Hi,
Le 22/01/2016 21:41, shouldbe q931 a écrit :
Hi,
Because I want get Lua working (for letsencypt) I wanted to move from
1.5 to 1.6 (built 1.6.3 from git)
In 1.5 I had a very simple stats config
listen stats :7000
stats enable
stats uri /
stats auth user:pass
stats admin if TRUE
This failed under 1.6
The only thing you had to do is to move the implicit "bind" on the
"listen" line in a dedicated line (this syntax is now forbidden to
prevent issues, when copy/pasting some examples and working with ssl for
example) :
listen stats
bind :7000
stats enable
stats uri /
stats auth user:pass
stats admin if TRUE
Reading the docs at http://cbonte.github.io/haproxy-dconv/configuration-1.6.html
First I created a new listener
listen stats
bind *:7000
stats uri /
Then I moved "stats enable" and "stats auth" lines to defaults, and
added "stats admin if TRUE" to each frontend and backend that I want
to be managed.
That's not how "stats admin" works : it has to be on the statistics section.
When I browse to :7000 (only open internally) I do not get an
authentication prompt, I can see the stats, but the manage options
have gone, presumably because of the lack of authentication
I presume I'm missing something obvious, but after several hours of
re-reading, my progression has stopped :-(
Could somebody point me in the right direction.
-------------------------------------------------------------
local@haproxy-2:~$ haproxy -vv
HA-Proxy version 1.6.3 2015/12/27
Copyright 2000-2015 Willy Tarreau <[email protected]>
Build options :
TARGET = linux2628
CPU = native
CC = gcc
CFLAGS = -O2 -march=native -g -fno-strict-aliasing
-Wdeclaration-after-statement
OPTIONS = USE_LINUX_SPLICE=1 USE_LINUX_TPROXY=1 USE_LIBCRYPT=1
USE_ZLIB=1 USE_OPENSSL=1 USE_LUA=yes USE_PCRE=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.8
Compression algorithms supported : identity("identity"),
deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
Built with OpenSSL version : OpenSSL 1.0.1f 6 Jan 2014
Running on OpenSSL version : OpenSSL 1.0.1f 6 Jan 2014
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.31 2012-07-06
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built with Lua version : Lua 5.3.2
Built with transparent proxy support using: IP_TRANSPARENT
IPV6_TRANSPARENT IP_FREEBIND
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
-------------------------------------------------------------
I also noticed very small "bug", under External resources on the top
left of the stats page, it lists "Updates (v1.5), should this be
changed to 1.6 ?
Cheers
--
Cyril Bonté
