RE: No TCP RST on tcp-request connection reject

2015-01-16 Thread Lukas Tribus
I don't see how. The socket is immediately close()'ed when it hits tcp-request connection reject, this is as cheap as it gets. If you're getting attacked, you try to send as few unnecessary packets as possible, I guess a silent drop could be nice. Yes, but that can't be done in

RE: No TCP RST on tcp-request connection reject

2015-01-16 Thread Craig Craig
Hi, I don't see how. The socket is immediately close()'ed when it hits tcp-request connection reject, this is as cheap as it gets. If you're getting attacked, you try to send as few unnecessary packets as possible, I guess a silent drop could be nice. a) HAProxy (configured with rate

Re: Send specific string on TCP

2015-01-16 Thread Hoggins!
Hello, Le 15/01/2015 19:30, Lukas Tribus a écrit : tcp-check is for health checks only. You cannot implement a specific Layer 7 protocol via configuration. You can: - use TCP mode, without touching the TCP payload (without inserting command above) - use TCP mode with the PROXY protocol,

Possible to send backend host and port in healthcheck?

2015-01-16 Thread Joseph Lynch
Hello, I am trying to set up a health check service similar to the inetd solutions suggested in the documentation. Unfortunately, my backends run on different ports because they are being created dynamically and as far as I can tell I cannot include the server port in my healthcheck either as

Converting listen directive to frontend/backend config

2015-01-16 Thread Jason J. W. Williams
Hi, I'm converting an older listen configuration to a frontend/backend set up for SSL...would the following directives be better suited in the frontend or the backend section? # Persistently map clients to backends by client IP stick-table type ip size XX expire YY peers ZZ stick on src

haproxy behind a proxy (incapsula)

2015-01-16 Thread Marc Fournier
Morning all … I’ve been fighting with an issue here, and have run out of ideas … We have a wordpress site, two webheads behind haproxy … balance leastconn … in front of haproxy, we are using Incapsula, as CDN/DDoS shield … if I am only running one webhead, everythign works great,

Re: haproxy behind a proxy (incapsula)

2015-01-16 Thread Marc Fournier
found it just after I sent this: balance hdr(X-Forwarded-For) testing right now, but *looks* like it fixes the issue … *cross fingers* On Jan 16, 2015, at 9:21 AM, Marc Fournier scra...@hub.org wrote: Morning all … I’ve been fighting with an issue here, and have run out of ideas …

New to haproxy questions

2015-01-16 Thread Benjamin Smith
We recently switched our web cluster to use HaProxy 1.5.x from a combination of pound and xrctl. So far, we're loving it! Some questions have come up, though, that we'd like to entertain: 1) Logging performance data: A) How long before the page started putting out data? (implying that

Re: New to haproxy questions

2015-01-16 Thread Jorge Severino
For lb i use rsync+vrrp+ifstated. Atte. Jsd El 16-01-2015 21:48, Benjamin Smith li...@benjamindsmith.com escribió: We recently switched our web cluster to use HaProxy 1.5.x from a combination of pound and xrctl. So far, we're loving it! Some questions have come up, though, that we'd like to

Re: New to haproxy questions

2015-01-16 Thread Jeff Zellner
We've used spread (spread.org) and wackamole (backhand.org/wackamole) with great success to do HA clustering. Had a very bad time with pacemaker. As for repos, I'd recommend compiling from source to stay current - it's a pretty simple build, not many deps. Cheers, Jeff On Jan 16, 2015 5:47 PM,

一周68个询盘,一个月几个订单。最快捷高效有效目突Э�发方式,直击国外终端客户。演示Q`Q:3150058554

2015-01-16 Thread batman72
220700googlegoogle mapH9EgmtOz83QQ3150058554 18024025957J7e2U0a0eF07