On Thu, Jan 27, 2011 at 05:55:23PM -0500, Roy Smith wrote: > It sounds like you have given this more thought than I have (for which I am > grateful). > > Still, my need is for a unique tag. If you provide me with a unique tag > which also encodes some useful information about source and time, and is > guaranteed not to roll over in the face of a flood attack, and all the other > good things you describe, then I'm still happy because you have met my basic > need :-)
As I have said, global unicity already requires a lot of information anyway. > I do see your point about stripping incoming ids. It seems to me that this > should be a configurable option. If we had several haproxys (haproxies?) > stacked, I guess you would want to make the first one strip existing tags, > and all the later ones keep them, since that would be the one added by the > first one in the chain. Absolutely and that was my point too. The outer one does strip and the inner one only forward. Regards, Willy
