您只需要拿起身边的电话,告诉我们需求,余下工作的由我们办理

2016-06-21 Thread FOB china 南丰物流--您身边的物流管家(低价联运)
FOB china FOBsz FOBgz FOBHK一、大陆至香港散货0.68元/公斤;    泡货120元/立方;二、香港送客(提货)、入仓操作收费标准   送客(提货):2 5 0元   空运海运仓:3 0 0元   超600公斤3CBM继重按0.3元/KG收取;2、泡货按50元/CBM收取(入仓杂费实报实销)近期经常外出,有订单当天收货的请给我打电话。  祝你工作顺利、开心快乐!  东莞市南丰物流(香港)有限公司联   系 人:13922925659/ 13662814456 咨询接单QQ:654340993     联系 邮

"errorfile 503" doesn't appear to be working

2016-06-21 Thread Shawn Heisey
This is the backend config: backend be-stg-spark-443 description Back end for spark stg ssl errorfile 503 /etc/haproxy/pages/spark-error.http no log log 127.0.0.1 local0 notice err server palazzo 10.100.2.17:443 ssl track chk-liferay-stg-443/palazzo The

Re: SonarSource static code analysis

2016-06-21 Thread Mildis
HI again,First analysis has been run.Results can be followed here :https://sonarqube.com/component_issues/index?id=haproxy#resolved=false|types=BUG%2CVULNERABILITYSome rules are just best practices that you could consider irrelevant, some are indications of code that could be refactored …Pick your

Re: Capture and forward extended PKI cert attributes (e.g. UPN) using HAProxy

2016-06-21 Thread Dariusz Suchojad
On 17/06/16 23:19, Matt Park wrote: [...] > I've put about 20 hours into this and I'm pretty familiar with HAProxy, PKI > and mutual auth in general. The only difference is that I need a v3 > attribute off a smart card vs a soft cert. [...] Hi Mark, I don't think it is doable right now,

Re: Fwd: Capture and forward extended PKI cert attributes (e.g. UPN) using HAProxy

2016-06-21 Thread Willy Tarreau
On Tue, Jun 21, 2016 at 01:06:56PM -0400, Matt Park wrote: > Hey All -- > Not sure if you saw this or if it got blocked by spam filter... > TL;DR how can I access extended PKI attributes for use in HTTP header? It was properly delivered, but it's possible as well that very few people have any

Re: Lua - UNIX sockets and reload

2016-06-21 Thread Willy Tarreau
On Tue, Jun 21, 2016 at 07:14:49PM +0200, Dariusz Suchojad wrote: > On 21/06/16 19:02, Willy Tarreau wrote: > > Coudln't you instead pass the admin request to an agent in charge for > > doing all of this stuff ? It would seem safer and more durable to me. > > Indeed this is what is going on right

Re: Lua - UNIX sockets and reload

2016-06-21 Thread Dariusz Suchojad
On 21/06/16 19:02, Willy Tarreau wrote: > Your message was properly posted, it's just that not that many people > have enough experience with Lua yet so it's often hard to respond. Sure, thanks, that is understood. > What I can say is that you won't be able to restart a new process, > but you

Re: Lua - UNIX sockets and reload

2016-06-21 Thread Dariusz Suchojad
On 21/06/16 19:02, Willy Tarreau wrote: > Your message was properly posted, it's just that not that many people > have enough experience with Lua yet so it's often hard to respond. Sure, thanks, that is understood. > What I can say is that you won't be able to restart a new process, but you >

Fwd: Capture and forward extended PKI cert attributes (e.g. UPN) using HAProxy

2016-06-21 Thread Matt Park
Hey All -- Not sure if you saw this or if it got blocked by spam filter... TL;DR how can I access extended PKI attributes for use in HTTP header? -- Forwarded message -- From: Matt Park Date: Fri, Jun 17, 2016 at 5:19 PM Subject: Capture and forward

Re: Lua - UNIX sockets and reload

2016-06-21 Thread Willy Tarreau
Hi Dariusz, On Tue, Jun 21, 2016 at 01:46:54PM +0200, Dariusz Suchojad wrote: > Hello, > > it was mentioned that there were some issues with delivering emails to > the project's list so I thought, just to be sure it made its way, I > would resend my question regrading Lua, UNIX sockets and

Re: Saving server state in 1.6.5

2016-06-21 Thread Willy Tarreau
On Tue, Jun 21, 2016 at 10:15:06AM +0200, Eric Webster wrote: > Since upgrading from 1.6.4 to 1.6.5, server state is not loaded on > start. I do not get any errors or warnings, it just doesn't seem to > fire. Is this a bug perhaps? > > What I'm talking about is this kind of setup: >

Re: Filters bugfixes

2016-06-21 Thread Willy Tarreau
On Tue, Jun 21, 2016 at 03:54:18PM +0200, Christopher Faulet wrote: > Hi, > > Here are 2 patches fixing bugs in data filtering. Merged, thanks Christopher! Willy

Re: external-check stdout ends up in load-balanced traffic, destroying tcp sessions

2016-06-21 Thread Willy Tarreau
Hi guys, I'm replying to this thread and adding Andrey and Veiko in Cc to keep everyone up to date. On Wed, Jun 08, 2016 at 10:17:19AM +0900, Simon Horman wrote: > Lukas, could you try this? > > diff --git a/src/checks.c b/src/checks.c > index c4ac947b6051..e65d28f7c3c6 100644 > ---

Filters bugfixes

2016-06-21 Thread Christopher Faulet
Hi, Here are 2 patches fixing bugs in data filtering. -- Christopher >From bdfa4535d6fe1f0f5bca52a48d2e4205e41bbd81 Mon Sep 17 00:00:00 2001 From: Christopher Faulet Date: Tue, 21 Jun 2016 10:44:32 +0200 Subject: [PATCH 1/2] BUG/MEDIUM: filters: Fix data

Re: SIIT-DC / IPv6 only data center

2016-06-21 Thread Jiri Tulach
Dne 21.6.2016 v 13:27 Willy Tarreau napsal(a): On Tue, Jun 21, 2016 at 12:26:17PM +0200, Jiri Tulach wrote: Hello, Ok, just think about it. The intention of SIIT-DC is to provide a way how to operate IPv6 only data center. You have to translate IPv4 request to IPv6 and do it so that client

Re: Lua - UNIX sockets and reload

2016-06-21 Thread Dariusz Suchojad
Hello, it was mentioned that there were some issues with delivering emails to the project's list so I thought, just to be sure it made its way, I would resend my question regrading Lua, UNIX sockets and HAProxy reloading. Can you please have a look at the following?

Re: SIIT-DC / IPv6 only data center

2016-06-21 Thread Willy Tarreau
On Tue, Jun 21, 2016 at 12:26:17PM +0200, Jiri Tulach wrote: > Hello, > Ok, just think about it. > > The intention of SIIT-DC is to provide a way how to operate IPv6 only data > center. You have to translate IPv4 request to IPv6 and do it so that client > source address is preserved. It is done

Re: SIIT-DC / IPv6 only data center

2016-06-21 Thread Jiri Tulach
Hello, Ok, just think about it. The intention of SIIT-DC is to provide a way how to operate IPv6 only data center. You have to translate IPv4 request to IPv6 and do it so that client source address is preserved. It is done by adding IPv6 prefix to IPv4 address. All you need is to have IPv4

Re: SIIT-DC / IPv6 only data center

2016-06-21 Thread Willy Tarreau
Hello, On Tue, Jun 21, 2016 at 11:23:33AM +0200, Jiri Tulach wrote: > Hello, > Are there any plans to support SIIT-DC in HaProxy? > > https://tools.ietf.org/html/rfc7755 There's nothing related to a proxy there since SIIT is stateless and works at the packet level. Regards Willy

Saving server state in 1.6.5

2016-06-21 Thread Eric Webster
Since upgrading from 1.6.4 to 1.6.5, server state is not loaded on start. I do not get any errors or warnings, it just doesn't seem to fire. Is this a bug perhaps? What I'm talking about is this kind of setup: http://fossies.org/linux/haproxy/examples/seamless_reload.txt Where I have in my

Re: Healthchecks with many nbprocs

2016-06-21 Thread Daniel Ylitalo
Thanks! That helped quite alot with a 1s cache :) Best regards Daniel Ylitalo System & Network manager about.mytaste.com "Experience is something you earn just right after you screwed up and were really in need of it" Den 2016-06-20 kl. 17:50, skrev CJ Ess: We

Re: epoll and external-check leads to dropped connections

2016-06-21 Thread Willy Tarreau
On Mon, Jun 20, 2016 at 12:50:40PM +0300, Andrey Galkin wrote: > Hi Willy, > > OK, I see your points. > > Re: > 1) there is a known problem with epoll: child process affects parent > process. That was clearly visible in tests even with close() loop in > child. > I expect we may try to mitigate