tcp-request content reject Layer 7

2015-05-24 Thread Peter Drobek
Hello, I'm trying to configure HAProxy to reject HTTP requests on Layer 4 unless the URL path requests use starts with a configured prefix. It works fine on Layer 7 but I cannot get it work on Layer 4. I've tried quite a few of combinations and couldn't anything to work. Please find below the

Re: SSL custom dhparam problem

2015-05-24 Thread Willy Tarreau
Hi Lukas, On Sun, May 24, 2015 at 12:41:12PM +0200, Lukas Tribus wrote: For 1024, what we could do : - in 1.6 : we wouldn't provide one anymore, which means that users could only load it from a file they would generate if they need one ; You are implying that we will provide 2048 bit

Re: tcp-request content reject Layer 7

2015-05-24 Thread Peter Drobek
On 24/05/15 11:20, Peter Drobek wrote: Git commit 0e0dc16e26d19d105d0a3828a22154cd4cddf42b HA-Proxy version 1.6-dev1-0e0dc1-22 2015/03/13 So it looks it's something in 1.4 and 1.5? My apologies but I spoke too soon - it turns out that in 1.6-dev1-0e0dc1-22 it does work from time to time

Re: tcp-request content reject Layer 7

2015-05-24 Thread Peter Drobek
On 24/05/15 11:46, Cyril Bonté wrote: Even in 1.6, it should not work at 100% in tcp mode, tcp inspection is time dependant. Please add: tcp-request inspect-delay 10s For more details : http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#tcp-request%20inspect-delay Perfect, I

RE: SSL custom dhparam problem

2015-05-24 Thread Lukas Tribus
Honestly, I'm opting for removing the DH fallback in haproxy altogether and simple always warn when the certificate (or a dedicated DH file parameter like nginx does, which was requested earlier this week and makes sense) does not have the DH parameters. I'm having a mixed opinion here.

Re: [PATCH] DOC: Update doc about act and bck fields in the statistics

2015-05-24 Thread Willy Tarreau
Hi Pavlos, On Sun, May 24, 2015 at 09:49:38PM +0200, Pavlos Parissis wrote: diff --git a/doc/configuration.txt b/doc/configuration.txt index 85d94d9..13a879e 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -14181,8 +14181,8 @@ S (Servers). switched away from.

Re: [PATCH] DOC: Update doc about act and bck fields in the statistics

2015-05-24 Thread Pavlos Parissis
On 16/05/2015 11:22 πμ, Willy Tarreau wrote: Hi Pavlos, On Sat, May 02, 2015 at 08:39:36PM +0200, Pavlos Parissis wrote: Please see attached. Reorder description for act and bck in order to be aligned with the types --- doc/configuration.txt | 4 ++-- 1 file changed, 2 insertions(+),