Re: haproxy issue tracker discussion

2019-01-13 Thread Willy Tarreau
On Mon, Jan 14, 2019 at 03:06:54AM +0100, Tim Düsterhus wrote: > May I suggest the following to move forward? (...) > That way we can test the process with a small, unimportant, test issue. > The automated closing based on the labels can than be added a few days > later. I don't expect huge

RE: Get client IP

2019-01-13 Thread Vũ Xuân Học
Hi, I don’t know how to use ssl in http mode. I have many site with many certificate. As you see: … bind 192.168.0.4:443 (I NAT port 443 from firewall to HAProxy IP 192.168.0.4) … # Define hosts acl host_1 req.ssl_sni -i ebh.vn acl host_2 req.ssl_sni hdr_end(host)

Re: haproxy issue tracker discussion

2019-01-13 Thread Tim Düsterhus
Willy, Lukas, Am 14.01.19 um 02:08 schrieb Lukas Tribus: > My simple github script which relays the PR to the mailing list uses > the GH Rest API through the agithub client [1]. I will have a look at > how extensible it is, but extracting labels of closed issues and > reopening it if it contains

RE: Get client IP

2019-01-13 Thread Aleksandar Lazic
Hi. As you use IIS I strongly suggest to terminate the https on haproxy and use mode http instead of tcp. Here is a blog post about basic setup of haproxy with ssl https://www.haproxy.com/blog/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/ I assume that haproxy have

RE: Get client IP

2019-01-13 Thread Vũ Xuân Học
Thanks for your help I try config HAProxy with accept-proxy like this: frontend ivan bind 192.168.0.4:443 accept-proxy mode tcp option tcplog #option forwardfor reqadd X-Forwarded-Proto:\ https then my website can not access. I use IIS as webserver and I

Re: haproxy issue tracker discussion

2019-01-13 Thread Lukas Tribus
Hello, On Sat, 12 Jan 2019 at 13:38, Willy Tarreau wrote: > > The situation on GitHub does not need to mirror the situation on > > haproxy.org. You could still use separated repositories on haproxy.org > > to separate permissions and push the "validated" commits to GitHub. This > > is what the

Re: Lots of mail from email alert on 1.9.x

2019-01-13 Thread Willy Tarreau
Hi Olivier, On Sun, Jan 13, 2019 at 06:40:56PM +0100, Olivier Houchard wrote: > > Indeed, this function should not have any special effect in this case, > > it is needed to prepend this at the beginning of chk_report_conn_err() : > > > > if (!check->server) > > return; > > > >

Re: Lots of mail from email alert on 1.9.x

2019-01-13 Thread Olivier Houchard
Hi, On Sat, Jan 12, 2019 at 01:11:29PM +0100, Willy Tarreau wrote: > Hi Pieter, > > On Sat, Jan 12, 2019 at 01:00:33AM +0100, PiBa-NL wrote: > > Thanks for this 'change in behavior' ;). Indeed the mailbomb is fixed, and > > it seems the expected mails get generated and delivered, but a segfault

Re: Get client IP

2019-01-13 Thread PiBa-NL
Hi, Op 13-1-2019 om 13:11 schreef Aleksandar Lazic: Hi. Am 13.01.2019 um 12:17 schrieb Vũ Xuân Học: Hi, Please help me to solve this problem. I use HAProxy version 1.5.18, SSL transparent mode and I can not get client IP in my .net mvc website. With mode http, I can use option forwardfor to

Re: Get client IP

2019-01-13 Thread Aleksandar Lazic
Hi. Am 13.01.2019 um 12:17 schrieb Vũ Xuân Học: > Hi, > > Please help me to solve this problem. > > I use HAProxy version 1.5.18, SSL transparent mode and I can not get client IP > in my .net mvc website. With mode http, I can use option forwardfor to catch > client ip but with tcp mode, my web

Get client IP

2019-01-13 Thread Vũ Xuân Học
Hi, Please help me to solve this problem. I use HAProxy version 1.5.18, SSL transparent mode and I can not get client IP in my .net mvc website. With mode http, I can use option forwardfor to catch client ip but with tcp mode, my web read X_Forwarded_For is null. My diagram: Client =>