Re: HAProxy keeps using outdated IPs when backend (ELB) address changes

2018-08-27 Thread Igor Cicimov
Hi Daniel, On Tue, Aug 28, 2018 at 1:46 AM Daniel Schneller < daniel.schnel...@centerdevice.com> wrote: > Hi! > > There seems to be some kind of problem when backend servers (in this case > ELBs) change their IP > addresses. > > At some point, apparently, the ELB behind the DNS name in my config

RE: URL rewrite

2018-08-27 Thread Norman Branitsky
Your examples are all correct. -Original Message- From: Tim Düsterhus Sent: Monday, August 27, 2018 6:22 PM To: Norman Branitsky ; haproxy Subject: Re: URL rewrite Norman, Am 27.08.2018 um 23:45 schrieb Norman Branitsky: > I need to rewrite my URLs according to the following

Re: URL rewrite

2018-08-27 Thread Tim Düsterhus
Norman, Am 27.08.2018 um 23:45 schrieb Norman Branitsky: > I need to rewrite my URLs according to the following pattern: > cloud.example.com/?query > becomes: > .cloud.example.com/main?query > > HAProxy will terminate SSL - I have a wildcard certificate for > *.cloud.example.com. > As the

URL rewrite

2018-08-27 Thread Norman Branitsky
I need to rewrite my URLs according to the following pattern: cloud.example.com/?query becomes: .cloud.example.com/main?query HAProxy will terminate SSL - I have a wildcard certificate for *.cloud.example.com. As the target servers are running Docker Enterprise, I do not need DNS entries for

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread PiBa-NL
Hi Frederic, Oliver, Thanks for your investigations :). I've made a little reg-test (files attached). Its probably not 'correct' to commit as-is, but should be enough to get a reproduction.. I hope.. changing it to nbthread 1 makes it work every time..(that i tried) The test actually seems

Re: HTTP response sent in TCP FIN packet - Haproxy 1.8.13 on Ubuntu 16.04

2018-08-27 Thread Pieter Thysebaert
Thanks both, that explains it! I was confused because we have a production HAproxy system that also has "mode http" in the defaults but sends an empty FIN ACK in this case. That is because that HAProxy is SSL-enabled, however, so it makes sense now! Kind regards, Pieter On Mon, Aug 27, 2018 at

HAProxy keeps using outdated IPs when backend (ELB) address changes

2018-08-27 Thread Daniel Schneller
Hi! There seems to be some kind of problem when backend servers (in this case ELBs) change their IP addresses. At some point, apparently, the ELB behind the DNS name in my config changed it address(es). Lots of haproxys we use as sidecars on our application servers failed their health checks

Re: HTTP response sent in TCP FIN packet - Haproxy 1.8.13 on Ubuntu 16.04

2018-08-27 Thread Willy Tarreau
Hi Aleks, Pieter, On Mon, Aug 27, 2018 at 04:26:29PM +0200, Aleksandar Lazic wrote: > Hi. > > Am 27.08.2018 um 15:03 schrieb Pieter Thysebaert: (...) > > defaults > >     log global > >     mode    http > > The default mode is http. > When you change to tcp no http error message

Re: [PATCH 2/2] MINOR: Add srv_conn_free sample fetch

2018-08-27 Thread Patrick Hemmer
On 2018/8/22 04:05, Willy Tarreau wrote: > On Thu, Aug 09, 2018 at 06:46:29PM -0400, Patrick Hemmer wrote: >> This adds the 'srv_conn_free([/])' sample fetch. This fetch >> provides the number of available connections on the designated server. > Fine with this as well, though just like with the

Re: [PATCH 2/2] MINOR: Add srv_conn_free sample fetch

2018-08-27 Thread Willy Tarreau
On Mon, Aug 27, 2018 at 10:27:57AM -0400, Patrick Hemmer wrote: > Adjusted from previous submission to handle dynamic maxconn, maxconn < > currconn, and cleanup documentation note. Applied, thanks Patrick. Willy

Re: HTTP response sent in TCP FIN packet - Haproxy 1.8.13 on Ubuntu 16.04

2018-08-27 Thread Aleksandar Lazic
Hi. Am 27.08.2018 um 15:03 schrieb Pieter Thysebaert: > Hi, > > I am running HA-Proxy version 1.8.13-1ppa1~xenial 2018/08/01 on > Linux backendsc01 4.15.0-1021-azure #21~16.04.1-Ubuntu SMP (in Azure). > > This is a simple test setup; HAproxy is listening on port 444 (no SSL), the > backlend

ca-file with verify required and multiple root ca's

2018-08-27 Thread Coen Rosdorff
Hi all, We have a customer who wants to protect a site with client certificates. However the client certificates are created with two different root ca's. If we configure one CA cert in the ca-file everything works great. When I add the second CA, access for clients with a cert from the first ca

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread Frederic Lecaille
On 08/27/2018 03:09 PM, Olivier Houchard wrote: On Mon, Aug 27, 2018 at 02:29:42PM +0200, Frederic Lecaille wrote: On 08/27/2018 01:33 PM, Olivier Houchard wrote: Hi Pieter, On Sat, Aug 25, 2018 at 10:00:04PM +0200, PiBa-NL wrote: Hi List, Thierry, Olivier, Using a lua-socket with

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread Olivier Houchard
On Mon, Aug 27, 2018 at 02:29:42PM +0200, Frederic Lecaille wrote: > On 08/27/2018 01:33 PM, Olivier Houchard wrote: > > Hi Pieter, > > > > On Sat, Aug 25, 2018 at 10:00:04PM +0200, PiBa-NL wrote: > > > Hi List, Thierry, Olivier, > > > > > > Using a lua-socket with connect_ssl and haproxy

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread Frederic Lecaille
On 08/27/2018 01:33 PM, Olivier Houchard wrote: Hi Pieter, On Sat, Aug 25, 2018 at 10:00:04PM +0200, PiBa-NL wrote: Hi List, Thierry, Olivier, Using a lua-socket with connect_ssl and haproxy running with nbthread 3.. results in haproxy hanging with 3 threads for me. This while using both

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread Olivier Houchard
Hi Pieter, On Sat, Aug 25, 2018 at 10:00:04PM +0200, PiBa-NL wrote: > Hi List, Thierry, Olivier, > > Using a lua-socket with connect_ssl and haproxy running with nbthread 3.. > results in haproxy hanging with 3 threads for me. > > This while using both 1.9-7/30 version (with the 2 extra patches

Re: lua script, 200% cpu usage with nbthread 3 - haproxy hangs - __spin_lock - HA-Proxy version 1.9-dev1-e3faf02 2018/08/25

2018-08-27 Thread Frederic Lecaille
On 08/25/2018 10:00 PM, PiBa-NL wrote: Hi List, Thierry, Olivier, Hi, Using a lua-socket with connect_ssl and haproxy running with nbthread 3.. results in haproxy hanging with 3 threads for me. If your configuration is simple do not hesitate to provide it. Perhaps we will be able to write