Re: [PATCH] CI: switch to LibreSSL-3.6.1, enable QUIC

[Илья Шипицин]

gentle ping

ср, 2 нояб. 2022 г. в 12:12, Илья Шипицин :

> Hello,
>
> after LibreSSL-3.6.1 we can switch back the latest and enable QUIC.
>
> Ilya
>

Unsubscribe

[Sandro Soares]

[PATCH]: BUILD: insecure-setuid-wanted support on FreeBSD

[David CARLIER]

Hi,

here a little patch to port the insecure-setuid-wanted directive on FreeBSD.

Cheers.


0001-BUILD-insecure-setuid-wanted-support-on-FreeBSD.patch
Description: Binary data

Re: dsr and haproxy

[Brendan Kearney]

i've always thought of IPVS and DSR as a poor man's anycast.  for 
stateless protocols (DNS, NTP, RADIUS, Kerberos, Syslog) i have anycast 
setup.  for MariaDB, OpenLDAP and other stateful protocols, i use 
HAProxy.  for HTTP, which is stateless but is being driven towards 
stateful-ness with TLS, session maintenance, etc, i do use HAProxy as 
the intelligence and connection reuse capabilities make for a lot of 
performance and scalability gains.


best,

brendan

On 11/4/22 12:33 PM, Lukas Tribus wrote:

On Fri, 4 Nov 2022 at 16:50, Szabo, Istvan (Agoda)
 wrote:

Yeah, that’s why I’m curious anybody ever made it work somehow?

Perhaps I should have been clearer.

It's not supported because it's not possible.

Haproxy the OSS uses the socket API, haproxy cannot forward IP packets
arbitrarily, which is required for DRS.

This is a hard no, not a "we do not support this configuration because
nobody ever tried it and we can't guarantee it will work".


Lukas

Re: dsr and haproxy

[Lukas Tribus]

On Fri, 4 Nov 2022 at 16:50, Szabo, Istvan (Agoda)
 wrote:
>
> Yeah, that’s why I’m curious anybody ever made it work somehow?

Perhaps I should have been clearer.

It's not supported because it's not possible.

Haproxy the OSS uses the socket API, haproxy cannot forward IP packets
arbitrarily, which is required for DRS.

This is a hard no, not a "we do not support this configuration because
nobody ever tried it and we can't guarantee it will work".


Lukas

Re: dsr and haproxy

[Szabo, Istvan (Agoda)]

Yeah, that’s why I’m curious anybody ever made it work somehow?

Istvan Szabo
Senior Infrastructure Engineer
---
Agoda Services Co., Ltd.
e: istvan.sz...@agoda.com
---

On 2022. Nov 4., at 22:47, Lukas Tribus  wrote:

Email received from the internet. If in doubt, don't click any link nor open 
any attachment !


On Fri, 4 Nov 2022 at 16:32, Aleksandar Lazic  wrote:

Hi.

On 04.11.22 12:24, Szabo, Istvan (Agoda) wrote:
Hi,

Is there anybody successfully configured haproxy and dsr?

Well maybe this Blog Post is a good start point.

https://www.haproxy.com/blog/layer-4-load-balancing-direct-server-return-mode/

The TLDR is:

Haproxy (the OSS project) does not support DSR and never will, it's an
application working with sockets. You need IPVS or similar
technologies for DSR.


Lukas


This message is confidential and is for the sole use of the intended 
recipient(s). It may also be privileged or otherwise protected by copyright or 
other legal rules. If you have received it by mistake please let us know by 
reply email and delete it from your system. It is prohibited to copy this 
message or disclose its content to anyone. Any confidentiality or privilege is 
not waived or lost by any mistaken delivery or unauthorized disclosure of the 
message. All messages sent to and from Agoda may be monitored to ensure 
compliance with company policies, to protect the company's interests and to 
remove potential malware. Electronic messages may be intercepted, amended, lost 
or deleted, or contain viruses.

Re: dsr and haproxy

[Szabo, Istvan (Agoda)]

Yeah I read this already, haven’t gone too far with it :/

Istvan Szabo
Senior Infrastructure Engineer
---
Agoda Services Co., Ltd.
e: istvan.sz...@agoda.com
---

On 2022. Nov 4., at 22:33, Aleksandar Lazic  wrote:

Email received from the internet. If in doubt, don't click any link nor open 
any attachment !


Hi.

On 04.11.22 12:24, Szabo, Istvan (Agoda) wrote:
Hi,

Is there anybody successfully configured haproxy and dsr?

Well maybe this Blog Post is a good start point.

https://www.haproxy.com/blog/layer-4-load-balancing-direct-server-return-mode/

Regards
Alex

Istvan Szabo
Senior Infrastructure Engineer
---
Agoda Services Co., Ltd.
e: istvan.sz...@agoda.com
---


This message is confidential and is for the sole use of the intended 
recipient(s).
It may also be privileged or otherwise protected by copyright or other legal 
rules.
If you have received it by mistake please let us know by reply email and delete 
it
from your system. It is prohibited to copy this message or disclose its content 
to
anyone. Any confidentiality or privilege is not waived or lost by any mistaken
delivery or unauthorized disclosure of the message. All messages sent to and 
from
Agoda may be monitored to ensure compliance with company policies, to protect 
the
company's interests and to remove potential malware. Electronic messages may be
intercepted, amended, lost or deleted, or contain viruses.


This message is confidential and is for the sole use of the intended 
recipient(s). It may also be privileged or otherwise protected by copyright or 
other legal rules. If you have received it by mistake please let us know by 
reply email and delete it from your system. It is prohibited to copy this 
message or disclose its content to anyone. Any confidentiality or privilege is 
not waived or lost by any mistaken delivery or unauthorized disclosure of the 
message. All messages sent to and from Agoda may be monitored to ensure 
compliance with company policies, to protect the company's interests and to 
remove potential malware. Electronic messages may be intercepted, amended, lost 
or deleted, or contain viruses.

Re: dsr and haproxy

[Lukas Tribus]

On Fri, 4 Nov 2022 at 16:32, Aleksandar Lazic  wrote:
>
> Hi.
>
> On 04.11.22 12:24, Szabo, Istvan (Agoda) wrote:
> > Hi,
> >
> > Is there anybody successfully configured haproxy and dsr?
>
> Well maybe this Blog Post is a good start point.
>
> https://www.haproxy.com/blog/layer-4-load-balancing-direct-server-return-mode/

The TLDR is:

Haproxy (the OSS project) does not support DSR and never will, it's an
application working with sockets. You need IPVS or similar
technologies for DSR.


Lukas

Re: dsr and haproxy

[Aleksandar Lazic]

Hi.

On 04.11.22 12:24, Szabo, Istvan (Agoda) wrote:

Hi,

Is there anybody successfully configured haproxy and dsr?


Well maybe this Blog Post is a good start point.

https://www.haproxy.com/blog/layer-4-load-balancing-direct-server-return-mode/

Regards
Alex


Istvan Szabo
Senior Infrastructure Engineer
---
Agoda Services Co., Ltd.
e: istvan.sz...@agoda.com
---


This message is confidential and is for the sole use of the intended 
recipient(s).
It may also be privileged or otherwise protected by copyright or other legal 
rules.
If you have received it by mistake please let us know by reply email and delete 
it
from your system. It is prohibited to copy this message or disclose its content 
to
anyone. Any confidentiality or privilege is not waived or lost by any mistaken
delivery or unauthorized disclosure of the message. All messages sent to and 
from
Agoda may be monitored to ensure compliance with company policies, to protect 
the
company's interests and to remove potential malware. Electronic messages may be
intercepted, amended, lost or deleted, or contain viruses.

dsr and haproxy

[Szabo, Istvan (Agoda)]

Hi,

Is there anybody successfully configured haproxy and dsr?

Istvan Szabo
Senior Infrastructure Engineer
---
Agoda Services Co., Ltd.
e: istvan.sz...@agoda.com
---


This message is confidential and is for the sole use of the intended 
recipient(s). It may also be privileged or otherwise protected by copyright or 
other legal rules. If you have received it by mistake please let us know by 
reply email and delete it from your system. It is prohibited to copy this 
message or disclose its content to anyone. Any confidentiality or privilege is 
not waived or lost by any mistaken delivery or unauthorized disclosure of the 
message. All messages sent to and from Agoda may be monitored to ensure 
compliance with company policies, to protect the company's interests and to 
remove potential malware. Electronic messages may be intercepted, amended, lost 
or deleted, or contain viruses.