Re: cookie prefix strange behavior

[please avoid top-posting, it makes it really painful to reply to e-mails with the relevant context] On Sat, Jul 18, 2015 at 09:56:23AM +, mlist wrote: Hi Baptiste, as you can see using prefix or sticky table we found this invalid cookie problem. - Why without haproxy in the middle we

RE: cookie prefix strange behavior

Hi Willy Hi Baptiste, as you can see using prefix or sticky table we found this invalid cookie problem. - Why without haproxy in the middle we do not have this problem ? why a browser send an INVALID cookie ? Because it learned it another way, maybe before you installed haproxy, maybe on

Re: Server IP resolution using DNS in HAProxy

Hi Cyril, Baptiste, Just a quick response on this part to clear up some confusion. On Mon, Jul 20, 2015 at 01:11:22AM +0200, Cyril Bonté wrote: The idea here would to create a new flag on the server to tell HAProxy which IP to use. The server would be enabled when the IP has been provided by

HAProxy Logging

Dear Sir and Madam, I am interested in your application HA Proxy. But first I have some question. Is it possible that the HA Proxy writes log files in the home directory with the same ownership like the HA Proxy? We could imagine that the HA Proxy monitors the traffic. And is it possible that

Re: cookie prefix strange behavior

On Mon, Jul 20, 2015 at 09:51:28AM +, mlist wrote: Hi Willy Hi Baptiste, as you can see using prefix or sticky table we found this invalid cookie problem. - Why without haproxy in the middle we do not have this problem ? why a browser send an INVALID cookie ? Because it

RE: cookie prefix strange behavior

I tested with 1.5.14. I think this is not a regression. The error is the same. But using insert instead of prefix, also with 1.5.6 the strange cookie is managed in different manner strange cookie has a prefix, probably taken by old haproxy connection with prefix, this old cookie is marked

Re: tcp-request + gpc ACLs

2015-07-13 18:07 GMT+02:00 bjun...@gmail.com bjun...@gmail.com: Hi, i'm using stick-tables to track requests and block abusers if needed. Abusers should be blocked only for a short period of time and i want a stick-table entry to expire. Therefore, i have to check if the client is already

RE: ocsp

Hi Lukas, I made a mistake in my previous email : it works locally AND remotely ! What fixed the problem? This may be useful for others as well. Lukas

Re: Problems compiling HAProxy with Lua Support

2015-07-16 21:04 GMT+02:00 Vincent Bernat ber...@luffy.cx: ❦ 13 juillet 2015 19:58 +0200, Vincent Bernat ber...@luffy.cx : I suppose that either -ldl could be added to OPTIONS_LDFLAGS append, like this is done for -lm. Or USE_DL section could be moved towards the end. I think the first

Re: ocsp

Hi Lukas, I made a mistake in my previous email : it works locally AND remotely ! Regards, On Mon, 20 Jul 2015 19:04:24 +0200, Lukas Tribus luky...@hotmail.com wrote : Hi Marc, Hi Lukas, great intuition :) --- CONNECTED(0003) TLS server extension server name (id=0),

RE: ocsp

Hi Lukas, frontend cluster:443 bind 1.2.3.4:443 ssl strict-sni crt /home/provisionning/0.pem crt /home/provisionning/cluster.d default_backend cluster capture request header Host len 255 Can you confirm there is no SSL intercepting device in front of the webserver, like hardware

unsubscribe

unsuscribe

RE: ocsp

Hi Marc, Hi Lukas, great intuition :) --- CONNECTED(0003) TLS server extension server name (id=0), len=0 TLS server extension renegotiation info (id=65281), len=1 0001 - SPACES/NULS TLS server extension EC point formats (id=11), len=4 - 03 00 01 02 TLS server extension

Re: HAProxy Logging

2015-07-20 2:47 GMT-07:00 sven.mau...@t-systems.com: Dear Sir and Madam, I am interested in your application HA Proxy. But first I have some question. Is it possible that the HA Proxy writes log files in the home directory with the same ownership like the HA Proxy? haproxy logs using

Re: Problems compiling HAProxy with Lua Support

Hi Vincent, Thank you for the patch. Just for (historical) information, a few time ago, Joe Williams had reported an issue with -ldl and lua. I fixed it, and a few time after the fix, Dmitry Sivachenko reported that the fix breaks FreeBSD compilation (because FreeBSD doesn't have the libdl). So,

Re: Problems compiling HAProxy with Lua Support

❦ 21 juillet 2015 00:55 +0200, thierry.fourn...@arpalert.org : On my computer (debian), the classic command line build used on the last dev version with your patch uses the -ldl two times: make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 \ USE_LUA=1

unsubscribe