RE: Active/active HAProxy

2013-03-21 Thread Lukas Tribus
It's a point in time dump and restore of the in flight packets. Can't dump the details and in flight content of a TCP session if the host is already dead. So either this will work only for manual switchovers (but not for sudden hardware/software failure; also at this point TCP connection

option httpchk

2013-03-21 Thread Wolfgang Routschka
Hello, I have a question to configure health checks in haproxy default I´m not configure option httpchk in my haproxy configuration. webserver1 and webserver2 ist answering. (roundrobin balance) webserver1 is down (service httpd stop) and webserver2 is answering without any problems. GREAT!

Please help to configure Haproxy with SSL support

2013-03-21 Thread Eswaramoorthy R
Dear Team, We are trying to load balance two app servers running on tomcat with ssl enabled using HAPROXY , but we couldn’t find proper resources to configure the same Please share us the steps to configure the same which will help us a lot Thank you..! Regards, Eswar

RE: Please help to configure Haproxy with SSL support

2013-03-21 Thread Lukas Tribus
SSL is possible in the 1.5 development branch only. You can find all the necessary informations on the website http://haproxy.1wt.eu/ If you need someone guiding you step by step trough the configuration, I would suggest you acquire commercial support:

AW: option httpchk

2013-03-21 Thread Wolfgang Routschka
thanks for your answers It works -Ursprüngliche Nachricht- Von: Baptiste [mailto:bed...@gmail.com] Gesendet: Donnerstag, 21. März 2013 15:19 An: Wolfgang Routschka Betreff: Re: option httpchk Hi, You must provide a method in your HTTP request: GET or HEAD, usually. Baptiste On Thu,

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Robin Lee Powell
As a starting point, the short version is: have an haproxy that supports ssl like so: [rlpowell@mtsinai01 ~]$ /opt/haproxy/usr/local/sbin/haproxy -vv | grep -i ssl OPTIONS = USE_OPENSSL=1 USE_PCRE=1 Built with OpenSSL version : OpenSSL 1.0.1c 10 May 2012 OpenSSL library supports TLS extensions

use_backend: brackets/grouping not accepted in condition

2013-03-21 Thread Christian Ruppert
Hi Guys, I just tried to simplify some rules and I noticed that brackets {} doesn't work with use_backend while it works fine with default_backend. That doesn't work: use_backend backend_test if request_domain1 { allowed_ip_foo or allowed_ip_bar } That works: use_backend backend_test if

Re: use_backend: brackets/grouping not accepted in condition

2013-03-21 Thread Baptiste
Hi Christian, Brackets are for anonymous ACLs only. You seem to use named ACLs with brackets so it can't work. Either you do as you said: use_backend backend_test if request_domain1 allowed_ip_foo or request_domain1 allowed_ip_bar Or with 2 use_backend: use_backend backend_test if

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Baptiste
I actually started with http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/ , but that's out of date; the sni options have changed. Hi Robin I fixed the article today. Baptiste

Counting number given session cookies used by sticky load balancer?

2013-03-21 Thread VERMEERBERGEN Alexandre
Hello, I have search a while on the internet before asking this question, surprised to find nothing close to what I was trying to achieve. My goal: to monitor the number of concurrent *user* sessions going through a given haproxy server, using the fact that my user session are identified by a

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Robin Lee Powell
On Thu, Mar 21, 2013 at 08:02:03PM +0100, Baptiste wrote: I actually started with http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/ , but that's out of date; the sni options have changed. Hi Robin I fixed the article today.

Re: Counting number given session cookies used by sticky load balancer?

2013-03-21 Thread Jonathan Matthews
On 21 March 2013 19:06, VERMEERBERGEN Alexandre alexandre.vermeerber...@3ds.com wrote: Hello, I have search a while on the internet before asking this question, surprised to find nothing close to what I was trying to achieve. My goal: to monitor the number of concurrent *user* sessions going

Re: Counting number given session cookies used by sticky load balancer?

2013-03-21 Thread Baptiste
Hi, You can use the stick-table for this purpose, using stick-store to refresh the values, like: stick-table type string len 32 size 100k expire 4h # setup the same expiration time as your application stick store-request cookie(JSESSIONID) Then, use socat and bash to count the number of

Re: Active/active HAProxy

2013-03-21 Thread Jérôme Benoit
On Thu, 21 Mar 2013 11:00:37 +0100 in dub107-w49d4acd0d650efad62fd57ed...@phx.gbl, Lukas Tribus Lukas Tribus luky...@hotmail.com wrote: It's a point in time dump and restore of the in flight packets. Can't dump the details and in flight content of a TCP session if the host is already

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Eswaramoorthy R
Thanks all so much for your help and also for updating the article:-) I have a doubt...As per your explanation there are totally 3 certificates placed..They are 1)haproxy.pem 2)cert1 3)cert2 Can you please say to which server each certificate belongs to..? Below is my sample

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Baptiste
no, as per our explanation and your request, there is a single cert in HAProxy. Unless you want to recypher traffic to your tomcat servers. Baptiste On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R ram.eas...@gmail.comwrote: Thanks all so much for your help and also for updating the

Re: Please help to configure Haproxy with SSL support

2013-03-21 Thread Eswaramoorthy R
so can we recypher the traffic to tomcat servers using haproxy..? any of the following solutions is ok.. 1)Haproxy with HTTPS and other two servers with normal HTTP 2)Haproxy with HTTPS and other two servers also with HTTPS. But which of the above solution works ..? I don have any previous