Re: [PATCH][DOC] option force-persist documentation update

2010-04-25 Thread Willy Tarreau
On Sun, Apr 25, 2010 at 11:01:16PM +0200, Cyril Bonté wrote: Update the proxy keywords matrix and declare option force-persist instead of force-persist Cyril, I've just realized what you meant, and I'm sorry, but that's wrong, it's really force-persist, there is no option keyword in front of

Re: logging keep-alive requests

2010-04-26 Thread Willy Tarreau
On Mon, Apr 26, 2010 at 09:38:22PM +0100, Matt wrote: Think I remember reading this. But just checking - i'm running 1.4.4. I'm only getting the first response of the digest authentication (code 401) logged when using option http-pretend-keepalive. My client reuses the connection and I see

Re: 1.4.4 option http-pretend-keepalive not available in backend

2010-04-27 Thread Willy Tarreau
On Mon, Apr 26, 2010 at 11:00:36PM +0100, Matt wrote: The doc says that http-pretend-keepalive can be set in a backend only, but when haproxy is reloaded with this option set :- 'http-pretend-keepalive' ignored because backend has no frontend capability. grrr... looks like a stupid

Re: Script greasmonkey to navigate in Haproxy docs ...

2010-04-27 Thread Willy Tarreau
Hello Damien, On Tue, Apr 27, 2010 at 10:33:41AM +0200, Damien Hardy wrote: Hello all, haproxy docs are quite difficult to manipulate. I had begun a Greasemonkey (https://addons.mozilla.org/fr/firefox/addon/748) script to create a clickable ToC in the haproxy documentation ... You can

Re: httpchk - verify for headers

2010-04-27 Thread Willy Tarreau
Hi Fernando, On Tue, Apr 27, 2010 at 04:50:17PM -0300, Fernando Morgenstern wrote: Hello, I'm using haproxy with httpchk health check. At a first moment, i was using a simple check.txt file but i found out that it was not enough as some of the server problems are not detected with this.

Re: stats via http

2010-04-27 Thread Willy Tarreau
On Tue, Apr 27, 2010 at 05:07:12PM -0500, Graham Barr wrote: We are using 1.4.4 but whenever we access the stats via /admin?stats;norefresh we are unable to get the full page and end up with a page within a page. what do you call a page within a page ? Could you please save what you receive

Re: Matching URLs at layer 7

2010-04-28 Thread Willy Tarreau
On Wed, Apr 28, 2010 at 09:21:31PM +0930, Andrew Commons wrote: Hi Beni, A few things to digest here. What was leading me up this path was a bit of elementary (and probably naïve) white-listing with respect to the contents of the Host header and the URI/L supplied by the user. Tools

Re: question regarding maxconn/ weight

2010-04-28 Thread Willy Tarreau
Hi Corin, On Wed, Apr 28, 2010 at 08:50:46AM +0200, Corin Langosch wrote: Hi! I wonder how maxconn and weight (both in a server statement) exactly interact. The docs in section 5 says about maxconn: They don't interact. Weight is only used as a number of occurrences in a load balancing

Re: Matching URLs at layer 7

2010-04-28 Thread Willy Tarreau
On Wed, Apr 28, 2010 at 06:21:34PM +0930, Andrew Commons wrote: As an aside, should the documentation extract below actually read: acl local_dsthdr(Host) -i localhost ^ ^ i.e. is the name of the header case sensitive? In

Re: stats via http

2010-04-28 Thread Willy Tarreau
On Wed, Apr 28, 2010 at 10:51:16AM -0500, Graham Barr wrote: On Apr 28, 2010, at 12:53 AM, Willy Tarreau wrote: On Tue, Apr 27, 2010 at 05:07:12PM -0500, Graham Barr wrote: We are using 1.4.4 but whenever we access the stats via /admin?stats;norefresh we are unable to get the full page

Re: [PATCH] doc/configuration.txt: fix typos

2010-05-09 Thread Willy Tarreau
On Sun, May 09, 2010 at 10:43:32AM +0200, Patrick Mézard wrote: --- doc/configuration.txt |7 +++ 1 files changed, 3 insertions(+), 4 deletions(-) applied, thanks Patrick ! Willy

Re: Code base case sensitivity

2010-05-09 Thread Willy Tarreau
Hello, On Sun, May 09, 2010 at 10:56:25AM +0200, Patrick Mézard wrote: Hello, Sorry if this has been mentioned already but haproxy code base contains case colliding entries, namely CONTRIB and contrib/. When checkouting current git HEAD on a case insensitive system (Windows, OSX with

Re: stick-table question

2010-05-11 Thread Willy Tarreau
On Tue, May 11, 2010 at 12:42:13PM -0700, Shannon Lee wrote: Hey guys, The stick-table feature is great, but it turns out I'm not smart enough to use it :\ We got the stick-table feature working ok, and 'src' seems to be exactly what we're looking for, except that the majority of our

Re: Why would haproxy send a request to a server that is down?

2010-05-14 Thread Willy Tarreau
Hi Malcolm, On Fri, May 14, 2010 at 12:07:53PM -0700, Malcolm Handley wrote: Hi, everyone. I'm having some trouble with the routing of requests to servers within a backend. Firstly, although I have retries 3 in the defaults section of my config file I'm not seeing any evidence of

Re: Can't compile haproxy 1.4.5

2010-05-16 Thread Willy Tarreau
On Sun, May 16, 2010 at 07:56:25PM +0200, Cyril Bonté wrote: Hi again, Le dimanche 16 mai 2010 19:45:34, Willy Tarreau a écrit : Hi Cyril, On Sun, May 16, 2010 at 09:21:39AM +0200, Cyril Bonté wrote: Hi Willy, I don't know if you've already seen it. No I have not seen it yet

[ANNOUNCE] haproxy 1.4.6

2010-05-16 Thread Willy Tarreau
Hi all, Cyril Bonté reported a build issue with 1.4.5 due to a conflicting macro name with glibc = 2.10. Since it probably affects many recent distros, I preferred to fix that and emit a new version. I also clarified some points about RDP cookies in the doc, and added a new ACL match which I've

Re: where is haproxy log?

2010-05-16 Thread Willy Tarreau
On Sun, May 16, 2010 at 11:08:23PM -0300, Bruno Guimarães Sousa wrote: Hi everyone, using debian squeeze here. I installed haproxy through aptitude. Executing /etc/init.d/haproxy start doesn't starts haproxy process and I can't see a log anywhere. what version is this ? Please report the

Re: Redirect 1 time per day

2010-05-18 Thread Willy Tarreau
On Tue, May 18, 2010 at 04:15:31PM +0200, Damien Hardy wrote: Hi all, I have a request from my users: We want iphones (hdr_sub(user-agent) -i iphone) to be redirected to Apple store the first time thez come on our site. but only 1 time per days. So I want to user the redirect directive

Re: A (Hopefully Not too Generic) Question About HAProxy

2010-05-19 Thread Willy Tarreau
Hi, I have a quick comment for now, before going deep through your config. On Tue, May 18, 2010 at 03:49:57PM -0700, Chih Yin wrote: As for the logs, it seems that I'll need to look at the configuration for HAProxy a bit more to make some adjustments first. A few months back, I know I saw

Re: keep-alive time out error code

2010-05-19 Thread Willy Tarreau
Hi Matt, On Wed, May 19, 2010 at 02:31:14PM +0100, Matt wrote: Hi all, I'm currently seeing requests hitting a 10s http-request time out in my logs but not logging the cR code. I'm thinking this is because the time out is actually the http-keepalive one which I haven't set and therefore is

Re: backend errors stats

2010-05-19 Thread Willy Tarreau
Hi Gabriel, On Wed, May 19, 2010 at 01:52:15PM -0300, Gabriel Sosa wrote: hello, we are running haproxy 1.3.22 and monitoring it with munin using Bart van der Schans's plugins the issue is haproxy_errors isn't showing data. looking in the plugin. it tries to read the hrsp_5xx column.

Re: Solaris x86 tuning...

2010-05-19 Thread Willy Tarreau
On Wed, May 19, 2010 at 06:10:11PM -0600, Matt Banks wrote: FWIW, I appreciate the response, but I'm not sure how event-ports, epoll vs poll and select is going to cause load times to increase for us by 500% with one client hitting haproxy vs that same one client hitting apache directly. I

Re: TCP Socket TIME_WAIT error Windows WCF

2010-05-24 Thread Willy Tarreau
Hi, On Tue, May 25, 2010 at 11:00:36AM +1200, Srdan Dukic wrote: Hi, I've setup HAProxy (version 1.3.15.2 from repo's) on Debian to load balance requests to a bunch of Windows web services running on IIS7. My problem is that after load testing the system, Windows runs out of sockets as they

Re: Gateway Timeouts possible causes?

2010-05-24 Thread Willy Tarreau
Hi Naveen, On Mon, May 24, 2010 at 01:20:42PM -0400, Naveen Ayyagari wrote: (...) When we track that request on the application server, it is received and based on PHP timing of the process it completes in about .02 seconds. The access log for the application server reports it returned a

Re: Building a rspirep based on the frontend incoming URL

2010-05-26 Thread Willy Tarreau
On Wed, May 26, 2010 at 03:26:40PM +0100, Pedro Mata-Mouros Fonseca wrote: Greetings, For a given image serving backend I use a reqrep to rewrite an incoming scrambled URL and pass it on unscrambled: reqrep ^(GET[^\ ]*)\ /image/\w{1}(\w{2})(\w{2})(\w{2})(.*)\1\

Re: Choose server by Host?

2010-05-27 Thread Willy Tarreau
On Thu, May 27, 2010 at 06:16:42AM -0500, Jim Riggs wrote: On 27 May 2010, at 5:09, Chris Sarginson wrote: Externally, users can only hit our sites at www.example.com or someapp.example.com, but internally for testing, monitoring, and configuration purposes, we want to be able to hit

Re: TCP Socket TIME_WAIT error Windows WCF

2010-05-29 Thread Willy Tarreau
Hi, On Wed, May 26, 2010 at 11:18:03AM +1200, Srdan Dukic wrote: The actual error message is as follows: Insufficient winsock resources available to complete socket connection initiation. For connection *initiation* : so it means that it's not an accept() which fails, but a connect(). Is

Re: Some issues with my HAProxy installation.

2010-06-04 Thread Willy Tarreau
Hi, On Wed, Jun 02, 2010 at 01:19:59AM -0400, Geoffrey Mina wrote: Greetings, We recently deployed HAProxy in a virtualized environment. I am having some problems with occasional socket accept errors. Where do you observe those errors ? I'm seeing you have nbproc 4 which you shouldn't be

Re: Different httpchck on the same backend

2010-06-04 Thread Willy Tarreau
Hello Adrien, On Wed, Jun 02, 2010 at 12:19:47PM +0200, Adrien Desprez wrote: Hello, is it possible to perform different checks according to the server destination? no you can't, but see below. (...) backend www.site.fr mode http log global balance roundrobin

Re: Mixed TCP and HTTP switching

2010-06-04 Thread Willy Tarreau
On Wed, Jun 02, 2010 at 04:18:33PM +0100, Laurie Young wrote: Hi everyone I have a problem, and I'm not sure if HAProxy can solve it I have a range of different requests coming in on a server to port 80, and am using HAProxy to switch them to the relevant back end servers. Most of these

Re: Servers in maintenance getting traffic

2010-06-04 Thread Willy Tarreau
Hi Jim, On Wed, Jun 02, 2010 at 01:54:22PM -0500, Jim Riggs wrote: I came across this while trying to get my new stack and configuration up and running. A portion of my config looks like this: backend lb.example.com server web1 web1.example.com:80 track web1.example.com/web1 server

Re: Max Number of Open Connections

2010-06-04 Thread Willy Tarreau
On Thu, Jun 03, 2010 at 11:24:55AM -0600, Jason J. W. Williams wrote: Hi Laurie, This thread might be helpful: http://www.mail-archive.com/haproxy@formilux.org/msg00926.html yes indeed, there are various tuning knobs depending on the OS. Also, haproxy needs to be set up with the appropriate

Re: UDP Load Balancing

2010-06-04 Thread Willy Tarreau
On Fri, Jun 04, 2010 at 01:03:38AM -0600, Jason J. W. Williams wrote: Hello, Is it possible to handle UDP load balancing with HAProxy? Particular application here is SLB in front of multiple DNS servers. No it is not. However, under Linux, LVS does it pretty well with a low overhead, so this

Re: haproxy question about check

2010-06-04 Thread Willy Tarreau
Hello, first, there are too many questions for a single mail, it's hard for list subscribers to find enough time to reply to everything, and it is likely that you'll only get partial responses. On Fri, May 21, 2010 at 03:15:54PM +0200, eni-urgence wrote: Hello all. I discover haproxy few

Re: Max Number of Open Connections

2010-06-04 Thread Willy Tarreau
On Fri, Jun 04, 2010 at 09:35:54AM +0100, Laurie Young wrote: Hi, That is useful to know Specifically I'm looking to use HAProxy in front of a cluster of backend servers, with lots of long running connections. I keep hearing references on Linux to 65K max sockets, implying about 30k max

Re: Some issues with my HAProxy installation.

2010-06-04 Thread Willy Tarreau
On Fri, Jun 04, 2010 at 08:17:03AM -0400, Geoffrey Mina wrote: Thanks for the response. Can you explain what nbproc is if I am using it incorrectly? My VM shows 4 cores of cpu. It was initially implemented to help bypass some platforms per-process file-descriptor limitations. In *very rare*

Re: UDP Load Balancing

2010-06-04 Thread Willy Tarreau
On Fri, Jun 04, 2010 at 11:06:52AM -0600, Jason J. W. Williams wrote: Dang. We've already started the implementation of HAProxy, and would prefer to only have one SLB solution. You see, there's never an absolute *one* SLB solution : - you may have layer2 load balancing (etherchannel,

Re: server ip cached ?

2010-06-09 Thread Willy Tarreau
On Wed, Jun 09, 2010 at 02:00:34PM -0700, Mathieu Oudart wrote: That's totally understandable of course, but maybe this could be enabled via an option ? It's just a suggestion. After all, if I want no DNS lookup I'd rather put only IPs on my server line. no in fact it could not even be

Re: Problem with HTTP error 408

2010-06-09 Thread Willy Tarreau
On Mon, Jun 07, 2010 at 06:34:20PM +0200, Hervé COMMOWICK wrote: Hi ??ukasz, From the configuration.txt : when a connection expires during timeout http-keep-alive, no error is returned, the connection just closes. If the connection expires in timeout http-request while waiting for a

Re: haproxy reqrep

2010-06-09 Thread Willy Tarreau
On Mon, Jun 07, 2010 at 07:02:56PM -0700, Sriram Chavali wrote: I am trying to redirect from a URI of pattern /images/image.png?1234567 to a URI of format /i/1234567 The rules I have are as following: acl acl_legacy_img url_sub img.png use_backend legacy_img if acl_legacy_img The

Re: help with halog

2010-06-09 Thread Willy Tarreau
Hi David, On Wed, Jun 09, 2010 at 04:37:28PM -0700, David Birdsong wrote: I'm pretty excited to start using halog, but dumping out the usage is about the only documentation I can turn up -which is not explaining anything to me. Is there anything more substantial on how to use halog? you're

Re: Inject some data into buffer

2010-06-10 Thread Willy Tarreau
On Thu, Jun 10, 2010 at 12:02:26PM +0200, hapr...@serverphorums.com wrote: Hello All. How to inject some data into head of client buffer before send it to backend? Is process_session() function right place to do this job? The best thing to do generally is to add an analyser (do a copy

Re: req_proto_http does not work

2010-06-10 Thread Willy Tarreau
On Thu, Jun 10, 2010 at 06:39:09PM +0200, Rapsey wrote: hello, This configuration will always send to backend tcpback, if I run curl http://127.0.0.1 frontend tcpfront *:80 acl acl_ishttp req_proto_http use_backend nginx if acl_ishttp default_backend tcpback

Re: about acl in ssl

2010-06-11 Thread Willy Tarreau
On Fri, Jun 11, 2010 at 02:38:16AM -0700, Hank A. Paulson wrote: That is because haproxy does not _yet_ parlez ssl so it can't see the http level attributes to route requests with them. But there is good news and bad news related to that - since I am from the future I can tell you that

Re: share number of server-connections among backends

2010-06-11 Thread Willy Tarreau
On Fri, Jun 11, 2010 at 10:12:59PM +0200, Martin Kofahl wrote: Hi, I have some backend-servers (eg A and B) in multiple backends (B has some special sites running that's why). Algorithm is least connection. But this information is not shared between the backends, even though servers have the

Re: haproxy 1.4.7 and keep-alive

2010-06-11 Thread Willy Tarreau
Hello Patrick, On Fri, Jun 11, 2010 at 11:40:18PM +0200, Patrick Mézard wrote: Hello, Sorry for the long email, I know there had been many threads about keep-alive already, but I am a little confused by 1.4.7 configuration.txt (http://haproxy.1wt.eu/download/1.4/doc/configuration.txt).

Re: path_beg

2010-06-14 Thread Willy Tarreau
Hi, On Mon, Jun 14, 2010 at 10:07:07PM +0200, Hamnedalen, Mikael wrote: Hi It's my first post to the list, and I'm sorry if you have seen this question hundreds times before.. the good thing is if you have, someone will probably be able to answer me :) This is a snipp of my

Re: Issues with stats logging

2010-06-15 Thread Willy Tarreau
Hi, On Tue, Jun 15, 2010 at 09:40:15PM +0300, grigorov.hrist...@neftochim.bg wrote: I have just recently installed HAProxy and it otherwise works great but I have some issues with logging stats requests? First, I have configured separate logging of errors using ?log-separate-errors?.

Re: Issues with stats logging

2010-06-15 Thread Willy Tarreau
Hi Hristo, On Wed, Jun 16, 2010 at 06:36:59AM +0300, grigorov.hrist...@neftochim.bg wrote: Thanx Willy, About the second issue... I didn't notice 'log global' can be specified for specific listen thus I had it in defaults section. I moved it to the one of the listeners and now everything

Re: Fwd: load balancing RPC server

2010-06-15 Thread Willy Tarreau
Hi, On Tue, Jun 15, 2010 at 02:47:06PM -0700, Qiwen Zhao wrote: Hi, First, I want to Thank you for HAProxy, it is great! I have been using it for http load balance, works very well. I have some newbie questions on load balancing non-http RPC servers. The problem I am running into is the

Re: Issues with stats logging

2010-06-16 Thread Willy Tarreau
On Wed, Jun 16, 2010 at 09:20:44AM +0300, grigorov.hrist...@neftochim.bg wrote: Btw, I am unable to figure out how 'grace' option works. Looking at the sources it seems it is 0 by default which shall effectively disable soft-stop but apparently it doesn't. How does it work then? It was used

Re: Fwd: load balancing RPC server

2010-06-16 Thread Willy Tarreau
On Wed, Jun 16, 2010 at 08:00:44AM -0700, Qiwen Zhao wrote: Thank you for confirming. Yeah, I notice the two balance line. I think this could be the server side since it might be expecting a rpc open/close specific to the protocol. Now let me change to a different question :-). Maybe, but

[ANNOUNCE] haproxy 1.4.8

2010-06-16 Thread Willy Tarreau
Hi, today, Ben Congleton, Morten Gade Sørensen and Hervé Commowick reported and diagnosed two bugs in 1.4.7. One was a regression introduced in 1.4.7, breaking the stick-table feature due to a side effect of the fix for a memory leak in it. The second one is quite old, it dates 1.3.16 ! It causes

Re: switching from nginx to stunnel

2010-06-18 Thread Willy Tarreau
Hi Nick, On Fri, Jun 18, 2010 at 11:55:03PM -0500, Nicholas Hadaway wrote: Hi All, stunnel 4.33 has been released, is there a new X-Forwarded-For patch? not needed, the same patch works for 4.31 to 4.33. Willy

Re: Interest in patch for web interface to enable/disable servers

2010-06-26 Thread Willy Tarreau
Hi Judd, On Thu, Jun 24, 2010 at 05:51:55PM -0400, Judd Montgomery wrote: I've been working on a patch to add buttons to the stats web page, one per server entry. These buttons will enable/disable servers. If/when I finish this patch would it be accepted, or a welcome addition? If so I'll

Re: performance with and without haproxy

2010-06-26 Thread Willy Tarreau
Hello, On Fri, Jun 25, 2010 at 05:15:02PM +0200, eni-urgence wrote: Hello Is anyone have already notice a perfomance decrease with and without haproxy ? I m' the only one on the proxy and web server, and the http resquest is served 0.5 and 1s slower than without haproxy? How are you

Re: Interest in patch for web interface to enable/disable servers

2010-06-26 Thread Willy Tarreau
On Sat, Jun 26, 2010 at 11:45:53AM -0300, Gabriel Sosa wrote: I would like this feature, OK, thanks for your feedback Gabriel. maybe an option could be add a config option like read-only and that would not allow such options on the web panel No, it should be the opposite, because if you

Re: Interest in patch for web interface to enable/disable servers

2010-06-26 Thread Willy Tarreau
Hi Cyril, On Sat, Jun 26, 2010 at 10:29:45PM +0200, Cyril Bonté wrote: This feature is appealing, however for security concerns, I've always wanted to stick to a read-only access to the web interface. It's too easy to get caught with an accessible interface on the net with people who are

Re: Use of errorloc303

2010-06-26 Thread Willy Tarreau
Hi, On Thu, Jun 24, 2010 at 09:33:45AM +0300, grigorov.hrist...@neftochim.bg wrote: Hi, I am not sure I use it in proper way thus I prefer to ask? I have added to a listen section errorloc303 option for 503 and 504 to redirect browser back to HAproxy, so that if server client is

Re: Use of errorloc303

2010-06-27 Thread Willy Tarreau
On Mon, Jun 28, 2010 at 06:39:37AM +0300, grigorov.hrist...@neftochim.bg wrote: Thank you Willy, that will do it if you say however I had the impression that HAproxy by default won't use backend that is currently down. For that a new session (redirect) always gets backend that is online

Re: Anyone know what software uses MT-Proxy-ID?

2010-06-27 Thread Willy Tarreau
Hi Hank, On Sun, Jun 27, 2010 at 02:12:35PM -0700, Hank A. Paulson wrote: I got this error hit via the haproxy socket, I noticed that there are a few hits when searching for it, all related to corrupt headers with lighttpd and people seem to be assuming it is lighttpd's fault but in the case

Re: haproxy bug or wrong kernel settings?

2010-06-30 Thread Willy Tarreau
Hi Craig, On Wed, Jun 30, 2010 at 07:16:32PM +0200, Craig Craig wrote: It seems that somewhere over 2000 and between 4500 established connections, the problems start; I've not been able to determine the exact number, as I've changed the NAT to the server directly - it could handle the ~6600

Re: precedence of if conditions

2010-06-30 Thread Willy Tarreau
On Wed, Jun 30, 2010 at 08:53:19PM -0700, Bryan Talbot wrote: See section 7.7: AND is implicit. 7.7. Using ACLs to form conditions -- Some actions are only performed upon a valid condition. A condition is a combination of ACLs with operators. 3 operators

Re: acl values/evaluation timing during processing

2010-06-30 Thread Willy Tarreau
On Wed, Jun 30, 2010 at 04:01:36PM -0700, Hank A. Paulson wrote: I have an old URL that needs to be redir'd to a new url in several situations but I can't see how to avoid looping. acl hdr_sub(host) host1 acl hdr_sub(host) host2 acl oldurl path_beg /oldblah acl newurl path_beg /newu

Re: performance with and without haproxy

2010-06-30 Thread Willy Tarreau
On Tue, Jun 29, 2010 at 10:01:39AM +0200, eni-urgence wrote: After some test, it appears that is a hardware/design problem. I made a new virtual host (https) on the proxy machine, call it directly not through haproxy and the transfer time are similar. Now i had to found why . Is think the

Re: Interest in patch for web interface to enable/disable servers

2010-06-30 Thread Willy Tarreau
On Wed, Jun 30, 2010 at 10:50:28AM -0600, Jason J. W. Williams wrote: My two cents for what it's worth... This would be a terrific feature and the one I miss the most from commercial load balancers. Makes taking real servers in and out of battery to test an issue simple. My recommendation

Re: HAProxy is incompatible with WebSocket protocol revision 76?

2010-07-01 Thread Willy Tarreau
Hi, On Thu, Jul 01, 2010 at 03:05:15PM +0300, Juhani Åhman wrote: Can you start wireshark or tcpdump session with a working websockets setup and offer a download of this file, so that we can take alook what's differrent. you can download wireshark dump here. In it I'm connecting straight

Re: HAProxy is incompatible with WebSocket protocol revision 76?

2010-07-01 Thread Willy Tarreau
Hi again, On Thu, Jul 01, 2010 at 02:47:46PM +0200, Willy Tarreau wrote: Hi, On Thu, Jul 01, 2010 at 03:05:15PM +0300, Juhani Åhman wrote: Can you start wireshark or tcpdump session with a working websockets setup and offer a download of this file, so that we can take alook what's

Re: HAProxy is incompatible with WebSocket protocol revision 76?

2010-07-01 Thread Willy Tarreau
On Thu, Jul 01, 2010 at 05:15:05PM +0300, Juhani Åhman wrote: On Thu, 2010-07-01 at 15:02 +0200, Willy Tarreau wrote: Thanks for the trace, but could you please take the same one between the browser and haproxy ? It's the most important one because it's the one where we should see why

Re: HAProxy is incompatible with WebSocket protocol revision 76?

2010-07-01 Thread Willy Tarreau
On Thu, Jul 01, 2010 at 04:47:33PM +0200, Willy Tarreau wrote: However I think I have found some clue. In the trace you sent, the data was sent from the server along with the headers, though no intermediate proxy nor reverse-proxy would do that because you only know you're forwarding

Re: Haproxy+Nginx SSL Insecurities

2010-07-03 Thread Willy Tarreau
On Sat, Jul 03, 2010 at 11:23:16AM -0400, John T Skarbek wrote: Chris, Thanks for responding. I had thought of the option you mention. However I discontinued it quickly. The reason I'm not a big fan, is that those header values can be hacked quite easily. Granted the end user (hacker)

Re: Testing HAproxy

2010-07-08 Thread Willy Tarreau
Hi Anthony, On Thu, Jul 08, 2010 at 07:27:49PM +, Porcano, Anthony wrote: Hi, My name is Anthony Porcano, and I work for 24/7 Real Media. We are evaluating HAproxy for a new application, and I wanted to inquire about any services you provide to customers taking on large installs. The

Re: Buffer Size

2010-07-08 Thread Willy Tarreau
On Wed, Jul 07, 2010 at 05:49:24PM +0200, Hervé COMMOWICK wrote: Oh right, you mean adjust buffer size (to permit large cookies to pass) per listen section. As i know, it is not possible at the moment. Maybe Willy can talk a bit about that ? :) Indeed, and I really don't think it will

Re: Testing HAproxy

2010-07-08 Thread Willy Tarreau
On Thu, Jul 08, 2010 at 08:29:01PM +, Porcano, Anthony wrote: wow...I totally did not mean to send that to the mailing list. Oh well. :) ... but you did, it's too late now, some other mailing list archives will already have replicated the message. Anyway, there was nothing apparently

Re: haproxy get 502 when downloading large files from IIS

2010-07-08 Thread Willy Tarreau
On Thu, Jul 08, 2010 at 04:47:24PM -0400, Cheng, Xin [USA] wrote: Hello there, We have problem of downloading large files through haproxy from IIS share point and MSSQL in the back. User cannot download large files like over 28MB. But user is able to upload large files and download small

Re: reroute to different backend on 404 ?

2010-07-10 Thread Willy Tarreau
On Thu, Jul 08, 2010 at 04:12:23PM -0600, Jeremy Hinegardner wrote: Hi, I'm not quite sure if this is possible with HAproxy, I could do it with nginx, but I'd like to utilize HAproxy's logging to monitor it. We have a new document location, and an old document location, and we are

Re: Truncated health check response from real servers

2010-07-10 Thread Willy Tarreau
Hi Anze, On Fri, Jul 09, 2010 at 01:48:12AM +0200, Anze wrote: Indeed it never made it in. Each time I look at it, I realize that cleaning it up and fixing it will take more time than what I have available to work on it :-/ I can understand that completely. :) Actually, I am not

Re: HAproxy performance on virtual sys. KVM

2010-07-10 Thread Willy Tarreau
Hi Konrad, On Fri, Jul 09, 2010 at 12:07:05PM +0200, Konrad wrote: Hello, I have a question about HAproxy configuration. I have 2 physical servers: 1) ServerA: Debian Lenny 64bit Kernel : 2.6.26-2-amd64 CPU: AMD Athlon(tm) 64 X2 RAM: 2GB 2) ServerB: Debian Lenny 64bit Kernel:

Re: HAproxy performance on virtual sys. KVM

2010-07-10 Thread Willy Tarreau
On Sat, Jul 10, 2010 at 11:25:46AM +0200, Konrad wrote: I have nowhere iptables enabled. Also mentioned in many posts conntrack isn't enabled anywhere. OK I tested it now like this (same example test with ab: ab -c 100 -n 1000 http://IP_addr/check.txt): vm5 (additional vm from which I made

Re: Truncated health check response from real servers

2010-07-12 Thread Willy Tarreau
Hi Anze, On Mon, Jul 12, 2010 at 09:28:09AM +0200, Anze wrote: Hi Willy, On Saturday 10 July 2010, Willy Tarreau wrote: Actually, I am not that much interested in the patch per-se, I would just like to check the body of the check-response and compare it to a string for more reliable

Re: HAproxy performance on virtual sys. KVM

2010-07-12 Thread Willy Tarreau
Hi Konrad, On Mon, Jul 12, 2010 at 07:49:25PM +0200, Konrad wrote: The networking is slow - you're correct. I'll check it why. But generally I don't know why the stats using ab tool can be so low. If I add additional server with apache there is hardly any performance increase. This makes me

Re: High numer tcp closed and timewait

2010-07-13 Thread Willy Tarreau
Hi, On Tue, Jul 13, 2010 at 11:22:45AM +0200, ??ukasz Jagieo wrote: Hi, From some time now I see high number tcp close and timewait. #v+ lb-01 ~ # free total used free sharedbuffers cached Mem: 404630813482282698080 0

Re: NTLM Authentication and haproxy

2010-07-13 Thread Willy Tarreau
Hi Chris, On Tue, Jul 13, 2010 at 10:26:44AM +0100, Chris Sarginson wrote: Hi guys, Just a quick email to check something from the archives. For NTLM authentication to work, do I need to remove the option httpclose from the backend due to the fact that NTLM authenticates based on the TCP

Re: Some Questions

2010-07-13 Thread Willy Tarreau
Hi, On Tue, Jul 13, 2010 at 06:15:19PM +0200, ??ukasz Jagieo wrote: 2010/7/13 eni-urgence eni-urge...@scan-eco.com: Hello everybody.   1) I want to use the errorfile directive in the configuration in order to display a custom html page (on proxy disk). Is it possible to include an

Re: Using haproxy and elastic Ips

2010-07-14 Thread Willy Tarreau
Hi Dmitri, On Tue, Jul 13, 2010 at 06:20:57PM -0700, Dmitri Smirnov wrote: However, elastic Ips are not exactly what they seem. While the public DNS names and addresses remain the same, for within the cloud connections they still resolve to internal 10 dot addresses. Those can change when

Re: haproxy get 502 when downloading large files from IIS

2010-07-14 Thread Willy Tarreau
Hi Xin, On Wed, Jul 14, 2010 at 04:36:47PM -0400, Cheng, Xin [USA] wrote: Hi, Willy, Thank you very much for your help! We found out the problem is IIS server has wrong setting on NIC speed. It is not a problem of haproxy. Hehe, I think that the same week I suggested the same issue to 3

Re: Domain URI Rewrite / Redirect

2010-07-15 Thread Willy Tarreau
Hello Moritz, On Thu, Jul 15, 2010 at 01:45:19PM +0200, Moritz Krinke wrote: Hello, currently i'm playing around with haproxy to replace our current Big-IP/Lighttpd based LoadBalancing Proxy solution. Now i'm kinda stuck - i try to do a redirect (301) to a different domain and a

Re: Interest in patch for web interface to enable/disable servers

2010-07-15 Thread Willy Tarreau
Hi Cyril, On Fri, Jul 16, 2010 at 12:18:36AM +0200, Cyril Bonté wrote: I had not much time to work on the code but here is a short status : 1. Now there's a checkbox in front of each server (unchecked by default) and a select box per backend to choose the action (currently disable/enable)

Re: Load Balancing for Apache Query

2010-07-15 Thread Willy Tarreau
Hi Christopher, On Fri, Jul 16, 2010 at 11:05:34AM +1000, Christopher Little wrote: This is my first time using HAproxy and I've come into a bit of an issue. I'm using haproxy to load balance two apache servers for a proof of concept, currently running ab to test performance and I've

Re: 502 Gateway

2010-07-21 Thread Willy Tarreau
Hi Joe, On Wed, Jul 21, 2010 at 11:38:21AM -0400, Joe Stein wrote: Hi, we have a new server that we are trying to fit behind our existing HAProxy implementation. For some reason it is giving us a 502 error (the server is a tomcat6 server with servlet) and we are trying to hunt down the

Re: High-End Deployments of HAProxy?

2010-07-23 Thread Willy Tarreau
Hi, On Thu, Jul 22, 2010 at 08:16:30AM -0700, David Birdsong wrote: On Wed, Jul 21, 2010 at 8:00 PM, billforums-hapr...@yahoo.com wrote: Hello, I'm curious if anyone can describe high-end deployments of HAProxy that are in use today. We are taking a look at HAProxy as a build your

Re: stunnel +haproxy quirk

2010-07-23 Thread Willy Tarreau
On Fri, Jul 23, 2010 at 07:11:28AM +0200, hapr...@serverphorums.com wrote: I'm trying to use stunnel and haproxy to sit in front a web application that is completely http and running on IIS and I am experiencing a bit of a quirk. I more less took the exact config from haproxy's

Re: file matching

2010-07-23 Thread Willy Tarreau
Hi Hank, On Thu, Jul 22, 2010 at 09:49:31PM -0700, Hank A. Paulson wrote: Can the file based lists be used for any matches or just IPs? Yes, they can be used for anything, even regex if you want. Patterns are simply loaded from the file rather than from the config line. However, IPs get a

Re: [PATCH][BUG] session rate limit gets garbaged in the stats

2010-07-23 Thread Willy Tarreau
Hi Cyril, On Fri, Jul 23, 2010 at 06:59:11PM +0200, Cyril Bonté wrote: The statistics page (the HTML one) displays a garbage value on frontends using rate-limit session in HTTP mode. This is due to the usage of the same buffer for the macros converting the max session rate and the

Re: servers shared amongst backends

2010-07-23 Thread Willy Tarreau
Hello Ben, On Fri, Jul 23, 2010 at 03:21:03PM -0700, Ben wrote: Hello -- I've searched for this on the mailing list but I haven't found an answer, hope someone can help! I have a setup like 5 machines (m1,..,m5) 2 services (s1, s2) Each machine has one or both of the services, each

Re: stunnel +haproxy quirk

2010-07-23 Thread Willy Tarreau
On Sat, Jul 24, 2010 at 02:10:45AM +0200, hapr...@serverphorums.com wrote: Thanks for the quick reply and thanks for all of the work on haproxy, it's been very fun to play with. If I leave the ssl processing to the back end webservers and simply use haproxy to distribute the load there is

Re: Unable to use underscores in host names in newest version of haproxy

2010-07-24 Thread Willy Tarreau
Hi, On Sat, Jul 24, 2010 at 11:06:44PM +1000, Michael Dodwell wrote: Hey, I just tried to load a subdomain we have behind haproxy (http://test_this.somedomain.com) and it fails? I assume this is a bug as underscores/hyphen's are allowed in dns.. this also worked in older versions.. of

Re: acl matching cookies

2010-07-24 Thread Willy Tarreau
Hi Anze, On Sat, Jul 24, 2010 at 03:10:21PM +0200, Anze wrote: Hi all! I hope this is not too newbie question, but... is it possible to redirect to a specified backend whenever a predefined value is found in a cookie? (or at least, when a predefined cookie is found at all?) I have read

Re: servers shared amongst backends

2010-07-24 Thread Willy Tarreau
On Sat, Jul 24, 2010 at 01:13:28PM -0700, Ben wrote: Thanks for the quick reply. I will look forward to release 1.5 or 1.6. Is there a (very rough) ETA on those releases? 1.5 should be released around the end of the year. 1.6, about 6-9 months later. But this all depends on what will get

Re: Performance on an Atom D510 Dual Core 1.66GHz

2010-07-26 Thread Willy Tarreau
Hi Unai, On Tue, Jul 27, 2010 at 12:23:59AM +0800, Unai Rodriguez wrote: Dear All, I am thinking of setting an HAProxy on Atom D510 Dual Core 1.66GHz. Am I supposed to face performance issues? Anyone got experience with HAProxy running on similar hardware? Would it be possible to share

<    1   2   3   4   5   6   7   8   9   10   >