Feature suggestion: Check for same binding on multiple frontends

2018-03-06 Thread Moomjian, Chad
Haproxy Developers, I recently modified a configuration file for haproxy, and after setting it up, I noticed that about half of my requests came back with a 503 error, and the other half came back with the correct elements being returned. After doing troubleshooting involving a test haproxy ins

Re: segfault in haproxy=1.8.4

2018-03-06 Thread Максим Куприянов
Hi, Willy! If it could be interesting, I got a new core with exactly the same backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x563f5373bf21 in __pendconn_free (p=0x563f560db0c8) at src/queue.c:296 296 HA_ATOMIC_SUB(&p->strm->be->nbpend, 1); (gdb) bt #0 0x563f53

Re: Dynamically adding/deleting SSL certificates

2018-03-06 Thread Aurélien Nephtali
Willy, On Tue, Mar 6, 2018 at 2:30 PM, Willy Tarreau wrote: > More or less. I'd rather return a 3rd case, like with do with samples : > "not sure yet" (need more data to decide). That allows the failure and > success cases to remain definitive. Indeed, that what I was trying to say with: "to wai

Re: Dynamically adding/deleting SSL certificates

2018-03-06 Thread Willy Tarreau
Hello Aurélien, On Tue, Mar 06, 2018 at 02:13:31PM +0100, Aurélien Nephtali wrote: > > Probably that we could in fact extend the CLI syntax in a backwards > > compatible > > way : > > > >[ ]* * > >[optional body] > > > > Most commands don't use a body. Those using a body have to terminate

Re: What is a nice way to bypass the maintenance mode for certain IP's?

2018-03-06 Thread Willy Tarreau
On Tue, Mar 06, 2018 at 09:48:11AM +, Pieter Vogelaar wrote: > Does use-server also accept some keyword to address the first server in the > backend instead of a specific valid server name of the backend? Hmmm no there's no such feature. I'm not sure I'm seeing well the real use case to be hon

Re: Dynamically adding/deleting SSL certificates

2018-03-06 Thread Aurélien Nephtali
Hello Willy, On Mon, Mar 5, 2018 at 8:37 PM, Willy Tarreau wrote: > Quotes could be part of some future statements and we'd > possibly regret having used them if already used for this. For example we > could > imagine one day uploading some JSON parts for certain things. True, but it could also

Re: nss_getpwnam: name 't...@my.dom@localdomain' does not map into domain 'nix.my.dom'

2018-03-06 Thread Tom
Yeah I did put it in the wrong queue. Sorry about that guys. Sent from my iPhone > On Mar 6, 2018, at 1:09 AM, Johan Hendriks wrote: > > Tom, this list is for the loadbalancer software haproxy, so i think you > mailed the wrong list. > > Regards > Johan Hendriks > > Op 6 mrt. 2018 06:41 s

Re: haproxy 1.8.4-1 hangs on kernel 4.16.0-041600rc1

2018-03-06 Thread Adrian Veith
thanks I am trying 4.16-rc4 now and it looks good. cheers Adrian. Am 06.03.2018 um 12:05 schrieb Lukas Tribus: > On 6 March 2018 at 11:38, Adrian Veith wrote: >> I had this hang in haproxy after trying out kernel 4.16.0-041600rc1 >> after starting haproxy for some minutes. Now I am back on kern

Re: haproxy 1.8.4-1 hangs on kernel 4.16.0-041600rc1

2018-03-06 Thread Lukas Tribus
Hello, On 6 March 2018 at 11:38, Adrian Veith wrote: > I had this hang in haproxy after trying out kernel 4.16.0-041600rc1 > after starting haproxy for some minutes. Now I am back on kernel > 4.15.0-10-generic and everything seems ok so far. Yeah, this is a kernel bug, you need the fix: netfilt

Re: Dynamically adding/deleting SSL certificates

2018-03-06 Thread Aurélien Nephtali
Hello Willy, On Mon, Mar 5, 2018 at 7:25 PM, Willy Tarreau wrote: > I tend to think (first idea out of my head) that for such file types, > we could very well consider that the command reads multiple lines and > stops at the first empty line. That's very convenient to use in scripts > and even by

haproxy 1.8.4-1 hangs on kernel 4.16.0-041600rc1

2018-03-06 Thread Adrian Veith
I had this hang in haproxy after trying out kernel 4.16.0-041600rc1 after starting haproxy for some minutes. Now I am back on kernel 4.15.0-10-generic and everything seems ok so far. Adrian Veith [ 9063.536247] INFO: task haproxy:1234 blocked for more than 120 seconds. [ 9063.536334]   Tainte

Re: What is a nice way to bypass the maintenance mode for certain IP's?

2018-03-06 Thread Pieter Vogelaar
Does use-server also accept some keyword to address the first server in the backend instead of a specific valid server name of the backend? That would save quite a bit logic complexity in Puppet. Best regards, Pieter Vogelaar Op 02-03-18 15:41 heeft Willy Tarreau geschreven: On Fri, M