Re: [RFC][PATCHES] seamless reload

On Tue, Apr 11, 2017 at 08:16:48PM +0200, Willy Tarreau wrote: > Hi guys, > > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > > IMHO: a better name would be 'stats nounsedsockets', as it is referring to a > > generic functionality of UNIX stats socket, rather to a very specific

Re: simgle ?

On Mon, Apr 10, 2017 at 03:48:45PM -0600, Jim Freeman wrote: > https://github.com/haproxy/haproxy/search?q=simgle > > single ? > simple ? Looks like "single". Care to send a patch ? Please keep in mind that this github project is neither up to date nor official so please make your patch on top

Re: [RFC][PATCHES] seamless reload

Hi guys, On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > IMHO: a better name would be 'stats nounsedsockets', as it is referring to a > generic functionality of UNIX stats socket, rather to a very specific > functionality. Just two things on this : - it's not directly

Re: Admin socket server state and MAINT flag issues

Hi Dennis, On Mon, Apr 10, 2017 at 09:05:13PM +0200, Dennis Jacobfeuerborn wrote: > Hi, > i'm currently playing with the values that the admin socket return when > the "show servers state" command is issued and I noticed to things: > > 1. When using and abstract namespace socket as address on a

Re: IPv6 resolvers seems not works

On Tue, Apr 11, 2017 at 03:55:25PM +0200, Baptiste wrote: > Hi all, > > Thank you Frededic!!! > Willy, you can merge (and backport to 1.6) Frederic's patch please? Done, thanks guys! Willy

trying to understand sticky counters

Hi all, I've pored over the Configuration Manual again and again, and I'm still struggling to fully understand sticky counters. This paragraph seems to hold some important information: Once a "track-sc*" rule is executed, the key is looked up in the table and if it is not found, an entry

Re: ACL with dynamic pattern

Hi Alexander, Alexander Lebedev wrote: > I want to implement CSRF check with haproxy. > I want to check cookie value matched the header value and deny request > if they're didn't equal. The ACLs are only equipped to compare a dynamic value (e.g. from a fetch) with a statically define value. It

Re: Propagating agent-check weight change to tracking servers

Hi Michal, On Tue, Apr 11, 2017 at 04:41:25PM +0200, Michal wrote: > Hello Willy, > > So I'm fighting with dba97077 made by Frédéric Lécaille - it broke many > things. That's the principle of distributed development : better get your changes in shape first so that you don't have to adapt to

Re: Propagating agent-check weight change to tracking servers

Hello Willy, So I'm fighting with dba97077 made by Frédéric Lécaille - it broke many things. E.g. you can't use "source", because that patch broke it. I'm curious how many other stuff got broken with those patches around default-server. We need some CI (even if they will only build haproxy) and

Re: IPv6 resolvers seems not works

Hi all, Thank you Frededic!!! Willy, you can merge (and backport to 1.6) Frederic's patch please? Baptiste On Tue, Apr 11, 2017 at 10:45 AM, Павел Знаменский wrote: > Frederic, > Your patch fixes this issue. > > Thank you! > > > 2017-04-11 9:53 GMT+03:00 Frederic

Re: [RFC][PATCHES] seamless reload

On Tue, Apr 11, 2017 at 01:23:42PM +0200, Pavlos Parissis wrote: > On 10/04/2017 11:52 μμ, Olivier Houchard wrote: > > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > >> On 10/04/2017 08:09 , Olivier Houchard wrote: > >>> > >>> Hi, > >>> > >>> On top of those patches, here a

Re: [RFC][PATCHES] seamless reload

On 10/04/2017 11:52 μμ, Olivier Houchard wrote: > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: >> On 10/04/2017 08:09 , Olivier Houchard wrote: >>> >>> Hi, >>> >>> On top of those patches, here a 3 more patches. >>> The first one makes the systemd wrapper check for a

Re: [RFC][PATCHES] seamless reload

On 10/04/2017 11:48 μμ, Olivier Houchard wrote: > On Mon, Apr 10, 2017 at 10:49:21PM +0200, Pavlos Parissis wrote: >> On 07/04/2017 11:17 , Olivier Houchard wrote: >>> On Fri, Apr 07, 2017 at 09:58:57PM +0200, Pavlos Parissis wrote: On 06/04/2017 04:57 , Olivier Houchard wrote: >

Re: ACL with dynamic pattern

Aleksandar, Hello! No, it does not help. haproxy -vv output: HA-Proxy version 1.7.4 2017/03/27 Copyright 2000-2017 Willy Tarreau Build options : TARGET = solaris CPU = generic CC = /pub/site/opt/bin/gcc CFLAGS = -O2 -g -fno-strict-aliasing

Re: ModSecurity: First integration patches

> On 11 Apr 2017, at 11:24, Olivier Doucet wrote: > > Hi Thierry, > > > > 2017-04-11 10:49 GMT+02:00 Thierry Fournier : > Hi list > > I join one usage of HAProxy / SPOE, it is WAF offloading. > > These patches are a first version, it have some

Re: ModSecurity: First integration patches

Hi Thierry, 2017-04-11 10:49 GMT+02:00 Thierry Fournier : > Hi list > > I join one usage of HAProxy / SPOE, it is WAF offloading. > > These patches are a first version, it have some limitations describe > in the README file in the directory contrib/modsecurity. > > -

ModSecurity: First integration patches

Hi list I join one usage of HAProxy / SPOE, it is WAF offloading. These patches are a first version, it have some limitations describe in the README file in the directory contrib/modsecurity. - Christopher, please check the patch "BUG/MINOR", it is about spoe functions. - The exemple of

Re: IPv6 resolvers seems not works

Frederic, Your patch fixes this issue. Thank you! 2017-04-11 9:53 GMT+03:00 Frederic Lecaille : > On 04/10/2017 04:17 PM, Frederic Lecaille wrote: > >> On 04/10/2017 01:42 PM, Павел Знаменский wrote: >> >>> Hello, >>> >> >> Hello, >> >> I'm trying to add IPv6 address as

Re: IPv6 resolvers seems not works

On 04/10/2017 04:17 PM, Frederic Lecaille wrote: On 04/10/2017 01:42 PM, Павел Знаменский wrote: Hello, Hello, I'm trying to add IPv6 address as a nameserver to able resolve addresses in IPv6-only environment: resolvers google_dns_10m nameserver google_dns1 2001:4860:4860:::53