Re: Problem with linux 4.14.22 and haproxy 1.7.10

2018-03-02 Thread Lukas Tribus
Hello Richard, On 2 March 2018 at 19:37, Richard Lee wrote: > > We recently updated our linux kernel from 4.14.19 to 4.14.22, and now haproxy > hangs forever in a system call: > > $ ps -lfC haproxy > F S UIDPID PPID C PRI NI ADDR SZ WCHAN STIME TTY TIME CMD > 1 D root

Problem with linux 4.14.22 and haproxy 1.7.10

2018-03-02 Thread Richard Lee
We recently updated our linux kernel from 4.14.19 to 4.14.22, and now haproxy hangs forever in a system call: $ ps -lfC haproxy F S UIDPID PPID C PRI NI ADDR SZ WCHAN STIME TTY TIME CMD 1 D root 6308 6242 0 80 0 - 14187 - 21:43 ?00:00:00 /usr/sbin/hapr

Re: What is a nice way to bypass the maintenance mode for certain IP's?

2018-03-02 Thread Willy Tarreau
On Fri, Mar 02, 2018 at 01:51:42PM +, Pieter Vogelaar wrote: > When I move force-persist to the backend, it indeed works. Great, thanks for the feedback. > From some other post I understand it's only possible to bypass the > maintenance mode where stickiness is used? Yes, or you can use the

Re: What is a nice way to bypass the maintenance mode for certain IP's?

2018-03-02 Thread Pieter Vogelaar
When I move force-persist to the backend, it indeed works. From some other post I understand it's only possible to bypass the maintenance mode where stickiness is used? Best regards, Pieter Vogelaar Op 02-03-18 06:32 heeft Willy Tarreau geschreven: Hi Cyril, On Thu, Mar 01, 2018

Re: [ANNOUNCE] haproxy-1.7.1

2018-03-02 Thread Igor Pav
Hello, does TFO on the server side now implemented? On Wed, Jan 4, 2017 at 2:56 PM, Willy Tarreau wrote: > On Tue, Jan 03, 2017 at 06:21:18PM +0100, Lukas Tribus wrote: >> Hi Igor, >> >> >> Am 16.12.2016 um 12:52 schrieb Igor Pav: >> > Cool, even TLS 1.3 0 RTT feature requires no changes? >> >>

Re: TLS termination with 2 certs on same IP

2018-03-02 Thread Dave Cottlehuber
On Fri, 2 Mar 2018, at 01:40, Lukas Tribus wrote: > On 2 March 2018 at 01:09, Dave Cottlehuber wrote: > > I have 2 TLS cert bundles that I'd like to serve off haproxy, using a > > single IP. Both certs have multiple SANs in them. > > Yes. You don't need TCP mode and manual SNI matching at all. H

Re: [PATCH] support CRC32c for proxy protocol v2 (send, accept)

2018-03-02 Thread Emmanuel Hocdet
Hi Willy, Since patches "[PATCH] proxy-v2-options ssl-cipher,cert-sig,cert-key,authority » are merged, these could be considered. ++ Manu > Le 5 févr. 2018 à 17:10, Emmanuel Hocdet a écrit : > > Hi, > > Series of patches to support CRC32c checksum to proxy protocol v2 header > (as describe i

stats page: inconsistent numbers spacing (thousands)

2018-03-02 Thread John Cherouvim
Hello My stats page (haproxy version: 1.8.4-1ppa1~xenial) shows some values as "2" and others as "2 000" (note the thousands spacing). The CSV in question shows the numbers without spaces: backend_varnish,varnish,0,0,0,0,2,0,0,0,,0,,0,0,0,0,no check,1,1,0,,,92203,,,1,3,1,,0,,2,0,,0,,,

subscribe

2018-03-02 Thread John Cherouvim

Re: Syslog with systemd

2018-03-02 Thread Vincent Bernat
❦ 2 mars 2018 19:24 +1100, Igor Cicimov  : >> I suppose the permissions of /var/log are incorrect. It should be owned >> by syslog? > > ​The permissions look ok: > ​ > ​# ls -ld /var/log/ > drwxrwxr-x 16 root syslog 4096 Mar 2 00:00 /var/log/ > # id -a syslog > uid=104(syslog) gid=108(syslog) g

Re: Syslog with systemd

2018-03-02 Thread Igor Cicimov
On Fri, Mar 2, 2018 at 5:49 PM, Vincent Bernat wrote: > ❦ 2 mars 2018 09:49 +1100, Igor Cicimov > : > > > $ ls -l /var/log/haproxy.log > > -rw-r- 1 syslog adm 48939 Mar 1 20:17 /var/log/haproxy.log > > > > ​and I'm sure this file was automatically created ​(by rsyslog I guess?). > > I'm s