Haproxy using acl's on 2nd frontend

2012-01-18 Thread Chris
Hi I have a haproxy config that has 2 frontends, one for https and one for http. The first frontend has miltiple backends configured and various acl's to route traffic to specific backends. The 2nd frontend just has a default backend. Now I find myself need to add multiple backends to the 2nd

Possible bug in 1.5-dev7

2012-01-18 Thread Sander Klein
Hi, I'm observing some strange behavior with slowstart and the track option. When taking out web1 for maintenance and putting it back online the weight of cluster1/web1 returns to 100 in 5 minutes but cluster2/web1 keeps stuk at 7. Is this expected behavior? I have the following config:

source ip - tcp mode

2012-01-18 Thread Karthik Iyer
Hello, Is there any way to get the souce ip exposed to the nodes for tcp mode in someway while running haproxy as non-tproxy, for haproxy 1.4 ? For http mode we have this x-forwarded-for to the rescue. On Freenode #haproxy, someone mentioned that there is a patch for this, I tried to google for

Re: source ip - tcp mode

2012-01-18 Thread YHB Sistem Yönetimi
I asked a similar question in last month. Willy said that; 26 Aralık 2011 21:31 tarihinde Willy Tarreau w...@1wt.eu yazdı: No, there is still no such method. As an alternative, you could check if you can implement the PROXY protocol on your servers and have haproxy pass them all the L4

ACL to IPv6

2012-01-18 Thread Agustin Lopez
Hello! I will like to know if it is possible set one ACL to filter IPv6 addresses. I have read that IPv4 is Ok. Some like: frontend ... acl ipv6_ok src :XXX::0:0:0:0:0/48 ... Thanks, Agustin

Re: ACL to IPv6

2012-01-18 Thread Brane F. Gračnar
On 01/18/2012 01:59 PM, Agustin Lopez wrote: Hello! I will like to know if it is possible set one ACL to filter IPv6 addresses. I have read that IPv4 is Ok. Some like: frontend ... acl ipv6_ok src :XXX::0:0:0:0:0/48 Nope, matching ipv6 addresses is

Re: source ip - tcp mode

2012-01-18 Thread James Bardin
On Wed, Jan 18, 2012 at 5:43 AM, Karthik Iyer karthiksz...@gmail.com wrote: Is there any way to get the souce ip exposed to the nodes for tcp mode in someway while running haproxy as non-tproxy, for haproxy 1.4 ? The most common use for TCP mode is balancing SSL traffic, where having the IP

strange udp port bind issue

2012-01-18 Thread Coates, James
We have been running haproxy for years and are currently running 1.4.8. Recently we upgraded to exchange 2010 and are balancing it behind haproxy with the following config. Normally when we need to do maintenance, we will change the config and run haproxy with the -sf switch to take over for

Returned mail: Data format error

2012-01-18 Thread Post Office
Your mail 115.127.8.195:25675-88.191.124.161:25 contains contaminated file _From__Post_Office___postmaster_formilux.org___Date_19_Jan_2012_13:36:43__Subj_Returned_mail:_Data_format_error_/text.scr with virus Email-Worm.Win32.Mydoom.m,so it is dropped.