Re: Sporadic problems with backend selection with H2.

2018-12-11 Thread Willy Tarreau
Hi Sean, On Tue, Dec 11, 2018 at 04:22:53PM -0700, Sean Reifschneider wrote: > I've been trying to convert my haproxy setup (1.8.14) to by adding "alpn > h2,http/1.1" to my "bind" line in the frontend. My haproxy config is north > of 300 lines, so I'll hold off on attaching it. > > My frontend

Re: HTTP/2 initial connection window is too small

2018-12-11 Thread Willy Tarreau
Hi, On Mon, Dec 10, 2018 at 09:07:05PM -0500, klzgrad wrote: > Hi, > > HTTP/2 does flow control at connection level (and stream level). > HAProxy's server receive window at connection level is only 65535, > severely limiting upload ability. Per bandwidth-delay product, 65535 > means at 100ms

corruption of data with compression in 1.9-dev10

2018-12-11 Thread PiBa-NL
Hi List, Didn't have time yet to bisect when it went wrong. But attached testfile produces the following output after 3 curl requests at different speeds, this seems to trigger a problem as the hash of the downloaded content is nolonger the same as it should be, (in my actual environment its

Re: How to remove accept-encoding header to backend while still keeping gzip?

2018-12-11 Thread flamesea12
Hi Thank you so much, exactly what I want:) - Original Message - From: Lukas Tribus To: flamese...@yahoo.co.jp Cc: haproxy Date: 2018/12/12, Wed 00:35 Subject: Re: How to remove accept-encoding header to backend while still keeping gzip? On Tue, 11 Dec 2018 at 15:13,

Sporadic problems with backend selection with H2.

2018-12-11 Thread Sean Reifschneider
I've been trying to convert my haproxy setup (1.8.14) to by adding "alpn h2,http/1.1" to my "bind" line in the frontend. My haproxy config is north of 300 lines, so I'll hold off on attaching it. My frontend selects backends using something like: acl aerial_acl hdr(host) -m reg -i

rsync deny & healthcheck

2018-12-11 Thread Robin H. Johnson
Seeing the MQTT CONNECT parsing recently, I thought to share my draft work in rsync balancing: - Lua to generate deny messages for rate-limited clients - tcp-check to check rsync health https://gist.github.com/robbat2/2c8414bd617c013be12cb9b41830e010 I want to try and finish my lua-check code,

RE: Redirect Syntax

2018-12-11 Thread Norman Branitsky
This is what I do. Either use a combined "listen" or a separate "frontend" and "backend". frontend main bind 0.0.0.0:80 option forwardfor except 127.0.0.0/8 option httplog http-request redirect scheme https code 301 if !{ ssl_fc } frontend main_ssl # Bind SSL port

Re: [PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
On 12/11/18 7:18 PM, Frederic Lecaille wrote: On 12/11/18 7:11 PM, Frederic Lecaille wrote: On 12/11/18 11:46 AM, Frederic Lecaille wrote: On 12/11/18 11:29 AM, Frederic Lecaille wrote: On 12/11/18 11:13 AM, Frederic Lecaille wrote: Hi ML, Here is a first reg test for the health-checks. I

Re: [PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
On 12/11/18 7:11 PM, Frederic Lecaille wrote: On 12/11/18 11:46 AM, Frederic Lecaille wrote: On 12/11/18 11:29 AM, Frederic Lecaille wrote: On 12/11/18 11:13 AM, Frederic Lecaille wrote: Hi ML, Here is a first reg test for the health-checks. I hope it is as most deterministic as possible.

Re: [PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
On 12/11/18 11:46 AM, Frederic Lecaille wrote: On 12/11/18 11:29 AM, Frederic Lecaille wrote: On 12/11/18 11:13 AM, Frederic Lecaille wrote: Hi ML, Here is a first reg test for the health-checks. I hope it is as most deterministic as possible. At this time, I did not manage to make it fail

[PATCH] REGTEST: Reg test for "check" health-check option

2018-12-11 Thread Frederic Lecaille
Here is a new patch for a new reg test (health-check). Fred. From 6d1d882d19c25482d4c2ece7a9baad9452d19c3d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 11 Dec 2018 16:19:34 +0100 Subject: [PATCH] REGTEST: Reg test for "check" health-check option. ---

Redirect Syntax

2018-12-11 Thread VAUDOUX Arnaud
Hi, I would like to set up Haproxy in front of lot of app servers. My application URLs don't really have standards (thanks to the multiplication of devs). I can have some : * http://:// * http://:/ * http: And I would like to have something like * https://. Can you help

Re: How to remove accept-encoding header to backend while still keeping gzip?

2018-12-11 Thread Lukas Tribus
On Tue, 11 Dec 2018 at 15:13, wrote: > > Hi, > > I have haproxy in front of my app servers, these app servers do not handle > accept-encoding properly. Don't do anything manually and use the "compression offload" feature, which has been introduced for this *exact* use case:

How to remove accept-encoding header to backend while still keeping gzip?

2018-12-11 Thread flamesea12
Hi, I have haproxy in front of my app servers, these app servers do not handle  accept-encoding properly. So I need to remove accept-encoding header from the requests sent to backend while keep haproxy gzip the response. How can I do that? My config looks this: frontend web    compression algo

Re: MQTT CONNECT parsing in Lua

2018-12-11 Thread Baptiste
> > > At last AWS conference, I met with a engineer who was using HAProxy to > > load-balance IoT devices through HAProxy using MQTT protocol and he was > > complaining about the poor performance of the server with 10k of devices > just > > get reconnecting. > > Have you any chance to aks the

Re: MQTT CONNECT parsing in Lua

2018-12-11 Thread Aleksandar Lazic
Hi Baptiste. Am 11.12.2018 um 03:29 schrieb Baptiste: > Hi guys, > > At last AWS conference, I met with a engineer who was using HAProxy to > load-balance IoT devices through HAProxy using MQTT protocol and he was > complaining about the poor performance of the server with 10k of devices just >

Re: [PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
On 12/11/18 11:29 AM, Frederic Lecaille wrote: On 12/11/18 11:13 AM, Frederic Lecaille wrote: Hi ML, Here is a first reg test for the health-checks. I hope it is as most deterministic as possible. At this time, I did not manage to make it fail (takes ~130ms on my PC). Fred. Well, I have

Re: [PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
On 12/11/18 11:13 AM, Frederic Lecaille wrote: Hi ML, Here is a first reg test for the health-checks. I hope it is as most deterministic as possible. At this time, I did not manage to make it fail (takes ~130ms on my PC). Fred. Well, I have not checked the haproxy version required for this

[PATCH] REGTEST: Add a first test for health-checks.

2018-12-11 Thread Frederic Lecaille
Hi ML, Here is a first reg test for the health-checks. I hope it is as most deterministic as possible. At this time, I did not manage to make it fail (takes ~130ms on my PC). Fred. varnishtest "Health-check test" feature ignore_unknown_macro # This script test health-checks for four backends