Re: HAProxy 1.8 built with rpath'd openssl links ok; but `haproxy -vv` reports "Built with" and "Running on" conflict

2018-06-21 Thread Willy Tarreau
Hello, On Thu, Jun 21, 2018 at 06:26:18PM -0700, PGNet Dev wrote: > I'm building haproxy 1.8.0 from tarball source. Well, first please ensure you're building latest fixes and not and old version otherwise you'll expose yourself to all these known and now fixed bugs :

Re: Haproxy 1.7.10 and 1.8.6 periodically sigfault

2018-06-21 Thread Willy Tarreau
Hi Aleksey, On Fri, Jun 22, 2018 at 07:08:22AM +0300, Aleksey Gordeev wrote: > Once a week it restarts with sigfault > > Jun 21 17:04:29 v54 kernel: haproxy[303]: segfault at 2670ff8 ip > 7f0c375824e1 sp 7ffd2f8d7528 error 4 in libc-2.17.so > [7f0c37427000+1c3000] > Jun 21 17:04:29 v541

Haproxy 1.7.10 and 1.8.6 periodically sigfault

2018-06-21 Thread Aleksey Gordeev
Once a week it restarts with sigfault Jun 21 17:04:29 v54 kernel: haproxy[303]: segfault at 2670ff8 ip 7f0c375824e1 sp 7ffd2f8d7528 error 4 in libc-2.17.so [7f0c37427000+1c3000] Jun 21 17:04:29 v541 haproxy: [ALERT] 169/070052 (302) : Current worker 303 exited with code 139 Jun 21

Re: [PATCH] REGTEST: stick-tables: Test expiration when used with table_*

2018-06-21 Thread Willy Tarreau
On Thu, Jun 21, 2018 at 09:41:43PM +0100, Jonathan Matthews wrote: > On Thu, 21 Jun 2018 at 19:45, Willy Tarreau wrote: > > > Oh indeed I didn't even notice! The correct solution is to use the > > example.com domain for this, as explained in RFC2606/6761. No other > > domain possibly pointing to

HAProxy 1.8 built with rpath'd openssl links ok; but `haproxy -vv` reports "Built with" and "Running on" conflict

2018-06-21 Thread PGNet Dev
I'm building haproxy 1.8.0 from tarball source. I'm linking against a specific, local build of openssl v1.1.0 Explicitly specifying SSL_INC & SSL_LIB with rpath, make \ TARGET=linux2628 \ USE_SYSTEMD=1 \ USE_PCRE2=1 USE_PCRE2_JIT=1 \ USE_OPENSSL=1 \

Re: [PATCH] REGTEST: stick-tables: Test expiration when used with table_*

2018-06-21 Thread Jonathan Matthews
On Thu, 21 Jun 2018 at 19:45, Willy Tarreau wrote: > Oh indeed I didn't even notice! The correct solution is to use the > example.com domain for this, as explained in RFC2606/6761. No other > domain possibly pointing to a valid location now or in the future > should appear in test nor example

Re: [PATCH] [MINOR] Some spelling cleanup in the comments.

2018-06-21 Thread Willy Tarreau
Applied, thanks David. Willy

Re: [PATCH] REGTEST: stick-tables: Test expiration when used with table_*

2018-06-21 Thread Willy Tarreau
On Thu, Jun 21, 2018 at 09:37:54AM +0200, Frederic Lecaille wrote: > On 06/20/2018 04:28 PM, Daniel Corbett wrote: > > Hello, > > > > Thanks for adding this integration Fred.  Great job! > > > > Attached is a new regression test to check for stick-tables expiration when > > they are used with

Re: Issue with parsing DNS from AWS

2018-06-21 Thread Jim Deville
Thanks for the reply, we were able to extract a minimal repro to demonstrate the problem: https://github.com/jgworks/haproxy-servicediscovery The docker folder contains a version of the config we're using and a startup script to determine the local private DNS zone (AWS puts it at the

[PATCH] [MINOR] Some spelling cleanup in the comments.

2018-06-21 Thread Dave Chiluk
Signed-off-by: Dave Chiluk --- include/common/cfgparse.h | 2 +- src/session.c | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/include/common/cfgparse.h b/include/common/cfgparse.h index c003bd3b0..6e35bc948 100644 --- a/include/common/cfgparse.h +++

Re: [PATCH] [MINOR] Some spelling cleanup in comments.

2018-06-21 Thread Dave Chiluk
I'm sorry I just realized I applied this against the 1.8 stable. I'll send another patch for 1.9. On Thu, Jun 21, 2018 at 10:55 AM Dave Chiluk wrote: > Some spelling cleanup in comments. > > Signed-off-by: Dave Chiluk > --- > include/common/cfgparse.h | 2 +- > include/types/task.h | 2

[PATCH] [MINOR] Some spelling cleanup in comments.

2018-06-21 Thread Dave Chiluk
Some spelling cleanup in comments. Signed-off-by: Dave Chiluk --- include/common/cfgparse.h | 2 +- include/types/task.h | 2 +- src/session.c | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/include/common/cfgparse.h b/include/common/cfgparse.h index

Re: remaining process after (seamless) reload

2018-06-21 Thread William Lallemand
On Thu, Jun 21, 2018 at 05:10:35PM +0200, William Dauchy wrote: > On Thu, Jun 21, 2018 at 5:03 PM William Lallemand > wrote: > > Maybe one client was still connected on a frontend (including the stats > > socket). > > The process first unbind the listeners, and then wait for all clients to > >

Re: tcp-check expect with exclamation mark

2018-06-21 Thread Baptiste
On Thu, Jun 21, 2018 at 8:53 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > Hi Dmitriy, > > On Thu, Jun 21, 2018 at 12:45 PM, Dmitriy Kuzmin > wrote: > >> Greetings >> >> I’m using haproxy to load balance readonly queries between redis slaves. >> I want to use health check system to

Re: remaining process after (seamless) reload

2018-06-21 Thread William Dauchy
On Thu, Jun 21, 2018 at 5:03 PM William Lallemand wrote: > Maybe one client was still connected on a frontend (including the stats > socket). > The process first unbind the listeners, and then wait for all clients to > leave. > It's difficult to see what's going on since the stats socket is

Re: Issue with parsing DNS from AWS

2018-06-21 Thread Baptiste
and by the way, I had a quick look at the pcap file and could not find anything weird. The function you're pointing seem to say there is not enough space to store a server's dns name, but the allocated space is larger that your current records. Baptiste

Re: remaining process after (seamless) reload

2018-06-21 Thread William Lallemand
On Thu, Jun 21, 2018 at 04:47:50PM +0200, William Dauchy wrote: > Hi Christopher, > > A quick followup from this morning. > > On Thu, Jun 21, 2018 at 10:41 AM William Dauchy wrote: > > it seems better now, but not completely gone, in a way, I think we now > > have a new issue. > > this morning,

Re: Issue with parsing DNS from AWS

2018-06-21 Thread Baptiste
On Thu, Jun 21, 2018 at 12:29 AM, Jim Deville wrote: > Attaching an anonymized PCAP from yesterday. The first two packets are the > request and response for 4 servers, the second pair is the request and > response for 3. The 3-server response parses successfully, and Jonathan was > able to find

Re: remaining process after (seamless) reload

2018-06-21 Thread William Dauchy
Hi Christopher, A quick followup from this morning. On Thu, Jun 21, 2018 at 10:41 AM William Dauchy wrote: > it seems better now, but not completely gone, in a way, I think we now > have a new issue. > this morning, on one test machine I have a process which remains polling > traffic so it

Re: remaining process after (seamless) reload

2018-06-21 Thread William Dauchy
Hello Christopher, Thanks for the followup patch. On Wed, Jun 20, 2018 at 04:42:58PM +0200, Christopher Faulet wrote: > Hum, ok, forget the previous patch. Here is a second try. It solves the same > bug using another way. In this patch, all threads must enter in the sync > point to exit. I hope

Re: how to run vtc files?

2018-06-21 Thread Frederic Lecaille
On 06/21/2018 04:13 AM, Willy Tarreau wrote: On Wed, Jun 20, 2018 at 04:39:36PM -0400, Daniel Corbett wrote: Hello, On 06/20/2018 03:34 PM, ??? wrote: hi [ilia@localhost haproxy]$ HAPROXY_PROGRAM=./haproxy varnishtest reg-tests/ssl/h0.vtc top   0.0 extmacro def

Re: [PATCH] REGTEST: stick-tables: Test expiration when used with table_*

2018-06-21 Thread Frederic Lecaille
On 06/20/2018 04:28 PM, Daniel Corbett wrote: Hello, Thanks for adding this integration Fred.  Great job! Attached is a new regression test to check for stick-tables expiration when they are used with table_* converters as noted in commit id: 3e60b11100cbc812b77029ca142b83ac7a314db1 Thanks,

Re: tcp-check expect with exclamation mark

2018-06-21 Thread Igor Cicimov
Hi Dmitriy, On Thu, Jun 21, 2018 at 12:45 PM, Dmitriy Kuzmin wrote: > Greetings > > I’m using haproxy to load balance readonly queries between redis slaves. > I want to use health check system to exclude slaves from load balancing, > that are in a process of sync with master. > The idea is to