Re: new primes in haproxy after logjam

2015-06-04 Thread Aleksandar Lazic
Hi. Am 04-06-2015 23:29, schrieb Emmanuel Thomé: On Thu, Jun 04, 2015 at 05:54:51PM +0200, Willy Tarreau wrote: I simply used openssl dhparam size as suggested, and am trusting openssl to provide something reasonably safe since this is how every user builds their own dhparam when they don't

Re: new primes in haproxy after logjam

2015-06-04 Thread Willy Tarreau
Hi Shawn, On Thu, Jun 04, 2015 at 03:24:19PM -0600, Shawn Heisey wrote: On 6/4/2015 9:54 AM, Willy Tarreau wrote: I simply used openssl dhparam size as suggested, and am trusting openssl to provide something reasonably safe since this is how every user builds their own dhparam when they

Re:Maybe we can be your LED signs supplier

2015-06-04 Thread Hanson
Dearpurchasingmanager,Hello,thisHansonfromCHZLi=ghtingTechnologyCo.,Ltd.,ourcompanyisaprofessionalLEDbulbma=nufacturerwithyearsexperience.OurLEDbulbareCE/ROHSlisted,war=mlywelcomedbylotsofNorthAmericanclients.Sowewanttakeoursel=vesofopportunity

Re: new primes in haproxy after logjam

2015-06-04 Thread Willy Tarreau
On Thu, Jun 04, 2015 at 11:29:00PM +0200, Emmanuel Thomé wrote: On Thu, Jun 04, 2015 at 05:54:51PM +0200, Willy Tarreau wrote: I simply used openssl dhparam size as suggested, and am trusting openssl to provide something reasonably safe since this is how every user builds their own dhparam

[SPAM] E-mail Spam and Fraudulent Survey

2015-06-04 Thread Google+ All Domain Mail Team
Dear Valued Customer, Your mailbox quota utilization has exceeded 85%. You may not be able to receive all new emails.You can now increase your mail service quota storage and/or number of accounts(s). Please click on the link below to avoid losing your files & Mail Service: Verify

new e-statement

2015-06-04 Thread Westpac Bank
Your Westpac Bank e-statement is available. To view, click on the "ACCOUNTS" tab and then click on "Statements" to verify your transaction.

Re: RFC: appsession removal in 1.6 ?

2015-06-04 Thread Willy Tarreau
Hi Aleks, On Fri, Jun 05, 2015 at 12:15:42AM +0200, Aleksandar Lazic wrote: (...) I'm proud that this part survived for so long time. You can! As before with the hash table handling I have the product point of view and if there is a better solution for the same use case im fine with the

Re: new primes in haproxy after logjam

2015-06-04 Thread Emmanuel Thomé
On Thu, Jun 04, 2015 at 05:54:51PM +0200, Willy Tarreau wrote: I simply used openssl dhparam size as suggested, and am trusting openssl to provide something reasonably safe since this is how every user builds their own dhparam when they don't want to use the initial one. I have no idea how

Re: RFC: appsession removal in 1.6 ?

2015-06-04 Thread Aleksandar Lazic
Hi Willy. Am 04-06-2015 17:42, schrieb Willy Tarreau: Hi all, while discussing with Emeric about what is changing in 1.6, we were speaking about appsession which doesn't make much sense anymore given that it is not replicated between nodes and almost all it does can be done using stick tables.

Re: Limiting concurrent range connections

2015-06-04 Thread Baptiste
If you could give more information about the issue, share haproxy version, compilation procedure, etc... some gdb outputs.. Baptiste On Thu, Jun 4, 2015 at 1:43 PM, Sachin Shetty sshe...@egnyte.com wrote: I did try it, it needs 1.6.dev1 and that version segfaults as soon as the request is made

Re: new primes in haproxy after logjam

2015-06-04 Thread Shawn Heisey
On 6/4/2015 9:54 AM, Willy Tarreau wrote: I simply used openssl dhparam size as suggested, and am trusting openssl to provide something reasonably safe since this is how every user builds their own dhparam when they don't want to use the initial one. I've been trying to read up on this

Shanghai auto plant/150W led high bay light/Sunrise

2015-06-04 Thread june
DearSir, n=bsp;

Re: new primes in haproxy after logjam

2015-06-04 Thread Willy Tarreau
Hi Emmanuel, On Thu, Jun 04, 2015 at 05:07:42PM +0200, Emmanuel Thomé wrote: Hi, I heard that following logjam (which I'm a coauthor of), haproxy has changed its default set of primes. That's a good start. However you give no information as to *how* you generated the primes (correct me

RFC: appsession removal in 1.6 ?

2015-06-04 Thread Willy Tarreau
Hi all, while discussing with Emeric about what is changing in 1.6, we were speaking about appsession which doesn't make much sense anymore given that it is not replicated between nodes and almost all it does can be done using stick tables. So the question is : does anyone have a strong

[SPAM] Vous êtes intéressé par le marché de l’immobilier ?

2015-06-04 Thread Comonline Direct
Title: Si vous considrez que cet email est un SPAM, veuillez cliquer sur ce lien pour nous l'indiquer ou copiez-coller ce lien dans votre navigateur http://clap40.neolane.net/nms/jsp/webForm.jsp?fo=FRM365=RHNNT6PphswmNWxPduHXBH2%2B05dHrTAogxJCVCACAA%3D%3D Bonjour Vous

RE: Syslog messages get truncated at 1kb (syslog server config is ok)

2015-06-04 Thread Damiano Giorgi
Hi Lukas, thank you for the time ! I compiled haproxy with DEFINE=-DREQURI_LEN=8192 and everything seems to be fine now, recompiling is not a problem. Tomorrow I'll deploy the changes from staging to production and let you know, we have around 1200 queries per second and the process takes only

RE: Syslog messages get truncated at 1kb (syslog server config is ok)

2015-06-04 Thread Lukas Tribus
Hi Lukas, thank you for the time ! I compiled haproxy with DEFINE=-DREQURI_LEN=8192 and everything seems to be fine now, recompiling is not a problem. Tomorrow I'll deploy the changes from staging to production and let you know, we have around 1200 queries per second and the process takes

new primes in haproxy after logjam

2015-06-04 Thread Emmanuel Thomé
Hi, I heard that following logjam (which I'm a coauthor of), haproxy has changed its default set of primes. That's a good start. However you give no information as to *how* you generated the primes (correct me if I'm mistaken -- I just didn't see such a thing in the commit log, but haven't

Re: Dynamic backend selection using maps

2015-06-04 Thread David Reuss
Baptiste, thanks -- seems to work, but is it supposed to work for both blah.foo.com, and foo.com ? .. Because that doesn't seem to be the case, so i need both '.foo.com', and 'foo.com', in my map. Is that correct? Also a quick question regarding acl's and fetching -- is there any way this could

Re: Dynamic backend selection using maps

2015-06-04 Thread David Reuss
Nevermind it not working, i had map_end as the match at that point -- it works wonderfully, but the second question is still up for grabs :) On Thu, Jun 4, 2015 at 9:28 AM, David Reuss shuffle...@gmail.com wrote: Baptiste, thanks -- seems to work, but is it supposed to work for both

RE: Syslog messages get truncated at 1kb (syslog server config is ok)

2015-06-04 Thread Damiano Giorgi
Also tried with log localhost len 8192 local0 The message gets truncated also on the loopback (only one packet is sent). I'll try with unix domain sockets and let you know Damiano -Original Message- From: Damiano Giorgi [mailto:damiano.gio...@trovaprezzi.it] Sent: mercoledì 3

Re: HAProxy responding with NOSRV SC

2015-06-04 Thread Igor Cicimov
On Thu, Jun 4, 2015 at 12:21 PM, RAKESH P B pb.rakes...@gmail.com wrote: Hi All, I have a strange situation where requests to my HAProxy are returning with a 503 error. HAProxy logs shows that a NOSRV error: for POST requests from application RSET service. api-https-in~ api-https-in/NOSRV

Re: Limiting concurrent range connections

2015-06-04 Thread Baptiste
Hi sachin, Look my conf, I turned your tcp-request content statement into http-request. Baptiste On Thu, Jun 4, 2015 at 12:05 PM, Sachin Shetty sshe...@egnyte.com wrote: Tried it, I don¹t see the table populating at all. stick-table type string size 1M expire 10m store conn_cur acl

2015 the most saving money of led high bay lighting

2015-06-04 Thread june
DrSir, n=bsp; enclosedplsfindthep=ictureforournew150Wledhighbaylightwhichisusedinautoplant=ofShangHaiforyourreference.90pcsbridgeflu=xledswithlensaslightsourcenotCOB,ULlistedmeanwelldriver.e=achledsreach120LM/W,youknow,oureachledswithlens

RE: Syslog messages get truncated at 1kb (syslog server config is ok)

2015-06-04 Thread Damiano Giorgi
Dear all, an update: logging using sockets doesn't change anything. After some grepping the code and tinkering I found that changing REQURI_LEN in include/common/defaults.h does the job, the strange thing is that there's also #define MAX_SYSLOG_LEN 1024 in the same file but it doesn't modify

Re:Contact from Ningbo Handalux-LED LAMP and Bulbs

2015-06-04 Thread Edmond Wu
DearSirorMadam;=20Goodday!HereIwouldliketosharewithyouourhotsellin=gled

Re: Limiting concurrent range connections

2015-06-04 Thread Sachin Shetty
Tried it, I don¹t see the table populating at all. stick-table type string size 1M expire 10m store conn_cur acl is_range hdr_sub(Range) bytes= acl is_path_throttled path_beg /public-api/v1/fs-content-download #tcp-request content track-sc1 base32 if is_range is_path_throttled http-request

Re: Limiting concurrent range connections

2015-06-04 Thread Sachin Shetty
I did try it, it needs 1.6.dev1 and that version segfaults as soon as the request is made (egnyte_server)egnyte@egnyte-laptop:~/haproxy$ ~/haproxy/sbin/haproxy -f conf/haproxy.conf -d [WARNING] 154/044207 (24974) : Setting tune.ssl.default-dh-param to 1024 by default, if your workload permits it

Re: Choosing servers based on IP address

2015-06-04 Thread Holger Just
Hi Andy, Please always CC the mailing list so that others can help you too and can learn from the discussion. Franks Andy (IT Technical Architecture Manager) wrote: Hi Holger, Sorry, I will elaborate a bit more! We are going to implement Microsoft exchange server 2010 (sp3) over two AD

RE: Syslog messages get truncated at 1kb (syslog server config is ok)

2015-06-04 Thread Lukas Tribus
Hi Damiano, Dear all, an update: logging using sockets doesn't change anything. After some grepping the code and tinkering I found that changing REQURI_LEN in include/common/defaults.h does the job Thanks for your analysis. the strange thing is that there's also #define MAX_SYSLOG_LEN