We installed "HA-Proxy version 1.6-dev5-caa6a1b 2015/09/17", as you can see 
conn_cur in stick table seems wrong. Also with a single http access test, we 
get inizial correct conn_cur=1 but after expired haproxy insert a new record 
with same expire time with conn_cur like that below. So no more src_conn_cur 
filtering for DDOS prevention can be done.

# table: main_fe, type: ip, size:102400, used:1
0x1d47cfc: key=192.168.1.21 use=0 exp=26956 conn_cnt=21 conn_rate(6000)=2 
conn_cur=4294967275 sess_cnt=21 http_req_cnt=21

Roberto



Reply via email to