Re: sample fetch: add bc_http_major

2018-12-07 Thread Aleksandar Lazic
Hi Jerome. Am 07.12.2018 um 10:26 schrieb Jerome Magnin: > Hi, > > the attached patch adds bc_http_major. It returns the HTTP major encoding of > the > backend connection, based on the the on-wire encoding. cool Idea ;-) I suggest to use a dedicated function for that, jm2c. {

Re: Simply adding a filter causes read error

2018-12-06 Thread Aleksandar Lazic
Hi. Am 06.12.2018 um 15:20 schrieb flamese...@yahoo.co.jp: > Hi, > > I have a haproxy(v1.8.14) in front of several nginx backends, everything works > fine until I add compression in haproxy. There is a similar thread about this topic.

Re: [ANNOUNCE] haproxy-1.9-dev9 : the last mile

2018-12-03 Thread Aleksandar Lazic
Am 02.12.2018 um 20:29 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev9 was released on 2018/12/02. It added 147 new commits > after version 1.9-dev8. Image is now updated ;-) https://hub.docker.com/r/me2digital/haproxy19/ ### HA-Proxy version 1.9-dev9 2018/12/02 Copyright 2000-2018 Willy

Re: Generic backend in HAProxy config with server options as placeholders

2018-11-14 Thread Aleksandar Lazic
ub.io/haproxy-dconv/1.8/configuration.html#4-server-template So you would like to have something like this, is this possible, I don't think so? backend generic server-template myserver 1-3 %[req.hdr(X-MyHeader)]:80 check source 0.0.0.0 usesrc %[dst] Which version of HAProxy do you use? haproxy -vv > Thank

Re: Generic backend in HAProxy config with server options as placeholders

2018-11-14 Thread Aleksandar Lazic
Hi. Am 14.11.2018 um 08:46 schrieb Vijay Bais: > Hello, > > We have a requirement wherein a single generic backend with server options > configured as placeholders, which will resolve on the fly or at runtime. > > Currently, we have to define multiple backends (has to be hardcoded) and >

Re: [PATCH] HTTP 103 response (Early Hints)

2018-11-12 Thread Aleksandar Lazic
Hi Fred. Sorry to be picky but I still think that there is some missing text in the documentation, as mentioned before. http://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=06f5b6435ba99b7a6a034d27b56192e16249f6f0 MINOR: doc: Add information about "early-hint" http-request action. As I could

Re: HTTP/3 | daniel.haxx.se

2018-11-12 Thread Aleksandar Lazic
Am 12.11.2018 um 23:31 schrieb Willy Tarreau: > On Mon, Nov 12, 2018 at 10:52:41PM +0100, Aleksandar Lazic wrote: >> Oh wow this is really a good time to get the hands dirty as QUIC is a major >> design change in HTTP, IMHO. > > Some first approaches were already attempt

Re: HTTP/3 | daniel.haxx.se

2018-11-12 Thread Aleksandar Lazic
Hi Willy. Am 12.11.2018 um 21:01 schrieb Willy Tarreau: > On Mon, Nov 12, 2018 at 07:42:21PM +0100, Aleksandar Lazic wrote: >> Even I agree with you to the point that HAProxy should be able to handle this >> next upcomming/available technology, I'm not sure if it's really a be

Re: [PATCH] HTTP 103 response (Early Hints)

2018-11-12 Thread Aleksandar Lazic
Hi Willy. Am 12.11.2018 um 21:14 schrieb Willy Tarreau: > Hi Aleks, > > On Mon, Nov 12, 2018 at 06:00:25PM +0100, Aleksandar Lazic wrote: >> Hi Fred. >> >> Am 12.11.2018 um 15:38 schrieb Frederic Lecaille: >>> Hello, >>> >>> Here is a li

Re: HTTP/3 | daniel.haxx.se

2018-11-12 Thread Aleksandar Lazic
it further off the list, if you like. Regads aleks Ursprüngliche Nachricht Von: Emmanuel Hocdet Gesendet: 12. November 2018 18:44:40 MEZ An: Aleksandar Lazic CC: haproxy@formilux.org Betreff: Re: HTTP/3 | daniel.haxx.se Hi Aleks, > Le 12 nov. 2018 à 18:02, Aleksandar La

Re: HTTP/3 | daniel.haxx.se

2018-11-12 Thread Aleksandar Lazic
proxy will be able to proxy/load balance UDP? > ++ > Manu > >> Le 11 nov. 2018 à 20:38, Aleksandar Lazic a écrit : >> >> Hi. >> >> FYI. >> >> Oh no, that was quite fast after HTTP/2 >> >> https://daniel.haxx.se/blog/2018/11/11/http-3/ >> >> Regards >> Aleks >> > >

Re: [PATCH] HTTP 103 response (Early Hints)

2018-11-12 Thread Aleksandar Lazic
Hi Fred. Am 12.11.2018 um 15:38 schrieb Frederic Lecaille: > Hello, > > Here is a little series of patches to implement a new http-request > action named "early-hint" to add HTTP 103 responses prior to any other > response with headers whose values are defined by log-format rules, as > this is

HTTP/3 | daniel.haxx.se

2018-11-11 Thread Aleksandar Lazic
Hi. FYI. Oh no, that was quite fast after HTTP/2 https://daniel.haxx.se/blog/2018/11/11/http-3/ Regards Aleks

Re: Issue with HAProxy as a forward proxy

2018-11-06 Thread Aleksandar Lazic
Hi Vijay. Am 06.11.2018 um 10:06 schrieb Vijay Bais: > Hello, > > I'm using HAProxy 1.8 as a forward proxy with below configuration > > > > defaults >     mode                    tcp >     log                     global >     option                  tcplog >     option     

Re: CLI proxy for master process

2018-11-05 Thread Aleksandar Lazic
Hi. In the meantime you can use Socklog [1] or fluent-bit [2] to listen to syslog and write to stdout as I use it in my Image. Pay attention that Fluent-bit writes by default json format to stdout.

Re: Design Proposal: http-agent-check, explict health checks & inline-mode

2018-10-30 Thread Aleksandar Lazic
Hi Robin. Am 29.10.2018 um 20:15 schrieb Robin H. Johnson: > On Sat, Oct 27, 2018 at 01:52:29PM +0200, Aleksandar Lazic wrote: >>> Right now, if you want to use load feedback for weights, you either need >>> something entirely out-of-band from the servers back to HAProxy, o

Re: [ANNOUNCE] haproxy-1.9-dev5

2018-10-30 Thread Aleksandar Lazic
Hi. Am 28.10.2018 um 21:01 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev5 was released on 2018/10/28. It added 58 new commits > after version 1.9-dev4. Image is updated. https://hub.docker.com/r/me2digital/haproxy19/ ## HA-Proxy version 1.9-dev5 2018/10/28 Copyright 2000-2018 Willy Tarreau

Re: apache proxy pass rules in HAproxy

2018-10-27 Thread Aleksandar Lazic
s a direct connection between the client and the backend node over a public IP ( of the backend node). But, what I don't understand is, if a connection attempt is made through HAProxy, why would it allow the connection to be handed off to the backend node directly ( client -> backend node )? Thoughts?

Re: Design Proposal: http-agent-check, explict health checks & inline-mode

2018-10-27 Thread Aleksandar Lazic
Hi Robin. Am 26.10.2018 um 20:49 schrieb Robin H. Johnson: > Hi, > > This is something I have a vague recollection of existing somewhere, but > didn't find any leads in documentation or source. > > Right now, if you want to use load feedback for weights, you either need > something entirely

Re: apache proxy pass rules in HAproxy

2018-10-27 Thread Aleksandar Lazic
that depends on the backend app you are using but most of them > like apache2, tomcat etc. have specific configs that you can > find in their documentation. For example if your backend is > apache2 I bet you don't

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

2018-10-27 Thread Aleksandar Lazic
h a silly question. No probs. Finally you fixed it. > Cheers! Regards Aleks > On Wed, Oct 24, 2018 at 12:21 AM Aleksandar Lazic <mailto:al-hapr...@none.at>> wrote: > > Am 24.10.2018 um 09:18 schrieb Igor Cicimov: > > > > > > On Wed, 24 Oct 2018

Re: CLI proxy for master process

2018-10-27 Thread Aleksandar Lazic
Am 26.10.2018 um 18:10 schrieb Willy Tarreau: > On Fri, Oct 26, 2018 at 05:58:43PM +0200, Aleksandar Lazic wrote: >> BTW what's nb in "nb(thread|proc)"? >> >> [ ] No block >> [ ] never been >> [ ] real answer, something in french ;-): > > &qu

Re: CLI proxy for master process

2018-10-26 Thread Aleksandar Lazic
Hi, William. Am 26.10.2018 um 17:41 schrieb William Lallemand: > On Fri, Oct 26, 2018 at 05:13:00PM +0200, Aleksandar Lazic wrote: >> Hi William. >> >> Sorry for my lack of knowledge and my curiosity, you know I'm always curious >> ;-), but for which usecase can I u

Re:

2018-10-26 Thread Aleksandar Lazic
Hi William. Sorry for my lack of knowledge and my curiosity, you know I'm always curious ;-), but for which usecase can I use this feature? Best regards. Aleks Ursprüngliche Nachricht Von: William Lallemand Gesendet: 26. Oktober 2018 14:47:28 MESZ An: haproxy@formilux.org

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

2018-10-24 Thread Aleksandar Lazic
Am 24.10.2018 um 09:18 schrieb Igor Cicimov: > > > On Wed, 24 Oct 2018 5:06 pm Aleksandar Lazic <mailto:al-hapr...@none.at>> wrote: > > Hi. > > Am 24.10.2018 um 03:02 schrieb Igor Cicimov: > > On Wed, Oct 24, 2018 at 9:16 AM James Brown

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

2018-10-24 Thread Aleksandar Lazic
Hi. Am 24.10.2018 um 03:02 schrieb Igor Cicimov: > On Wed, Oct 24, 2018 at 9:16 AM James Brown wrote: >> >> I tested enabling HTTP/2 on the frontend for some of our sites today and >> immediately started getting a flurry of failures. Browsers (at least Chrome) >> showed a lot of SPDY protocol

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

2018-10-23 Thread Aleksandar Lazic
Hi. SPDY is not HTTP/2 . Please can you share the config and the haproxy version. Best regards Aleks Ursprüngliche Nachricht Von: James Brown Gesendet: 24. Oktober 2018 00:13:37 MESZ An: HAProxy CC: jared Betreff: Lots of PR state failed connections with HTTP/2 on HAProxy

Re: apache proxy pass rules in HAproxy

2018-10-23 Thread Aleksandar Lazic
Hi. Am 23.10.2018 um 09:04 schrieb Imam Toufique: > I am looking for some help on how to write the following apache proxypass  > rules > in HAproxy.  Not to mention I am at a bit of loss with my first try :-) .  > Here > are my current proxypass rules: > > ProxyPass

Re: [ANNOUNCE] haproxy-1.9-dev4

2018-10-23 Thread Aleksandar Lazic
Hi Willy. Am 23.10.2018 um 10:55 schrieb Willy Tarreau: > Hi Aleks, > > On Tue, Oct 23, 2018 at 10:23:43AM +0200, Aleksandar Lazic wrote: >>> I'm not sure what you mean because the basic stuff (http actions, fetching >>> samples, ACLs etc) will be OK. What w

Re: [ANNOUNCE] haproxy-1.9-dev4

2018-10-23 Thread Aleksandar Lazic
Hi. Am 23.10.2018 um 09:49 schrieb Willy Tarreau: > Hi Pavlos, > > On Tue, Oct 23, 2018 at 09:42:26AM +0200, Pavlos Parissis wrote: >>> While we won't be doing anything specific for gRPC, my previous reading of >>> the spec taught me that if we simply support H2 end to end it *should* work. >>

Re: [ANNOUNCE] haproxy-1.9-dev4

2018-10-22 Thread Aleksandar Lazic
Hi. Am 21.10.2018 um 21:05 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev4 was released on 2018/10/21. It added 97 new commits > after version 1.9-dev3. New Docker Image available. https://hub.docker.com/r/me2digital/haproxy19/ ## HA-Proxy version 1.9-dev4 2018/10/21 Copyright 2000-2018

Re: HAproxy ssh connection closes fast , after logon

2018-10-21 Thread Aleksandar Lazic
hanged the port 2200, to 22 -- by using 2200 for sshd itself and > 22 > for binding. > > This is not the perfect set up yet, but this is better then what I had before. > > thanks. > > On Sat, Oct 20, 2018 at 1:39 AM Aleksandar Lazic <mailto:al-hapr...@none.at>&

Re: HAproxy ssh connection closes fast , after logon

2018-10-20 Thread Aleksandar Lazic
Hi. Am 20.10.2018 um 09:48 schrieb Imam Toufique: > Thanks, Jarno! > > Brian Gibson helped me out!  thanks, Brian! Would be nice to know what's the solution was, thanks. Regards Aleks > On Sat, Oct 20, 2018 at 12:10 AM Jarno Huuskonen > wrote: > > Hi, > >

Re: HAProxy / shibboleth ( SP ) authentication question

2018-10-13 Thread Aleksandar Lazic
Hi. Am 13.10.2018 um 10:26 schrieb Imam Toufique: > Hello,  > > I have been searching for an answer whether HAProxy can forward authentication > request from shibboleth SP.   With SP you mean Service Provider, right? https://wiki.shibboleth.net/confluence/display/SP3 > Here is my proposed

Re: confused by HAProxy log line

2018-10-11 Thread Aleksandar Lazic
always set correctly (not to -1). The origin log line has CH-- which indicates HAProxy was waiting for reponse headers from a server so (this implies?) it connected somewhere. So why server is marked as ? Regards, Michal On Thu, Oct 11, 2018 at 1:00 PM Aleksandar Lazic wrote: > Am 11.10.

Re: confused by HAProxy log line

2018-10-11 Thread Aleksandar Lazic
Am 11.10.2018 um 10:33 schrieb Michał Pasierb: > Hello, > > I have a problem understanding a particular log line from HAProxy 1.7.11 in > production system. My clients report problems from time to time. They make > another request and all is OK. This is the log format used: > > log-format %tr\

Re: File Size Limit

2018-10-11 Thread Aleksandar Lazic
Hi. Am 11.10.2018 um 10:05 schrieb Alfredo De Luca: > Hi all.  > Not sure how to do this but I need to limit a file size to be uploaded on our > haproxy (HA-Proxy version 1.5.18). Maybe you can use a newer version on your centos via this repo. https://haproxy.hongens.nl/ > This is what I ve

Re: HA-Proxy configuration

2018-10-10 Thread Aleksandar Lazic
Hi. Have you seen this link list, there are some good examples for a ha solutins ? http://www.haproxy.org/#link In general is keepalived and haproxy a good kombination. On which plattform do you plan to run the ha setup? Best regards Aleks Ursprüngliche Nachricht Von:

Re: haproxy support for stratum protocol ?

2018-10-09 Thread Aleksandar Lazic
Hi. Am 09.10.2018 um 15:04 schrieb jdelo...@protonmail.com: > Hello, > > Please CC me as I'm not subscribed on the list. > Does haproxy will consider support for the stratum protocol ? Do you mean this? http://stratumprotocol.org/ > Thanks, > Julien Regards Aleks

Re: faster than load-server-state-from-file?

2018-10-08 Thread Aleksandar Lazic
Am 08.10.2018 um 19:35 schrieb Willy Tarreau: > On Mon, Oct 08, 2018 at 07:27:39PM +0200, Aleksandar Lazic wrote: >> Hi Baptiste. >> >> Am 08.10.2018 um 16:20 schrieb Baptiste: >>> Bonjour Messieurs, >>> >>> (je passe en FR et hors ML et je

Re: faster than load-server-state-from-file?

2018-10-08 Thread Aleksandar Lazic
Hi Baptiste. Am 08.10.2018 um 16:20 schrieb Baptiste: > Bonjour Messieurs, > > (je passe en FR et hors ML et je top-poste!!!). Just for my curiosity, why not answering in english? Best regards aleks > Pierre, je suis déjà en contact avec plusieurs autres Pierre de chez Critéo > (le > prénom,

Re: [ANNOUNCE] haproxy-1.9-dev3

2018-09-30 Thread Aleksandar Lazic
Hi Willy. Am 30.09.2018 um 11:05 schrieb Willy Tarreau: > Hi Aleks, > > On Sun, Sep 30, 2018 at 10:38:20AM +0200, Aleksandar Lazic wrote: >> Do you have any release date for 1.9, as I plan to launch some new site and >> thought to use 1.9 from beginning because it

Re: [ANNOUNCE] haproxy-1.9-dev3

2018-09-30 Thread Aleksandar Lazic
Am 29.09.2018 um 20:41 schrieb Willy Tarreau: > Subject: [ANNOUNCE] haproxy-1.9-dev3 > To: haproxy@formilux.org > > Hi, > > Now that Kernel Recipes is over (it was another awesome edition), I'm back > to my haproxy activities. Well, I was pleased to see that my coworkers > reserved me a nice

Re: H2O - an optimized HTTP server

2018-09-29 Thread Aleksandar Lazic
Hi. Am 29.09.2018 um 07:33 schrieb Dave Cottlehuber: > On Sat, 29 Sep 2018, at 00:31, Aleksandar Lazic wrote: >> Hi. >> >> Have anyone used this server in production setup behind haproxy? >> >> https://h2o.examp1e.net/ > > Yes for the last 2 years at

H2O - an optimized HTTP server

2018-09-28 Thread Aleksandar Lazic
Hi. Have anyone used this server in production setup behind haproxy? https://h2o.examp1e.net/ Thanks for any answer ;-) Regards Aleks

Re: HAProxy listed as Ingress controllers

2018-09-25 Thread Aleksandar Lazic
Von: Daniel Corbett Gesendet: 25. September 2018 16:57:28 MESZ An: Aleksandar Lazic , haproxy@formilux.org Betreff: Re: HAProxy listed as Ingress controllers Hello Aleks, On 09/25/2018 03:25 AM, Aleksandar Lazic wrote: > Hi. > > Today was the PR to the website approved which add the haprox

Re: New TLS proposal for SNI => ESNI

2018-09-25 Thread Aleksandar Lazic
Hi Manu. Am 25.09.2018 um 11:02 schrieb Emmanuel Hocdet: > > Hi Aleks, > >> Le 25 sept. 2018 à 08:05, Aleksandar Lazic > <mailto:al-hapr...@none.at>> a écrit : >> >> Hi. >> >> Have anyone seen this? >> >> https://www.eff.org/deeplin

HAProxy listed as Ingress controllers

2018-09-25 Thread Aleksandar Lazic
Hi. Today was the PR to the website approved which add the haproxy ingress controller to the list of Ingress controllers ;-) https://kubernetes.io/docs/concepts/services-networking/ingress/#ingress-controllers Is there any plan to have a official HAProxy Operator/Controller for

New TLS proposal for SNI => ESNI

2018-09-25 Thread Aleksandar Lazic
Hi. Have anyone seen this? https://www.eff.org/deeplinks/2018/09/esni-privacy-protecting-upgrade-https It looks very interesting for higher privacy. Regards Aleks

Re: [ANNOUNCE] haproxy-1.8.14 - Security Update

2018-09-20 Thread Aleksandar Lazic
Am 20.09.2018 um 14:31 schrieb Willy Tarreau: > Subject: [ANNOUNCE] haproxy-1.8.14 > To: haproxy@formilux.org > > Hi, > > HAProxy 1.8.14 was released on 2018/09/20. It added 44 new commits > after version 1.8.13. Image on docker hub was updated to.

Re: Where can I find explanations for all the columns of the web interface?

2018-09-19 Thread Aleksandar Lazic
Hi. Am 19.09.2018 um 12:01 schrieb Бобровский Дмитрий: > Hello! > > Where can I find explanations for all the columns of the web interface? https://cbonte.github.io/haproxy-dconv/1.8/management.html#9 > http://172.29.84.64/haproxy?stats > > Best regards, > > Bobrovsky Dmitry Regards Aleks

Re: [ANNOUNCE] haproxy-1.9-dev2

2018-09-13 Thread Aleksandar Lazic
Hi. Am 12.09.2018 um 19:11 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev2 was released on 2018/09/12. It added 199 new commits > after version 1.9-dev1. > > Let's be clear about this one : it's mostly aimed at developers to resync > their ongoing work. We've changed a number of pretty

Re: New Dev version

2018-09-06 Thread Aleksandar Lazic
Hi Willy. Thank you for the update. I have seen it as a possibility :-). Take your time, as I know it takes time to keep high quality. Best regards Aleks Ursprüngliche Nachricht Von: Willy Tarreau Gesendet: 6. September 2018 19:44:09 MESZ An: Aleksandar Lazic CC: Haproxy

New Dev version

2018-08-30 Thread Aleksandar Lazic
Hi. As there are a lot of fixes in the last weeks how about to make in the next week a new dev2 "release"? Best Regards Aleks

Re: HTTP response sent in TCP FIN packet - Haproxy 1.8.13 on Ubuntu 16.04

2018-08-27 Thread Aleksandar Lazic
Hi. Am 27.08.2018 um 15:03 schrieb Pieter Thysebaert: > Hi, > > I am running HA-Proxy version 1.8.13-1ppa1~xenial 2018/08/01 on > Linux backendsc01 4.15.0-1021-azure #21~16.04.1-Ubuntu SMP (in Azure). > > This is a simple test setup; HAproxy is listening on port 444 (no SSL), the > backlend

Re: Clarification re Timeouts and Session State in the Logs

2018-08-24 Thread Aleksandar Lazic
Hi. Am 24.08.2018 um 11:04 schrieb Daniel Schneller: > Hi! > > Thanks for that input. I would like to understand what's going before making > changes. :) There is a how-it-works.txt

RE: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
Norman Branitsky Gesendet: 23. August 2018 21:59:03 MESZ An: Aleksandar Lazic , "haproxy@formilux.org" , haproxy Betreff: RE: Docker Swarm configuration Looking at the openshift router definition, I can see it implements what I want: 2. If termination is type 'edge': This is https

Re: HAProxy dynamic server address based off of variable

2018-08-23 Thread Aleksandar Lazic
Hi. First of all i suggest to update the haproxy via rpm https://haproxy.hongens.nl/. I don't think think that's possible but I can be wrong on this. Can't you use dns for this as a name is possible as server address. Regards Aleks Ursprüngliche Nachricht Von: Phani Gopal

Re: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
Hi. How about to use the following setup. frontend tcp mode tcp bind 443 use_backend default backend default mode http bind 444 ... You can take a look into the openshift router for a more detailed solution.

Re: Multiple connections to the same URL with H2

2018-08-20 Thread Aleksandar Lazic
Hi. Am 20.08.2018 um 15:28 schrieb Ing. Andrea Vettori: > Hello, > > we’re using haproxy since version 1.7 for our websites. Backends are mostly > Apache Tomcat. We have a centralised log server for application logs. > A couple weeks ago we upgraded to 1.8.13 and enabled h2. Since then, in our

Re: Option "verify" incompatible with "crt-list"

2018-08-20 Thread Aleksandar Lazic
Hi. Am 20.08.2018 um 10:20 schrieb Jean-Baptiste Berthelin: > Hello, > > Since I have upgrade my Chrome webbrowser (Version 68.x), I always have a > popup > to choose the client certificat when reaching a HAProxy frontend. > > After some tests, I only have this popup if : >  - a "personal"

Re: Option "verify" incompatible avec "crt-list"

2018-08-17 Thread Aleksandar Lazic
Bonjour. Sorry but I don't understand french so I will try to interpret you question. Am 17.08.2018 um 17:40 schrieb Jean-Baptiste Berthelin: > Bonjour, > > Depuis les dernières versions de Chrome, nous avons désormais un message de > sélection du certificat client en accédant à un frontend

Re: SPOE and modsecurity contrib Failed to decode HELLO frame

2018-08-17 Thread Aleksandar Lazic
Hi. Am 17.08.2018 um 11:36 schrieb Павел.: > > I'm solved it. > > The installed version and the source version should be the same :) That's it ;-) Best regards Aleks > Пятница, 17 августа 2018, 14:08 +06:00 от Aleksandar Lazic > : > > Hi. > > Am 16.

Re: SPOE and modsecurity contrib Failed to decode HELLO frame

2018-08-17 Thread Aleksandar Lazic
Hi. Am 16.08.2018 um 11:00 schrieb Павел.: > > HI all! I'm compile modsec as described in the instructions > contib/modsec/README, but have the next errors: Which version of haproxy and this contib do you use? There was some changes recently. http://www.haproxy.org/download/1.8/src/CHANGELOG

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

2018-08-13 Thread Aleksandar Lazic
On 11/08/2018 14:48, Patrick Hemmer wrote: [snipp] To answer one of the earlier questions, I do plan on writing a blog article yes. The question is when. I'm considering backporting this feature to 1.8 for my own use at work, and if done, might wait for that so I have some real world usage

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

2018-08-11 Thread Aleksandar Lazic
Hi Willy. On 11/08/2018 11:04, Willy Tarreau wrote: Hi Aleks, On Sat, Aug 11, 2018 at 10:27:42AM +0200, Aleksandar Lazic wrote: I think it is a requeue mechanism for the connection and not a selector for a server or a backend, but I can be wrong. That's it. I'll try to explain shortly

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

2018-08-11 Thread Aleksandar Lazic
Hi. Am 10-08-2018 17:12, schrieb Willy Tarreau: On Fri, Aug 10, 2018 at 09:54:38AM -0400, Patrick Hemmer wrote: Merge it! Now done! Quite happy to see this done with. Any issues can be addressed as bug fixes. Yes, same here. I've updated the ROADMAP file to remove this 8-years old entry

Re: [ANNOUNCE] haproxy-1.9-dev1

2018-08-03 Thread Aleksandar Lazic
Hi. On 03/08/2018 19:42, Aleksandar Lazic wrote: Hi. On 02/08/2018 19:23, Willy Tarreau wrote: Hi, HAProxy 1.9-dev1 was released on 2018/08/02. It added 651 new commits after version 1.9-dev0. Great news and work ;-) The image is also ready. https://hub.docker.com/r/me2digital/haproxy19

Re: [ANNOUNCE] haproxy-1.9-dev1

2018-08-03 Thread Aleksandar Lazic
: http://www.haproxy.org/ Discourse: http://discourse.haproxy.org/ Sources : http://www.haproxy.org/download/1.9/src/ Git repository : http://git.haproxy.org/git/haproxy.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy.git Changelog : http://www.hapro

Re: [ANNOUNCE] haproxy-1.8.13

2018-07-30 Thread Aleksandar Lazic
On 30/07/2018 18:05, Willy Tarreau wrote: Hi, HAProxy 1.8.13 was released on 2018/07/30. It added 28 new commits after version 1.8.12. Nothing critical this time, however we finally got rid of the annoying CLOSE_WAIT on H2 thanks to the continued help from Milan Petruzelka, Janusz Dziemidowicz

Re: Help with backend server sni setup

2018-07-30 Thread Aleksandar Lazic
Hi. On 30/07/2018 16:39, Lukas Tribus wrote: On Mon, 30 Jul 2018 at 13:30, Aleksandar Lazic wrote: Hi. I have the following Setup. APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP The external HAProxy is configured with multiple TLS Vhost. Never use SNI for Vhosting.

Help with backend server sni setup

2018-07-30 Thread Aleksandar Lazic
Hi. I have the following Setup. APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP The external HAProxy is configured with multiple TLS Vhost. I assume that when I add `server sni appinternal.domain.com` to the server line will be set the hostname field in the TLS session to this

Re: Suppression de l’extension

2018-07-24 Thread Aleksandar Lazic
:48, Aleksandar Lazic a écrit : Hi. On 19/07/2018 15:09, -- wrote: Hello, Je souhaite supprimer l’extension présentée par mon serveur nginx mais depuis Haproxy Type A.com/index.html en A.com/index Est ce possible ? Maybe, but please can you ask in English, thanks. But let me try to interpret

Re: Issue with TCP splicing

2018-07-24 Thread Aleksandar Lazic
inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On 2018-07-23 11:25 AM, Aleksandar Lazic wrote: Hi Julien. On 23/07/2018 09:07, Julien Semaan wrote: Hi all, We're currently using haproxy in our project PacketFence (https://packetfence.org) and are

Re: Issue with TCP splicing

2018-07-23 Thread Aleksandar Lazic
Hi Julien. On 23/07/2018 09:07, Julien Semaan wrote: Hi all, We're currently using haproxy in our project PacketFence (https://packetfence.org) and are currently experiencing an issue with haproxy segfaulting when TCP splicing is enabled. We're currently running version 1.8.9 and are

Re: Regexp

2018-07-19 Thread Aleksandar Lazic
Hi. On 18/07/2018 13:10, Haim Ari wrote: Hello, Trying to set backend by regexp This regexp works outside of haproxy String: /1.0/manage/bu/ca?token=68bf68bf68bf68bf68bf=1212121212=123456789 Regexp: ^\/1\.0\/manage\/bu\/ca\?token=.*.segId=.*=123456789 What is the right syntax for this in

Re: Empty reply from server

2018-07-19 Thread Aleksandar Lazic
On 18/07/2018 15:56, Serge Reynier wrote: Hi, We are having some issues recently when calling a specific url, we are getting the following error on the client side : * "Empty reply from server" I don't understand this statement: The problem is that Haproxy is not logging any of these

Re: Suppression de l’extension

2018-07-19 Thread Aleksandar Lazic
Hi. On 19/07/2018 15:09, -- wrote: Hello, Je souhaite supprimer l’extension présentée par mon serveur nginx mais depuis Haproxy Type A.com/index.html en A.com/index Est ce possible ? Maybe, but please can you ask in English, thanks. But let me try to interpret you question. reqrep ^([^\

Re: [ANNOUNCE] haproxy-1.8.12

2018-06-27 Thread Aleksandar Lazic
On 27/06/2018 16:33, William Lallemand wrote: Hi, HAProxy 1.8.12 was released on 2018/06/27. It added 2 new commits after version 1.8.11. Wow this was fast. Let's say it was agile ;-) Now the images are also ready. https://hub.docker.com/r/me2digital/haproxy18/ Regards Aleks

Re: http-response add-header

2018-06-25 Thread Aleksandar Lazic
Hi. Am 25.06.2018 um 09:49 schrieb mlist: > You're right. Meanwhile I found a working version using set-vat on > http-request. It would be nice when you share the solution, here or in any blog post, Thank you > Thank you Best regards Aleks > *APKAPPA s.r.l. *sede legale Via F. Albani, 21 

Re: cookie insert method secure

2018-06-24 Thread Aleksandar Lazic
modify, distribute or take any action in reliance on it. If you have received this email in error, please notify the sender and delete this email from your system. -Original Message- From: Aleksandar Lazic Sent: domenica 24 giugno 2018 01:20 To: mlist Cc: haproxy@formilux.org Subject: Re:

Re: cookie insert method secure

2018-06-23 Thread Aleksandar Lazic
ibute or take any action in reliance on it. If you have received this email in error, please notify the sender and delete this email from your system. -Original Message- From: Aleksandar Lazic Sent: martedì 12 giugno 2018 23:29 To: mlist Cc: haproxy@formilux.org Subject: Re: cookie insert met

Re: [ANNOUNCE] haproxy-1.8.10

2018-06-23 Thread Aleksandar Lazic
Am 22.06.2018 um 16:42 schrieb William Lallemand: > Hi, > > HAProxy 1.8.10 was released on 2018/06/22. It added 40 new commits > after version 1.8.9. The image is also updated. https://hub.docker.com/r/me2digital/haproxy18/ ### $ docker run --rm --entrypoint /usr/local/sbin/haproxy

Re: cookie insert method secure

2018-06-12 Thread Aleksandar Lazic
u are not the intended recipient, you should not copy, modify, distribute or take any action in reliance on it. If you have received this email in error, please notify the sender and delete this email from your system. -Original Message- From: Aleksandar Lazic Sent: marted? 12 giugno 2018 1

Re: cookie insert method secure

2018-06-12 Thread Aleksandar Lazic
Hi. On 12/06/2018 16:23, mlist wrote: Hi, there is a mechanism to specify to command like: cookie insert indirect preserve nocache httponly secure to insert secure only if the session is ssl ? So it is possible to use this command on a common http/https backend without using 2 different

Re: subscribe

2018-06-12 Thread Aleksandar Lazic
Hi. On 12/06/2018 08:19, Ray Jender wrote: Please add me to the mailing list: rayjen...@gmail.com Please add you self as described here https://www.haproxy.org/#tact Best regards Aleks

Re: haproxy with QAT requires root

2018-06-12 Thread Aleksandar Lazic
Hi. On 12/06/2018 12:58, Christian Braun wrote: Hello, i am testing haproxy with a QAT card (Intel QuickAssit-Technology). I am getting "SSL handshake failure" running haproxy with user nobody and ssl-engine qat. When running haproxy with user root the card gets used and the SSL connection

Re: [Feature request] Call fan-out to all endpoints.

2018-06-10 Thread Aleksandar Lazic
Hi. On 10/06/2018 17:56, amotz wrote: Baptiste wrote: Hi, what's the use case? Is this API gateway kind of thing? Baptiste From my experience this is mostly needed for operations/management API. Some examples: getStaus (i.e get the status/health from all endpoint) flashCache (make all

Re: regression testing for haproxy

2018-06-09 Thread Aleksandar Lazic
Hi Frederic. On 07/06/2018 15:29, Frederic Lecaille wrote: On 06/07/2018 03:14 PM, Frederic Lecaille wrote: Hi all, We have recently worked in colloboration with Poul-Henning Kamp to use varnishtest regression testing (script driven) tool for Varnish HTTP Cache so that to modify it and make

Re: maxsslconn vs maxsslrate

2018-06-09 Thread Aleksandar Lazic
that you want to save some CPU usage and therefor you should use maxsslrate. Hth Aleks On Thu, Jun 7, 2018 at 2:43 PM, Aleksandar Lazic wrote: On 07/06/2018 14:30, Mihir Shirali wrote: We have a large number of ip phones connecting to this port. They could be as large as 80k. They request

Re: maxsslconn vs maxsslrate

2018-06-07 Thread Aleksandar Lazic
use thread and or nbprocs? This will be answered by the conf Best regards aleks On Thu, Jun 7, 2018 at 2:13 PM, Aleksandar Lazic wrote: Hi Mihir. On 07/06/2018 10:27, Mihir Shirali wrote: Hi Team, We use haproxy to front tls for a large number of endpoints, haproxy prcesses the TLS session and the

Re: maxsslconn vs maxsslrate

2018-06-07 Thread Aleksandar Lazic
Hi Mihir. On 07/06/2018 10:27, Mihir Shirali wrote: Hi Team, We use haproxy to front tls for a large number of endpoints, haproxy prcesses the TLS session and then forwards the request to the backend application. What we have noticed is that if there are a large number of connections from

Re: Observations about reloads and DNS SRV records

2018-06-06 Thread Aleksandar Lazic
Hi Tait. On 06/06/2018 11:16, Tait Clarridge wrote: I've been testing DNS service discovery and the use of SRV records and have a few thoughts on a couple things that I noticed. In this area was a lot of changes in the last version of haproxy, do you have tested the setup with the latest

Re: haproxy 1.9 status update

2018-06-01 Thread Aleksandar Lazic
Hi Willy. Finally I found the time to write a answer. On 25/05/2018 18:10, Willy Tarreau wrote: Hi all, I've long wanted to send a status update on where haproxy 1.9 is going, and seeing some recent threads speculating about what will be available reminded me that it's really time to send

Re: [PATCH][MINOR] config: Implement 'parse-resolv-conf' directive for resolvers

2018-05-30 Thread Aleksandar Lazic
On 30/05/2018 05:20, Willy Tarreau wrote: On Tue, May 29, 2018 at 03:48:57PM -0600, Ben Draut wrote: [snipp] No problem, thanks for reviewing! Hopefully you guys get a break soon. Les vacances se rapprochent.. :) Holidays are the moment where it's easier to stay focused on complex stuff

Re: Inquiry

2018-05-29 Thread Aleksandar Lazic
Hi. On 29/05/2018 14:30, Youssef George wrote: Dears, We are thinking about use HAproxy as loadblancer for our service that has huge traffic, So can you send to us some engineer in our site ( in Egypt ) to introduce HAproxy features to us and also the ways of support. If you have suppliers

Re: JWT payloads break b64dec convertor

2018-05-28 Thread Aleksandar Lazic
On 28/05/2018 17:42, Norman Branitsky wrote: https://en.wikipedia.org/wiki/The_C_Programming_Language Oh, of course *clap on head* how embarrassing 8-O. I haven't thought to THIS Book, sorry. Best regards Aleks -Original Message- From: Aleksandar Lazic Sent: Monday, May 28, 2018

Re: JWT payloads break b64dec convertor

2018-05-28 Thread Aleksandar Lazic
On 28/05/2018 15:10, Jonathan Matthews wrote: On Mon, 28 May 2018 at 14:26, Willy Tarreau wrote: On Mon, May 28, 2018 at 01:43:41PM +0100, Jonathan Matthews wrote: > Improvements and suggestions welcome; flames and horror -> /dev/null ;-) Would anyone be interested in adding two

Re: gRPC protocol

2018-05-24 Thread Aleksandar Lazic
On 24/05/2018 11:54, Daniel Corbett wrote: Hello Aleks, On 05/24/2018 10:54 AM, Aleksandar Lazic wrote: I remembert that Willy mentioned this in any of his mail. Do you have any rough timeline, this year, next year something like this ;-) We're aiming to have the native internal HTTP

Re: gRPC protocol

2018-05-24 Thread Aleksandar Lazic
Hi Daniel. On 24/05/2018 10:09, Daniel Corbett wrote: Hello Aleks, gRPC is on our road map. We're currently working on implementing a new native internal HTTP representation and that will bring us end to end HTTP/2, which is the requirement for us to add gRPC. I remembert that Willy

<    1   2   3   4   5   6   >