Re: [ANNOUNCE] haproxy-1.7.5

2017-04-04 Thread Aleksandar Lazic
Am 04-04-2017 10:50, schrieb Willy Tarreau: Hi Nenad, On Tue, Apr 04, 2017 at 10:32:35AM +0200, Nenad Merdanovic wrote: Hello, On 04/04/2017 10:25 AM, Willy Tarreau wrote: >> I will also add 1.8-dev soon ;-) >> > >> > Maybe I can contribute to the official repo & image. >> >

Re: configuration.txt questions

2017-04-04 Thread Aleksandar Lazic
Am 04-04-2017 10:15, schrieb Willy Tarreau: Hi Aleks, On Tue, Apr 04, 2017 at 10:07:45AM +0200, Aleksandar Lazic wrote: Hi. Am 03-04-2017 14:15, schrieb Jarno Huuskonen: > Hi, > > On Fri, Mar 31, Willy Tarreau wrote: > > On Fri, Mar 31, 2017 at 02:59:37PM +0300, Jarno

Re: [ANNOUNCE] haproxy-1.7.5

2017-04-04 Thread Aleksandar Lazic
Am 03-04-2017 12:53, schrieb Willy Tarreau: On Mon, Apr 03, 2017 at 12:04:46PM +0200, Aleksandar Lazic wrote: Hi. Am 03-04-2017 10:37, schrieb Willy Tarreau: > Hi, > > HAProxy 1.7.5 was released on 2017/04/03. It added 8 new commits > after version 1.7.4. The main goa

Re: configuration.txt questions

2017-04-04 Thread Aleksandar Lazic
Hi. Am 03-04-2017 14:15, schrieb Jarno Huuskonen: Hi, On Fri, Mar 31, Willy Tarreau wrote: On Fri, Mar 31, 2017 at 02:59:37PM +0300, Jarno Huuskonen wrote: > On Fri, Mar 31, Jarno Huuskonen wrote: > > First I'm attaching a patch that corrects ]) order for urlp_val > > and adds 'Example:'

Re: [ANNOUNCE] haproxy-1.7.5

2017-04-03 Thread Aleksandar Lazic
Hi. Am 03-04-2017 10:37, schrieb Willy Tarreau: Hi, HAProxy 1.7.5 was released on 2017/04/03. It added 8 new commits after version 1.7.4. The main goal was to fix an incomplete fix on the compression filter in 1.7.4, that now manifests itself as the haproxy spinning at 100% CPU until the

Re: [PATCH] improve DNS response parsing

2017-03-25 Thread Aleksandar Lazic
Am 25-03-2017 08:29, schrieb Baptiste: On Fri, Mar 24, 2017 at 11:56 AM, Willy Tarreau wrote: Hi Baptiste, On Thu, Mar 23, 2017 at 09:05:19PM +0100, Baptiste wrote: Currently, HAProxy picks up the first IP available in the response which matches a familiy preference or a

Re: Using multiple url parameters to create sticky-table entries

2017-03-25 Thread Aleksandar Lazic
Am 24-03-2017 19:20, schrieb redundantl y: I take it this isn't possible? Thanks. On Wed, Mar 22, 2017 at 6:01 PM, redundantl y wrote: I'm very, very new to HAproxy (started trying it out an hour ago) and am looking at setting up a sticky-table based on multiple

Re: Overwrite "sec-websocket-key"

2017-03-24 Thread Aleksandar Lazic
Hi. due to the fact that websocket is not http haproxy can't rewrite http-header after a websocket is established. Du you try to manipulate the header AFTER the socket is established? R Aleks Am 24-03-2017 17:54, schrieb Thomas Sheppard: > Hi everyone, > > Could someone help us with

Re: Binding to interface as non-root user

2017-03-24 Thread Aleksandar Lazic
Hi. Am 24-03-2017 07:17, schrieb Ankit Malp: tldr; Is there a way to bind a frontend to interface and still be able to start HAProxy as root and later lower privileges to a non root user? That's the default behaviour with 'user' keyword. I asked this question at

rsyslog -> tcp -> ssl -> SNI -> ssl -> rsyslog

2017-03-17 Thread Aleksandar Lazic
Hi. The subject looks strange so let me the explain the setup a little bit. I have a old rsyslog without ssl module. I need to send syslog messages via tcp to a remote syslog server. Between the local server and the remote server is a haproxy which I can only use as https-sni-forwarder.

Re: Problems with haproxy 1.7.3 on FreeBSD 11.0-p8

2017-03-17 Thread Aleksandar Lazic
Willy. Am 14-03-2017 22:17, schrieb Willy Tarreau: Matthias, I could finally track the problem down to a 5-year old bug in the connection handler. It already used to affect Unix sockets but it requires so rare a set of options and even then its occurrence rate is so low that probably nobody

Re: wolfSSL

2017-03-13 Thread Aleksandar Lazic
Hi. Am 13-03-2017 11:01, schrieb Marco: Hello, is it possible to build HAProxy with wolfSSL instead of OpenSSL? I have tried it the same way as with a custom OpenSSL version, but it failed. So my guess is it is not supported? In short, yes. Thanks Marco Cheers aleks

Re: rewrite response body

2017-03-13 Thread Aleksandar Lazic
Hi Budai, Am 12-03-2017 21:32, schrieb Budai Laszlo: Hello, I would like to rewrite the resonse body with haproxy. I've read about rsprep, rspirep, but these are only processing the headers. Is there a way to do text replacements in the body of the http response? How? and which version of

Re: Content rewriting?

2017-02-22 Thread Aleksandar Lazic
Hi. Am 22-02-2017 14:54, schrieb Dr Josef Karthauser: Hi there, Is it possible to setup haproxy to rewrite content? I’ve got URLs in the body of the http responses, and I want to rewrite them like in the headers. The docs suggest that ‘rsprep’ ought to be able to do it, but I can’t get it to

Re: HA Proxy not distributing the load

2017-02-20 Thread Aleksandar Lazic
ever) -> haproxy -> JBosses right? LB a Layer 4. On Feb 20, 2017 9:27 PM, "Aleksandar Lazic" <al-hapr...@none.at> wrote: Am 20-02-2017 16:32, schrieb Khaleel.Shaik: HA-Proxy version 1.6.3 2015/12/25 letest is 1.6.11 any idea when you are able to update? no clients are

Re: HA Proxy not distributing the load

2017-02-20 Thread Aleksandar Lazic
eks On Mon, Feb 20, 2017 at 3:05 PM, Aleksandar Lazic <al-hapr...@none.at> wrote: Hi. Am 20-02-2017 09:55, schrieb Khaleel.Shaik: My HA Proxyconfiguration attached, which not distributing the load to all the appservers. Could you please help me What's your haproxy version? output

Re: HA Proxy not distributing the load

2017-02-20 Thread Aleksandar Lazic
Hi. Am 20-02-2017 09:55, schrieb Khaleel.Shaik: My HA Proxyconfiguration attached, which not distributing the load to all the appservers. Could you please help me What's your haproxy version? output of haproxy -vv Which clients are used? In case of browsers try to remove the cookie line

Re: Opinion about blog post of SPOE

2017-02-17 Thread Aleksandar Lazic
Hi Christopher. Am 17-02-2017 10:41, schrieb Christopher Faulet: Le 16/02/2017 à 12:41, Aleksandar Lazic a écrit : Do you think that there will be also big changes in the protocol? No not really. The protocol should remain mostly unchanged. In fact, except new "capabil

Re: Opinion about blog post of SPOE

2017-02-16 Thread Aleksandar Lazic
Hi Christopher. Am 16-02-2017 10:18, schrieb Christopher Faulet: Le 15/02/2017 à 02:43, Aleksandar Lazic a écrit : Hi. Due to the fact that I like this SPOE I have started to write about it ;-) https://me2digital.online/2017/02/15/haproxy-1-7-feature-spoe/ Is the concept displayed correct

Opinion about blog post of SPOE

2017-02-14 Thread Aleksandar Lazic
Hi. Due to the fact that I like this SPOE I have started to write about it ;-) https://me2digital.online/2017/02/15/haproxy-1-7-feature-spoe/ Is the concept displayed correct in the picture? Are the data (tcp, http-header, http-body) quoted when HAProxy send it to the SPOEA? I'm

Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-14 Thread Aleksandar Lazic
Am 13-02-2017 23:10, schrieb Willy Tarreau: On Mon, Feb 13, 2017 at 10:50:36PM +0100, Aleksandar Lazic wrote: What I mean is that. haproxy have already a config parser. Why not use this config parser and add new keyword for error files. With this approach the customers can reuse

Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-13 Thread Aleksandar Lazic
Am 13-02-2017 14:47, schrieb Willy Tarreau: Hi Aleks, On Mon, Feb 13, 2017 at 01:19:54PM +0100, Aleksandar Lazic wrote: Hi. Am 13-02-2017 12:15, schrieb Willy Tarreau: > On Mon, Feb 13, 2017 at 11:33:53AM +0100, Michael Hamburger wrote: > > > Willy wrote: [snipp] > &

Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-13 Thread Aleksandar Lazic
Hi. Am 13-02-2017 12:15, schrieb Willy Tarreau: On Mon, Feb 13, 2017 at 11:33:53AM +0100, Michael Hamburger wrote: > Willy wrote: [snipp] > Maybe you're interested in trying to implement the stuff above ? If > so, just let me know, I can give you a few hints which could possibly > help. I

Re: Haproxy reload fails on RHEL 7.2

2017-02-10 Thread Aleksandar Lazic
Hi, Am 09-02-2017 18:37, schrieb Gunuganti, Uma Maheshwar Rao: Is there a way I could make 1.7.2 work in RHEL 7.2 ? Yes. You will need to build it ;-) You can take a look into the Dockerfile for the required commands. https://gitlab.com/aleks001/haproxy16-rhel7/blob/master/Dockerfile

Re: Hitting rate limit?

2017-01-17 Thread Aleksandar Lazic
Hi. Am 17-01-2017 05:46, schrieb Atha Kouroussis: Hi all, I seem to hitting some kind of bottleneck at about 4k req/s and I'm not able to find the cause. I have HAproxy 1.7.2 installed on Ubuntu 16.04.1, VM with 8 cores, 2GB RAM, 1 Gbps networking. Testing with ab cannot get past ~4K

Re: [PATCH 0/2] openssl 1.1 async mode and engine support

2017-01-14 Thread Aleksandar Lazic
Hi Grant. Am 14-01-2017 01:42, schrieb Grant Zhang: Hi list, This is to request comments regarding the support of openssl 1.1 async mode and async-capable engine. openssl s_time utility is used to compare the performance: #> openssl s_time -new -cipher ECDHE-RSA-AES128-GCM-SHA256 -nbio

Re: [PATCH] MINOR: compression: fix -vv output without zlib/slz

2017-01-11 Thread Aleksandar Lazic
Hi. Am 11-01-2017 18:40, schrieb Lukas Tribus: Hello, Am 11.01.2017 um 18:40 schrieb Aleksandar Lazic: Just for my curiosity, why someone want no compression? There are a number of reasons to compile with a smaller number of dependencies: - smaller builds for embedded systems - faster

Re: [PATCH] MINOR: compression: fix -vv output without zlib/slz

2017-01-11 Thread Aleksandar Lazic
Hi. Am 11-01-2017 14:24, schrieb Lukas Tribus: When haproxy is compiled without zlib or slz, the output of haproxy -vv shows (null). Just for my curiosity, why someone want no compression? BR Aleks

Re: haproxy with support http/2 - Remote IP

2017-01-08 Thread Aleksandar Lazic
Hi Pavel Am 08-01-2017 14:00, schrieb Pavel Urbánek: Hello, do you have configuration apache for suport http/2 with haproxy ? [snipp] But i dont how setup apache to accept mod proxy. Maybe this can help. https://github.com/roadrunner2/mod-proxy-protocol Best regards Aleks S

Re: implementing http/2

2017-01-02 Thread Aleksandar Lazic
Hi Willy Am 01-01-2017 09:56, schrieb Willy Tarreau: Hi Aleks, On Sat, Dec 31, 2016 at 12:08:41AM +0100, Aleksandar Lazic wrote: Hi. I plan to try to implement http/2 into haproxy based on https://github.com/nghttp2/nghttp2. Before I start I must know if this the patches will be accepted

implementing http/2

2016-12-30 Thread Aleksandar Lazic
Hi. I plan to try to implement http/2 into haproxy based on https://github.com/nghttp2/nghttp2. Before I start I must know if this the patches will be accepted. There are some pros Lib is already used in some applications. It looks to me that the lib is able to handle event based traffic.

Re: Issuse support http/2 on haproxy

2016-12-27 Thread Aleksandar Lazic
Hi. Am 27-12-2016 09:52, schrieb Lieu Nguyen: Hi Team! I have config http/2 on haproxy(version 1.7.1) I don't think so. Please can your share your config, thanks. and nginx(version 1.10.1),openssl (1.0.2j), result is http/2 working nginx but when config nginx is backend server of haproxy

Re: [ANNOUNCE] haproxy-1.7.0

2016-11-27 Thread Aleksandar Lazic
Am 25-11-2016 18:51, schrieb Willy Tarreau: Hi, HAProxy 1.7.0 was released on 2016/11/25. It added 107 new commits after version 1.7-dev6. Most of them were late minor bug fixes and code cleanups. Over the last two weeks we finally managed to clean a lot of historical mess, just by splitting

Re: HAProxy doesn't respect the `hold valid 1s` setting

2016-11-11 Thread Aleksandar Lazic
Hi. Am 11-11-2016 04:29, schrieb Tao Wang: Can any help to fix this bug? I reported here long time ago. Which version of haproxy do you use? On 14 August 2016 at 15:06, Tao Wang wrote: Hi, As the issue reported on Github haproxy repo are disabled, I transfer the

Re: [ANNOUNCE] haproxy-1.7-dev6

2016-11-10 Thread Aleksandar Lazic
Hi Willy. Thank you as always for the detailed answer. Am 10-11-2016 06:51, schrieb Willy Tarreau: Hi Aleks, On Thu, Nov 10, 2016 at 12:52:22AM +0100, Aleksandar Lazic wrote: > http://www.haproxy.org/download/1.7/doc/SPOE.txt I have read the doc. very interesting. When I underst

Re: [ANNOUNCE] haproxy-1.7-dev6

2016-11-09 Thread Aleksandar Lazic
Hi Willy. Am 10-11-2016 00:18, schrieb Willy Tarreau: Hi, HAProxy 1.7-dev6 was released on 2016/11/09. It added 61 new commits after version 1.7-dev5. Great ;-) [snip] - and the new stream processing offload engine (SPOE). Yes, we had to give it a name. And the protocol is called

Re: Some clarification question

2016-10-28 Thread Aleksandar Lazic
Hi Cyril. Am 28-10-2016 19:21, schrieb Cyril Bonté: Hi Aleksandar, Le 28/10/2016 à 18:19, Aleksandar Lazic a écrit : Wrong lines in github link below [...] I have seen that when I use a browser, which accepts cookies, I always reach the same endpoint. https://caddy-template-usage-1-caddy

Re: Some clarification question

2016-10-28 Thread Aleksandar Lazic
Wrong lines in github link below Am 28-10-2016 17:57, schrieb Aleksandar Lazic: Hi. @openshift there is a discussion about stickiness. Let's say you have such a config. ### backend be_edge_http_1-caddy-teplate_caddy-template-usage mode http option redispatch option forwardfor

Some clarification question

2016-10-28 Thread Aleksandar Lazic
Hi. @openshift there is a discussion about stickiness. Let's say you have such a config. ### backend be_edge_http_1-caddy-teplate_caddy-template-usage mode http option redispatch option forwardfor balance leastconn timeout check 5000ms http-request set-header X-Forwarded-Host

Re: [ANNOUNCE] haproxy-1.7-dev5

2016-10-27 Thread Aleksandar Lazic
Hi. Am 26-10-2016 23:54, schrieb Cyril Bonté: Le 26/10/2016 à 23:31, Willy Tarreau a écrit : Hi Cyril, On Wed, Oct 26, 2016 at 11:19:29PM +0200, Cyril Bonté wrote: Hi all, Le 25/10/2016 à 23:15, Willy Tarreau a écrit : Hi, HAProxy 1.7-dev5 was released on 2016/10/25. It added 65 new

Re: http-reuse always, work quite well

2016-10-14 Thread Aleksandar Lazic
Hi Am 14-10-2016 16:33, schrieb Pavlos Parissis: Hi, I just want to drop a note and mention that http-reuse works very well for us: % ss -t state established '( sport = :http )'|wc -l 2113 % ss -t state established '( dport = :http )'| wc -l 408 As, you can see connections established to

Re: [ANNOUNCE] experimental spam filtering

2016-09-22 Thread Aleksandar Lazic
Hi Willy. Am 22-09-2016 17:41, schrieb Willy Tarreau: Yeah yeah some of you will say "ah at last, it's been long". ;-) [snipp] For now it only adds the "x-bogosity" header to the e-mail and still delivers it so that I can monitor the activity, but the purpose is to very quickly switch to

Re: Haproxy custom log - apache replacement

2016-09-08 Thread Aleksandar Lazic
Hi. Am 08-09-2016 21:16, schrieb Benoit GEORGELIN - Association Web4all: Hello members of the list, I was wondering if Haproxy custom log could log the same things as apache log format does ? Well due to the fact that we don't know your apache log format I assume you mean CLF (common log

Re: haproxy as SSL-endpoint and as SSL forwarder (tcp mode)

2016-09-03 Thread Aleksandar Lazic
Hi Am 02-09-2016 22:58, schrieb Klaus Foerster: For one project I use haproxy in https tcp mode. I configured it such, that depending on the server name detected via SNI, the data is forwarded via the proxy protocol to a proxy protocol aware https server (e.g. nginx) However for a few

New mailing list archive

2016-08-11 Thread Aleksandar Lazic
Hi. sorry to disturb you again but gmane.org is history https://lars.ingebrigtsen.no/2016/07/28/the-end-of-gmane/ ;-( Maybe we can try to use this one? https://www.mail-archive.com/haproxy@formilux.org/ Best regards Aleks

Re: HAProxy is not redirecting to Apache Tomcat Server on SLES

2016-08-11 Thread Aleksandar Lazic
Hi. Am 11-08-2016 13:49, schrieb Rahul Shivalkar: Hello, I am using HAProxy. Which version of HAProxy? haproxy -vv I have Apache tomcat cluster, ElasticSearch cluster and OrientDB Cluster, every node is on different machine having different IP address. I have configured 3 HAProxies, 1

Re: SYN dropping at reload time

2016-08-10 Thread Aleksandar Lazic
Dear Willy. Am 09-08-2016 19:37, schrieb Willy Tarreau: On Tue, Aug 09, 2016 at 05:06:15PM +0200, Aleksandar Lazic wrote: [snnipp] Yes that's true. that's a different concept. Note that it's not a matter of process but of socket. In SO_REUSEPORT mode we have multiple sockets for a same

Re: SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Am 09-08-2016 17:03, schrieb Lukas Tribus: Am 09.08.2016 um 16:39 schrieb Aleksandar Lazic: On Linux yes, because there is a race condition: http://lwn.net/Articles/542866/ http://engineeringblog.yelp.com/2015/04/true-zero-downtime-haproxy-reloads.html Thanks. So every Software on Linux

Re: SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Hi Lukas. Am 09-08-2016 16:13, schrieb Lukas Tribus: Hi Aleksandar, Am 09.08.2016 um 13:42 schrieb Aleksandar Lazic: I know it's not the latest one ;-/. Is there really a possibility that at soft-reload incoming request are failed? On Linux yes, because there is a race condition: http

SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Hi all. I just seen in the OpenShift repo the following comment. https://github.com/openshift/origin/blob/master/images/router/haproxy/reload-haproxy#L61-L63 ### # We install the syn eater so that connections that come in during the restart don't # go onto the wrong socket, which is then

Re: Unable to compile HAProxy on RHEL7

2016-07-23 Thread Aleksandar Lazic
Hi Am 22-07-2016 18:39, schrieb Dennis Jacobfeuerborn: On 22.07.2016 17:43, Kuldip Madnani wrote: I want to compile HAProxy version 1.6.7 for which i am using the following steps: 1. tar xzvf haproxy-1.6.7.tar.gz 2. make TARGET="generic" USE_STATIC_PCRE=1 USE_OPENSSL=1 USE_LIBCRYPT=1

haproxy as partly forward proxy

2016-07-15 Thread Aleksandar Lazic
Hi all. What do you think about this idea / statement. Due to the fact that HAProxy have now dns resolution and the possibility to use lua scripting is it possible to use haproxy as forward proxy? Yes I know this is a "crazy" idea but hey why not ;-) Opinions? Cheers Aleks

Re: How to convert a rewrite rule to a ACL rule correctly?

2016-06-23 Thread Aleksandar Lazic
Hi. Am 23-06-2016 18:49, schrieb Qingshan Xie: Hello Team, I'd like to convert a rewrite rule to a Haproxy ACL as below, RewriteRule ^(.*) http:///something/Search?q=/$1 I configured it as below but now working, acl is_test base_reg test.xyz.com/(.*) redirect location http://www.abc.com/$1

Re: rsyslog : splitting log by backend ?

2016-06-13 Thread Aleksandar Lazic
Hi Alexandre. Am 13-06-2016 12:07, schrieb Alexandre DERUMIER: Hi, I would like to split logs by backend through rsyslog dynamicaly. something like : /var/log/haproxy_($backend).log I think it can be done with rsyslog $template like this tutorial

Re: Rewriting Host Based on Path and Changing the Path

2016-06-09 Thread Aleksandar Lazic
worked at all: acl host_static hdr_beg(host) -i static. reqirep ^([^\ :]*\ \/)([^\/]+)(\/.*\n)Host:\ static\.([^\/]+?)$ \1\2\3Host:\ \2.\4 if host_static reqirep ^([^\ :]*)\ /[^/]+/(.*) \1\ /\2 if host_static On Thu, Jun 9, 2016 at 12:51 PM, Aleksandar Lazic <al-hapr...@none.at> wrote: Hi.

Re: Rewriting Host Based on Path and Changing the Path

2016-06-09 Thread Aleksandar Lazic
Hi. Am 09-06-2016 11:18, schrieb Chaim Keren-Tzion: Hi, Is there a way to rewrite the Host based on Path? I'm trying to redirect all requests of type: static.domain.com/site1/resource.jpg static.domain.com/site1/resource2.js static.domain.com/site2/resource3.gif

Re: use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi Holger Am 20-05-2016 17:02, schrieb Holger Just: Hi Aleks, Aleksandar Lazic wrote: My conclusion is that with or without " the ${...} is not substituted, at least in the bind line. From your output, it looks like you are using an older version of HAProxy. yep. [root@4a9889b

Re: use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi Holger. Am 20-05-2016 15:49, schrieb Holger Just: Hi Aleks, Aleksandar Lazic wrote: ### bind :${ROUTER_SERVICE_HTTP_PORT} ${ROUTER_SERVICE_HTTP_PORT_BIND_OPTONS} ### It's look to me that this is not possible. To quote from Section 2.3 of configuration.txt: Those variables

Re: License questions

2016-05-20 Thread Aleksandar Lazic
Hi Jonathan. Am 20-05-2016 16:05, schrieb Jonathan Fisher: Hey guys, Reading through the license, I had a couple of questions. HAProxy does not speak AJP, which is not terrible, but I was thinking about implementing a module for it. Maybe off topic and just for my curiosity 'why'. I have

use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi. Today I tried some fancy stuff ;-). https://github.com/git001/openshift_custom_haproxy_ext/commit/d30fdb4fae0988b9a35ee43fef5cf247ae822f6f#diff-f81691f60803593ee683f75fb91cdd03 ### bind :${ROUTER_SERVICE_HTTP_PORT} ${ROUTER_SERVICE_HTTP_PORT_BIND_OPTONS} ### It's look to me that this is

Re: Support for Keep-Alive header and timeouts

2016-04-25 Thread Aleksandar Lazic
ario where it may get killed ungracefully. Running v1.6.4 Cheers. On Mon, Apr 25, 2016 at 2:20 PM, Aleksandar Lazic <al-hapr...@none.at> wrote: Hi. Am 25-04-2016 14:01, schrieb Craig McLure: Hi, Does HAProxy support the Keep-Alive header, and a 'max connection duration' for Keep-A

Re: Support for Keep-Alive header and timeouts

2016-04-25 Thread Aleksandar Lazic
Hi. Am 25-04-2016 14:01, schrieb Craig McLure: Hi, Does HAProxy support the Keep-Alive header, and a 'max connection duration' for Keep-Alive connections? I've poured through the manual, but can't see anything obvious, but it would be useful for better control over Keep-Alive connections.

Re: HTTP 2

2016-04-22 Thread Aleksandar Lazic
Hi. Am 22-04-2016 07:46, schrieb Anil Yachareni (ayachare): Hi, Does HAProxy support HTTP2 yet? Pl. let me know. Please take a look into this mail thread. http://thread.gmane.org/gmane.comp.web.haproxy/27294 Best regards Aleks

Re: Q: about HTTP/2

2016-04-07 Thread Aleksandar Lazic
Hi Willy. Am 07-04-2016 18:01, schrieb Willy Tarreau: Hi Aleks, On Fri, Apr 01, 2016 at 12:18:54PM +0200, Aleksandar Lazic wrote: Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and p

Re: Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Baptiste. Am 01-04-2016 12:25, schrieb Baptiste: On Fri, Apr 1, 2016 at 12:18 PM, Aleksandar Lazic <al-hapr...@none.at> wrote: Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats

Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and plans for HTTP/2. Thank you very much. Best regards Aleks

Re: servers multiple sources

2016-03-25 Thread Aleksandar Lazic
Hi. Am 25-03-2016 11:05, schrieb Beluc: Hi, @James Brown : sure ;) I configure a server to use source a.b.c.d:1-6 and I got "Connect() failed for backend abcd: no free ports." Maybe a problem with kernel I use ... or the range is not high enough

Re: METH_CONNECT, HTTPS forward proxy

2016-03-23 Thread Aleksandar Lazic
Dear Jim. Am 23-03-2016 07:02, schrieb Jim Freeman: http://cbonte.github.io/haproxy-dconv/configuration-1.6.html#4.2-option%20http_proxy is probably the answer to my question, but does the system's libresolv() get used to dynamically map name to IP? (no resolvers list needed?)

Re: General SSL vs. non-SSL Performance

2016-03-20 Thread Aleksandar Lazic
Hi. Am 17-03-2016 16:55, schrieb Pavlos Parissis: On 17/03/2016 04:49 μμ, Nenad Merdanovic wrote: Hello Pavlos, On 3/17/2016 4:45 PM, Pavlos Parissis wrote: I am working(not very actively) on a solution which utilizes this. It will use www.vaultproject.io as central store, a generating

Re: General SSL vs. non-SSL Performance

2016-03-19 Thread Aleksandar Lazic
Hi. Am 17-03-2016 11:51, schrieb Gary Barrueto: Hi. On Mar 16, 2016 10:06 PM, "Willy Tarreau" < Here I don't know. TLS handshakes are one large part of what made me think that we must go multi-threaded instead of multi-process over the long term, just because I want to be able to pin

Re: General SSL vs. non-SSL Performance

2016-03-19 Thread Aleksandar Lazic
Hi Nenad Am 17-03-2016 19:27, schrieb Nenad Merdanovic: Hello Aleksandar On 3/17/2016 6:00 PM, Aleksandar Lazic wrote: Okay I'm now lost 8-O please can anyone help me to understand how the flow works. 1st Request client -> ssl handshake -> haproxy server 1 (tls ticket?!) 2nd Reques

Re: General SSL vs. non-SSL Performance

2016-03-18 Thread Aleksandar Lazic
Hi. Am 16-03-2016 15:17, schrieb Christian Ruppert: Hi, this is rather HAProxy unrelated so more a general problem but anyway.. I did some tests with SSL vs. non-SSL performance and I wanted to share my results with you guys but also trying to solve the actual problem So here is what I did:

Re: [PATCH] BUG/MINOR: log: GMT offset not updated when entering/leaving DST

2016-03-12 Thread Aleksandar Lazic
Am 12-03-2016 10:50, schrieb Willy Tarreau: Hi Benoit, On Sat, Mar 12, 2016 at 09:45:25AM +0100, Beno?t GARNIER wrote: > On Sat, Mar 12, Willy Tarreau wrote: [snipp] > An extra benefit of proceeding like this is that when we move to > multi-threading, we won't have to lock for something

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-04 Thread Aleksandar Lazic
Hi. Am 02-03-2016 07:48, schrieb Zoltan Lorincz: Jeff, thanks again for the detailed answer. I've already tested a configuration without various ACL's. Please can you try to run the connector with debug on.

Re: Haproxy, Internet Explorer and sporadic 408 response

2016-02-29 Thread Aleksandar Lazic
Hi. Am 29-02-2016 12:35, schrieb Dennis Jacobfeuerborn: Hi, I'm getting reports that occasionally IE users see 408 error when calling out Site but the behavior is not easily reproducible. I found something about this Problem in the archives:

Re: Feature Request for log stdout ...

2016-02-28 Thread Aleksandar Lazic
Hi. Am 18-02-2016 15:22, schrieb Willy Tarreau: Hi Aleks, On Thu, Feb 18, 2016 at 02:53:29PM +0100, Aleksandar Lazic wrote: [snipp] For openshift I will try to use 2 container in 1 pod. If there any interests I can write here if this works ;-) Sure, please report anyway. You can find

Re: Haproxy & Kubernetes, dynamic backend configuration

2016-02-25 Thread Aleksandar Lazic
Hi. Am 25-02-2016 16:15, schrieb Smain Kahlouch: Hi ! Sorry to bother you again with this question, but still i think it would be a great feature to loadbalance directly to pods from haproxy :) Is there any news on the roadmap about that ? How about DNS as mentioned below?

Re: Feature Request for log stdout ...

2016-02-18 Thread Aleksandar Lazic
On Thu, Feb 18, 2016 at 02:53:29PM +0100, Aleksandar Lazic wrote: But this moves just the stdout handling to other tools and does not solve the problem with blocking handling of std*, as far as I have understood right. Yes it does because if the logging daemon blocks, logs are simply lost o

Re: Feature Request for log stdout ...

2016-02-18 Thread Aleksandar Lazic
d, Feb 17, 2016 at 04:30:06PM +0100, Aleksandar Lazic wrote: Hi. how difficult is it to be able to add "log stdout;" to haproxy? [snipp] It's been discussed a few times in the past. The response is "no". It's totally insane to emit logs to a blocking destination. Your whol

Feature Request for log stdout ...

2016-02-17 Thread Aleksandar Lazic
Hi. how difficult is it to be able to add "log stdout;" to haproxy? I ask because in some PaaS environment is it difficult to setup a dedicated user yust for haproxy. It fits also a little bit better to http://12factor.net/logs BR Aleks

Re: Force client IP with PROXY protocol

2016-01-28 Thread Aleksandar Lazic
Am 28-01-2016 12:01, schrieb Jonathan Leroy - Inikup: 2016-01-28 11:47 GMT+01:00 Lukas Tribus : Doesn't: http-request set-src hdr(CF-Connecting-IP) in combination with a standard proxy-protocol config already do that? Yes, but it doesn't work with SPDY or HTTP/2

RE: Force client IP with PROXY protocol

2016-01-28 Thread Aleksandar Lazic
Am 28-01-2016 09:19, schrieb Lukas Tribus: Otherwise that would be nice to be able pass client IP address as an argument to send-proxy directive. Example: send-proxy hdr_ip(x-forwarded-for) Thats what Aleks proposed with something like this: http-request set-src hdr(CF-Connecting-IP)

Re: Force client IP with PROXY protocol

2016-01-27 Thread Aleksandar Lazic
Dear Jonathan, Am 27-01-2016 21:58, schrieb Jonathan Leroy - Inikup: Hi, 2016-01-27 21:33 GMT+01:00 Aleksandar Lazic <al-hapr...@none.at>: I see this possible ways .) http://nginx.org/en/docs/http/ngx_http_realip_module.html .) http://cbonte.github.io/haproxy-dconv/configuration-1.6.ht

Re: Force client IP with PROXY protocol

2016-01-27 Thread Aleksandar Lazic
Hi. Am 27-01-2016 21:18, schrieb Jonathan Leroy - Inikup: Hi, [snip] Now, I need to add CloudFlare in front HAProxy. CloudFlare return a "CF-Connecting-IP" containing client IP address. I know how to retrieve this header value, but not how to force it to be sent as client ip in the PROXY

Re: HAPROXY mailingarchive is not filling anymore since 2015-12-01

2016-01-16 Thread Aleksandar Lazic
ce 2015-12-01. > > Could you take a look? Thanks in advance. > > Kind regards, > PiBa-NL > > Op 3-1-2016 om 18:00 schreef Aleksandar Lazic: >> Hi. >> >> It looks like that marc have no more mails since 2015-12-01 >> >> http://marc.info/?l=haproxy >> >> http://marc.info/?l=haproxy=1=201512=2 >> >> BR Aleks >> >

Re: marc have not anymore mails

2016-01-10 Thread Aleksandar Lazic
Hi Am 03-01-2016 21:41, schrieb PiBa-NL: Ive send a mail to webguy at marc , last year that worked. Have you received any answer? BR Aleks Op 3-1-2016 om 18:00 schreef Aleksandar Lazic: Hi. It looks like that marc have no more mails since 2015-12-01 http://marc.info/?l=haproxy http

marc have not anymore mails

2016-01-03 Thread Aleksandar Lazic
Hi. It looks like that marc have no more mails since 2015-12-01 http://marc.info/?l=haproxy http://marc.info/?l=haproxy=1=201512=2 BR Aleks

Re: Source IP Affinity

2015-12-31 Thread Aleksandar Lazic
Hi. Am 30-12-2015 15:57, schrieb Hall, Colton: Hello, was wondering if you could answer a couple of questions pertaining to HAPROXY. We are interested in evaluating the product but not sure it will accomplish our goals. The main concerns are listed below. 1. Can we set persistency

Re: http/2 - missing something ...

2015-12-21 Thread Aleksandar Lazic
Hi. I have removed the direct mails on cc! Am 21-12-2015 16:34, schrieb Pavlo Zhuk: Folks, Sorry for offtopic, but I am observing more or less same situation with nginx. My HTTP/2 configuration works when frontend/backend are configured in TCP mode, but doesn't work if frontend/backend are in

Re: urlp strange behaviour ?

2015-12-08 Thread Aleksandar Lazic
Hi. Am 08-12-2015 11:23, schrieb Thierry FOURNIER: Hi, I agree with you, but in HAProxy, the ';' is considered as parameter delimiter. Its hardcoded, and I don't known the reason. There are several reasons for the ';' to be a separator similar like '&'.

Re: CPU 100% when waiting for the client timeout

2015-11-20 Thread Aleksandar Lazic
Hi. Am 20-11-2015 11:59, schrieb baiyang: Hi Willy, This one seems to have missed 3 years of bugfixes I've just done a "apt-get update && apt-get upgrade" successfully and reboot the machine this week. I think the OS is fresh enough, but I'll try to upgrade the kernal to a newer one. :-)

Re: appsession replacement in 1.6

2015-11-19 Thread Aleksandar Lazic
Hi Sylvain & Willy. Am 19-11-2015 19:41, schrieb Willy Tarreau: Hi Sylvain, On Thu, Nov 19, 2015 at 05:04:40PM +0100, Sylvain Faivre wrote: >What Aleks meant is that you don't need http-buffer-request as it's >only used to process POST data which isn't your case. Oh OK. Well, I did not talk

Re: appsession replacement in 1.6

2015-11-16 Thread Aleksandar Lazic
Hi Sylvain. Am 16-11-2015 17:06, schrieb Sylvain Faivre: Hi Aleks, On 11/10/2015 10:56 PM, Aleksandar Lazic wrote: Dear Sylvain Faivre, [snipp] This would be helpfully to see the full response. Maybe some appserver behaves different. As far as I know, there is no way for the server

Re: Experiences with Docker and linking containers for zero downtime deployments

2015-11-15 Thread Aleksandar Lazic
Hi Paul. Am 14-11-2015 14:00, schrieb Paul Menzel: Dear HAProxy folks, I am using a Docker setup to serve Web application using a database. HAProxy, the Web app and the database each run in a separate Docker container. The HAProxy container is than started with the command below.

Re: acl regex

2015-11-12 Thread Aleksandar Lazic
Hi. Am 12-11-2015 21:16, schrieb Guillaume Bourque: Hi all, I’m not far but it does not work so any recommendation would be very helpfull I just need some very simple redirect but after looking into aloa doc the happy doc, I can’t find examples that could help me do this, okay I must admit I

Re: HAProxy and backend on the same box

2015-11-12 Thread Aleksandar Lazic
Am 13-11-2015 06:14, schrieb jaleel: It works if HAProxy and backend are in different box, but when both are in same box it didn't work Maybe because the iptables rule is a different from 'localhost' then from external. Please take a look at the picture

Re: HAProxy and backend on the same box

2015-11-12 Thread Aleksandar Lazic
Hi. But do you really think this is a haproxy Problem? Am 13-11-2015 08:38, schrieb Aleksandar Lazic: Am 13-11-2015 06:14, schrieb jaleel: It works if HAProxy and backend are in different box, but when both are in same box it didn't work Maybe because the iptables rule is a different from

Re: appsession replacement in 1.6

2015-11-10 Thread Aleksandar Lazic
Dear Sylvain Faivre, Am 10-11-2015 12:48, schrieb Sylvain Faivre: On 11/10/2015 12:00 AM, Aleksandar Lazic wrote: Hi Sylvain Faivre. Am 09-11-2015 17:31, schrieb Sylvain Faivre: [snipp] So, I've got this so far : backend http stick-table type string len 24 size 10m expire 1h peers

Re: Debug mode not working?!

2015-11-09 Thread Aleksandar Lazic
Am 09-11-2015 11:34, schrieb Willy Tarreau: Hi Aleks, On Sun, Nov 08, 2015 at 04:24:29PM +0100, Aleksandar Lazic wrote: Hi. Today I have tried to debug haproxy as in the old days ;-), I was not able to see the communication on stderr. I'm sure I have something missed in the past

Re: Debug mode not working?!

2015-11-09 Thread Aleksandar Lazic
Am 09-11-2015 22:21, schrieb Willy Tarreau: On Mon, Nov 09, 2015 at 10:15:46PM +0100, Aleksandar Lazic wrote: ... epoll_wait(3, {}, 200, 1000)= 0 epoll_wait(3, {{EPOLLIN, {u32=5, u64=5}}}, 200, 1000) = 1 accept4(5, {sa_family=AF_INET, sin_port=htons(52310), sin_addr

<    1   2   3   4   5   6   >