What can and cannot be done using Lua

2016-05-30 Thread Louis Munro
Hello, I have been playing a little bit with Lua and HAProxy lately and I would like to know what can be achieved, and what is never going to work before I go too far down the rabbit hole. Specifically, I am attempting to dynamically select a backend based on the details of the connection and

Re: problems with req.ssl_ec_ext

2016-05-30 Thread Nenad Merdanovic
Hello Bjorn, On 5/30/2016 4:29 PM, Björn Zettergren wrote: > Hi, > > I've been playing around with the ECC+RSA certificate on same IP as > described in the haproxy blog at > http://blog.haproxy.com/2015/07/15/serving-ecc-and-rsa-certificates-on-same-ip-with-haproxy/ > > However, I get

Re: Lua converter not working in 1.6.5 with Lua 5.3.2

2016-05-30 Thread Willy Tarreau
On Mon, May 30, 2016 at 04:26:11PM +0200, Thierry FOURNIER wrote: > Thank you for the bug report; > > I catch it. I join a temporary fix, I suspect that the problem to be more > tricky. Thierry, just to be clear, I preferred not to pick your patches for now since you're still debugging. However

problems with req.ssl_ec_ext

2016-05-30 Thread Björn Zettergren
Hi, I've been playing around with the ECC+RSA certificate on same IP as described in the haproxy blog at http://blog.haproxy.com/2015/07/15/serving-ecc-and-rsa-certificates-on-same-ip-with-haproxy/ However, I get unexpected results when testing and I'm thinking that my problem is with the sample

Re: Lua converter not working in 1.6.5 with Lua 5.3.2

2016-05-30 Thread Thierry FOURNIER
Thank you for the bug report; I catch it. I join a temporary fix, I suspect that the problem to be more tricky. Thierry On Fri, 27 May 2016 16:22:41 -0400 Michael Ezzell wrote: > ​​ > On Fri, May 27, 2016 at 10:41 AM, Thierry FOURNIER > wrote: >

Re: {lay}, You Have A New Notification

2016-05-30 Thread Mymark
Haproxy@formiluxorg On May 30, 2016 9:04 AM, Facebook ? wrote: > > > Congrats {lay} > It's Your Lucky Day.. > > > >

Re: [PATCH] [RFC]/MINOR: connection: Add server name to proxy protocol v2 header.

2016-05-30 Thread Erik Seres
Hi Willy and Amos, I think I am confused by what information is expected to go into the PP2_TYPE_AUTHORITY field and how it would be a suitable substitute for what SNI represents. Where would that information (server name?) come from outside the TLS handshake? And why is HTTP CONNECT mentioned

Re: Melting under high connection rates

2016-05-30 Thread Willy Tarreau
Hello, On Sun, May 29, 2016 at 12:53:21AM +0430, Behrad Zari wrote: > We have over 90K concurrent TCP persistent connections on our single haproxy > instance facing mobile clients on the Internet. Our normal conn rate for 100K > is around > 200/sec which I don't have a clue if it is a good one