Thanks John, I accept, but we are using 1.3.x version almost from 1.5 years and the configuration was really worked amazing, steel won't change through config, so can we disable these alerts from haproxy bin through compiling any options need to set while compile it, need your help to fix it.
-Ravi On Mon, Dec 6, 2010 at 4:36 PM, John Marrett <[email protected]> wrote: > Ravi, > > > >> Error: >> Starting ravi_apps.1: [WARNING] 339/154647 (29412) : config : 'stats' >> statement ignored for proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as >> it requires HTTP mode. >> [WARNING] 339/154647 (29412) : config : 'option forwardfor' ignored for >> proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as it requires HTTP >> mode. >> [WARNING] 339/154647 (29412) : config : 'option httpclose' ignored for >> proxy 'VIP:apps.ravibhure.com:192.168.21.54:443' as it requires HTTP >> mode. >> > > listen VIP:apps.ravibhure.com:192.168.21.54:443 >> [...] >> mode tcp >> > > You are using tcp mode for 443 load balancing (as you must, if you don't > decrypt it before haproxy handles ssl). As such, it cannot be httplogged and > you are unable to forwardfor and httpclose on these ports. This is not a > change from 1.3, though the warnings may not have been emitted before. Non > ssl communication is being logged as it was before, note that these warnings > to not affect apps.ravibhure.com:80. > > If you need to do forwardfor and httpclose you will need to terminate the > ssl before haproxy with something that can handle forwardfor, either patched > stunnel, apache, nginx or similar. > > If you wish to use stunnel, search on the haproxy homepage for > "X-Forwarded-For support for Stunnel" > > -JohnF > -- Thanks & Regards, Ravi Bhure http://www.indianGNU.org Register Linux user # 463269
