Increase your website income

2013-09-19 Thread Reid Lewis


 Select your language:


http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUkkBBFZLUVQAD1IM

 Dear Webmaster,

 visiting your website we noticed you host some ad spaces.

 We are contacting you in order to introduce you our Adnetwork, which
offers digital advertising solutions for publishers.

 € 25,00 welcome bonus to register your website

 Optimized targeted advertising to reach an high eCPM

 Guaranteed payments of your monthly profits

 Control panel with access to real-time statistics

 No exclusive contract: add even a single OxaMedia banner   
 and
continue collaborationg with your other ad providers.

 Support and a manager account dedicated

 ...and much more..

 OxaMedia is a global Adnetwork
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUkkBBFZLUVQAD1IM
 that collaborates with Top Advertisers all over the world and is
connected with the major AdExchanges in order to distribute on
publisher websites high quality ads. 

 If you wish to learn more about our AdNetwork, please click here
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUkkBBFZLUVQAD1IM
, or fill out our Support
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUUkBBFZLUVQAD1IM
form. 

 Should you have any questions, please feel free to contact us we hope
to have you as soon as possible among our Top Publishers.
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUkkBBFZLUVQAD1IM

 Kind regards.

 OxaMedia AdNetwork Team
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUkkBBFZLUVQAD1IM

 ** **



--
If you do not want to receive any more newsletters, 
http://mailservice.nextwebcorp.com/lists/lt.php?id=bEQADQBdAwVXUEkBBFZLUVQAD1IM




Proxy protocol patch for nginx 1.4.x

2013-09-19 Thread Baptiste
Hi all,

I've just updated my patches for proxy protocol in nginx 1.4.x.
They are avaiable here:
https://wiki.bedis.eu/nginx/nginx_proxy_protocol_patch

Note in that version, accept_proxy_protocol is not a server option
anymore, it is now a bind option.

Please try it and report any issue / bug / success story.
(the wiki hosting the page above uses the patch, of course)

Baptiste



Re: Disable server check but to use connection tries to mark it DOWN

2013-09-19 Thread Baptiste
Hi,

What is your problem with health checks exactly?

Baptiste

On Wed, Sep 18, 2013 at 7:07 PM, Jose María Zaragoza
demablo...@gmail.com wrote:
 Hello:

 I'm using HAProxy 1.4 (tcp mode ) to balance connections between 2
 backend servers
 I would like to know if it's possible to get the next behaviour:

 I would like to disable server's 'check' option, so HAProxy doesn't
 send checks to  backend server
 About doc, in this case, the servers always are consider as UP

 I wonder if it's possible that when a client tries to connect and the
 backend server is DOWN, HAProxy marks this server as DOWN and it
 balances to the other server
 And HAProxy starts a downinter check to know when DOWN server is again UP

 So,

 - don't check
 - use a failed connection try to mark a server as DOWN
 - start to check if the server continues DOWN ( with checks + 'downinter'   )

 Thanks and regards




Re: Proxy protocol patch for nginx 1.4.x

2013-09-19 Thread Sebastien Estienne
Hello Baptiste,

Does it mean that it should work with a module like nginx-rtmp?

thanx,

Sebastien Estienne


On Thu, Sep 19, 2013 at 9:30 PM, Baptiste bed...@gmail.com wrote:

 Hi all,

 I've just updated my patches for proxy protocol in nginx 1.4.x.
 They are avaiable here:
 https://wiki.bedis.eu/nginx/nginx_proxy_protocol_patch

 Note in that version, accept_proxy_protocol is not a server option
 anymore, it is now a bind option.

 Please try it and report any issue / bug / success story.
 (the wiki hosting the page above uses the patch, of course)

 Baptiste




Weird Exchange 2013 load balancing error

2013-09-19 Thread Leo Raikhman
Hi all,

I have haproxy 1.5dev19 running in TCP mode in front of my Exchange 2013
CAS servers. My config is appended.

It seems that haproxy can't handle the outlook web access redirect. When I
log into OWA 2013, internally, and externally, everything is fine.

When I click on the Options or Change Password item on the OWA menu the
URL changes from https://email.company.com/owa to
https://email.company.com/owa/auth/logon.aspx?replaceCurrent=1url=https%3a%2f%2femail.company.com%2fecp%2f%3frfr%3dowa%26owaparam%3dmodurl%253D0%26p%3daccountand
drops me into the Exchange 2013 login page again, except I can't
login.

This does not happen internally, or when I load balance the CAS servers
behind a Citrix NetScaler. Is there something I'm missing? Does haproxy
have a character limit on URLs in TCP mode? Can it not decode the URL
encoding of those characters?

Please help...

*Config*:

defaults
  option  dontlognull
  option  redispatch
  option  contstats
  retries 3
  timeout connect 5s
  timeout http-keep-alive 1s
  timeout http-request 15s
  timeout queue 30s
  timeout tarpit 1m
  backlog 1

  balance roundrobin
  mode tcp
  option tcplog
  log global
  timeout client 300s
  timeout server 300s
  default-server inter 3s rise 2 fall 3

frontend ft_exchange_tcp
  bind 10.0.0.9:443 name https
  maxconn 1
  default_backend bk_exchange_tcp

backend bk_exchange_tcp
  stick-table type ip size 10240k expire 60m
  stick on src
  option redispatch
  option abortonclose
  balance leastconn
  server cas1 10.0.0.15:443 maxconn 1 check
  server cas2 10.0.0.16:443 maxconn 1 check

-- 
Leo Raikhman
VMware ESX/Storage Consultant
Ph: 0404943618
Email: raikh...@gmail.com


Re: Weird Exchange 2013 load balancing error

2013-09-19 Thread Baptiste
Hi Leo,

I have a lab with a slightly different configuration than yours.
In my lab, HAProxy decipher the traffic, log everything then recipher
the traffic to the server. Like a man in the middle.
I have a round robin algorithm + no session persistence + option
http-server-close.

I ran the same test as yours.

From my lab platform, I can see those URLs requested, in front the
server that was used:
exch1: POST 
/ecp/DDI/DDIService.svc/SetObject?schema=PasswordServicemsExchEcpCanary=SOME
BLAH BLAH HERE HTTP/1.1
exch2: GET /ecp/PersonalSettings/logoff.aspx?src=exch HTTP/1.1
exch1: GET /owa/logoff.owa HTTP/1.1
exch2: GET 
/owa/auth/logon.aspx?url=https%3a%2f%2fmail.2013.haproxylab.net%2fowa%2flogoff.owareason=0
HTTP/1.1

so sounds normal I'm logged out after a password update: application design.

That said, your configuration should not produce this effect, since
all your requests are routed to a single server.
An other point: my password has been changed, but now I can't change
it anymore due to a password policy issue (whatever I type in, it says
my password is too weak)...

I'll investigate on this in my platform and keep you updated.

Can you tell us exactly how your netscaller is configured and works
with exchange 2013?

Baptiste


On Fri, Sep 20, 2013 at 3:56 AM, Leo Raikhman raikh...@gmail.com wrote:
 Hi all,

 I have haproxy 1.5dev19 running in TCP mode in front of my Exchange 2013 CAS
 servers. My config is appended.

 It seems that haproxy can't handle the outlook web access redirect. When I
 log into OWA 2013, internally, and externally, everything is fine.

 When I click on the Options or Change Password item on the OWA menu the
 URL changes from https://email.company.com/owa to
 https://email.company.com/owa/auth/logon.aspx?replaceCurrent=1url=https%3a%2f%2femail.company.com%2fecp%2f%3frfr%3dowa%26owaparam%3dmodurl%253D0%26p%3daccount
 and drops me into the Exchange 2013 login page again, except I can't login.

 This does not happen internally, or when I load balance the CAS servers
 behind a Citrix NetScaler. Is there something I'm missing? Does haproxy have
 a character limit on URLs in TCP mode? Can it not decode the URL encoding of
 those characters?

 Please help...

 Config:

 defaults
   option  dontlognull
   option  redispatch
   option  contstats
   retries 3
   timeout connect 5s
   timeout http-keep-alive 1s
   timeout http-request 15s
   timeout queue 30s
   timeout tarpit 1m
   backlog 1

   balance roundrobin
   mode tcp
   option tcplog
   log global
   timeout client 300s
   timeout server 300s
   default-server inter 3s rise 2 fall 3

 frontend ft_exchange_tcp
   bind 10.0.0.9:443 name https
   maxconn 1
   default_backend bk_exchange_tcp

 backend bk_exchange_tcp
   stick-table type ip size 10240k expire 60m
   stick on src
   option redispatch
   option abortonclose
   balance leastconn
   server cas1 10.0.0.15:443 maxconn 1 check
   server cas2 10.0.0.16:443 maxconn 1 check

 --
 Leo Raikhman
 VMware ESX/Storage Consultant
 Ph: 0404943618
 Email: raikh...@gmail.com



Re: Weird Exchange 2013 load balancing error

2013-09-19 Thread Leo Raikhman
Hi Baptiste,

So you do layer 7 mode http?ould you be able to give me a copy of the confit 
whichever irks for you?

I'm happy to give that a shot tonight, Australia time... And I'll get back to 
you.

In terms of netscaler, I have a clustered pair that I created a virtual server 
on in tcp mode, balancing port 443 to the NLB IP of the CAS servers - it's 
doing essentially the same thing as the haproxy server is supposed to be 
doing...

Ta,
Leo

Sent from my iPad

 On 20 Sep 2013, at 3:35 pm, Baptiste bed...@gmail.com wrote:
 
 Hi Leo,
 
 I have a lab with a slightly different configuration than yours.
 In my lab, HAProxy decipher the traffic, log everything then recipher
 the traffic to the server. Like a man in the middle.
 I have a round robin algorithm + no session persistence + option
 http-server-close.
 
 I ran the same test as yours.
 
 From my lab platform, I can see those URLs requested, in front the
 server that was used:
 exch1: POST 
 /ecp/DDI/DDIService.svc/SetObject?schema=PasswordServicemsExchEcpCanary=SOME
 BLAH BLAH HERE HTTP/1.1
 exch2: GET /ecp/PersonalSettings/logoff.aspx?src=exch HTTP/1.1
 exch1: GET /owa/logoff.owa HTTP/1.1
 exch2: GET 
 /owa/auth/logon.aspx?url=https%3a%2f%2fmail.2013.haproxylab.net%2fowa%2flogoff.owareason=0
 HTTP/1.1
 
 so sounds normal I'm logged out after a password update: application design.
 
 That said, your configuration should not produce this effect, since
 all your requests are routed to a single server.
 An other point: my password has been changed, but now I can't change
 it anymore due to a password policy issue (whatever I type in, it says
 my password is too weak)...
 
 I'll investigate on this in my platform and keep you updated.
 
 Can you tell us exactly how your netscaller is configured and works
 with exchange 2013?
 
 Baptiste
 
 
 On Fri, Sep 20, 2013 at 3:56 AM, Leo Raikhman raikh...@gmail.com wrote:
 Hi all,
 
 I have haproxy 1.5dev19 running in TCP mode in front of my Exchange 2013 CAS
 servers. My config is appended.
 
 It seems that haproxy can't handle the outlook web access redirect. When I
 log into OWA 2013, internally, and externally, everything is fine.
 
 When I click on the Options or Change Password item on the OWA menu the
 URL changes from https://email.company.com/owa to
 https://email.company.com/owa/auth/logon.aspx?replaceCurrent=1url=https%3a%2f%2femail.company.com%2fecp%2f%3frfr%3dowa%26owaparam%3dmodurl%253D0%26p%3daccount
 and drops me into the Exchange 2013 login page again, except I can't login.
 
 This does not happen internally, or when I load balance the CAS servers
 behind a Citrix NetScaler. Is there something I'm missing? Does haproxy have
 a character limit on URLs in TCP mode? Can it not decode the URL encoding of
 those characters?
 
 Please help...
 
 Config:
 
 defaults
  option  dontlognull
  option  redispatch
  option  contstats
  retries 3
  timeout connect 5s
  timeout http-keep-alive 1s
  timeout http-request 15s
  timeout queue 30s
  timeout tarpit 1m
  backlog 1
 
  balance roundrobin
  mode tcp
  option tcplog
  log global
  timeout client 300s
  timeout server 300s
  default-server inter 3s rise 2 fall 3
 
 frontend ft_exchange_tcp
  bind 10.0.0.9:443 name https
  maxconn 1
  default_backend bk_exchange_tcp
 
 backend bk_exchange_tcp
  stick-table type ip size 10240k expire 60m
  stick on src
  option redispatch
  option abortonclose
  balance leastconn
  server cas1 10.0.0.15:443 maxconn 1 check
  server cas2 10.0.0.16:443 maxconn 1 check
 
 --
 Leo Raikhman
 VMware ESX/Storage Consultant
 Ph: 0404943618
 Email: raikh...@gmail.com