Re: [PATCH] [MINOR] Collect provide http response codes received from servers

2009-10-14 Thread Willy Tarreau
On Wed, Oct 14, 2009 at 09:43:48PM +0200, Krzysztof Ol?dzki wrote: Thank you for checking this patch so carefully. Indeed, this title=aa is wrong, the line should be changed to: chunk_printf(msg, other=%lld\, px-counters.p.http.rsp[0]); fine, done and applied. Thanks, Willy

Re: Small patch for the appsession feature

2009-10-14 Thread Willy Tarreau
On Wed, Oct 14, 2009 at 10:20:04PM +0200, Aleksandar Lazic wrote: On Mit 14.10.2009 21:40, Willy Tarreau wrote: On Tue, Oct 13, 2009 at 10:41:59PM +0200, Aleksandar Lazic wrote: On Die 13.10.2009 21:34, Cyril Bonté wrote: Le lundi 12 octobre 2009 23:17:43, Aleksandar Lazic a écrit : Yes

Re: optimal build options?

2009-10-14 Thread Willy Tarreau
Hi Greg, On Wed, Oct 14, 2009 at 04:21:13PM -0400, Greg Gard wrote: hi all, i recently started building haproxy and was a bit fuzzy on what the preferred options are for the build. i read the README, but still find myself wondering if i have the best set. here is what i did: first i

Re: Small patch for the appsession feature

2009-10-14 Thread Willy Tarreau
On Wed, Oct 14, 2009 at 10:36:49PM +0200, Cyril Bonté wrote: Le mercredi 14 octobre 2009 22:23:54, Willy Tarreau a écrit : Cyril, care to send an updated patch with the latest changes ? OK ! Do it for either 1.3 or 1.4, I'll do the back/forward port. If you prefer to proceed on both

Re: Off topic: Backend tuning

2009-10-15 Thread Willy Tarreau
Hi John, On Thu, Oct 15, 2009 at 10:44:58AM -0400, John Lauro wrote: I am starting to have problems with one of our servers behind haproxy. It's busy, but it has more resources to handle more connections, but is having a bit of trouble with the incoming rate and is getting flagged down. I am

Re: OT: murmurhash

2009-10-15 Thread Willy Tarreau
Hi Aleks, On Fri, Oct 16, 2009 at 12:56:02AM +0200, Aleksandar Lazic wrote: Dear Listmember, does anybody have seen or used this 'new' hash? http://murmurhash.googlepages.com/ http://murmurhash.googlepages.com/MurmurHash2A.cpp For me it looks very promising ;-) I had already

Re: dynamic weights based on actual server load

2009-10-16 Thread Willy Tarreau
On Fri, Oct 16, 2009 at 01:36:52PM -0700, Hank A. Paulson wrote: For the code you are developing, if you make the interface general enough so that parameters can be added or removed that would be good. Telnet/text/memcached style protocols seem popular to allow easy debugging/monitoring.

Re: Redirect_prefix question

2009-10-16 Thread Willy Tarreau
Hi Chris, On Fri, Oct 16, 2009 at 02:50:44PM +0100, ch...@sargy.co.uk wrote: Hi Guys, I have a wildcard SSL certificate which I wish to do a redirect from http to https whilst maintaining the original subdomain requested, eg: http://sub.domain.com/page should be redirected to

Re: Redirect_prefix question

2009-10-17 Thread Willy Tarreau
On Sat, Oct 17, 2009 at 04:06:30PM +0100, Chris Sarginson wrote: Unfortunately there are quite a few subdomains, and we don't know them all as this is for a client, who will just be looking to add dns records and vhosts on the fly. What sort of work is required to add in this kind of

Re: dynamic weights based on actual server load

2009-10-18 Thread Willy Tarreau
Hello, On Sat, Oct 17, 2009 at 11:18:24AM +0200, Angelo Höngens wrote: Just read this thread, and I thought I would give my humble opinion on this: As a hosting provider we use both windows and unix backends, en we use haproxy to balance requests across sites on a per-site backend (with

Re: Small patch for the appsession feature

2009-10-18 Thread Willy Tarreau
On Thu, Oct 15, 2009 at 12:15:40AM +0200, Cyril Bonté wrote: OK, here comes the 2 patch files for haproxy-1.3.21 and haproxy-1.4-dev4. Please note 3 minor changes in those versions (proto_http.c / proto_http.h) : Cyril, I have merged your two patches. I applied a very minor change, I removed

Re: dynamic weights based on actual server load

2009-10-19 Thread Willy Tarreau
Hi, On Mon, Oct 19, 2009 at 06:10:24PM +0300, Balcoes wrote: Hi. This discussion got me thinking would it be possible for HAproxy to query a PHP/Perl/Python...-script that returns some kind of numerical information concerning the server's load. For example HAproxy could check periodically

Re: at what point does haproxy begin queueing requests for a backend?

2009-10-19 Thread Willy Tarreau
On Mon, Oct 19, 2009 at 12:25:00PM -0700, Hank A. Paulson wrote: at what point does haproxy begin queuing requests for a backend? Is it at sum(maxconn * wght) or sum(maxconn) ignoring wght ^^^ This one precisely or is it at fullconn even if fullconn is less than the above 2 values or some

Re: http stats page not found

2009-10-21 Thread Willy Tarreau
On Wed, Oct 21, 2009 at 10:49:44AM +0100, Matt wrote: Does anyone else have trouble with the haproxy stats page returning not found? Running on CentOS 5.3 version 1.3.19 from EPEL rpm I have the following in my config stats enable stats hide-version stats auth

Re: slow tcp handshake

2009-10-21 Thread Willy Tarreau
On Wed, Oct 21, 2009 at 10:27:23AM -0700, David Birdsong wrote: On Wed, Oct 21, 2009 at 4:31 AM, John Lauro john.la...@covenanteyes.com wrote: You could bump your range up.  It might help if you have a high connection rate and not just a high number of connections. i dont have a high

Re: [PATCH] [MINOR] Add a name to stats page

2009-10-24 Thread Willy Tarreau
On Thu, Oct 22, 2009 at 10:49:59PM +0200, Krzysztof Piotr Oledzki wrote: From ad5198f6e8c143b0f070d98d64b507d343d697fa Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Thu, 22 Oct 2009 22:48:09 +0200 Subject: [MINOR] Add a name to stats page If you have a lot of

Re: HAProxy on OpenBSD

2009-10-27 Thread Willy Tarreau
Hi Brian, On Mon, Oct 26, 2009 at 02:18:09PM -0400, McCann, Brian wrote: Hi all. I'm trying to setup HAProxy on OpenBSD and I'm having some problems. I can't seem to get it to accept a maxconn value larger than 1024. When I run it set to 4096 for example, I get the following: [ALERT]

Re: [PATCH 2/2] [MINOR] Collect provide http response codes for frontends, fix backends

2009-10-27 Thread Willy Tarreau
Hi Krzysztof, On Sat, Oct 24, 2009 at 03:48:52PM +0200, Krzysztof Piotr Oledzki wrote: From d529a265e60ea3366452329e2f462a0bd02d8e58 Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Sat, 24 Oct 2009 15:36:15 +0200 Subject: [MINOR] Collect provide http response codes

Re: HAPROXY in zLinux is presenting Segmentation fault

2009-10-27 Thread Willy Tarreau
Hi Alexandre, On Tue, Oct 27, 2009 at 03:41:55PM +, alexandre oliveira wrote: Willy, I have gdb but I dont know how to use it. Could you say me how to invoke haproxy command using it? yes, basically you place yourself in the place where you have all your sources (and the binary) and use

Re: Sticky session, dumb client

2009-10-27 Thread Willy Tarreau
On Tue, Oct 27, 2009 at 08:37:38PM -0400, Robinson, Michael wrote: Thanks for the reply, Aleks. appsession lookup in URL does not seem to work for me. The request, as it appears in HTTP access_log: 64.88.170.40 - - [28/Oct/2009:00:22:04 +] POST

Re: Small patch for the appsession feature

2009-11-02 Thread Willy Tarreau
Hi Cyril, On Sun, Nov 01, 2009 at 12:19:05AM +0100, Cyril Bonté wrote: Hello Willy and Aleksandar, If you agree, I would like to apply this new patch to add some more integrity checking on appsession. * the session value (provided by the URL or by the request/response cookie) is now well

Re: High Availability question

2009-11-05 Thread Willy Tarreau
On Thu, Nov 05, 2009 at 10:00:19AM +, Matt wrote: (...) Yes this makes sense and is a very common setup in fact. You just have to wonder why you want your haproxy to sit between two networks. Maybe you're bypassing a firewall, which is not good security-wise. I think that's why Michael

Re: Oracle WebUtil

2009-11-08 Thread Willy Tarreau
On Mon, Nov 09, 2009 at 08:15:19AM +0100, Martin Karbon wrote: Hi I've been working and testing HaProxy for a while now and though it is a really good loadbalancer, easy to set up and configure I am still trying to figure out why it gives me a 14-18 seconds delay when connecting to oracle

Re: Segfault if using long ACLs

2009-11-09 Thread Willy Tarreau
be wise to report it because as you tell it, you don't know if your configuration is working or not. So let's reject the line and indicate where it broke. The following patch fixes it. Thanks! Willy From 3b39c1446b9bd842324e87782a836948a07c25a2 Mon Sep 17 00:00:00 2001 From: Willy Tarreau w

Re: getting BADREQ on logs in ssl requests

2009-11-09 Thread Willy Tarreau
5f0bd6537f8b56b643ef485d7a3c96d996d9b01a Mon Sep 17 00:00:00 2001 From: Willy Tarreau w...@1wt.eu Date: Mon, 9 Nov 2009 21:27:51 +0100 Subject: [BUG] config: disable 'option httplog' on TCP proxies Gabriel Sosa reported that logs were appearing with BADREQ when 'option httplog' was used with a TCP proxy (eg

Re: We have been playing around with the new RDP cookie feature in 1.4-dev4 and it works really well...

2009-11-10 Thread Willy Tarreau
On Mon, Nov 09, 2009 at 10:10:46PM +, Malcolm Turnbull wrote: Guillaume, I think you would need to increase the clitimeout and srvtimeout to 2 hours if you wanted it to be seemless. Otherwise you would need to reconnect with the same username to join the same session if those timeouts

Re: Small patch for the appsession feature

2009-11-15 Thread Willy Tarreau
Hi, On Sun, Nov 15, 2009 at 10:28:21PM +0100, Aleksandar Lazic wrote: Hi Cyril, On Fre 13.11.2009 22:50, Cyril Bonté wrote: Hello Willy, sorry, I didn't have time to work on the patch as I wanted. Le jeudi 5 novembre 2009 06:19:41, Willy Tarreau a écrit : Sorry but I can't see

Re: Small patch for the appsession feature

2009-11-16 Thread Willy Tarreau
On Mon, Nov 16, 2009 at 10:08:56AM +0100, Aleksandar Lazic wrote: What you can do however is to create a new prefix keyword like we have for timeout or tcp-request and put the flags somewhere else. appsession would have been fine but it's already used. Maybe you can use appcookie ? Something

Re: Small patch for the appsession feature

2009-11-16 Thread Willy Tarreau
On Mon, Nov 16, 2009 at 01:04:17PM +0100, Aleksandar Lazic wrote: (...) app* delimiterstart (default ;) app* delimiterstop (defautl =) I'm sorry, I don't understand what you mean. Could you give an example of configuration using this ? For example: if in the url the delimiter changes

Re: Small patch for the appsession feature

2009-11-17 Thread Willy Tarreau
On Tue, Nov 17, 2009 at 11:25:56PM +0100, Aleksandar Lazic wrote: And for now, I see 2 modes : - path-parameters (the default) - query-string (the one that made me look at the code :-) ) (and if needed weblogic) Looks ok for me. What I'am not sure now is how we can prevent that

Re: Process in D Stat

2009-11-21 Thread Willy Tarreau
On Fri, Nov 20, 2009 at 01:55:37PM -0800, Jose Avila(Tachu) wrote: Thanks Willy, this usually happens when i send restart signals to a process while the older process has not finished. ej. proces 1000 is currently active so i send restart to haproxy with -sf 1000 new process is 1001

Re: NOSRV BADREQ

2009-11-24 Thread Willy Tarreau
On Sun, Nov 22, 2009 at 12:09:37PM -0500, Joe Stein wrote: Hi, we are using HA-Proxy version 1.3.19 2009/07/27 When you have some time, please upgrade to 1.3.22 which fixes some bugs. For the second time in the last week we seem to be getting NOSRV in the haproxy logs for a few minutes

Re: Debugging 502 errors

2009-11-24 Thread Willy Tarreau
On Mon, Nov 23, 2009 at 11:53:48AM +0100, Nerilaunt Nerilaunt wrote: Well, it seems to be a problem with Prestahop's very big headers. I update include/common/defaults.h and set BUFSIZE 32768 instead of 16384 Seems to work. Is it safe ? Yes it is. And with version 1.4, you will be able

Re: Small patch for the appsession feature

2009-11-29 Thread Willy Tarreau
Hi Cyril, On Mon, Nov 30, 2009 at 12:53:34AM +0100, Cyril Bonté wrote: Could you please check on your side and confirm/infirm my doubts ? Basically I want to ensure we never dereference the buffer past its end, so begin+len bust always be below the buffer size. If you think a control is

Re: [BUG] Configuration parser bug when escaping characters

2009-12-02 Thread Willy Tarreau
Hi Cyril, On Mon, Nov 30, 2009 at 07:19:00PM +0100, Cyril Bonté wrote: Hello Willy, Today I was testing headers manipulation but I met a bug with my first test. To reproduce it, add for example this line : rspadd Cache-Control:\ max-age=1500 Check the response header, it will

Re: need some help please

2009-12-02 Thread Willy Tarreau
On Wed, Dec 02, 2009 at 07:51:58AM +0200, Paul Roland wrote: nvm this, sorry. I was using tcp mode... OK. With 1.4-dev you'd be able to do that in TCP mode, though you'd have to add a statement to wait for an HTTP request. But I have another question, can I limit connections per ip with

Re: redirecting many urls

2009-12-02 Thread Willy Tarreau
Hi Matt, On Wed, Dec 02, 2009 at 12:58:50PM +, Matt wrote: I guess this can't be done at the moment? Is there a feature request for this already? (...) RewriteRule ^/([a-z]+)/mypage$  http://mydomain.com/$1/yourpage [R=301,L,NE] Sorry, but I'm unable to parse apache's cryptic

Re: HTTP Keep-alive

2009-12-02 Thread Willy Tarreau
On Wed, Dec 02, 2009 at 11:23:14AM +, Mark Brooks wrote: We were running into communication problems with the web page stalling as it loaded then waited until haproxy hit its timeout. We worked it out to be the HTTP keep-alive, which we have now disabled with option httpclose. Most often

Re: weird tcp syn/ack problem

2009-12-02 Thread Willy Tarreau
Hi, On Wed, Dec 02, 2009 at 04:47:01PM -0500, Lincoln wrote: Hi, I'm running HAProxy as my load balancer and sometimes (but not all the time) clients experience an 11s delay. The delay is always about 11s when it happens. I used Wireshark to try and see what was happening (screenshot from

Re: [BUG] Configuration parser bug when escaping characters

2009-12-02 Thread Willy Tarreau
On Wed, Dec 02, 2009 at 11:47:03PM +0100, Cyril Bonté wrote: Le mercredi 2 décembre 2009 23:12:50, Willy Tarreau a écrit : I find it particularly amazing that you're the first to observe this, considering how old those parts are ! That also surprised me, then I've made some more tests

Re: weird tcp syn/ack problem

2009-12-02 Thread Willy Tarreau
On Wed, Dec 02, 2009 at 07:44:40PM -0500, Lincoln wrote: Thanks Willy for offering to help us out with this. We are running on an Amazon EC2 m1small instance which is very common for a load balancer machine. I changed /proc/sys/net/ipv4/tcp_timestamps to 1 - unfortunately to no effect.

Re: Load balancing PostFix Mail Out

2009-12-02 Thread Willy Tarreau
On Thu, Dec 03, 2009 at 06:09:06AM +0100, boris17...@gmail.com wrote: We are handle arround 500'000 mails 3 times by week, but we have to load balance because we used dkimproxy for signing emails, and we have to use 3 IPs to don't be bad for mail services receiver. But your first postfix or

Re: weird tcp syn/ack problem

2009-12-02 Thread Willy Tarreau
On Thu, Dec 03, 2009 at 12:29:55AM -0500, Lincoln wrote: Hi Willy, I agree it's pretty confusing. I should have been clearer - the problem does not happen every time, it's very random. But when it happens it always follows that exact pattern - that's what I meant to say. OK, that's what I

Re: Load balancing PostFix Mail Out

2009-12-02 Thread Willy Tarreau
On Thu, Dec 03, 2009 at 06:55:19AM +0100, boris17...@gmail.com wrote: Le 03/12/2009 06:40, Willy Tarreau a écrit : On Thu, Dec 03, 2009 at 06:09:06AM +0100, boris17...@gmail.com wrote: We are handle arround 500'000 mails 3 times by week, but we have to load balance because we used

Re: redirecting many urls

2009-12-03 Thread Willy Tarreau
Hi Matt, replying quickly this time. On Thu, Dec 03, 2009 at 10:13:57AM +, Matt wrote: Hi Willy, sure. I guess what i'd be writing with my knowledge of haproxy at the moment is one of these for every user:- acl user1 url_beg /user1/mypage redirect location

Re: haproxy stats truncation

2009-12-07 Thread Willy Tarreau
Hi Adam, On Mon, Dec 07, 2009 at 08:05:58PM -0500, Adam Jacob Muller wrote: Hi, Looking over the bug matrix, I see two bugs referencing stats truncation, http://haproxy.1wt.eu/knownbugs-1.3.html stats output sometimes truncated fixed in 1.3.14.5 and stats output limited to 16 kB fixed in

Re: Haproxy server timeouts?

2009-12-07 Thread Willy Tarreau
Hi, On Sat, Dec 05, 2009 at 12:11:54AM +0100, XANi wrote: Dnia 2009-12-04, pi?? o godzinie 17:57 -0500, Naveen Ayyagari pisze: The issue we have is that our scripts are dependent on external resources, so php execution time can vary wildly. (...) Yes i meant processor cores, basically

Re: haproxy administration web interface

2009-12-07 Thread Willy Tarreau
Hi, On Mon, Dec 07, 2009 at 02:49:30PM -0500, Israel Garcia wrote: Hi, A simple question, is there any web interface to administer haproxy via web? The only web interfaces I'm aware of are the ones in commercial products using haproxy (Exceliance ALOHA, Loadbalancer.org, maybe others ?). But

Re: haproxy stats truncation

2009-12-07 Thread Willy Tarreau
On Tue, Dec 08, 2009 at 12:29:24AM -0500, Adam Jacob Muller wrote: Hi Willy, I have right now... defaults timeout client 5s timeout connect 5s timeout server 5s option nolinger It's this one (nolinger). listen stats x.x.x.x:8080 mode http stats uri / Actually, I

Re: Session stickiness over HTTP and HTTPS

2009-12-07 Thread Willy Tarreau
On Tue, Dec 08, 2009 at 12:56:03AM +0100, Holger Just wrote: On 07.12.09 23:19, Anthony Urso wrote: Hi: I am looking for advice on the best way to load-balance HTTP and HTTPS traffic such that once a session is established with either protocol, haproxy continues to send new requests

Re: HAProxy SNMP Agent for Solaris

2009-12-08 Thread Willy Tarreau
Hi Eoin, On Tue, Dec 08, 2009 at 04:28:52PM -, Mallin, Eoin wrote: Hi all, I'm new to HaProxy and during my investigation of the product I've come across mention of an SNMP agent that was written by a contributor. I can no longer find this in the contributor section of the HaProxy site.

Re: [PATCH] [RFC] Decrease server health based on http responses / events

2009-12-08 Thread Willy Tarreau
Hi Krzysztof, it was fortunate that you reminded me about this mail because I had lost it in the middle of a few others. On Sun, Oct 25, 2009 at 01:35:35AM +0200, Krzysztof Piotr Oledzki wrote: Subject: [RFC] Decrease server health based on http responses / events This RFC quality patch

Re: weird tcp syn/ack problem

2009-12-08 Thread Willy Tarreau
On Tue, Dec 08, 2009 at 07:16:09PM -0500, Lincoln wrote: Hi Willy, thanks for all your help with this issue. I upgraded to ubuntu with a recent kernel and poof, the problem disappeared. Nice! So now we know that anyone who reports a similar issue using fc8 with 2.6.21.7-2 on xen just has to

Re: [PATCH] [RFC] Decrease server health based on http responses / events

2009-12-09 Thread Willy Tarreau
Hi Krzysztof, On Wed, Dec 09, 2009 at 01:23:57PM +0100, Krzysztof Ol?dzki wrote: There are four modes: - fastinter: force fastinter - failchk: simlate a failed check - force fastinter OK so that one should decrease the health each time we get a series of errors, that's it ?

Re: [PATCH] [RFC] Decrease server health based on http responses / events

2009-12-10 Thread Willy Tarreau
On Thu, Dec 10, 2009 at 07:17:30PM +0100, Krzysztof Ol?dzki wrote: (...) events by itself might not be the proper name then. For instance, a timeout is precisely a lack of event. It's a matter of definition, like if 0 is or is not a natural number. For me timeout *is* one of events, but no

Re: Session / Cookie related problem

2009-12-10 Thread Willy Tarreau
Hi Gaël, On Wed, Dec 09, 2009 at 04:47:17PM +, Gaël Reignier wrote: Hi everybody, I have installed and configured HAProxy with pound in order to have SSL termination at the SLB level and it worked OK until today and we discovered a problem that does not make sense to me, I will try to

Re: [BUG][MINOR] incorrect number of configuration files allowed

2009-12-15 Thread Willy Tarreau
Hi Cyril, On Tue, Dec 15, 2009 at 08:53:02PM +0100, Cyril Bonté wrote: Hi Willy, I have another small request concerning this multiple configuration files parameters : when an error is detected in one of the files, then haproxy displays Error(s) found in configuration file : ... for all

Re: [PATCH] [RFC] Decrease server health based on http responses / events, version 2

2009-12-15 Thread Willy Tarreau
Hi Krzysztof, I forgot to check the list and did not see your mail. On Fri, Dec 11, 2009 at 10:33:56AM +0100, Krzysztof Piotr Oledzki wrote: Changes in this version: - documentation - close race between a started check and health analysis event - don't force fastinter if it is not set -

Re: Perfect sysctl

2009-12-15 Thread Willy Tarreau
Hi Marcus, On Tue, Dec 15, 2009 at 10:53:31AM +0100, Marcus Herou wrote: Hi guys. I would appreciate it a lot if someone could share a sysctl.conf which is known to run smoothly on a HAProxy machine with busy sites behind it. This is a question I regularly hear. very busy sites does not

Re: request prioritization

2009-12-15 Thread Willy Tarreau
Hello, On Tue, Dec 15, 2009 at 10:04:10PM +0100, Jaroslav Gresula wrote: Hello, I use a haproxy queue in front of a server which serves two classes of requests. The two classes - let's call them A and B - can be matched using ACLs. My question is whether it is possible to instruct

Re: [PATCH] [RFC] Decrease server health based on http responses / events, version 2

2009-12-15 Thread Willy Tarreau
On Tue, Dec 15, 2009 at 11:29:33PM +0100, Krzysztof Ol?dzki wrote: +error_limit count error-limit please :-) Sure. Would you like a new patch with that change? No, don't waste your time on cosmetics. I've noticed you sent v3 while I was replying, I'll sed on v3. (...) Maybe I'm not very

Re: [PATCH] BUG] config: fix erroneous check on cookie domain names, again

2009-12-15 Thread Willy Tarreau
On Tue, Dec 15, 2009 at 11:42:14PM +0100, Krzysztof Piotr Oledzki wrote: From 79b9d25eb78cb217b0a8fe90d33f14061db2a767 Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Tue, 15 Dec 2009 23:40:47 +0100 Subject: BUG] config: fix erroneous check on cookie domain names,

Re: Friendly URLs?

2009-12-15 Thread Willy Tarreau
Hi, On Tue, Dec 15, 2009 at 05:47:49PM -0500, Ken Roe wrote: We are trying to make application URLs friendly using rewrite rules. The goal is to eliminate the context path of the web application from the url. Example: The URL http://app.company.com should rewrite to

Re: HAProxy 1.3+ Collectd Plugin

2009-12-15 Thread Willy Tarreau
Hi Ryan, On Tue, Dec 15, 2009 at 03:36:11PM -0800, Ryan Schlesinger wrote: I was given permission today to open source the collectd plugin I wrote for the RightScale environment. This supports reading from the stats socket that haproxy 1.3 provides. It uses the column names from the show

Re: HAProxy 1.3+ Collectd Plugin

2009-12-16 Thread Willy Tarreau
On Wed, Dec 16, 2009 at 07:55:27AM -0800, Ryan Schlesinger wrote: Willy, I've also gotten an email from one of the collectd maintainers. They are interested in including it as a plugin on that side of things as well. It's a tough call because if either program changes the plugin will

Re: Friendly URLs?

2009-12-16 Thread Willy Tarreau
On Wed, Dec 16, 2009 at 01:56:06PM +0100, XANi wrote: Is there a way to do this using rewrite rules? This specific one above cannot because you have to take one part from the Host header and inject it into the request line. But those which only move components within the same line do

Re: [PATCH 4/4] [BUG] format '%d' expects type 'int', but argument 5 has type 'long int'

2009-12-17 Thread Willy Tarreau
Hi Krzysztof, On Tue, Dec 15, 2009 at 10:48:38PM +0100, Krzysztof Piotr Oledzki wrote: From 750cb365d4ea2fa886cdcc71ca2fcde22a08f9b6 Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Tue, 15 Dec 2009 22:34:51 +0100 Subject: [BUG] format '%d' expects type 'int', but

Re: Doesn't work for a very few visitors

2009-12-17 Thread Willy Tarreau
Hi, On Thu, Dec 17, 2009 at 02:07:41PM -0800, Joe Torsitano wrote: Whenever I turn on HAProxy everything appears to be working great. However I always get two or three e-mails from people who ask when the site is going to be back up. They say the site can no longer be found in their browser,

Re: Config recommendations for LDAP(S) load-balancing

2009-12-17 Thread Willy Tarreau
Hi Paul, On Thu, Dec 17, 2009 at 03:23:28PM -0800, Paul Hirose wrote: We're starting down the path of using HAProxy (among other things such as Crossroads, or LVS-NAT/LVS-DR) and putting them in front of our LDAP/S servers. We're starting w/HAProxy cause it was so easy to set up :) It

Re: haproxy on x86_64

2009-12-18 Thread Willy Tarreau
On Fri, Dec 18, 2009 at 10:49:49AM -0500, John Marrett wrote: Both x86 and x86_64 are prefectly fine. yes indeed. It's just because I don't update this section often. Fixed now. Regards, Willy

Re: Doesn't work for a very few visitors

2009-12-19 Thread Willy Tarreau
On Sat, Dec 19, 2009 at 05:14:42PM -0500, John Lauro wrote: Are you using connection tracking with iptables? If so, you might want to consider using a more basic configuration without connection tracking. Indeed! most likely you have a rule somewhere which does a REJECT on INVALID packets and

Re: Check behavior

2009-12-19 Thread Willy Tarreau
On Sun, Dec 20, 2009 at 06:29:56AM +0300, Alexey Lapitsky wrote: Hi, I have multiple listen sections with the same backends: listen download.example.com :1 server download_passenger 127.0.0.1:8080 check maxconn 20 listen search.example.com :10001 server

Re: minimum requirements and explanation about stats

2009-12-19 Thread Willy Tarreau
Hi Gabriel, On Fri, Dec 11, 2009 at 02:13:12AM -0200, Gabriel Sosa wrote: Hola! Currently our haproxy is setup over a Intel Pentium D 930 with 2gb 667 RAM, we are in a test stage. Running a Centos 5.3 64bits kernel 2.6 haproxy was compiled with TARGET=linux26 - How can I know if this

Re: Multipart ACLs

2009-12-20 Thread Willy Tarreau
On Sun, Dec 20, 2009 at 11:26:43PM -0500, Ben Koski wrote: I'm a little confused about multipart ACLs. Are conditions ORed or ANDed together as they're added on? For example, what should happen when I set up the following? acl my_cond hdr_dom(host) site1.com acl my_cond path_beg

Re: problems with session timeout

2009-12-21 Thread Willy Tarreau
Hi, On Mon, Dec 21, 2009 at 06:41:56PM +0100, Carlo Granisso wrote: Hello, I have this configuration for my proxy: defaults log global option httplog option logasap option tcplog retries 2 redispatch maxconn

Re: Intel nehalem crc32 for URI hashing (and Keep-Alive)

2009-12-21 Thread Willy Tarreau
Hi Dormando, On Sun, Dec 20, 2009 at 05:16:57PM -0800, dormando wrote: Hey, Attached, and linked here: http://consoleninja.net/p/haproxy_intel_hash.diff ... is a patch to HAProxy 1.3.22 that uses intel's nehalem hardware CRC32 instruction for the URI hashing. I did some tests here:

Re: connslots and frontend/backend controls

2009-12-21 Thread Willy Tarreau
Hi Joe, On Mon, Dec 21, 2009 at 04:10:24PM -0800, Joe Williams wrote: Willy, I am just curious if any progress has been made on the persistence layer and thus enabling my idea of total connections per host header. A lot of work has been done but a reworking is currently ongoing to satisfy

Re: sending arbitrary errors to client

2009-12-21 Thread Willy Tarreau
On Mon, Dec 21, 2009 at 04:12:01PM -0800, Joe Williams wrote: Willy, Has this been added to the dev releases of 1.4? just on the todo list, and 1.4 is not finished BTW. The dev has slowed down because of the difficulties I encountered with a few prerequisite adaptations for later keep-alive

Re: R: problems with session timeout

2009-12-22 Thread Willy Tarreau
On Tue, Dec 22, 2009 at 09:27:12AM +0100, Carlo Granisso wrote: Thanks for you help. But... If I use iptables to route all traffic from SERVER1 to SERVER2 only for newest connections? sorry, but I don't understand what you're trying to achieve. Willy

Re: R: R: problems with session timeout

2009-12-22 Thread Willy Tarreau
On Tue, Dec 22, 2009 at 09:49:36AM +0100, Carlo Granisso wrote: With iptables I can route all traffic for SERVER1 to SERVER2 and so, You mean using NAT on the iptables machine ? automatically exclude it. Haproxy automatically route traffic to SERVER2 without down. what do you mean by without

Some news about upcoming haproxy 1.4-dev5

2009-12-22 Thread Willy Tarreau
Hi all, since version 1.4-dev4 released about 2 months ago, some less noticeable but important changes have been merged. Most of these changes were done to prepare the possibility of supporting keep-alive without breaking already working code and configs. It took a lot of time because I found it

Re: QoS policies/priorities when sharing web servers among frontends

2009-12-23 Thread Willy Tarreau
On Sun, Dec 20, 2009 at 08:40:50PM +0100, Ben wrote: Is there a way to configure haproxy so it deals with available backends ressources (number of active connexions) as sharable quotas, a bit like Linux IP QoS can do for traffic shaping ? ie. do a best effort to attribute a minimum number of

Re: Custom Health Checks, Logging error, Integrating w/Keepalived

2009-12-23 Thread Willy Tarreau
Hey Paul, it's hard to reply to your mails, you send 10 questions at once. If it takes an hour to reply to each mail, there's very little chance anyone will find that time. Please try to split them by precise subjets and expect that some of them will not get any reply :-) I'll try to address

Re: Health check timeframe and incoming connections

2009-12-23 Thread Willy Tarreau
On Wed, Dec 23, 2009 at 11:31:49AM -0800, Paul Hirose wrote: I didn't see my original post(s) come back from haproxy@ mail-list, so I'm trying again, hopefully consolidated a bit smaller :) yes it was posted. I have the configuration lines: option httpchk balance roundrobin

Re: Custom Health Checks, Logging error, Integrating w/Keepalived

2009-12-23 Thread Willy Tarreau
On Tue, Dec 22, 2009 at 01:25:24PM -0800, Paul Hirose wrote: (...) Next, I think this is related to what Willy warned about in a previous thread about the default syslogd being slow. I fired off a giant batch of requests at my haproxy, and there were a lot of error/warning msgs on my window

Re: anybody know how to health check a twisted xmlrpc server?

2009-12-23 Thread Willy Tarreau
On Wed, Dec 23, 2009 at 10:40:17PM -0800, David Birdsong wrote: On Wed, Dec 23, 2009 at 10:07 PM, David Birdsong david.birds...@gmail.com wrote: On Wed, Dec 23, 2009 at 9:57 PM, Willy Tarreau w...@1wt.eu wrote: On Wed, Dec 23, 2009 at 09:48:15PM -0800, David Birdsong wrote: i see that POST

Re: anybody know how to health check a twisted xmlrpc server?

2009-12-24 Thread Willy Tarreau
On Thu, Dec 24, 2009 at 12:05:54AM -0800, David Birdsong wrote: On Wed, Dec 23, 2009 at 11:27 PM, Willy Tarreau w...@1wt.eu wrote: On Wed, Dec 23, 2009 at 10:52:52PM -0800, David Birdsong wrote: this can be dropped for now.  it turns out that twisted doesn't actually return error codes when

Re: anybody know how to health check a twisted xmlrpc server?

2009-12-24 Thread Willy Tarreau
[ forgot to CC Krzysztof ] On Wed, Dec 23, 2009 at 11:27 PM, Willy Tarreau w...@1wt.eu wrote: On Wed, Dec 23, 2009 at 10:52:52PM -0800, David Birdsong wrote: this can be dropped for now.  it turns out that twisted doesn't actually return error codes when you instruct it to.  it puts

Re: -sf/-st rereading configuration file

2009-12-24 Thread Willy Tarreau
On Thu, Dec 24, 2009 at 01:33:02PM +0100, XANi wrote: There is also little iptables hack, if u wanna be 100% sure no client will get rejected when you're restarting, block sending TCP RST packets to client, so when TCP SYN hits loadbalancer when its restarting and frontend port is closed,

Re: Perfect sysctl

2010-01-01 Thread Willy Tarreau
Hi Marcus, On Fri, Jan 01, 2010 at 12:09:05PM +0100, Marcus Herou wrote: Thanks! This is an excerpt of the haproxy conf, does it look OK ? Will HAProxy set ulimit for the haproxy user? Yes it does since 1.3.X (I don't remember what X, but a small one). How can I tell if root could

Re: anyone doing this: internet - http proxy with KA - haproxy?

2010-01-02 Thread Willy Tarreau
[ for an unknown reason, this mail failed to reach the list, trying again ] Hi Hank, I should have read the ML before responding to you privately :-) On Sat, Jan 02, 2010 at 02:24:27AM -0800, Hank A. Paulson wrote: I have a site with 90% of the traffic from a few client IPs that are 300ms or

Re: haproxy GIT errors with keepalive connections since last commits

2010-01-02 Thread Willy Tarreau
Hi Cyril, On Sun, Jan 03, 2010 at 01:33:37AM +0100, Cyril Bonté wrote: Hi Willy, being curious, I wanted to read your last commits but I had several errors with the repsponse cut in the middle, followed by the headers and the response of a second request. I've read your last news saying

Re: anybody know how to health check a twisted xmlrpc server?

2010-01-02 Thread Willy Tarreau
Hi Krzysztof, On Sun, Jan 03, 2010 at 02:19:24AM +0100, Krzysztof Ol?dzki wrote: I would not be surprized if he already had some pieces of code in good shape. Not this time. ;) hehe :-) The code I have currently is only a fast-hack to help my IIS colleagues by extracting IIS extended

Re: [PATCH] [BUG] Healthchecks: get a proper error code if connection cannot be completed immediately

2010-01-03 Thread Willy Tarreau
On Sun, Jan 03, 2010 at 01:45:07AM +0100, Krzysztof Piotr Oledzki wrote: From 89baa36c17701a2abd6de629b3e0f360c194c6dc Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Sat, 2 Jan 2010 22:03:01 +0100 Subject: [BUG] Healthchecks: get a proper error code if connection

[ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-03 Thread Willy Tarreau
Hi all, Yes that's it, it's not a joke ! -- Keep-alive support is now functional on the client side. -- From now on, we support 4 different modes : - tunnel mode (the default one), where we only look at the first request and first response then let everything be exchanged as if it

Re: haproxy GIT errors with keepalive connections since last commits

2010-01-03 Thread Willy Tarreau
On Mon, Jan 04, 2010 at 12:18:38AM +0100, Cyril Bonté wrote: Hi Willy, Le Dimanche 3 Janvier 2010 13:11:08, Willy Tarreau a écrit : I've updated the running version on the site so that it's fixed now. I confirm I don't have the problem anymore ;) I'm sorry to say that another

Re: haproxy GIT errors with keepalive connections since last commits

2010-01-03 Thread Willy Tarreau
On Mon, Jan 04, 2010 at 12:18:38AM +0100, Cyril Bonté wrote: I'm sorry to say that another problem has appeared (I didn't see it 2 or 3 hours ago). It looks like long responses are truncated. For example, try to access to this link :

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-04 Thread Willy Tarreau
;-) That version will be available in the snapshot dir 5 hours from now. Le Lundi 4 Janvier 2010 00:13:49, Willy Tarreau a écrit : The keep-alive timeout is bound to the http-request timeout right now, In practice, this is the minimum value between the http-request timeout and the client timeout

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-04 Thread Willy Tarreau
On Tue, Jan 05, 2010 at 12:20:22AM +0100, Cyril Bonté wrote: Le Lundi 4 Janvier 2010 23:43:14, Willy Tarreau a écrit : Hi Cyril, On Mon, Jan 04, 2010 at 10:21:40PM +0100, Cyril Bonté wrote: Hi Willy, I didn't have much time for tests but I can make some first feedbacks. That's

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-04 Thread Willy Tarreau
On Mon, Jan 04, 2010 at 07:05:48PM -0800, Hank A. Paulson wrote: On 1/4/10 2:43 PM, Willy Tarreau wrote: - Maybe this new timeout should have a default value to prevent infinite keep-alive connections. - For this timeout, haproxy could display a warning (at startup) if the value is greater

<    1   2   3   4   5   6   7   8   9   10   >