Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Jarno Huuskonen
Hi, On Wed, Dec 18, Ciprian Dorin Craciun wrote: > Hello all! > > [First of all this question isn't only HAProxy specific, but can be > extended to any HTTP server (including Apache, Nginx, and any other > web application out there); however I think it is especially > important for HAProxy given

Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Илья Шипицин
чт, 19 дек. 2019 г. в 01:07, Ciprian Dorin Craciun < ciprian.crac...@gmail.com>: > On Wed, Dec 18, 2019 at 8:23 PM Илья Шипицин wrote: > >> redirects are easy to test. using any framework. > > > > for example, jmeter (or any other http query tool) > > > >> * apply authentication for `admin`; > >>

[RFC PATCH] HTTPS connection reuse with SNI

2019-12-18 Thread Joshua Knox
A github issue was filed at https://github.com/haproxy/haproxy/issues/371 The CONTRIBUTING guidelines requested discussion on the list, I believe the included diff would address that issue and arguably be less surprising behavior. The comment from ehocdet on the issue indicated that connection re

Re: PROXY protocol and check port

2019-12-18 Thread Olivier D
Hello, Le mar. 17 déc. 2019 à 11:11, Willy Tarreau a écrit : > Hi Olivier, > > On Tue, Dec 17, 2019 at 09:20:21AM +0100, Olivier D wrote: > > That's not what I was saying. I'm already using "show server state", and > > that's exactly what leads me to hours of debugging : between two versions > >

Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Ciprian Dorin Craciun
On Wed, Dec 18, 2019 at 8:23 PM Илья Шипицин wrote: >> redirects are easy to test. using any framework. > > for example, jmeter (or any other http query tool) > >> * apply authentication for `admin`; >> * force some caching headers for `web`, `static` and `media`; > > same here. assert in jmeter w

Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Илья Шипицин
ср, 18 дек. 2019 г. в 22:34, Ciprian Dorin Craciun < ciprian.crac...@gmail.com>: > On Wed, Dec 18, 2019 at 6:47 PM Илья Шипицин wrote: > > you are talking about testing ACL. can you provide some example ? > > > So let's assume I have a given HAProxy configuration, full of ACL's > and rules, that

Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Ciprian Dorin Craciun
On Wed, Dec 18, 2019 at 6:47 PM Илья Шипицин wrote: > you are talking about testing ACL. can you provide some example ? So let's assume I have a given HAProxy configuration, full of ACL's and rules, that apply certain "firewalling", authentication / authorization, "mangling" operations to the HT

Re: How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Илья Шипицин
ср, 18 дек. 2019 г. в 21:16, Ciprian Dorin Craciun < ciprian.crac...@gmail.com>: > Hello all! > > [First of all this question isn't only HAProxy specific, but can be > extended to any HTTP server (including Apache, Nginx, and any other > web application out there); however I think it is especiall

How to "unit" test HAProxy configurations (and HTTP servers in general)

2019-12-18 Thread Ciprian Dorin Craciun
Hello all! [First of all this question isn't only HAProxy specific, but can be extended to any HTTP server (including Apache, Nginx, and any other web application out there); however I think it is especially important for HAProxy given how many HTTP-routing / mangling capabilities it has.] I hav

HashiCorp Software Users

2019-12-18 Thread Emily Jose
Good Day, I would like to know if you are interested in reaching out “HashiCorp Software Users “. Our data assist businesses like yours to connect potential customers through email, phone or direct mails. If this is relevant do let me know and we will send you further information for your revie

Re: BadREq

2019-12-18 Thread Marco Nietz|practicalbytes
Hi, after changing: http-request track-sc0 src unless { src -f /etc/haproxy/whitelist.acl } to: tcp-request connection track-sc0 src unless { src -f /etc/haproxy/whitelist.acl } such requests increase the http_req_rate but surprisingly not the http_err_rate. ### Example: $ echo 'show ta