Message could not be delivered
Your mail 115.127.8.195:11801-88.191.124.161:25 contains contaminated file _From_plant_tc_tc.umn.edu__Date_4_Jan_2012_15:09:08__Subj_Message_could_not_be_delivered_/message.scr with virus Email-Worm.Win32.Mydoom.m,so it is dropped.
Re: Pass Source Port
Hi, On Tue, Jan 03, 2012 at 11:26:18AM +, Türker Sezer (YHB Sistem Yönetimi) wrote: I read PROXY protocol document in haproxy website but i couldn't understand how i can implement it on my lb - backend structure. And i couldn't find any other document about it. Can someone share his/her experiences with me? You need to implement it in your server ; it is not too much complicated, look at how it's implemented in haproxy, you basically need to read one line and fill your server's structs with the info you find there. On haproxy, you just need to add the send-proxy parameter on each server line so that haproxy emits this information behind it. Regards, Willy
Need Help
Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option httpclose rspirep ^Location:\ https://www.example.com/(.*) Location:\ https://example.com/\1 server apigee1 192.168.2.50:80 minconn 32000 maxconn 3200 check port 81 inter 3 server apigee2 192.168.2.51:80 minconn 32000 maxconn 3200 check port 81 inter 3 Below is what I wanted: Anything for example https://www.example.com/testing should be redirected or rewritten to https://example.com/testing Please can someone help on this. With Warm Regards Ravi Ranjan
Re: Need Help
+Support. With Warm Regards Ravi Ranjan On Wed, Jan 4, 2012 at 3:58 PM, Ravi Ranjan rran...@apigee.com wrote: Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option httpclose rspirep ^Location:\ https://www.example.com/(.*) Location:\ https://example.com/\1 server apigee1 192.168.2.50:80 minconn 32000 maxconn 3200 check port 81 inter 3 server apigee2 192.168.2.51:80 minconn 32000 maxconn 3200 check port 81 inter 3 Below is what I wanted: Anything for example https://www.example.com/testing should be redirected or rewritten to https://example.com/testing Please can someone help on this. With Warm Regards Ravi Ranjan
Re: Need Help
__ Please type your reply at the top of the email... -- Jonas Ramsin | JAN 04, 2012 11:57AM CET Hi, Not sure if this was meant for our Support team. Mvh / Best regards Jonas Ramsin Head of IT Operations email: jonas.ram...@apicasystem.com mobile: +46 73 995 29 58 office: +46 8 400 27 312 Apica AB | Garvargatan 9 | 112 21 Stockholm | Sweden www.apicasystem.com -- Ravi | JAN 04, 2012 11:33AM CET | Original message +Support. With Warm Regards Ravi Ranjan On Wed, Jan 4, 2012 at 3:58 PM, Ravi Ranjan rran...@apigee.com wrote: Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option httpclose rspirep ^Location:\ https://www.example.com/(.*) Location:\ https://example.com/\1 server apigee1 192.168.2.50:80 minconn 32000 maxconn 3200 check port 81 inter 3 server apigee2 192.168.2.51:80 minconn 32000 maxconn 3200 check port 81 inter 3 Below is what I wanted: Anything for example https://www.example.com/testing should be redirected or rewritten to https://example.com/testing Please can someone help on this. With Warm Regards Ravi Ranjan -- For your reference this is Case #: 214 -- Support powered by Assistly [[79c225eaff9e1fd1c35b4bf77649ec60c99f2f89-24229705]]
Re: Need Help
Hi, As far as I can read, your configuration can't work. From my understanding your traffic seems to be encripted, so HAProxy can't manipulate it. You must use stunnel or stud or pound in front of HAProxy in order to decrypt traffic. Then, your rewrite rule might work. cheers On Wed, Jan 4, 2012 at 11:28 AM, Ravi Ranjan rran...@apigee.com wrote: Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option httpclose rspirep ^Location:\ https://www.example.com/(.*) Location:\ https://example.com/\1 server apigee1 192.168.2.50:80 minconn 32000 maxconn 3200 check port 81 inter 3 server apigee2 192.168.2.51:80 minconn 32000 maxconn 3200 check port 81 inter 3 Below is what I wanted: Anything for example https://www.example.com/testing should be redirected or rewritten to https://example.com/testing Please can someone help on this. With Warm Regards Ravi Ranjan
Re: Need Help
Hi, Thanks for your guidance. I am using stunnel too, but still its failing. With Warm Regards Ravi Ranjan On Wed, Jan 4, 2012 at 7:37 PM, Baptiste bed...@gmail.com wrote: Hi, As far as I can read, your configuration can't work. From my understanding your traffic seems to be encripted, so HAProxy can't manipulate it. You must use stunnel or stud or pound in front of HAProxy in order to decrypt traffic. Then, your rewrite rule might work. cheers On Wed, Jan 4, 2012 at 11:28 AM, Ravi Ranjan rran...@apigee.com wrote: Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option httpclose rspirep ^Location:\ https://www.example.com/(.*) Location:\ https://example.com/\1 server apigee1 192.168.2.50:80 minconn 32000 maxconn 3200 check port 81 inter 3 server apigee2 192.168.2.51:80 minconn 32000 maxconn 3200 check port 81 inter 3 Below is what I wanted: Anything for example https://www.example.com/testing should be redirected or rewritten to https://example.com/testing Please can someone help on this. With Warm Regards Ravi Ranjan
RE: Slowness in establishing connections from ruby to Haproxy after upgrading from 1.4.8 to 1.4.18
Is there an ETA for this fix making its way to a 1.4 release? Also, is it known what version introduced undesirable behavior with ruby clients? 1.4.9 to 1.4.18 is a fairly loose bound... Thanks, Bryan -Original Message- From: Willy Tarreau [mailto:w...@1wt.eu] Sent: Saturday, December 17, 2011 10:02 AM To: Timothy Garnett Cc: haproxy@formilux.org Subject: Re: Slowness in establishing connections from ruby to Haproxy after upgrading from 1.4.8 to 1.4.18 Hi again Tim, I could finally successfully reproduce the issue. Eventhough the client's behaviour is sub-optimal, haproxy's behaviour in this case is inappropriate, so I fixed it with the attached patch. The principle is that we re-enable TCP quick-ack if we know that we're waiting for more data from the client (headers or body). It fixes all the test cases for me without removing the optimization for the common case. So I'm merging it into 1.5 and 1.4. Regards, Willy
Re: Slowness in establishing connections from ruby to Haproxy after upgrading from 1.4.8 to 1.4.18
Hi Bryan, On Wed, Jan 04, 2012 at 05:23:06PM +, Cassidy, Bryan wrote: Is there an ETA for this fix making its way to a 1.4 release? Also, is it known what version introduced undesirable behavior with ruby clients? 1.4.9 to 1.4.18 is a fairly loose bound... It was introduced with patch 9ea05a790f705620f442ba92889269582ffe8dbd in the very early development of the 1.4 branch (v1.4-dev0-6). I have another minor patch pending before releasing 1.4.19. Ideally it should be a matter of days. Regards, Willy
Re: redirect to backend server during initial tcp handshake
In my situation clients will be sending 1K of data, and I believe I can do this with a http get request safely since the limit is I think 4k. Ok so the benefit of this approach is you get to spread the load when the solutions requires it, but at the cost of latency. i.e. if it take 30ms for my clients to make a http request, it will now take 60ms. Great! BTW, will this increase latency at all? i.e. extra round trip? Yes, one GET from the client to haproxy, and another from the client to the server, then the client usually stays on the server. So if it is a POST, then all traffic will still have to go through the HAProxy server correct? Correct. How could I round robin (or other smarter load balancing) between 5 servers using redir? You simply have to use the roundrobin balance algorithm : balance roundrobin server s1 1.1.1.1:80 redir http://image1.mydomain check server s2 1.1.1.2:80 redir http://image2.mydomain check server s3 1.1.1.3:80 redir http://image3.mydomain check Don't use leastconn as haproxy will not see the active connections on the servers. But roundrobin, source, url, hdr, ... are fine. Regards, Willy
how do people have multiple haproxy servers?
How is it possible for a single domain like www.example.com which maps to a public i.p of xx.xx.xx.xx work when there are multiple haproxy servers? The only way I can think of is if somehow your domain name maps to 2 different ipaddresses (if you can 2 haproxy servers). I'm not talking about a single front-end haproxy which then further proxies to another set of haproxy servers. Is it possible to have multiple haproxy servers that are round robined? If so, how?
Re: how do people have multiple haproxy servers?
There are simple ways and big fancy ways. I'd recommend a simple way to start out. DNS can serve more than 1 ip address for a single name via 2 or more A records. On Wed, Jan 4, 2012 at 6:48 PM, S Ahmed sahmed1...@gmail.com wrote: How is it possible for a single domain like www.example.com which maps to a public i.p of xx.xx.xx.xx work when there are multiple haproxy servers? The only way I can think of is if somehow your domain name maps to 2 different ipaddresses (if you can 2 haproxy servers). I'm not talking about a single front-end haproxy which then further proxies to another set of haproxy servers. Is it possible to have multiple haproxy servers that are round robined? If so, how?
Re: how do people have multiple haproxy servers?
I see, thanks! what's the more fancy way? :) On Wed, Jan 4, 2012 at 10:12 PM, David Birdsong david.birds...@gmail.comwrote: There are simple ways and big fancy ways. I'd recommend a simple way to start out. DNS can serve more than 1 ip address for a single name via 2 or more A records. On Wed, Jan 4, 2012 at 6:48 PM, S Ahmed sahmed1...@gmail.com wrote: How is it possible for a single domain like www.example.com which maps to a public i.p of xx.xx.xx.xx work when there are multiple haproxy servers? The only way I can think of is if somehow your domain name maps to 2 different ipaddresses (if you can 2 haproxy servers). I'm not talking about a single front-end haproxy which then further proxies to another set of haproxy servers. Is it possible to have multiple haproxy servers that are round robined? If so, how?
