it possible that with "http-reuse always" the yyy.yyy.yyy.yyy request > > has used > > the xxx.xxx.xxx.xxx connection between https and http frontend with proxy > >

Re: http reuse and proxy protocol

2017-01-03 Thread Lukas Tribus
Hi Arnall, Am 03.01.2017 um 16:15 schrieb Arnall: Is it possible that with "http-reuse always" the yyy.yyy.yyy.yyy request has used the xxx.xxx.xxx.xxx connection between https and http frontend with proxy protocol forwarding xxx.xxx.xxx.xxx instead of yyy.yyy.yyy.yyy ? Yes, that's what

http reuse and proxy protocol

2017-01-03 Thread Arnall
Hi everyone, recently we have separated https and http frontend in order to scale well. we are using a nbproc > 1 configuration for ssl offloading : listen web_tls mode http bind *:443 ssl crt whatever.pem process 2 bind *:443 ssl crt whatever.pem process 3 ../.. server