Enforcing security with mTLS and long-lived TCP connections

2023-08-28 Thread John Hwang
Hi folks, I'm currently working on coming up with some options to implement a security requirement that makes it necessary for haproxy to force disconnect any clients whose certificate either expires or gets revoked by the CA (via CRL) in midst of an active TCP connection. The simple and

Re: how to upgrade haproxy

2023-08-28 Thread Aleksandar Lazic
Hi. On 2023-08-28 (Mo.) 22:30, Atharva Shripad Dudwadkar wrote: Hi Haproxy team, Can we install haproxy using source code in ubuntu 20.04 and how ? You can follow the Install file to compile HAProxy.

Re: how to upgrade haproxy

2023-08-28 Thread Atharva Shripad Dudwadkar
Hi Haproxy team, Can we install haproxy using source code in ubuntu 20.04 and how ? On Thu, 24 Aug 2023 at 4:00 PM, Aleksandar Lazic wrote: > Hi Atharva Shripad Dudwadkar. > > On 2023-08-24 (Do.) 12:08, Willy Tarreau wrote: > > Hi, > > > > On Thu, Aug 24, 2023 at 03:23:59PM +0530, Atharva

Re: Request for feedback: Add support for txn args as arguments in converter "bytes"

2023-08-28 Thread Lokesh Jindal
Thanks for the response and the corrections, Willy. *We need to decide what to do when the variable does not* *exist or is empty. We can't make converters fail for now, so most likelyit will have to end up as value zero for offset and/or length*. Here is the implementation today - link

Content Proposal

2023-08-28 Thread Bash Sarmiento
Hi there! I’m Bash Sarmiento, an educator by day and a writer by night. I’m working on my author credibility this year and luckily, I was able to publish a few articles here: - 8 Tech Courses: Which Self Guided Course Is The Best?

RE: [PATCH] MEDIUM: sample: Implement sample fetch for arbitrary PROXY protocol v2 TLV values

2023-08-28 Thread Stephan, Alexander
Hi Willy, > finally back to this! Overall it's a great and very clean series, I really > want to thank you for this high quality work! Thanks for the compliment, really glad to hear! :) > Yeah it initially gave me a bit of head scratching when reading this part but > I understood what you did

Re: Request for feedback: Add support for txn args as arguments in converter "bytes"

2023-08-28 Thread Willy Tarreau
Hi Lokesh, On Fri, Aug 25, 2023 at 01:44:48PM -0700, Lokesh Jindal wrote: > Hey folks > > I am writing to gather feedback on an idea before doing the implementation. > Per the documentation, converter "bytes" accepts integer values as > arguments, but not txn args. > i.e. ,bytes(2,8) will work >

Re: [PATCH] MEDIUM: sample: Implement sample fetch for arbitrary PROXY protocol v2 TLV values

2023-08-28 Thread Willy Tarreau
OK with this, I'd appreciate it if you could send a few informal incremental patches that I'd squash into yours. I had to resolve some small context conflicts by hand so I'd rather keep the branch as-is than take a new series ;-) Or alternatively I'm pushing it as "20230828-pp2-tlv-1" if you prefer to rework it, just do as you prefer, I can adapt. Thanks! Willy