Interesting... I was able to get it to work using a stick-table on the front-end, as bartavelle mentioned from this URL: http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/
<http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/>I don't know enough C to dig into the code to check on that, though. On Tue, Mar 15, 2011 at 4:34 PM, Cyril Bonté <[email protected]> wrote: > Hi Willy and Cory, > > Le mardi 15 mars 2011 22:17:50, Willy Tarreau a écrit : > > > Whether I use "src_conn_cur" or sc1_conn_cur, with or without the table > > > argument, this does not work. No matter how many concurrent connections > > > per ip in the stick table, they never get denied. > > > > > > Any suggestions? > > > > At first glance, I cannot spot anything wrong. > > I think there's a bug in the function acl_fetch_src_conn_cur() : > its code contains return acl_fetch_conn_cnt(...) > where it probably should be return acl_fetch_conn_cur(...) > > Sorry, I can't test it tonight but maybe this can help you. > > -- > Cyril Bonté > -- [image: Follow me on twitter] <http://movableink.com/twitter_pics/244/link>get your own Movable Ink <http://movableink.com/?s=sig>

