外贸企业评价:双喜软件是外贸工作上的好帮手

2017-11-06 Thread stellaking9092
我已邀请您填写以下表单: 外贸企业评价:双喜软件是外贸工作上的好帮手 要填写此表单,请访问: https://docs.google.com/forms/d/e/1FAIpQLSd_mn2M8UpmcyVUdcp76cWLWfZBhpjLaFCR1vFHxeYLTP_9bg/viewform?c=0w=1usp=mail_form_link 我已邀请您填写表单: Google表单:创建调查问卷并分析调查结果。

Re: Problem: Connect() failed for backend: no free ports.

2017-11-06 Thread Lukas Tribus
Hallo Michael, 2017-11-06 22:47 GMT+01:00 Michael Schwartzkopff : > Am 06.11.2017 um 22:39 schrieb Baptiste: >> On Mon, Nov 6, 2017 at 10:14 PM, Michael Schwartzkopff wrote: >> >>> Hi, >>> >>> I have a problem setting up a haproxy 1.6.13 that starts several >>>

Re: Problem: Connect() failed for backend: no free ports.

2017-11-06 Thread Michael Schwartzkopff
Am 06.11.2017 um 22:39 schrieb Baptiste: > On Mon, Nov 6, 2017 at 10:14 PM, Michael Schwartzkopff wrote: > >> Hi, >> >> I have a problem setting up a haproxy 1.6.13 that starts several >> processes. In the config I have nbroc 3. In the logs I find lots of >> entries like: >> >> >>

Re: Problem: Connect() failed for backend: no free ports.

2017-11-06 Thread Baptiste
On Mon, Nov 6, 2017 at 10:14 PM, Michael Schwartzkopff wrote: > Hi, > > I have a problem setting up a haproxy 1.6.13 that starts several > processes. In the config I have nbroc 3. In the logs I find lots of > entries like: > > > haproxy[: Connect() failed for backend XXX: no free

Problem: Connect() failed for backend: no free ports.

2017-11-06 Thread Michael Schwartzkopff
Hi, I have a problem setting up a haproxy 1.6.13 that starts several processes. In the config I have nbroc 3. In the logs I find lots of entries like: haproxy[: Connect() failed for backend XXX: no free ports Searching the mailing list this seems to be a known problem when the kernel still

Re: HAProxy as a frontend for Docker Swarm deployment

2017-11-06 Thread Baptiste
On Mon, Nov 6, 2017 at 7:59 PM, Norman Branitsky < norman.branit...@micropact.com> wrote: > I just found out another group has started deploying microservice based > apps on Docker Swarm > > using Traefik saying: > > > “we are starting to deploy applications designed as

Re: HAProxy as a frontend for Docker Swarm deployment

2017-11-06 Thread Soluti Quintiliano
Sure. It still need some work but you can grasp the idea here: https://github.com/QuintilianoB/kubernetes_haproxy Hope it helps. PS: I forgot about the translation. I'll do it latter and update it Att. 2017-11-06 17:11 GMT-02:00 Norman Branitsky : > I

RE: HAProxy as a frontend for Docker Swarm deployment

2017-11-06 Thread Norman Branitsky
I believe Docker Swarm has a similar API. Is the code for you listener public? From: Soluti Quintiliano [mailto:quintili...@soluti.com.br] Sent: November-06-17 2:08 PM To: Norman Branitsky Cc: haproxy@formilux.org Subject: Re: HAProxy as a frontend for Docker

Re: HAProxy as a frontend for Docker Swarm deployment

2017-11-06 Thread Soluti Quintiliano
I don't know how this would be done to Docker Swarm, but we are using HAproxy in front of Kubernetes cluster with automatic HAproxy configuration for each new services which need external access. We just wrote an listener to the Kubernetes API whom update HAProxy as needed. We choose to change

HAProxy as a frontend for Docker Swarm deployment

2017-11-06 Thread Norman Branitsky
I just found out another group has started deploying microservice based apps on Docker Swarm using Traefik saying: "we are starting to deploy applications designed as microservices , but have chosen Traefik for our ability to dynamically add sites based on Docker

Re: Encrypted Passwords Documentation Patch

2017-11-06 Thread Willy Tarreau
On Mon, Nov 06, 2017 at 05:06:37PM +0100, Daniel Schneller wrote: > It adds a warning about the potentially significant CPU cost the modern > algorithms with their thousands of hashing rounds can incur. In our case it > made the difference between haproxy's CPU usage being hardly noticeable at all

Re: [PATCH] Fix SRV records again

2017-11-06 Thread Willy Tarreau
On Mon, Nov 06, 2017 at 05:40:04PM +0100, Olivier Houchard wrote: > > The attached patch fixes a locking issue that prevented SRV records from > > working. > And another one, that fix a deadlock that occurs when checks trigger DNs > resolutoin. Both patches merged, thanks Olivier. Willy

Re: HAProxy dont Support sslv2 Confirmation

2017-11-06 Thread Lukas Tribus
Hello Jean, 2017-11-06 12:25 GMT+01:00 Jean Martinelli : > Hello > > HAProxy does not support native sslv2 enabled. Could you confirm? Is there a > documentation link for reference? It's documented in the no-sslv3 parameters [1]: > Note that SSLv2 is disabled in

Re: [PATCH] Fix SRV records again

2017-11-06 Thread Olivier Houchard
On Mon, Nov 06, 2017 at 03:19:25PM +0100, Olivier Houchard wrote: > Hi, > > The attached patch fixes a locking issue that prevented SRV records from > working. > > Regards, > > Olivier > And another one, that fix a deadlock that occurs when checks trigger DNs resolutoin. Regards, Olivier

Encrypted Passwords Documentation Patch

2017-11-06 Thread Daniel Schneller
Hi! Attached find a documentation patch for the encrypted passwords in userlists. It adds a warning about the potentially significant CPU cost the modern algorithms with their thousands of hashing rounds can incur. In our case it made the difference between haproxy’s CPU usage being hardly

Re: Diagnose a PD-- status

2017-11-06 Thread Mildis
Hi Christopher, Configuration is attached. The domain2backend map sends data mostly to bck-traefik. $ haproxy -vv HA-Proxy version 1.7.91~bpo7+1 2017/08/24 Copyright 2000-2017 Willy Tarreau Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS =

Re: [PATCH] MINOR: mworker: do not store child pid anymore in the pidfile

2017-11-06 Thread Pavlos Parissis
On 06/11/2017 03:19 μμ, Willy Tarreau wrote: > Hi Pavlos, > > On Mon, Nov 06, 2017 at 03:09:10PM +0100, Pavlos Parissis wrote: >> That will be very much appreciated as it will allow us to have a smooth >> migration to the new master process model. > > In fact the current behaviour is to continue

Re: [PATCH] MINOR: mworker: do not store child pid anymore in the pidfile

2017-11-06 Thread Pavlos Parissis
On 06/11/2017 01:35 μμ, William Lallemand wrote: > On Mon, Nov 06, 2017 at 12:11:13PM +0100, Pavlos Parissis wrote: >> On 06/11/2017 11:16 πμ, William Lallemand wrote: >>> The parent process supervises itself the children, we don't need to >>> store the children pids anymore in the pidfile in

Re: Bad request error due to not allowed caratter in the request

2017-11-06 Thread Lukas Tribus
Ciao Nicolo, 2017-11-06 14:19 GMT+01:00 Nicolo Ballestriero : > Good morning, > > My HAproxy drops http connections made from an Hikvision devices because I > have a in the request. I tried to set the HAproxy according to > this: This is really in the request line, its

Bad request error due to not allowed caratter in the request

2017-11-06 Thread Nicolo Ballestriero
Good morning, My HAproxy drops http connections made from an Hikvision devices because I have a  in the request. I tried to set the HAproxy  according to this: http://cbonte.github.io/haproxy-dconv/1.6/configuration.html#4-option%20accept-invalid-http-request The result didn't change, can

Re: HAProxy dont Support sslv2 Confirmation

2017-11-06 Thread Andrew Smalley
Hello Jean >From what I read SSLv2 is unused and SSLv3 can be enabled with a warning as shown below force-sslv3 : Enforces the use of SSL protocol version SSLv3. Note Not recommended on Internet because of the poodle vulnerability: https://poodle.io/ ​SSLv2 has not been used on the internet

HAProxy dont Support sslv2 Confirmation

2017-11-06 Thread Jean Martinelli
Hello HAProxy does not support native sslv2 enabled. Could you confirm? Is there a documentation link for reference? Att [o] Jean Martinelli Consultoria +55 (47) 99948-6156 | +55 (47) 3035-3777 jean.martine...@teiko.com.br http://www.teiko.com.br/

Re: [PATCH] MINOR: mworker: do not store child pid anymore in the pidfile

2017-11-06 Thread Pavlos Parissis
On 06/11/2017 11:16 πμ, William Lallemand wrote: > The parent process supervises itself the children, we don't need to > store the children pids anymore in the pidfile in master-worker mode. I have a small objection against this. Having PIDs in a file allows external tools to monitor the

[PATCH] MINOR: mworker: do not store child pid anymore in the pidfile

2017-11-06 Thread William Lallemand
The parent process supervises itself the children, we don't need to store the children pids anymore in the pidfile in master-worker mode. --- src/haproxy.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/haproxy.c b/src/haproxy.c index bcbbad4a1..4d4bd3b26 100644 ---

[PATCH 2/3] MINOR: mworker: allow pidfile in mworker + foreground

2017-11-06 Thread William Lallemand
This patch allows the use of the pidfile in master-worker mode without using the background option. --- src/haproxy.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/haproxy.c b/src/haproxy.c index bbd26b82d..f12e903b2 100644 --- a/src/haproxy.c +++ b/src/haproxy.c @@

some mworker + pidfile patches

2017-11-06 Thread William Lallemand
A few patches which help using the pidfile in master-worker mode.

[PATCH 3/3] MINOR: mworker: write parent pid in the pidfile

2017-11-06 Thread William Lallemand
The first pid in the pidfile is now the parent, it's more convenient for supervising the processus. You can now reload haproxy in master-worker mode with convenient command like: kill -USR2 $(head -1 /tmp/haproxy.pid) --- src/haproxy.c | 7 +++ 1 file changed, 7 insertions(+) diff --git

Re: [ANNOUNCE] haproxy-1.8-rc1 : the last mile

2017-11-06 Thread Emmanuel Hocdet
Hi Robert, > Le 4 nov. 2017 à 14:33, Robert Newson a écrit : > > It’s only 1.0.1 that’s affected, so I’m inferring that predates support for > serving multiple certificate types; it’s not an haproxy regression. > yes, multiple certificate bundle only work with openssl >= 1.0.2

Re: Diagnose a PD-- status

2017-11-06 Thread Christopher Faulet
Hi, Le 02/11/2017 à 17:16, Mildis a écrit : [WARNING] 305/144718 (21260) : HTTP compression failed: unexpected behavior of previous filters This warning is very suspicious. It should not happen. Could you share your configuration and "haproxy -vv" output please ? -- Christopher Faulet