Hello

my logs have a uncomforting line


*kernel: [7302179.685736] haproxy[1766]: segfault at 7c ip 00007f6629410a9f
sp 00007fffdaf98868 error 4 in libc-2.15.so
<http://libc-2.15.so>[7f66292ae000+1b5000]*
We caused this trying to use this config which tries to track the source of
a connection unless it matches a acl
following along the lines of
http://blog.serverfault.com/2010/08/26/1016491873/






































*global        maxconn 4096        user haproxy        group
haproxydefaults        mode       http        retries    3
option     redispatch        maxconn    2000        timeout connect
5s        timeout client 20s        timeout server 60sfrontend http
0.0.0.0:80 <http://0.0.0.0:80>        maxconn         25000
default_backend be_default        stick-table type ip size 200 expire 10s
store gpc0        acl on_naughtystep sc0_get_gpc0(http) gt 0
use_backend be_badman if on_naughtystep        # Both these directives will
make haproxy segfault        tcp-request connection track-sc0 src if
!on_naughtystep        # tcp-request connection track-sc0 src unless
on_naughtystep        # This one doesn't        # tcp-request connection
track-sc0 srcbackend be_default        balance roundrobin        fullconn
1000        server server server:80 maxconn 50 check inter 2000 rise 2 fall
2backend be_badman        block if TRUE*
haproxy running is compiled from head































*haproxy -vvHA-Proxy version 1.5-dev22 2014/02/03Copyright 2000-2014 Willy
Tarreau <w...@1wt.eu <w...@1wt.eu>>Build options :  TARGET  = linux26  CPU     =
generic  CC      = gcc  CFLAGS  = -O2 -g -fno-strict-aliasing  OPTIONS =
USE_LINUX_SPLICE=1 USE_OPENSSL=1 USE_PCRE=1Default settings :  maxconn =
2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200Encrypted
password support via crypt(3): yesBuilt without zlib support (USE_ZLIB not
set)Compression algorithms supported : identityBuilt with OpenSSL version :
OpenSSL 1.0.1 14 Mar 2012Running on OpenSSL version : OpenSSL 1.0.1 14 Mar
2012OpenSSL library supports TLS extensions : yesOpenSSL library supports
SNI : yesOpenSSL library supports prefer-server-ciphers : yesBuilt with
PCRE version : 8.12 2011-01-15PCRE library supports JIT : no (USE_PCRE_JIT
not set)Built with transparent proxy support using: IP_TRANSPARENT
IP_FREEBINDAvailable polling systems :      epoll : pref=300,  test result
OK       poll : pref=200,  test result OK     select : pref=150,  test
result OKTotal: 3 (3 usable), will use epoll.*

Any ideas what to do next?

Thanks

Neil

Reply via email to