Re: OpenSSL engine and async support

2017-05-27 Thread Grant Zhang
> On May 26, 2017, at 22:21, Willy Tarreau wrote: > > Hi Emeric, Grant, > > patch set now merged! Thank you both for this great work! > > Willy Bravo! Really appreciate your and Emeric's help in this effort. Grant

Re: HAProxy 1.7.5: conn_cur value problem with peer stick-table

2017-05-27 Thread Willy Tarreau
Hi Maxime, On Fri, May 19, 2017 at 02:28:40PM +0200, Maxime Guillet wrote: > 2/ If I launch the same test on both haproxy servers and peers > configuration activated, I can see the conn_cur counter always increasing > > $ ab -n 2000 -c 20 http://10.0.0.2/ > $ ab -n 2000 -c 20

Re: Graceful shutdown of haproxy

2017-05-27 Thread Willy Tarreau
On Mon, May 22, 2017 at 12:23:31PM -0700, Gold Star wrote: > Thanks for pointing out the obvious flaw Maciej. > > Is it possible to modify option #2 (Lua-script powered endpoint) to define > a read-write endpoint where read endpoint (HTTP GET) returns the health > status while the write endpoint

Re: RFC: ipv6mask converter

2017-05-27 Thread Willy Tarreau
Hi Jarno, On Sun, May 21, 2017 at 07:49:00PM +0300, Jarno Huuskonen wrote: > Hi, > > I noticed that ipv6 version of ipmask() converter is missing ? > > I'm attaching an example implementation for ipv6mask (incomplete: > missing at least documentation / lua) for comments. > > Maybe instead of

Re: haproxy does not capture the complete request header host sometimes

2017-05-27 Thread Willy Tarreau
On Tue, May 23, 2017 at 10:13:40AM +0200, Aleksandar Lazic wrote: > Hi siclesang. > > siclesang have written on Mon, 22 May 2017 11:11:31 +0800 (CST): > > > hi > > i have a problem:haproxy does not capture the complete request > > header host sometimes > > Which header do you miss? > How long

Re: New feature proposal: Add support for decompressing proxyed gziped requests

2017-05-27 Thread Willy Tarreau
Hi, On Fri, May 26, 2017 at 06:57:14PM +0200, Aleksandar Lazic wrote: > Hi Vasileios Kyrillidis. > > Vasileios Kyrillidis have > written on Fri, 26 May 2017 16:17:48 +0200: > > > Hi Aleksandar, > > > > No patches yet. We wanted confirmation that it has a

Re: [PATCH] MINOR: boringssl: basic support for OCSP Stapling

2017-05-27 Thread Willy Tarreau
Hi Manu, On Mon, May 22, 2017 at 03:01:56PM +0200, Emmanuel Hocdet wrote: > Hi Emeric, > > > Le 22 mai 2017 à 14:21, Emeric Brun a écrit : > > On 03/29/2017 04:46 PM, Emmanuel Hocdet wrote: > >> > >> Use boringssl SSL_CTX_set_ocsp_response to set OCSP response from file with