Re: HTTPS to HTTP reverse proxy

Thanks. Worked like a charm. On Tue, Aug 11, 2015 at 8:30 PM Igor Cicimov ig...@encompasscorporation.com wrote: On Tue, Aug 11, 2015 at 12:10 PM, Roman Gelfand rgelfa...@gmail.com wrote: I am publishing horde webmail application. The horde itself is served internally via http protocol

RE: getting transparent proxy to work.

Also for clarification, the config listed in here is the config i used. The only difference between the 2 tests is removing: source 0.0.0.0 usesrc clientip Removing it loadbalancing works, keeping it in the config, load balancing doesnt work -Rich

Re: getting transparent proxy to work.

Do you mean your web servers have 2 interfaces, each one with its own default gateway? Baptiste Le 12 août 2015 23:10, Rich Vigorito ri...@ocp.org a écrit : Good to hear. Into the firewall 192.168.0.1 and out of the firewall 10.10.130.1 Thanks! *Sent from my Verizon Wireless 4G LTE DROID*

Re: Forwarding issue

On Wed, Aug 12, 2015 at 6:34 PM, Roman Gelfand rgelfa...@gmail.com wrote: Why would the following apache directives cause problems for haproxy. RewriteRule ^/Microsoft-Server-ActiveSync /rpc.php [PT,L,QSA] RewriteRule .* -

Re: getting transparent proxy to work.

Hi Rich, Thanks a lot for this info, this is clearer now. In my first mail, I asked you to provide us the default gateway of the web servers. could you please let us know this information ? Baptiste On Wed, Aug 12, 2015 at 5:54 PM, Rich Vigorito ri...@ocp.org wrote: Also for clarification,

Re: getting transparent proxy to work.

Good to hear. Into the firewall 192.168.0.1http://192.168.0.1 and out of the firewall 10.10.130.1http://10.10.130.1 Thanks! Sent from my Verizon Wireless 4G LTE DROID Baptiste bed...@gmail.com wrote: Hi Rich, Thanks a lot for this info, this is clearer now. In my first mail, I asked you to

Re: Forwarding issue

Describing the issues you think it's causing fire haproxy would also be helpful. On Aug 12, 2015 4:37 PM, Baptiste bed...@gmail.com wrote: On Wed, Aug 12, 2015 at 6:34 PM, Roman Gelfand rgelfa...@gmail.com wrote: Why would the following apache directives cause problems for haproxy.

Re: getting transparent proxy to work.

No inside the firewall one default gateway. 10.10.130.1http://10.10.130.1 The web servers and haproxy servers have one interface I believe Sent from my Verizon Wireless 4G LTE DROID Baptiste bed...@gmail.com wrote: Do you mean your web servers have 2 interfaces, each one with its own default

Re: Forwarding issue

I am not seeing a response to the following post. The apache backend server show now trace of the post request, below. Aug 12 22:43:43 localhost haproxy[15606]: 38.105.236.253:59539 [12/Aug/2015:22:43:12.935] farm_test_ssl~ bk_remail_cert/remail 26582/0/1/3530/30113 200 1229 - - 1/1/0/0/0

Re: HAProxy - Combination of SSL Termination and Pass through

Hi Baptiste, Not sure if that answers my question. What you suggested is to enable SSL for HAProxy. My use case if one step further. Once HAProxy receives the SSL request, after decrypting it, use case require to manipulate headers and then forward the request to a a bendend server which is SSL

Re: Forwarding issue

The NOSRV in the logs you posted, means that haproxy doesn't believe there is a server available on the backend to fulfull the request. The first request hits the bk_remail_cert backend, but the next two requests don't, my guess is that the requests don't match your use_backend requirements,

Re: Did you recieve my email?

Tothosew=hoconcernonGooddays!=ThisisLa=urenfromAsiaBoslin(www.simaoled .com).Wearepro=fessionalmanufacturerofLEDproductssince2008.Hotsalei=sLEDfloodlight,LEDstreetlight,LEDpanellightetc...Nowwehav=epromotionforthenewSMDfloodlight,seeifyouwillbeinterested=in.Welcometo=askfordetails.

RE: HTTPS to HTTP reverse proxy

yes. Sorry about that. I was changing my configuration and forgot to rollback some of the changes. But even after removing, ssl verify none, the problem is still there. You will have to look at those specific request that don't work. (like a CSS file), try what happens when you request them

ECC certificate

Hi all, i'm trying to use an ECC certificate under haproxy without success : * haproxy -vv HA-Proxy version 1.5.8 2014/10/31 Copyright 2000-2014 Willy Tarreau w...@1wt.eu Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS = -g -O2 -fstack-protector

Re: ECC certificate

On Wed, Aug 12, 2015 at 11:22 AM, Marc-Antoine marc-antoine.b...@ovh.net wrote: Hi all, i'm trying to use an ECC certificate under haproxy without success : * haproxy -vv HA-Proxy version 1.5.8 2014/10/31 Copyright 2000-2014 Willy Tarreau w...@1wt.eu Build options : TARGET = linux2628

Re: ECC certificate

Hi, it jus added kEECDH+aECDSA+AES in front on my cipher list and it works fine ! tx Regards, On Wed, 12 Aug 2015 11:33:15 +0200, Robin Geuze rob...@transip.nl wrote : ECC certs don't work with your keychain since it only contains RSA based ciphers and not ecdsa based ones. Baptiste

[SPAM] segfault in src/buffer.c

Hi, i try to test lua in haproxy and i got segfault while doing curl request : # curl http://127.0.0.1 -H X-debug-me: yes curl: (52) Empty reply from server --- # gdb ./haproxy GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or

Re: [SPAM] segfault in src/buffer.c

I forgot lua file content : # cat mylua.lua -- a simple mirror web server -- it generates a response whose body contains the requests headers function mirror(txn) local buffer = local response = local mydate = txn.sc:http_date(txn.f:date()) buffer = buffer ..

Forwarding issue

Why would the following apache directives cause problems for haproxy. RewriteRule ^/Microsoft-Server-ActiveSync /rpc.php [PT,L,QSA] RewriteRule .* - [E=HTTP_MS_ASPROTOCOLVERSION:%{HTTP:Ms-Asprotocolversion}] RewriteRule .* -