need to set up haproxy as a load balancer

2013-03-05 Thread Dhaval Jaiswal
Hi List, I am newbee to set up the HAProxy. I wanted to set up the HAProxy between the httpd apache web server tomcat apps server as a load balancer. Currently we are using sticky session for the load balancing. However, HAProxy, we can use the round robin method to balance all the request

Re: need to set up haproxy as a load balancer

2013-03-05 Thread shouldbe q931
On Tue, Mar 5, 2013 at 7:32 PM, Dhaval Jaiswal dhaval.jais...@via.comwrote: Hi List, I am newbee to set up the HAProxy. I wanted to set up the HAProxy between the httpd apache web server tomcat apps server as a load balancer. Currently we are using sticky session for the load balancing.

Is there any plan to support OCSP to verify cert

2013-03-05 Thread Godbach
Hi, all OCSP(Online Certificate Status Protocol) is also used to verify certificates. I am wondering that if there is any plan to support OCSP in haproxy in the future. Best Regards, Godbach

Re: Is there any plan to support OCSP to verify cert

2013-03-05 Thread John Marrett
Godbach, I'm interested to better understand what you want to do with OSCP. Ordinarily if you present a certificate using haproxy clients will validate it using methods specified in the certificate itself. If these include OSCP than it could potentially be used. In this context your question

Re: Is there any plan to support OCSP to verify cert

2013-03-05 Thread Godbach
Hi, JohnF Thanks for your reply. OCSP which has been supported by openssl library and stunnel is another way to validate client certificates besides CRL. And CRL has a shortcoming that it should be updated in time. So I am wondering that whether haproxy will suport OCSP to verify cleint

Re: Is there any plan to support OCSP to verify cert

2013-03-05 Thread Godbach
Hi, JohnF Thanks for your reply. OCSP which has been supported by openssl library and stunnel is another way to validate client certificates besides CRL. And CRL has a shortcoming that it should be updated in time. So I am wondering that whether haproxy will support OCSP to validate client