[ANNOUNCE] haproxy-1.6.7

Hi, HAProxy 1.6.7 was released on 2016/07/13. It added 5 new commits after version 1.6.6. It mainly addresses a regression in 1.6.6 causing some segfaults on startup for some users when SSL is enabled with dhparam 1024. It also fixes the DNS request format on big endian machines and alignment iss

Re: I cannot %[lua.xxx] in server directive

Hi Takada, Takada Shigeomi wrote: > global > lua-load get_backend.lua > > listen example > mode tcp > bind :3-5 > server MYSERVER %[lua.backend] > --- > > ---ERROR CONTENT-- > [ALERT] 194/145111 (21636) : parsing [haproxy.cfg:20] : 'server MYSE

Trying to understand "Wordpress abuser protection" with HAProxy... and make it work !

Hi folks ! I'm trying to follow instructions found here : http://blog.haproxy.com/2013/04/26/wordpress-cms-brute-force-protection-with-haproxy/ on how to protect some WordPress sites against blind and repetitive login attempts, but I can't seem to make it effective. Would your mind commenting on

Re: I cannot %[lua.xxx] in server directive

> On Jul 13, 2016, at 2:13 AM, Takada Shigeomi wrote: > > Hi, > > I'd like to change backend server by referring to the database. e.g. Redis > I cannot use server directive with the return of core.register_fetches. A > parsing error occurs. > Do I cannot %[lua.xxx] in server directive on the s

Re: [PATCH] BUG/MINOR: Fix endiness issue in DNS header creation code

On Wed, Jul 13, 2016 at 02:03:43PM +0200, Nenad Merdanovic wrote: > Alexander Lebedev reported that the response bit is set on SPARC when > DNS queries are sent. This has been tracked to the endianess issue, so > this patch makes the code portable. Now applied, thank you Nenad! Willy

[PATCH] BUG/MINOR: Fix endiness issue in DNS header creation code

Alexander Lebedev reported that the response bit is set on SPARC when DNS queries are sent. This has been tracked to the endianess issue, so this patch makes the code portable. Signed-off-by: Nenad Merdanovic --- include/types/dns.h | 23 +++ src/dns.c | 9 +---

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

On Wed, Jul 13, 2016 at 05:42:53PM +0600, Alexander Lebedev wrote: > Willy, do I understand correctly that these changes will be in 1.6.7 and > the release planned today? Definitely. Willy

Re: counters for specific http status code

Hi Ruoshan, On Wed, Jul 13, 2016 at 07:29:57PM +0800, Ruoshan Huang wrote: > > > On Jul 12, 2016, at 12:42 PM, Willy Tarreau wrote: > > > > Please take a look at how track-sc are added to http-request, look for > > "ACT_ACTION_TRK_SC0" in proto_http.c, you'll find your way through it, > > and

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Willy, do I understand correctly that these changes will be in 1.6.7 and the release planned today? Alexander Lebedev 13 июля 2016 г. 17:38 пользователь "Willy Tarreau" написал: > On Wed, Jul 13, 2016 at 05:32:52PM +0600, Alexander Lebedev wrote: > > I apply patch from Nenad and your previous pa

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

On Wed, Jul 13, 2016 at 05:32:52PM +0600, Alexander Lebedev wrote: > I apply patch from Nenad and your previous patch and all works fine! > Thank you, Nenad and Willy! > > But your last patch we can't apply: > [ appadm@dp-build ~/temp/haproxy-1.6.6 ] (...) Sorry, I forgot about this when sending

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

I apply patch from Nenad and your previous patch and all works fine! Thank you, Nenad and Willy! But your last patch we can't apply: [ appadm@dp-build ~/temp/haproxy-1.6.6 ] $ gpatch -p0 < patch0.patch patching file include/common/standard.h Hunk #1 FAILED at 843. 1 out of 1 hunk FAILED -- sav

Re: counters for specific http status code

On Jul 12, 2016, at 12:42 PM, Willy Tarreau wrote:Please take a look at how track-sc are added  to http-request, look for"ACT_ACTION_TRK_SC0" in proto_http.c, you'll find your way through it,and see if you can duplicate this to the response.I just baked some draft patchs. and get some

Devis gratuit en 2 minutes

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - [ ]( http://r.email-mieux-depenser.com/5t9f8vx4dawhcvd.html ) [ Protégez votre famille des cambrioleurs dès maintenant ]( http://r.email-mieux-depenser.com/5t9f8vx55qwhcvd.html )   [ « Les meilleures solutions d'alarme,

Re: counters for specific http status code

Hi Holger, On Wed, Jul 13, 2016 at 12:09:51PM +0200, Holger Just wrote: > Hi Willy, > > Willy Tarreau wrote: > >> At first I was thinking whether we could track the response status in stick > >> table, then it may be neat. but currently there isn't `http-response > >> track-sc?` directive. can it

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Alexander, I'm going to merge this patch since it addresses the issue at least for my board here. It also fixes the other locations Nenad found by reviewing the code. I didn't trigger them but it might be due to my local config or the fact that I advertise a single IP address. But if these functio

Re: counters for specific http status code

Hi Willy, Willy Tarreau wrote: >> At first I was thinking whether we could track the response status in stick >> table, then it may be neat. but currently there isn't `http-response >> track-sc?` directive. can it? > > Interesting. No it isn't, just because I think we never found a valid > use ca

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

On Wed, Jul 13, 2016 at 11:33:07AM +0200, Nenad Merdanovic wrote: > Hello Willy, > > On 7/13/2016 11:26 AM, Willy Tarreau wrote: > > Alexander, > > > > the attached patch fixed the issue for me. There were two places where > > a possibly unaligned address was force casted as uint32_t. Could you c

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Hello Willy, On 7/13/2016 11:26 AM, Willy Tarreau wrote: > Alexander, > > the attached patch fixed the issue for me. There were two places where > a possibly unaligned address was force casted as uint32_t. Could you confirm > it's OK for you as well ? > > Nenad, I'm willing to take you patch as

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Hello Willy, On 7/13/2016 11:15 AM, Willy Tarreau wrote: > I have an ARMv5 board here which is configurable to be very sensitive > to alignment issues. I'm just realizing something : without your patch > the server will not respond as it receives a bogus request. With your > patch it does respond

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Alexander, the attached patch fixed the issue for me. There were two places where a possibly unaligned address was force casted as uint32_t. Could you confirm it's OK for you as well ? Nenad, I'm willing to take you patch as well. If you could amend it to add the few comments regarding the bit va

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

On Wed, Jul 13, 2016 at 11:15:55AM +0200, Willy Tarreau wrote: > I have an ARMv5 board here which is configurable to be very sensitive > to alignment issues. I'm just realizing something : without your patch > the server will not respond as it receives a bogus request. With your > patch it does res

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Hi Nenad, On Wed, Jul 13, 2016 at 11:07:48AM +0200, Nenad Merdanovic wrote: > > Could you please just remove "__attribute__((packed))" at the end and see > > if that fixes it ? I have quite some doubts that it will work, but that's > > the only thing I can think about given that the rest is pretty

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Hey Willy, On 7/13/2016 10:35 AM, Willy Tarreau wrote: > On Wed, Jul 13, 2016 at 09:55:18AM +0600, Alexander Lebedev wrote: >> Hello Nenad. With this patch I get "Bus Error" and core dumped. > > So it means there was an unaligned access. It cannot come from the internals > of the structure itself

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

Hello Willy! No, it does not work. The same error and stack. Alexander Lebedev 13 июля 2016 г. 14:35 пользователь "Willy Tarreau" написал: > On Wed, Jul 13, 2016 at 09:55:18AM +0600, Alexander Lebedev wrote: > > Hello Nenad. With this patch I get "Bus Error" and core dumped. > > So it means ther

Re: [PATCH] BUG/MEDIUM: dns: unbreak DNS resolver after header fix

On Wed, Jul 13, 2016 at 09:55:18AM +0600, Alexander Lebedev wrote: > Hello Nenad. With this patch I get "Bus Error" and core dumped. So it means there was an unaligned access. It cannot come from the internals of the structure itself, since all fields are 16-bit. However if this structure is used