Re: [pound] Usage and Performance

+1 Even in our case the dependencies compilation failed and we discarded testing the new version. It could be great to make the compilation easier Regards El jue., 21 ene. 2021 20:56, Simon Matter via pound escribió: > > Hallo everybody > > > > Pound v3.0 has been officially released in earl

[Pound Mailing List] Pound Compiled with Openssl1.1

Hi guys, we would like to compile pound 2.7 with latest openssl version 1.1, but at the moment of the compilation it fails. It seems like pound2.7 uses some macros not used anymore in Openssl1.1. For example: config.c: In function ‘parse_service’: config.c:723:25: warning: implicit declaration of

Re: [Pound Mailing List] Delay in Request Running over pound

or 2.6 and one for 2.8a). > Tried to use the 2.8a one, but that patch did not apply correct. I patched > it manually, but still without success... :-( > > Regards > > Stefan > > Von meinem iPad gesendet > > Am 01.08.2017 um 11:20 schrieb Emilio Campos com>: >

Re: [Pound Mailing List] Delay in Request Running over pound

We had a similar issue with an app of a vendor, the 100 continue header in the backend was mandatory and we solved this after to support 100continue from Pound. You can find some pound fork in github including this patch, if needed. Joe and Robert, I think that supporting 100continue header would

Re: [Pound Mailing List] large peaks of connect_nb

THis log message is related with the backend check Alive directive, it tries to do a tcp connection every "Alive" seconds in order to check if the backend is resurrected, If you have several pounds running or several services in the same pound you are not able to detect what backend is being checke

[Pound Mailing List] Pound 2.8a + some features

Hi list, we have published a git repo for pound with some interesting features, some of them have been developed by other contributors and some of them have been developed by zevenet dev team, I wanted to inform that all of them are in use in several infraesctructures and all of them are stable, so

Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

oad libcrypto.so.1.0.0, I get the following and do chmod 777 on it: > > pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’ > > pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’ > > pound: can’t load library ‘libcrypto.so.1.0.0’ > > > > Any ideas? > > > > Warren

Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

--with-ssl is configured in compilation time and it is related with openssl libs. On the other hand is your pound using 4000 Threads all the time? I ask because we have made test in our lab and we realised that pound was 2-5% faster in thread dynamic than static, not appreciated really, so I think

Re: [Pound Mailing List] ANNOUNCE: Pound - reverse proxy and load balancer - v2.8a

Great thanks Robert for this version! What about Joe's version in github branch 2.8a? Some features of this versión will be added? (For ex cookie insertion)We are currently working with that version and some added features like 100-continue support (I sent this feature to the list) or STS support

Re: [Pound Mailing List] HTTP 1/1 100-continue

! Regards! 2016-06-22 21:22 GMT+02:00 Emilio Campos : > Dear Joe thanks for your comments, I reply you in line. > > > 2016-06-22 14:42 GMT+02:00 Joe Gooch : > >> I don't know enough about expect continue to know what we should do. >> >> Based on this: >>

Re: [Pound Mailing List] HTTP 1/1 100-continue

internal server error". We are making some tests in Lab, I will update you with results. Regards! > > > Joe > > On Jun 22, 2016, at 4:23 AM, Emilio Campos > wrote: > > Some advise? > > Any information will be appreciated > > 2016-06-19 19:54 GMT+02:00

Re: [Pound Mailing List] HTTP 1/1 100-continue

Some advise? Any information will be appreciated 2016-06-19 19:54 GMT+02:00 Emilio Campos : > We are currrently working with pound 2.8a, Joe's version from github and > everything works like a charm, but after a few days ago a customer > requested us a issue with some transfer

Re: [Pound Mailing List] Pound Listener in several ports

Problem was solved with some iptables rules in mangle , PREROUTING. Thanks! 2016-05-02 17:48 GMT+02:00 Emilio Campos : > Hi List, is there some way for configuring the same Pound HTTPListener in > more than one Port? I would need to share same session table and start the > same Listene

[Pound Mailing List] HTTP 1/1 100-continue

We are currrently working with pound 2.8a, Joe's version from github and everything works like a charm, but after a few days ago a customer requested us a issue with some transfers. After a review we detected that they use HTTP 1/1 and some large request are sent from the client to server chunked

[Pound Mailing List] Pound Listener in several ports

Hi List, is there some way for configuring the same Pound HTTPListener in more than one Port? I would need to share same session table and start the same Listener in more than one port, 80 and 8080. I have been trying with more than one HTTPListener and duplicated all the config but in this case s

Re: [Pound Mailing List] SNI enabled HTTPS backend

SNI identifies the requested virtualhost and find in your config the configured certificate, in your attached messages I don't see where you load the virtualhost (just the server IP) header with openssl s_client try with openssl s_client -connect www.mydoamin.com:443

Re: [Pound Mailing List] Re: No log output and no header added

I don't think so, maybe a syslog configuration configure the local facility in pound and capture in syslog Regards! 2016-04-07 0:30 GMT+02:00 Mike Slinn : > Set up another server on Ubuntu 15.10, Pound works fine. > Clearly there are issues running Pound on Ubuntu 16.04. > > > Mike > > -- > T

Re: [Pound Mailing List] Blocking spambots

In my point of view, block in pound is not the best option, but really better than forward the connection to the backend servers. Anyway I recommend you try to use iptables in order to block by string, block port scan or prevent DDoS attacks. Regards 2016-03-01 20:09 GMT+01:00 sec wise : > The

Re: [Pound Mailing List] Config changes

Yes weirdfish, a reload would be great in place of restart, there is a patch of a list member but not added to the source code BTW It could be great pound includes this property! Regards! 2016-01-28 14:07 GMT+01:00 Dan Eveland : > It the only way I know of. On Ubuntu it's "service pound restar

Re: [Pound Mailing List] Add HSTS Header

AddHeader directe add headers in the request to backend, not in response to client. Regards 2015-11-14 4:52 GMT+01:00 Drew Green, MCSE, CEH : > I'm trying to enable HSTS on our Pound install but am not having any luck. > We're running a version newer than 2.7c so I haven't been able to use the >

Re: [Pound Mailing List] Add HSTS Header

AddHeader directe add headers in the request to backend, not in response to client. Regards 2015-11-14 4:52 GMT+01:00 Drew Green, MCSE, CEH : > I'm trying to enable HSTS on our Pound install but am not having any luck. > We're running a version newer than 2.7c so I haven't been able to use the >

Re: [Pound Mailing List] Need Help with "ListenHTTPS: could not get certificate CN"

I think it could be added to the master branch 2015-05-26 9:46 GMT+02:00 Helmut : > Thanks Mirek, > recompile config.h without else branch seems to work, pound start now! > I have to do further tests now, that all alternative domains in > certificate also work now. > Helmut > > Am 25.05.2015 um

[Pound Mailing List] Cookie insertion

Hi list, I am working with joe's pcidss patch for pound 2.6 https://github.com/goochjj/pound/tree/pcidss/v2.6 And all it works like a charm. Now I need cookie insertion (backend cookie implementation) pound and I have already checked that it isn't available for pcidss2.6 only for 2.7, so is the

Re: [Pound Mailing List] Error starting pound 2.6 pcidss

Can you paste your current configuration? It looks like a malformed regexp in some Directive 2014-10-28 9:10 GMT+01:00 Ricardo Santos : > Hello all. > > I have compiled pound 2.6 pcidss version with openssl 1.0.1j. > > But when I start pound (even just pound -V or pound -c) it gives me an > error

Re: [Pound Mailing List] [PATCH 5/5] Allow to reload configuration on SIGHUP/SIGINT without service outage

Great patch, I'm interested in trying it. Pound version for applying it? Regards 2014-10-24 16:32 GMT+02:00 Lubomir Rintel : > From: Miroslav Spousta > > When SIGHUP/SIGINT is received, signal old child to shut down, reload > configuration and fork a new child while reusing opened listeners (

Re: [Pound Mailing List] Disable ssl v3

*Try with tag ciphers:* *Ciphers "ALL:!SSLv3"* *Regards* 2014-10-16 6:43 GMT+02:00 Kaye Ng : > Hi, > > With the advent of the Poodle exploit, I'm just wondering is there anyway > in pound to disable support for ssl v3.0, but keep support for tls 1.0, 1.1 > and 1.2 > > In nginX I can do the

[Pound Mailing List] SSL Session Cache

Hi list, I'm reading the pound man page and having a look to joe's patches because I wanted to know if pound implements SSL Session cache http://pic.dhe.ibm.com/infocenter/wsdatap/v6r0m0/index.jsp?topic=%2Fcom.ibm.dp.xi.doc%2Fsslproxyprofile_sessioncaching.html I think this property could help

Re: [Pound Mailing List] any way to get a static URL out of pound?

Hi, we developed a new property (farm guardian) for pound in our open source solution (zenloadbalancer.com) It uses pound for http and https, so you can develope your own health check or use some included scripts by default. Regards 2014-04-07 22:16 GMT+02:00 Brad Allison : > I'm setting up a a

Re: [Pound Mailing List] About pound + x-forwarded-for + nginx

Pound adds the x-forwarded-for header by default, you have to configure your nginx logs for saving this header in the logs. Take a look in this nginx example configuration: http://wiki.nginx.org/FullExample (log_format directive) Regards 2014-03-17 13:40 GMT+01:00 Stephan Gomes Higuti : > He

Re: [Pound Mailing List] Re: NULL: get_thr_arg spamming my syslog

Hi, as information to this issue. I just reproduced this issue with pound 2.6, and 3K Threads for a HTTPS Listener. I applied the patch to 2.6 and my issue is solved, great!, but I just downloaded the last experimental version 2,7b and I found that this patch is not applied, is this patch consid

Re: [Pound Mailing List] Would pound fail to forward HTTPS request if backends have self-signed certificate only?

Alex you have to use the HTTPS directive for backends if you want that pound communicates with backends in ssl. Regards 2013/9/3 D. R. > Hi Alex, > > i can not confirm, i also use pound with self-signed certificates in > different development environments. > > Kind regards > David > > Am 03.09

Re: [Pound Mailing List] Allow or Deny access by client ip range

I totally agree with Felix! 2013/8/15 Felix Zachlod > > > does- but this has drawbacks too as I mentioned > > Exactly That's the job of a firewall Can you explain these > "drawbacks" of > > using the firewall to do this? > > From a performance/security viewpoint it's a very bad idea

Re: [Pound Mailing List] Allow or Deny access by client ip range

That I know there isn't support for this, but some member of the list developed a patch that was not added. I think that it's very useful ad It would be a moment for take a thought about to include this property I attach the tread mail with the patch http://www.apsis.ch/pound/pound_list/archive

Re: [Pound Mailing List] SSL Read Error

Maybe a malforced ssl certificate be sure that the pem file is formed as below: -BEGIN RSA PRIVATE KEY- -END RSA PRIVATE KEY- -BEGIN CERTIFICATE- -END CERTIFICATE- -BEGIN CERTIFICATE- -END CERTIFICATE- -BEGIN CERTIFICATE- -END

Re: [Pound Mailing List] PCI-DSS Compliance with Pound

BTW, some planed date for marking 2.7 like stable? Regards 2013/4/29 Joe Gooch > It is our stable branch, after all. Though I will say Pound betas have > always been very stable compared to other projects I've seen. :) > > Joe > > > -Original Message- > > From: jacob anderson [mailto:

Re: [Pound Mailing List] Pound Failover

I use ucarp for vrrp (HA) and it's working like a charm, also I have to say that it is very easy of configure and powerful. Regards 2013/3/20 Jonathan Galentine > I just setup a pacemaker cluster recently and wrote about it, might save > you some time if you go that route. > > > http://techden

Re: [Pound Mailing List] "Too many open files" errors running pound 2.5-1.1 on Ubuntu 12.04

open a tty console: ulimit -n 3 after in the same console restart pound and try again, the irritating message "too many open files" must to disappear. Regards Also you can add "ulimit -n 3" in your init.d script 2013/2/25 Nigel Pallett > Scott, > > Thank you for the good feedback >

Re: [Pound Mailing List] tool to logs analyse

You could try to configure pound logs with apache format (LogLevel 3) and then to use awstats. Regards 2013/2/4 Andrzej Dopierała > Hi! > Does anyone known any usefull tool to analyse logs from pound and generate > statistics from it? > how many requests for which site, how long they take, h

Re: [Pound Mailing List] How does pound check sites?

Francisco that I know pound only checks backend at the moment it send the connection or when backend is detected as DEAD. I'm sure if you wait the next connection to this backend you will detect it as DEAD Regards 2012/9/14 Francisco Ruiz > Hi, > > I'm seeing a strange pound behaviour (version

Re: [Pound Mailing List] Editing Information:

Hi Garret, you can use zen load balancer. It is a entire solution for load balancing, for http and https it uses pound, myself developed it for zen load balancer but all functions from pound aren't implemented yet so maybe it could be useful for you. Regards 2012/9/14 Scott McKeown > Hi Garre

Re: [Pound Mailing List] cookie insertion

thub.com/goochjj/pound/tree/stage_for_upstream/v2.7 > > ** ** > > Which is where I put my tree… pound 2.6 with the patchsets I submitted to > Robert for v2.7. (Of which this was one of them, see Commits for the others) > **** > > ** ** > > Joe > > ** ** > &

Re: [Pound Mailing List] strange performance

Hi fatcharly, Did you do some tunning performance in your operative system? Maybe this parameters could help you: Write this parameters in your /etc/sysctl.conf fs.file-max = 10 net.ipv4.tcp_max_tw_buckets = 10 net.ipv4.tcp_low_latency = 1 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_tw_recycl

Re: [Pound Mailing List] Scaling with pound

Mohit if you add two new server,you need restart the service for changes to take effects, on this case, your problem don't exist, because all connections will be lose, and the new connections will be balanced on your 12 backend Like a suggestion could be interesting create a poundctl addition f

[Pound Mailing List] reload service

I know that pound service can't be reloaded, it isn't implemented, sometimes mails about this issue had been sended to the list, but I would like to know if some member solved this problem with other way or scripts, I would like to know some way for try some diferent way that could works like a r

Re: [Pound Mailing List] Monitor Pound

poundctl, is part of pound Regards 2011/5/18 hesam mohamadian > hello , i want to know that , can i monitor pound activity like how many > clients redirect to each backend server or which backend server is ciritical > , or off or track that which client redirect to which backend server via > p

Re: [Pound Mailing List] sessions through out all servers

You have to read how your webmail works with sessions, normally a php cookie with session id is created , it is can be used with pound with session TYPE directive. example on google: ListenHTTP Address 127.0.0.1 Port 8000 xHTTP 2 End Service BackEnd

[Pound Mailing List] rise the time for open initial TCP connections on pound

Hi, I am using Pound .2.5: I have a problem between my pound and some backend server, when pound try to connect to backends takes a long time on open the TCP connection with the backend, it is a network problem, I would like to know if there is some parameter for modify this time (time that pound

Re: [Pound Mailing List] backend problems?

Address 192.168.1.181 Port 80 TimeOut 240 End End End Regards! 2011/1/25 Emilio Campos > Hi, I detected two days ago problems in my filelog, and I would like > determine that this is not a pound

Re: [Pound Mailing List] setting up java load balancing using pound

Hi Andreas I wanted to tell Oliver he can configure it like any other web server as apache, IIS, tomcat, or others... not neccesary a pound manual for jboss servers. Is it ok? With this part of pound manual I wanted to tell that Pound creates load balancing on layer http aplication protoc

Re: [Pound Mailing List] setting up java load balancing using pound

HI Oliver If you are using Jboss as webserver there is no problem, you can read about configuration in the manual as a normal TCP http configuration. You can´t use jboss as server aplications (no http(s) request) with pound man pound *"Pound is a reverse-proxy load balancing server. It accep

Re: [Pound Mailing List] too many open files please help

to everybody for your help and suggestions! THANK YOU VERY MUCH!!! 2010/12/31 Piotr Jakubowski > Hello Emilio, > > Did you check your PAM config? > Which Linux distribution do you have? > > Piotr > > W dniu 2010-12-30 18:42, Emilio Campos pisze: > > This is m

Re: [Pound Mailing List] too many open files please help

on! ### thanks! 2010/12/30 Piotr Jakubowski > Hi, > > Still, if you use RootJail parameter (send us your pound.conf) you should > check your pam config. > > I'm sure it has nothing to do with IIS and pound. It's clearly linux limits > problem. > > Pio

Re: [Pound Mailing List] too many open files please help

ld contain uncomented line: > > sessionrequired pam_limits.so > > Works for me. > > Piotr > > > W dniu 2010-12-30 11:41, Emilio Campos pisze: > > Yes modified. >> >> I can see two diferents error messages: >> >> 1º) >> Dec 30 10:24

Re: [Pound Mailing List] too many open files please help

Yes modified. I can see two diferents error messages: 1º) Dec 30 10:24:46 lb pound: (b2ee0b90) e503 backend 192.168.1.10:80socket > create: Too many open files and 2º) Dec 30 11:36:35 sc02sns01 pound: HTTP accept: Too many open files I think the first message is problem

[Pound Mailing List] too many open files please help

Hi, Today I can see this message on my pound log Dec 30 10:24:46 lb pound: (b2ee0b90) e503 backend 192.168.1.10:80 socket create: Too many open files Dec 30 10:24:46 lb pound: (af2fab90) e503 backend 192.168.1.10:80 socket create: Too many open files Dec 30 10:24:46 lb pound: (b1a55b90) e503 backe

[Pound Mailing List] connections, control number

Hi, I would like ask a question: I would like to have control over the number of simultaneous connections on the backends or on the Listener HTTP, my configuration is: ## User"pound" Group "pound" LogLevel2 ## check backend

Re: [Pound Mailing List] pound errors libgcc_s.sl

Anne I think it is not a pound problem, red hat 4 is a old distro, kernel 2.4? can you try install pound in another distro? I think it is better than your managers are going to now remove rh4 than pound :P Are you compiling pound? try use another version I use 2.3 with rh5.1 in in production a

Re: [Pound Mailing List] logging tools

I Think Awstats is a good solution. You can modify the perl code easily and add new own modules for your use, or change the web design, change the pound logs to apache format or modify the file config in awstats to configure your own structure log. I use it and I suggest because is flexible and e

Re: [Pound Mailing List] RE: Ported to Windows?

Windows is not a professional and serious Operative System :P Sorry! Best regards 2010/6/17 Michael Weinbergs > Thanks for all the comments and suggestions.. just an update that I > managed to build with CYGWIN without too many problems (surprise!) > > If anyone wants to know how to build und

Re: [Pound Mailing List] scripts for check backends status

to do error handling at the > level you're concerned with. The HAport directive powered by an intelligent > application is the way to go. > > Thanks, > Chris > > > -Original Message- > From: Emilio Campos [mailto:emilio.campos.mar...@gmail.com] > Sent: T

[Pound Mailing List] scripts for check backends status

Hi , one question. I would like to know if I can use a directive in pound to do a check url to backend for check better the backend status, actually i know that pound check only backend ports, no backend service status with a GET for example. Is it for new versions? Is it implemented? Thanks

Re: [Pound Mailing List] Best Distro to try

I'm using red hat enterprise Linux 5.2 kernel 2.6 with http and https Listeners in Pound and it is ok. I configured in the past Pound v1 with Debian 3 and https Listeners and good results I use to select my favorite distro for configure pound, now the company demand Red Hat.. :( Regards. 2010

Re: [Pound Mailing List] certificate confusion

I have pound for iis backends with a https Listener, same to you, i changed pfx file to pem and it is running ok!! POUND with HTTPS LISTENER (https conections) with PEM CERT (exported from pfx) send conections to IIS BACKEND (http conections) Paul can you put your pound code for https listene

Re: [Pound Mailing List] [Abwesenheitsbenachrichtigung] Re: [Pound Mailing List] [Abwesenheitsbenachrichtigung] Re: Re: [Pound Mailing List] Source ip-Hashing method in load balancing.

in the school teachers not learned me to speack germany! :P 2010/1/18 > Sehr geehrter Kunde/Geschäftspartner, > > derzeit bin ich nicht erreichbar. Sie erreichen mich vrstl. ab Donnerstag, > den 21.02.2010 zu den bekannten Bürozeiten. > > In dringenden Fällen oder wenn Sie über ein Service-Le

Re: [Pound Mailing List] Does pound allow SSL relay?

i think this can help you: In the man of pound "The connection between Pound and the back-ends is always via HTTP, regardless of the actual protocol used between Pound and the client." 2009/10/1 Iñaki Baz Castillo > Hi, can I use pound as http proxy to relay HTTPS traffic to a web server?

Re: [Pound Mailing List] Add back-ends dynamically

Interesting, also I would like to know! Another interesting solution would be do a reload to PID but I think tha whit the implementation of pound dont possible. Is it correct? THANKS! 2009/7/23 Gabriel Monroy > After reviewing the pound.cfg and poundctl man pages, it's not clear to me > what t

[Pound Mailing List] change a c code in pound 2.4.4

Hi I use a 2.4.4 pound binary and i have a singular problem with backends in iss, whith some urls the backend send to pound the port 10.000 or 20.000, I know now thas is is a iis problem. In my case, I don`t change the port or ports in IIS, and I´ve just thinked a solution, I would like to

Re: [Pound Mailing List] location headers problems

i haven´t to see the port of backend because i use "RewriteLocation 1" directive how can i solve this problem? thanks! 2009/4/13 Emilio Campos > A lot of thanks SBR, I solved this problem downgrade version to 2.3.2 but i > m going to upgrade with this solution > > 1k th

Re: Pound is Slowing Down My Site [Pound Mailing List]

oad the site that > way, the site comes right up. No delay. But when you try to resolve the > name via DNS it takes forever to load. > > And as mentioned, this problem completely goes away when you take pound > out of the equation. > > > > On Thu, 30 Apr 2009 13:53:42 +0

Re: Welcome to [Pound Mailing List]

Hi; i was this situation days ago with a new web service with a big number of conections, my problem; a lot of slow at the moment of start the pound service with this web, i solved this problem comnent the log value in the configuration file. -can you do and say ? # LogLevel1 I lot of ki

Re: [Pound Mailing List] number of trheads/process in pound

grep :__webserver_port_number_here__ |grep -v 0.0.0.0| awk > '{print $5}' | cut -f1 -d":" | sort | uniq -c | sort -n |awk '{print $1}' > >>/zope/zstatus_`date +%Y%m%d-%H`h.log > sleep 10 > done > > > > - Original Message - From:

[Pound Mailing List] number of trheads/process in pound

I configured pound 2.3.2 and i see that my pound only have 1 child whith more than 200 conections ps -ef | grep pound pound 7846 1 0 12:20 ?00:00:00 /opt/pound-2.3.2/sbin/pound -f /opt/pound-2.3.2/etc/pound.conf -p /opt/pound-2.3.2/var/pound.pid pound 7847 7846 0 12:20 ?

[Pound Mailing List] pound close conections

i have in production a pound 2.3.2 without problems until two days ago, i added a new service with a lot of number of conections (1000-1500) , when i run pound after one or two minutes the port of listener in pound is down, the port of listeners triying to connect until time out, i can see in the

Re: [Pound Mailing List] location headers problems

A lot of thanks SBR, I solved this problem downgrade version to 2.3.2 but i m going to upgrade with this solution 1k thanks ;) 2009/4/12 SBR > Hi, > > I've just investigated some similar issues I've been having with pound not > rewriting the location when my backend appends its port to the corr

Re: [Pound Mailing List] location headers problems

some sugestion? some question? Any person can help me? 2009/3/16 Emilio Campos > Hi, i am configuring pound 2.4.4 with this listenhttp: > > ListenHTTP >Address 192.168.1.50 >Port80 >RewriteLocation 1 >#RewriteDestination

[Pound Mailing List] location headers problems

Hi, i am configuring pound 2.4.4 with this listenhttp: ListenHTTP Address 192.168.1.50 Port80 RewriteLocation 1 #RewriteDestination 1 Service HeadRequire "Host: .*www.myweb.es.*" Session Type Cookie