Re: Product Info

I think the point Willy tried to make is that it should be handled the same way regardless of being a security patch or not. All fixes are important - so see them as "security" fixes for bugs if you like. On 06/11/2019, 10.04, "apcoeproductnotificati...@wellsfargo.com" wrote: Hi Willy,

Re: Using haproxy together with NFS

modifications on the current NFS infrastructure (since it would introduce more complexity). Thanks for your replies both of you! Best Regards, On 02/08/2018, 18.09, "Willy Tarreau" wrote: On Thu, Aug 02, 2018 at 04:05:24AM +0000, Lucas Rolff wrote: > Hi michael, > &g

Re: Using haproxy together with NFS

shares that different servers need access to I’ll try not the sample config from the link above! Thanks! Get Outlook for iOS<https://aka.ms/o0ukef> From: Michael Ezzell Sent: Thursday, August 2, 2018 2:38:06 AM To: Lucas Rolff Cc: HAproxy Mailing Lists Subje

Using haproxy together with NFS

of the “fragment too large” when going via haproxy, or an actual working config for haproxy to do NFS 4.0 or 4.1 traffic – then please let me know! Best Regards, Lucas Rolff

Re: RHEL distribution still uses HAProxy 1.5

Well, RHEL is set to provide non-breaking software for the time a major release will exist, that's something they've decided as an OS vendor. You're free to run your own version, just be aware that it's unsupported by RHEL RHEL isn't the solution if you want cutting edge versions of software,

Re: -Ws argument isn't document?

haproxy --help: -W master-worker mode. -Ws master-worker mode with systemd notify support. On 03/02/2018, 15.44, "Pavlos Parissis" wrote: Hi, In contrib/systemd/haproxy.service.in we see -Ws used in ExecStart as it is the recommended way

Re: Poll: haproxy 1.4 support ?

I also vote for both 1.4 and 1.5 being marked, if vendors do rely on old versions due to LTS, they tend to backport critical security and bug fixes anyway Get Outlook for iOS From: Pavlos Parissis Sent: Tuesday,

Re: HTTP/2 Termination vs. Firefox Quantum

I’ve tested the 1.8.3 build, and I can indeed confirm it works like charm! @Willy, thanks for the extensive time you spend on debugging and investigating this as well! Best Regards, Lucas Rolff

Re: HTTP/2 Termination vs. Firefox Quantum

%3D cookie: laravel_session=SECURE_SESSION%3D%3D upgrade-insecure-requests: 1 pragma: no-cache cache-control: no-cache # It’s consistently the cookie header that fails. Some repeated requests, all related to cookie where header field became: 6InNEa InVMdk Best Regards, Lucas Rolff On

Re: HTTP/2 Termination vs. Firefox Quantum

lt; 'Z' - 'A') goto fail; That’s an interesting place to fail - Lucas R On 29/12/2017, 19.36, "Willy Tarreau" <w...@1wt.eu> wrote: On Fri, Dec 29, 2017 at 06:18:00PM +, Lucas Rolff wrote: > I think you forgot to attach the patch Grrr common mistake, sorry.

Re: HTTP/2 Termination vs. Firefox Quantum

The application will then do a redirect to a specific page based on that input data. On 29/12/2017, 19.11, "Willy Tarreau" <w...@1wt.eu> wrote: On Fri, Dec 29, 2017 at 06:02:15PM +0000, Lucas Rolff wrote: > POST Request (to website): > h2s_f

Re: HTTP/2 Termination vs. Firefox Quantum

(app.css) h2_frt_decode_headers:2621 h2_frt_decode_headers:2643 - Get Request (app.js) h2s_frt_make_resp_data:3180 h2s_frt_make_resp_data:3067 Best Regards, Lucas Rolff On 29/12/2017, 18.21, "Willy Tarreau" <w...@1wt.eu> wrote: On Fri, Dec 29, 2017 at 04:48:13PM +0000, L

Re: HTTP/2 Termination vs. Firefox Quantum

hopefully) Best Regards, Lucas Rolff

Re: HTTP/2 Termination vs. Firefox Quantum

Both in Firefox and Chrome my POST requests in 1.8.2 with the supplied patch, seem to do the trick (did about 300 post requests in each browser with no fails). Best Regards, On 29/12/2017, 15.58, "Willy Tarreau" wrote: On Fri, Dec 29, 2017 at 03:42:30PM +0100, Willy Tarreau

Re: HTTP/2 Termination vs. Firefox Quantum

> Lucas, can you check my previous mail and see if you can enable ignoring > client aborts in your backend, assuming you are using nginx? I can confirm that ignoring client aborts in my backend using fastcgi_ignore_client_abort “resolves” the issue regarding POST requests. Best Regards, Lucas

Re: HTTP/2 Termination vs. Firefox Quantum

the time and (CR) on GET requests occasionally Best Regards, Lucas Rolff On 29/12/2017, 11.13, "Willy Tarreau" <w...@1wt.eu> wrote: On Fri, Dec 29, 2017 at 08:46:18AM +, Lucas Rolff wrote: > > Yep. For what it's worth, it's been enabled for about one m

Re: HTTP/2 Termination vs. Firefox Quantum

ses What I’d like to know: - URL on haproxy.org that negotiates http2 correctly for Chrome and Firefox (not exactly sure why it doesn’t do it already?) ( https://snaps.hcdn.dk/JFsEzPmxspw9hnXuFyM5G4QGYst7Q6R2zXmkZbRRjz.png ) Best Regards, Lucas Rolff On 29/12/2017, 08.13, "Willy Tarreau&

Re: HTTP/2 Termination vs. Firefox Quantum

an replicate the same issue in more browsers (without connection: keep-alive header), maybe that would give us more insight. Best Regards, Lucas Rolff On 29/12/2017, 00.08, "Willy Tarreau" <w...@1wt.eu> wrote: Hi Lukas, On Thu, Dec 28, 2017 at 09:19:24PM +0100, Lukas

Re: h2 bad requests

Hi Sander, Which exact browser version do you use? There’s an ongoing thread already (https://www.mail-archive.com/haproxy@formilux.org/msg28333.html ) regarding the same issue. Best Regards, Lucas Rolff

Re: HTTP/2 Termination vs. Firefox Quantum

> the output of the http2 golang test and can you please both clarify which OS > you reproduce this on? If I visit http2 golang test, I also don’t see it, and I saw it in developer tools (Because dev tools shouldn’t put headers that isn’t requested/received) – however based on your findings,

Re: HTTP/2 Termination vs. Firefox Quantum

live" while Chrome does not. Correct, however – it seems like Safari also sends it, so in fact I have to open a bug report to Safari as well ( Best Regards, Lucas Rolff On 28/12/2017, 12.08, "Maximilian Böhm" <maximilian.bo...@auctores.de> wrote: Sorry, for my long absenc

Re: HTTP/2 Termination vs. Firefox Quantum

naps.hcdn.dk/3uaT06s2RJmAqMu5TqSJYAxBHjSzHOJGiHjfK0qcrV.png Best Regards, Lucas Rolff On 28/12/2017, 11.39, "Willy Tarreau" <w...@1wt.eu> wrote: On Thu, Dec 28, 2017 at 10:27:28AM +, Lucas Rolff wrote: > In that case, haproxy should be consistent i

Re: HAProxy 1.8 takes too long to update new config

Robin, there's also an ongoing thread with Firefox which has the same issues, especially with post/put requests in 1.8.2, you might wanna keep an eye on that one as well Get Outlook for iOS From: Robin Anil Sent:

Re: HTTP/2 Termination vs. Firefox Quantum

I think I might have found a cause for this to happen, or at least a way to fully replicate the issue I saw that the issue also happens in Firefox whenever doing POST requests (Let’s say, logging into a website) – I got a bunch of “400 Bad Request” whenever trying to actually do the post

Re: HTTP/2 Termination vs. Firefox Quantum

, 2017 10:51:01 PM To: Lucas Rolff Cc: haproxy@formilux.org Subject: Re: HTTP/2 Termination vs. Firefox Quantum Hello Lucas, On Wed, Dec 27, 2017 at 9:24 PM, Lucas Rolff <lu...@lucasrolff.com> wrote: > Can't even compose an email correctly.. > > So: > > I experience the same issue

Re: HTTP/2 Termination vs. Firefox Quantum

I tried enabling “option httplog” within my frontend, I do have the same issue wit

Re: haproxy 1.8.2 ALPN h2 broken?

it will give you extensive information regarding your http2 traffic – since it will be aware of your streams, priorities etc etc. Best Regards, Lucas Rolff On 27/12/2017, 19.25, "Willy Tarreau" <w...@1wt.eu> wrote: Hi Lucas, On Wed, Dec 27, 2017 at 04:49:31PM +,

Re: haproxy 1.8.2 ALPN h2 broken?

ng systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. Available filters : [SPOE] spoe [COMP] compression [TRACE] trace Best Regards, Lucas Rolff From: Olivier Douce

Re: haproxy SSL termination performance

on relatively cheap hardware, so even if I want to scale to 100k+ req/s it should be no problem from what I can see ( I know there will be a slightly bigger overhead when doing a lot of clients also because of networking involving more than a single client). So thanks a lot! Best Regards, Lucas

haproxy 1.8.2 ALPN h2 broken?

2 support) “fixes” the issue. Best Regards, Lucas Rolff

haproxy SSL termination performance

, then we’re talking about a lot of added hardware to be able to handle, let’s say 500k requests per second. The VM has AES-NI available as well. Thanks in advance! Best Regards, Lucas Rolff