Re: Adding Configuration parts via File

2019-03-11 Thread Philipp Kolmann
fantastic! Philipp -- --- DI Mag. Philipp Kolmann mail: philipp.kolm...@tuwien.ac.at Technische Universitaet Wien web: www.it.tuwien.ac.at IT Solutions - Applications tel: +43(1

Re: Adding Configuration parts via File

2019-03-08 Thread Philipp Kolmann
via maps?     http-request redirect code 302 location *value* if path_beg *key * Thanks Philipp ** smime.p7s Description: S/MIME Cryptographic Signature

Re: Adding Configuration parts via File

2019-03-08 Thread Philipp Kolmann
gets used by HAproxy include statement. Does this workaround solve your use case? Regarding the IP Adresses it works as expected. The include statement (or whatever) still would be very welcome for other things but IP lists. Thanks for the hint, Philipp smime.p7s Description: S/MIME Cryptographic Signature

Adding Configuration parts via File

2019-03-08 Thread Philipp Kolmann
such an include option be made for the config files? thanks Philipp -- --- DI Mag. Philipp Kolmann mail: philipp.kolm...@tuwien.ac.at Technische Universitaet Wien web: www.it.tuwien.ac.at IT Solutions

RESEND [PATCH] Testing/ Minor: Add a testcase for my multi-port + multi-server listener

2018-03-13 Thread Philipp Kolmann
Hi, I had a patch for my issue with multi-port + multi-server listener that got fixed in 1.7.10 that seems to have gotten forgotten. I add this patch again. Thanks for considering adding it to the test cases. thanks Philipp

Re: server template feature

2018-02-23 Thread Philipp Buehler
Am 23.02.2018 09:57 schrieb Aleksandar Lazic: Can I run something like this? ``` server-template units 1-40 "10.0.8.${num}":"1000${num}" maxconn 2 check ``` Because I haven't seen that the iterator is exported maybe it's not possible. As I see it from docs and the haproxy-blog*,

[PATCH] Add a testcase for my multi-port + multi-server listener

2018-02-19 Thread Philipp Kolmann
Hi, I had a patch for my issue with multi-port + multi-server listener that got fixed in 1.7.10 that seems to have gotten forgotten. I add this patch again. Thanks for considering adding it to the test cases. thanks Philipp

Re: Haproxy 1.8 version help

2018-01-03 Thread Philipp Buehler
Am 03.01.2018 17:39 schrieb Lukas Tribus: To compile Haproxy 1.8 with threads, at least GCC 4.7 is needed. CentOs 6 only ships GCC 4.4.7, therefor compilation fails. Waaah, thanks for telling before I tried to rush 1.8 to customer :-P Rather not in the mood to make a build-VM with 4.7+ on C6

Re: Debian upgrade to haproxy 1.7.5: tcp-check fails with Socket error, info: "No port available for the TCP connection"

2017-10-24 Thread Philipp Kolmann
stener to the tcp-check test config. See attached patch file. thanks Philipp -- --- DI Mag. Philipp Kolmann mail: philipp.kolm...@tuwien.ac.at Technische Universitaet Wien web: www.zid.tuwien

HAProxy and Exchange 2016 MAPI/RPC over HTTP

2017-08-03 Thread Philipp Zeitschel
n't post it. Thanks in advance Regards Philipp

Re: Debian upgrade to haproxy 1.7.5: tcp-check fails with Socket error, info: "No port available for the TCP connection"

2017-06-29 Thread Philipp Kolmann
Hi Lukas, On 06/19/17 21:23, Lukas Tribus wrote: Am 19.06.2017 um 11:27 schrieb Philipp Kolmann: This config works in 1.5.8 but fails to tcp-check in 1.7.5. The errors in the logfile look like this: Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13a is DOWN, reason

RE: Rewriting/redirecting part of URL

2017-06-29 Thread Philipp Buehler
Am 29.06.2017 13:32 schrieb Mark Holmes: This worked perfectly - thanks again Philipp - but now the goalposts have moved slightly... So what I need to do is If a request comes in for www.old.com/audi/thesite/pages I'd like to redirect to www.new.com/audi/thesite/pages maintaining

Re: Rewriting/redirecting part of URL

2017-06-28 Thread Philipp Buehler
Am 28.06.2017 19:20 schrieb Mark Holmes: Note that /audi/page/whatever will change all the time - essentially, I want to preserve whatever comes after the first /, just rewriting the domain part I feel bad for "Audi" (shouts from an ex-Daimler one.. :D ) now. With 1.6 you can just do that

Debian upgrade to haproxy 1.7.5: tcp-check fails with Socket error, info: "No port available for the TCP connection"

2017-06-19 Thread Philipp Kolmann
equeued, 0 remaining in queue. Jun 19 10:52:57 testha2 haproxy[5042]: proxy mail-exchtest-smtp has no server available! I haven't found any messages with this bug and how to fix it, Thanks Philipp -- --- DI Mag. Phi

Re: License questions

2016-05-20 Thread Philipp Buehler
Am 20.05.2016 16:12 schrieb Aleksandar Lazic: Maybe off topic and just for my curiosity 'why'. Lazy developers. Oh so shiny to get client-ip and other info "for free" from the ajp-listener/container. Next to any jboss/tomcat app I get on the table "suffers" from this. There are one/some that

Re: Proposal: auto-reload of ACL files

2016-04-29 Thread Philipp Buehler
Am 29.04.2016 17:27 schrieb Chad Lavoie: HAProxy sockets support "add acl " to add an ACL entry or "add map" to add to a map. Can be used with "clear acl"/"clear map" to empty the table first to refresh them completely. See

Proposal: auto-reload of ACL files

2016-04-29 Thread Philipp Buehler
Hi, I quite like not to reload haproxy every here and there (stats and races..) and make quite some use of 'acl foo .. -f aclfile'. Now feature-creep mounts and aclfile shall be build/extended "on demand" (think of something along fail2ban). Besides losing stats, that can grow into a problem

Re: Temporary Maintenance frontend for all port 80/443 ?

2016-01-24 Thread Philipp Buehler
Am 24.01.2016 17:58 schrieb Jeff Buchbinder: The way we've done it has been to add a maintenance server to all of our backends, then use the admin socket to iteratively disable all "real" servers for our backends. The maintenance server points all requests to your temporary page. Something

Re: [PATCH] Support statistics in multi-process mode

2015-09-14 Thread Philipp Kolmann
the patch. The original mail is from Hiep Nguyen, hie...@vccloud.vn (CCed). I just wanted to re-raise the topic again, since the mail from Hiep seemed to have drowned and I am interested in this feature. @Hiep: Please look at Willi's suggestions. Thanks Philipp

Re: [PATCH] Support statistics in multi-process mode

2015-09-02 Thread Philipp Kolmann
e 100644 src/shm_proxy.c http://comments.gmane.org/gmane.comp.web.haproxy/21470 Could you please recheck, if that would be a possible feature? thanks Philipp -- --- DI Mag. Philipp Kolmann mail: kolm...@zid.

Config-Snippet: provide sorry, we're back later page to general public, but allow administrative access to backend

2015-02-10 Thread Philipp
Hello, likely that we are not alone with the following requirement: - provide a sorry-page (maintenance) if backends are unavailable - have the ability to still access the backend servers from certain ip-addresses (administration after deployment..) - no restarts of haproxy ;-) (since this is

Override maintainance setting for special source IP

2014-12-10 Thread Philipp Kolmann
: maxconn 1 check All clients are now redirected to htc2 and don't see the troublesome htc1. We now would like to debug this issue and specify special source ip addresses that get routet to the htc1 in maintainance mode. Is this possible? thanks Philipp

Re: Override maintainance setting for special source IP

2014-12-10 Thread Philipp Kolmann
amdin-socket? thanks Philipp -- --- DI Mag. Philipp Kolmann mail: kolm...@zid.tuwien.ac.at Technische Universitaet Wien web: www.zid.tuwien.ac.at Zentraler Informatikdienst (ZID

Re: Modify http response code

2014-12-10 Thread Philipp
Am 10.12.2014 14:55 schrieb Dennis Jacobfeuerborn: Hi, is there a way to modify the http code of a response? Right now I use a backup server to deliver a static maintenance page but I want it to be delivered with a 503 code instead of 200. Is there a way to modify the response code like this?

Re: mixup in stats summary (4xx/5xx)?

2014-11-14 Thread Philipp
If you missed it: http://marc.info/?l=haproxym=141561304511354w=2 Anyone? Am 10.11.2014 10:49 schrieb Philipp: Hello, this is confusing me and maybe someone could shed some light (or reasoning) into the count/sums for the http-responses from frontend and backends.

mixup in stats summary (4xx/5xx)?

2014-11-10 Thread Philipp
. --Philipp

Session counter doesnt increase for stats socket

2014-09-29 Thread Philipp Kolmann
128.130.XX.XX acl stats-access src 2001:629:XX::XX # wspk.zid http-request deny if ! stats-access thanks Philipp -- --- DI Mag. Philipp Kolmann mail: kolm...@zid.tuwien.ac.at Technische Universitaet

Re: [ANNOUNCE] haproxy-1.5.0

2014-06-19 Thread Philipp
Am 19.06.2014 21:54 schrieb Willy Tarreau: Today is a great day, the reward of 4 years of hard work. I'm announcing the release of HAProxy 1.5.0. A *BIG* Thank-You to all of those who contributed to this major milestone. Customers will be so happy to learn that their

Re: SAProuter behind HAproxy

2014-05-16 Thread Philipp Kolmann
-s0 -w haproxy.backend.dmp host router-12a.zap.tuwien.ac.at or host router-12b.zap.tuwien.ac.at Thanks Philipp -- --- DI Mag. Philipp Kolmann mail: kolm...@zid.tuwien.ac.at Technische Universitaet Wien

Re: SAProuter behind HAproxy

2014-05-16 Thread Philipp Kolmann
it declares timeout client 7200s #alctl: client inactivity then srvtimeout 5 Philipp, please remove this second one from your configuration. Mercy Cyril, I didn't see that line. It was in the original debian package and it slipped when I added my custom lines

SAProuter behind HAproxy

2014-05-15 Thread Philipp Kolmann
:10:54.789] router-zap router-12a 128.130.XXX.63:3299 1/0/69959 19629 sD 0/0/0/0/0 0/0 Has anyone an idea, if this setup is possible? thanks Philipp -- --- DI Mag. Philipp Kolmann mail: kolm...@zid.tuwien.ac.at

Re: haproxy for ajp (tomcat)?

2014-04-26 Thread Philipp
Am 25.04.2014 19:19 schrieb Paul Hirose: I was wondering if anyone uses haproxy for http - ajp (tomcat) Dont go there, the proposed gains of AJP over HTTP are not relevant today. It's been a while so I dont have the numbers around any more, but we did some thorough testing of apache/ajp

Re: Recommended strategy for running 1.5 in production

2014-04-16 Thread Philipp
Am 16.04.2014 17:40 schrieb Willy Tarreau: I think you summarized very well how to carefully use a development version in prod. That requires a bit of care, but with that you can get both nice features and quick fixes. Indeed :) After 1.5 is released, I'd like to switch to a faster and more

Fwd: Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Philipp
Missed the reply-to :) Originalnachricht Thanks for the data point, Philipp. If you resend your reply to the list, that might be useful for people other than just me :-) J On 15 April 2014 09:26, Philipp e1c1bac6253dc54a1e89ddc046585...@posteo.net wrote: Am 14.04.2014 23:27

Re: FYI: OpenSSL's CVE-2014-0160

2014-04-08 Thread Philipp
Am 08.04.2014 10:31 schrieb duncan hall: You can test if you are vulnerable here: http://filippo.io/Heartbleed/ Or test yourself (without leaking information to some website): http://s3.jspenguin.org/ssltest.py RHEL/Centos has an update (cherrypick fix) to 1.0.1e-16.el6_5.7

reqrep with a match/backref into Host: header?

2014-02-28 Thread Philipp
Hi, current functional setup: frontend f acl ssfc_dev hdr(host) -m str dev.example.com acl ssfc_img hdr(host) -m str img.example.com [..] reqrep ^GET[\ \t]*/(.*) GET\ /dev.example.com/\1 if ssfc_dev reqrep ^GET[\ \t]*/(.*) GET\ /img.example.com/\1 if ssfc_img the backend webserver treats that

GIT RSS and ATOM feeds links

2013-10-18 Thread Philipp Kolmann
=472b1ee115f45129ea3fc19e26f85b3ec9715abe/link but this port is not open. If you got some seconds to spare maybe you could fix this. thanks Philipp [1] http://git.1wt.eu/web?p=haproxy.git;a=rss -- --- DI Mag. Philipp Kolmann mail: kolm

Re: IPv6 vrrp and bind transparent

2013-03-28 Thread Philipp Kolmann
On 2013-03-27 11:22, Lukas Tribus wrote: What kernel are you running? You need at least 2.6.37 to do this with non-local IPv6 binds. Thanks to Lukas and Emeric, that was exactly the issue. Thanks for pointing me to the right direction. Philipp

IPv6 vrrp and bind transparent

2013-03-27 Thread Philipp Kolmann
like to also provide IPv6 access to our LDAP infrastructure (and www later on as well). thanks Philipp