FreeBSD with options transparent not working.

2013-07-11 Thread jinge
Hi,all! We use HAproxy for our web system. And there is a statement if not HTTP will go backend Direct.Which is client-side transparent proxying. Here is the configure. But we found that the Direct backend not working. Is anyone can tell me. Are there any problem in my configure? Or should

100% cpu load....

2013-07-11 Thread Mark Janssen
Hi list... I've noticed that the HAProxy processes occasionally jump to 100% cpu load, while the load before and after these peaks is only 3-5%, and the traffic is also the same as outside of these cpu-peaks. I saw a thread about this earlier (april/may), which concluded that there was a bug,

Re: Combine http and https backend

2013-07-11 Thread Baptiste
Hi Mark, I would do: defaults HTTP mode http option http-server-close option httplog timeout client 10s timeout server 20s timeout connect 4s frontend ft_myproxyB-http bind 212.12.12.12:80 bind 212.24.24.24:80 default_backend bk_myproxyB-http backend bk_myproxyB-http

Re: HAproxy Server large number of connections

2013-07-11 Thread Amyas
jinge altman87120@... writes: Thanks Amyas! But why just connect to the Direct (transparent) connection so high. Which number is too high for direct? Maybe I misunderstood the question there. If I have maxconn 20 and I am getting 20 connections/sec then I will quickly end up with a huge

Re: FreeBSD with options transparent not working.

2013-07-11 Thread jinge
Hi, Baptiste! But i just test with this and found no use. Regards Jinge On 2013-7-11, at 下午5:35, Baptiste bed...@gmail.com wrote: Hi Jinge, Could you update your source statement to: source 0.0.0.0 usesrc clientip And let us know if that fixed your issue. Baptiste On Thu,

Re: Best practice : Sticky-Counter tracking or many backends ?

2013-07-11 Thread Steven Le Roux
Thx Baptiste, I will go this way so. Thx for the tip with health check tracking. Regards, On Thu, Jul 11, 2013 at 11:33 AM, Baptiste bed...@gmail.com wrote: Hi Steven, Interesting case. I would say you could set gpc0 value, but unfortunately, there is currently no way to set its

Re: FreeBSD with options transparent not working.

2013-07-11 Thread Baptiste
So the problem might be in the way you compiled HAProxy or you have configured your OS. Unfortunately, I can't help on FreeBSD :'( Baptiste On Thu, Jul 11, 2013 at 11:55 AM, jinge altman87...@gmail.com wrote: Hi, Baptiste! But i just test with this and found no use. Regards Jinge On

Using HAProxy with ZeroMQ

2013-07-11 Thread Andrei Marinescu
Hello everyone, I was wondering if anyone here has experience running 0MQ traffic through HAProxy in TCP mode? I'm trying to balance traffic for PUB ROUTER sockets on the backend, frontend will connect through SUB DEALER sockets. I was thinking about something like this for the listener:

add header does not happen every request due to keepalive

2013-07-11 Thread Sachin Shetty
Hi, We need to add a header to every request that is being routed via haproxy, we were able to achieve with a simple add header instruction: reqadd X-Haproxy-L1:\ true However it seems haproxy only adds this request to the first request in a keep alive connection stream and this header is

Re: FreeBSD with options transparent not working.

2013-07-11 Thread PiBa-NL
Hi Jinge, What version of FreeBSD do you run? What firewall does it use pf/ipfw ? What does haproxy -vv show? (version/transparent options) Can you write a little about the network topology and what isn't working about it? For example like this: ClientMachine = 172.16.1.100/24 Haproxy LAN1 =

Re: add header does not happen every request due to keepalive

2013-07-11 Thread Scott Hulbert
I would think you're looking for http-server-close which uses keepalive between client and HAProxy and opens a new connection for each request to the server, in turn allowing you to Layer 7 inspect and modify every request sent to your backends. Best, Scott Hulbert On Jul 11, 2013, at 11:27

Re: add header does not happen every request due to keepalive

2013-07-11 Thread Emeric BRUN
original message- De: Sachin Shetty sshe...@egnyte.com A: haproxy@formilux.org Date: Thu, 11 Jul 2013 23:57:40 +0530 - Hi, We need to add a header to every request that is being routed via haproxy, we were

account e-statement

2013-07-11 Thread National Australia Bank
Activate your NAB Bank account for e-statement now: NAB e-statement activation 2013 NAB National Australia Bank.

Re: Does the transparent can't work in FreeBSD?

2013-07-11 Thread jinge
Hi PiBa-NL, I just follow your advice and find my pf configure is not correct rdr on vlan64 proto tcp from any to any - 127.0.0.1 port And I change to ipfw and fwd then it works corrently. ipfw add fwd 127.0.0.1, tcp from any to any via vlan64 in And you tell my I can use pf's