Re: Simple health check return... -- without backend needed?

2013-01-18 Thread Baptiste
monitor-uri looks like it would only work as a path match. I need to match a Host header. eg. ping.example.com (always return 200 when haproxy is running) vs www.example.com (proxy to backend pool) Hi, you can use an ACL to forward ping.example.com to a backend with no server. HAProxy

Re: Simple health check return... -- without backend needed?

2013-01-18 Thread Jonathan Matthews
On 18 January 2013 02:26, Joel Krauska jkrau...@gmail.com wrote: monitor-uri looks like it would only work as a path match. I need to match a Host header. Could you elaborate a bit on why you're trying to do this? Is it for a human or machine audience? Etc etc ... Jonathan -- Jonathan

Re: Simple health check return... -- without backend needed?

2013-01-18 Thread Joel Krauska
On Fri, Jan 18, 2013 at 1:44 AM, Jonathan Matthews cont...@jpluscplusm.comwrote: On 18 January 2013 02:26, Joel Krauska jkrau...@gmail.com wrote: monitor-uri looks like it would only work as a path match. I need to match a Host header. Could you elaborate a bit on why you're trying to do

Re: SSL termination/SNI routing

2013-01-18 Thread Baptiste
Hi, My answers inline :) On Fri, Jan 18, 2013 at 2:01 PM, shouldbe q931 shouldbeq...@gmail.com wrote: Hi All, I've been using HAProxy for a while as a load balancer in front of Exchange 2010 and it has worked very nicely :-) excellent choice ! I'm faced with an issue that I think HAProxy

Failed to persist on SSL session ID

2013-01-18 Thread Godbach
Hi, all I have tested persistence on SSL session ID of haproxy-1.5-dev16. The main configuration of frontend and backend as below: frontend fe bind 172.22.16.112:443 ssl crt /home/fortiadc/ca-user-key.pem ca-file /home/fortiadc/ca-root.cer #verify required crl-file

Re: Failed to persist on SSL session ID

2013-01-18 Thread Emeric BRUN
Hi, If you want to handle ssl offloading on haproxy and ssl session id persistance you should use: stick on ssl_session_id Payload_lv method is used when haproxy doesn't perform ssl offloading and load balance in tcp mode. Note: in addition, there is a lot of fixes between dev16 and dev17.

Re: SSL termination/SNI routing

2013-01-18 Thread shouldbe q931
Thank you both for your replies :-) The _glaringly_ obvious solution of using two IP addresses I had completely missed, a complete can't see the wood for the trees... My current config (stripped down) is listen Exchange2010 bind 1.2.3.4:80 bind 1.2.3.4:443 bind

Re: SSL termination/SNI routing

2013-01-18 Thread Baptiste
On Fri, Jan 18, 2013 at 9:11 PM, shouldbe q931 shouldbeq...@gmail.com wrote: Thank you both for your replies :-) The _glaringly_ obvious solution of using two IP addresses I had completely missed, a complete can't see the wood for the trees... My current config (stripped down) is listen