Re: No TCP RST on tcp-request connection reject

2015-02-01 Thread Willy Tarreau
On Fri, Jan 16, 2015 at 09:01:07AM +0100, Lukas Tribus wrote: I don't see how. The socket is immediately close()'ed when it hits tcp-request connection reject, this is as cheap as it gets. If you're getting attacked, you try to send as few unnecessary packets as possible, I guess

Re: [PATCH/RFC 0/8] Email Alerts

2015-02-01 Thread Willy Tarreau
Hi Simon, On Fri, Jan 30, 2015 at 11:22:52AM +0900, Simon Horman wrote: Hi Willy, Hi All, the purpose of this email is to solicit feedback on an implementation of email alerts for haproxy the design of which is based on a discussion in this forum some months ago. Thanks for working on

[SPAM] target email marketing

2015-02-01 Thread John
Hi, You are receiving this email because we wish you to use our target email marketing service. We specialize in providing target email marketing services to a number of businesses all over the world! Email marketing is one of the best marketing strategies of all time and has helped many

[ANNOUNCE] haproxy-1.3.27

2015-02-01 Thread Willy Tarreau
Hi, following the last 1.4 update, I've backported all the fixes that were pending for 1.3. 1.3.26 was released in 2011, so it was about time to issue 1.3.27. I suspect it will be the last one. I also issued 1.3.15.14 with the few relevant fixes and definitely closed the 1.3.15 branch, which had

Re: Possible to send backend host and port in healthcheck?

2015-02-01 Thread Willy Tarreau
On Sun, Feb 01, 2015 at 08:25:24AM +0100, Pavlos Parissis wrote: If I understood Bhaskar's suggestion correctly, we could delegate health check for backend servers to a single server which does all the health checking. Am I right ? Yes that was the idea. If it this is case then the downside

Re: connection is rejected when using ipad with send-proxy option

2015-02-01 Thread Pavlos Parissis
On 15/01/2015 09:16 μμ, Alex Wu wrote: We enable send-proxy for ssl connections, and have the patched apache module to deal with proxyprotocol. From Mac OS, we see it works as designed. But when we repeat the same test using ipad, then we the connection rejected. iPad cannot establish the

Re: question about X-Forwarded-For and proxy protocol

2015-02-01 Thread Warren Turkal
Thanks for the help. wt On Jan 31, 2015 5:06 AM, Willy Tarreau w...@1wt.eu wrote: On Thu, Jan 29, 2015 at 09:57:32AM -0800, Warren Turkal wrote: I am using HAProxy 1.5.10. My config looks something like the following: frontend main bind *:8080 accept-proxy use backend blah

Re: man page for haproxy.cfg

2015-02-01 Thread Cyril Bonté
Hi Ryan, Le 31/01/2015 16:45, Ryan O'Hara a écrit : I've been asked to provide a man page for haproxy.cfg, which would be a massive endeavor. Since Cyril has done such an excellent job generating the HTML documentation, how difficult would it be to grok this into man page format? Has anyone

Re: Possible to send backend host and port in healthcheck?

2015-02-01 Thread Pavlos Parissis
On 01/02/2015 03:03 μμ, Willy Tarreau wrote: On Sun, Feb 01, 2015 at 08:25:24AM +0100, Pavlos Parissis wrote: If I understood Bhaskar's suggestion correctly, we could delegate health check for backend servers to a single server which does all the health checking. Am I right ? Yes that was

Re: [PATCH/RFC 0/8] Email Alerts

2015-02-01 Thread Simon Horman
Hi Willy, On Sun, Feb 01, 2015 at 03:15:27PM +0100, Willy Tarreau wrote: Hi Simon, On Fri, Jan 30, 2015 at 11:22:52AM +0900, Simon Horman wrote: Hi Willy, Hi All, the purpose of this email is to solicit feedback on an implementation of email alerts for haproxy the design of which is