Re: SSL handshake failure

2013-02-11 Thread Emeric Brun
On 02/08/2013 08:27 PM, Samat Galimov wrote: You are right. After I start haproxy with patch it establishes first connection normally, as it should. All following connections are randomly dropping an error as before. Could you check your logs, Do you see HTTP redirects (status codes 30x) I

Config parsing

2013-02-11 Thread Aleksandr Vinokurov
Hello, Willy I'm studing your code of haproxy and have a question: why you parse config by hand and not use YACC/BISON or smth. like them? -- Aleksandr Vinokurov @aleksandrvin

Problems with 1.5-dev17 and bind to interface

2013-02-11 Thread Cornelius Riemenschneider
Hello, We try to use haproxy for internal load balancing in a high availability setup together with keepalived and a virtual ip on the internal NIC. We don't want to expose our internal services to the public, so we want to restrict the open ports to the internal NIC, eth1. We can't bind

Re: SSL handshake failure

2013-02-11 Thread Samat Galimov
First connectin, gracefully started closed: 0001:https.accept(0005)=0007 from [5.9.11.40:25188] 0002:decipher.accept(0006)=0009 from [5.9.11.40:25188] 0002:decipher.clicls[0009:] 0002:decipher.closed[0009:] 0001:https.srvcls[0007:0008] 0001:https.clicls[0007:0008]

haproxy 1.4.10 and apache 2.2 re-routing issues

2013-02-11 Thread Amol
Hi, so i have about 6 app servers running apache and 1 load balancer running haproxy 1.4.10 the issue i see lately is that even if one of the app server is having issues such as running out of memory or disk space etc..the load balancer keeps send the traffic to that app server should it not

Re: haproxy 1.4.10 and apache 2.2 re-routing issues

2013-02-11 Thread shouldbe q931
On Mon, Feb 11, 2013 at 4:25 PM, Amol mandm_z...@yahoo.com wrote: Hi, so i have about 6 app servers running apache and 1 load balancer running haproxy 1.4.10 the issue i see lately is that even if one of the app server is having issues such as running out of memory or disk space etc..the

Re: Problems with 1.5-dev17 and bind to interface

2013-02-11 Thread shouldbe q931
On Mon, Feb 11, 2013 at 1:45 PM, Cornelius Riemenschneider c...@itscope.de wrote: ** Hello, We try to use haproxy for internal load balancing in a high availability setup together with keepalived and a virtual ip on the internal NIC. We don't want to expose our internal services to the

Re: haproxy 1.4.10 and apache 2.2 re-routing issues

2013-02-11 Thread Jonathan Matthews
[ Mail to the list appeared blocked last time I tried due to use of SORBS as a definite indicator of spam. Admin - this is not a good idea, especially when large mail provider addresses get blacklisted! ] On 11 February 2013 16:25, Amol mandm_z...@yahoo.com wrote: Hi, so i have about 6 app

RE: Problems with 1.5-dev17 and bind to interface

2013-02-11 Thread Cornelius Riemenschneider
Thanks for your answers, that kernel setting did help me. But nevertheless, bind interface seems to be buggy, isn't it? Thanks, Cornelius Riemenschneider -- ITscope GmbH Ludwig-Erhard-Alle 20 76131 Karlsruhe Email: cornelius.riemenschnei...@itscope.de https://www.itscope.com

Re: haproxy 1.4.10 and apache 2.2 re-routing issues

2013-02-11 Thread Amol
ok i got the point since the check.txt was an empty file and wasn't actually doing any specific task on the server, it kept responding with may be an http 200 message so instead if i have a file like check.php which has ?php echo im healthy; ? then it would run this and wait for the response

RE: Problems with 1.5-dev17 and bind to interface

2013-02-11 Thread Lukas Tribus
frontend nodes maxconn 2400 bind :12340 interface eth1 default_backend nodes but portscans from another node in the internal network show that 12340 is sometimes open, but most of the it is closed. We believe this is a bug in haproxy. Probably haproxy starts when the VIP

Re: Problems with 1.5-dev17 and bind to interface

2013-02-11 Thread shouldbe q931
On Mon, Feb 11, 2013 at 5:20 PM, Cornelius Riemenschneider c...@itscope.dewrote: ** Thanks for your answers, that kernel setting did help me. But nevertheless, bind interface seems to be buggy, isn't it? Thanks, For a basic keepalived.conf from here

Re: haproxy 1.4.10 and apache 2.2 re-routing issues

2013-02-11 Thread shouldbe q931
On Mon, Feb 11, 2013 at 6:00 PM, Amol mandm_z...@yahoo.com wrote: ok i got the point since the check.txt was an empty file and wasn't actually doing any specific task on the server, it kept responding with may be an http 200 message so instead if i have a file like check.php which has ?php

[PATCH 2/7] checks: Make desc argument to set_server_check_status const

2013-02-11 Thread Simon Horman
This parameter is not modified by set_server_check_status() and thus may be const. Signed-off-by: Simon Horman ho...@verge.net.au --- src/checks.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/checks.c b/src/checks.c index a933bba..ca5a7ec 100644 --- a/src/checks.c

[PATCH 1/7] Correct logic in cut_crlf()

2013-02-11 Thread Simon Horman
This corrects what appears to be logic errors in cut_crlf(). I assume that the intention of this function is to truncate a string at the first cr or lf. However, currently lf are ignored. If the current logic is intended then it may be simplified as: while (*s != '\r') { Cc: Krzysztof

[PATCH 0/7 v2] Agent Health Check

2013-02-11 Thread Simon Horman
Hi, this series was previously sent as [PATCH 0/5] Dynamic Health Check. This revised series addresses feedback received and aims to implement the first stage of the following three-stage plan proposed by Willy Tarreau. 1) we merge Simon's work with the option lb-agent-chk directive which

[PATCH 3/7] dumpstats: Make cli_release_handler() static

2013-02-11 Thread Simon Horman
Make cli_release_handler() static, it is only used inside dumpstats.c Signed-off-by: Simon Horman ho...@verge.net.au --- src/dumpstats.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/dumpstats.c b/src/dumpstats.c index 94e94f2..5954e8c 100644 --- a/src/dumpstats.c

[PATCH 4/7] server: Break out set weight processing code

2013-02-11 Thread Simon Horman
Break out set weight processing code. This is in preparation for reusing the code. Also, remove duplicate check in nested if clauses. {px-lbprm.algo BE_LB_PROP_DYN) is checked by the immediate outer if clause, so there is no need to check it a second time. Signed-off-by: Simon Horman

[PATCH 6/7] server: Tighten up parsing of weight string

2013-02-11 Thread Simon Horman
Detect: * Empty weight string, including no digits before '%' in relative weight string * Trailing garbage, including between the last integer and '%' in relative weights The motivation for this is to allow the weight string to be safely logged if successfully parsed by this function

[PATCH 5/7] server: Allow relative weights greater than 100%

2013-02-11 Thread Simon Horman
Allow relative weights greater than 100%, capping the absolute value to 256 which is the largest supported absolute weight. Signed-off-by: Simon Horman ho...@verge.net.au --- doc/configuration.txt | 25 + src/server.c |7 ++- 2 files changed, 19

[PATCH 7/7] checks: Add agent health check

2013-02-11 Thread Simon Horman
Support a agent health check performed by opening a TCP socket to a pre-defined port and reading an ASCII string. The string should have one of the following forms: * An ASCII representation of an positive integer percentage. e.g. 75% Values in this format will set the weight proportional to