On Sat, Oct 22, 2016 at 02:50:20PM +0200, Dennis Jacobfeuerborn wrote: > thank you, I tried the inspect-delay again and this alone seems to fix > things at least for the curl tests so Chad was indeed right but I might > have forgotten to restart HAProxy when I tested this the first time.
This happens :-) > I'm still going to include the "reject unless HTTP" bit though but I'm > wondering if this might have any negative side effects for regular > traffic? No, not at all. > Do browsers handle this rejection of their connections > appropriately? Absolutely, it's exactly what happens when you hit a request timeout. In fact we used to send a 408 in the past and some browsers would display it instead of being silent. All of them confirmed that they expect the connection to be silently closed, which is exactly what happens with this reject. For them, their idle connection simply expires and this is what we want to achieve. Cheers, Willy
