I have an haproxy.conf like so. I'm trying to limit based on the concurrent
connections.

backend thebackend
        stick-table type ip size 8k expire 5m store gpc0,conn_cur
        tcp-request content  track-sc1 src
        acl mark_seen sc1_inc_gpc0
        acl needs_increment src_get_gpc0(union) eq 0
        tcp-response content accept if needs_increment mark_seen
        server x.y.z:80

backend over_concurrent_per_ip
        option httplog
        log 127.0.0.1 local1
        block if TRUE

frontend http_proxy
        log     127.0.0.1        local0
        log     127.0.0.1        local1 err
        bind *:80
        mode http
        option forwardfor
        option httplog
        option log-separate-errors
        default_backend thebackend
        acl too_many_from_ip src_conn_cur(thebackend) gt 0
        use_backend over_concurrent_per_ip if too_many_from_ip


Whether I use "src_conn_cur" or sc1_conn_cur, with or without the table
argument, this does not work. No matter how many concurrent connections per
ip in the stick table, they never get denied.

Any suggestions?

Reply via email to