Re: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-06-24 Thread Olivier
Hello, Great ! I was actually speaking about it this morning at work ! Would love to see this feature integrated (can it be backported to 1.5 too ?) 2015-06-23 20:07 GMT+02:00 Dave Zhu (yanbzhu) : > Hello all, > > I have a proposed enhancement that I have coded up and would like your > comment

Re: changing font

2015-05-20 Thread Olivier
x your font url with "//" instead of "http://"; (so " http://www.googlefonts.com"; become "//www.googlefonts.com"), your browser will load the resource with the correct protocol. Your resource must of course be available on both http and https. Olivier

Re: changing font

2015-05-20 Thread Olivier
different size). Just edit your CSS and it will fix your issue. Olivier 2015-05-20 15:13 GMT+02:00 Sefer Simsek : > Hi, > Newly I installed haproxy. > > Version is: > HA-Proxy version 1.5.12 2015/05/02 > Copyright 2000-2015 Willy Tarreau > > I configured haproxy.cfg

Re: Complete rewrite of HAProxy in Lua

2015-04-01 Thread Olivier
I'd prefer a complete rewrite of HAProxy in JavaScript. We would be able to make it run on all platform (hello windows), and with a simple browser tab left open :( 2015-04-01 11:40 GMT+02:00 Chris Allen : > Great one :) > > I was 10 seconds away from forwarding this to our web teams :) > > > > On

Re: 1.5.9 crashes every 4 hours, like clockwork

2014-12-11 Thread Olivier
2014-12-11 15:35 GMT+01:00 Olivier : > When you say "crash", do you mean Segfault ? > Also check /var/log/messages to see if OOM Killer is not involved in what you are experiencing.

Re: 1.5.9 crashes every 4 hours, like clockwork

2014-12-11 Thread Olivier
dump of the process ? ulimit -c unlimited echo "/tmp/core.%e.%p.%h.%t" > /proc/sys/kernel/core_pattern Then use gdb on generated file in /tmp to give us more information. Olivier

use_domain_only feature

2014-11-05 Thread Olivier Fredj
me know of my solution is breaking something and if i can help to find a better way to solve this problem. Regards, -- Olivier Fredj Online.net

Re: URL Encoding Problem BADREQ umlaut

2014-10-21 Thread Olivier
Hello, 2014-10-21 14:17 GMT+02:00 Robert Bartl : > > I've got a problem with a specific URL which runs through haproxy and > produces a HTTP 400 BADREQ. > You may have invalid characters in URL, and HAProxy filters it by default. To change this behaviour, take a look at option accept-invalid-ht

Re: no-sslv3 in default

2014-10-16 Thread Olivier
g Sslv3 is absolutely necessary. There are still plenty of websites around that must keep support for WinXP+IE6. Even Google did not deactivate sslv3 on their server (they are using a mitigating solution instead). In my own opinion, being able to deactivate it on defaults section might help, but don't change default behaviour. Olivier

Re: Sessions idle not closed by HAProxy

2014-10-13 Thread Olivier
Hi, > Upgrade to the latest stable release, this has already been fixed. > Is this this patch that fixed the issue ? http://git.haproxy.org/?p=haproxy-1.5.git;a=commit;h=fc566b541e4c67cfbd8d6b40b627ce27dfc8a7cb Olivier

Sessions idle not closed by HAProxy

2014-10-13 Thread Olivier
terface.h, there are several values mapped to 0x08... Any help would be appreciated :) Olivier

Re: HAproxy errorfile and HEAD request

2014-10-07 Thread Olivier
change the behaviour. (something like 'no-errorfile-on-head'). An other idea : if HEAD should not return a body, we can make HAProxy still reading the errorfile but stop at the first \r\n\r\n encountered when replying. I don't know haproxy internals enough to see if it's a bad idea or not. Olivier

Re: Lots of spam on this list

2014-09-18 Thread Olivier
c.info/?l=haproxy&m=140979555128144&w=2 Olivier

Re: Minor bug in dumpstats.c

2014-09-08 Thread Olivier
Hello, i've reworked my patch so that it can be applied smoothly :) Olivier 2014-07-30 12:52 GMT+02:00 Olivier : > Hello, > > i'm using "show errors" on HAProxy CLI with an automated script to dump > errors logged by HAProxy. > > I saw that between fronte

Re: "show sess" format

2014-09-04 Thread Olivier
2014-09-03 23:31 GMT+02:00 Willy Tarreau : > On Wed, Sep 03, 2014 at 10:03:49PM +0200, Olivier wrote: > > OK I understand this point of view. Maybe stating this clearly "to have > > details on fields, just look at the source code, ie src/dumpstats.c" :p > > No pr

Re: Master server outage this night (1wt.eu)

2014-09-03 Thread Olivier
Hi Willy, http://haproxy.1wt.eu/ is redirecting to http://www.haproxy.org/ that is ... well not the good site if I remember correctly :) Olivier

Re: "show sess" format

2014-09-03 Thread Olivier
Hi, 2014-09-03 21:46 GMT+02:00 Willy Tarreau : > Hi Olivier, > > That's intentional, and I'll reject any patch to document it. It's a > debugging feature whose format changes between versions or for any > reason we see fit when facing a new problem. This can only b

"show sess" format

2014-09-03 Thread Olivier
those fields will be very useful (and add it to the doc for other users too). It would be great to have the same for "show sess 0x37896b0" verbose output too. Olivier

Minor bug in dumpstats.c

2014-07-30 Thread Olivier
there's a start to everything ;) Olivier diff --git "old/dumpstats.c" "new/dumpstats.c" index 09bc7f6..5365042 100644 --- "old/dumpstats2.c" +++ "new/dumpstats.c" @@ -6045,7 +6045,7 @@ static int stats_dump_errors_to_buffer(struct stream_interface

Re: [ANNOUNCE] haproxy-1.5.1

2014-06-24 Thread Olivier
> I don't understand, you're the third one to tell me that, while I have > updated it 5 minutes after the announce. One of my coworkers had the > same issue while I had it display the updated version, and he saw it > correctly after a forced reload, indicating that the old copy was > cached in his

Re: [ANNOUNCE] haproxy-1.5.1

2014-06-24 Thread Olivier
Hello, > The usual URLs follow : > Site index : http://www.haproxy.org/ Homepage is not updated with link to 1.5.1 (still referencing 1.5.0). Olivier

Re: [PATCH] mysql-check: Add support for v4.1+ authentication

2014-06-11 Thread Olivier
single check is of course the best way but needs a bigger rewrite. If it could be done before 1.5 release, we would avoid the extra parameter (we would be stuck with it for many years ...). Nenad, what's your opinion on this ? Olivier

Re: [PATCH] mysql-check: Add support for v4.1+ authentication

2014-06-11 Thread Olivier
ns. We can provide a mysql40-check option for very old server to keep running, and document it in "major 1.50 changes that could break your app". My 2 cents, Olivier

Re: 100% CPU usage

2014-05-28 Thread Olivier
g else needs to scaled down with the increase to the queue and > server timeouts? What is the hitrate reached when hitting 100% CPU ? Depending on various factors, you can expect HAProxy to scale up to > 10k requests /sec on a single core. Olivier

Re: Error 408 with Chrome

2014-05-26 Thread Olivier
>> Some people suggest closing without ever emitting the 408. You can do that >> this way : >> >> errorfile 408 /dev/null I'll try this today. Olivier

[PATCH] Filter input lines by date and time through timestamp

2014-05-23 Thread Olivier Burgard
x27;-5 min' +%s) Regards, Olivier halog-timestamp.patch Description: Binary data

[PATCH] Filter input lines by date and time through timestamp

2014-05-22 Thread Olivier Burgard
x27;-5 min' +%s) Regards, Olivier halog-timestamp.patch Description: Binary data

Re: Redirect help

2013-10-07 Thread Olivier Desport
I want to redirect. I've tried this : acl acl_www hdr_beg(host) -i www. reqirep ^Host:\ (.*)$ Host:\ www.\1 if !acl_www redirect prefix / code 301 if !acl_www The non-www works but it doesn't redirect. Le 07/10/2013 11:00, Baptiste a écrit : Hi Olivier, Do you want to redi

Redirect help

2013-10-07 Thread Olivier Desport
Hi, I need to redirect all non-www requests to www. Ex : mysite.com should be rewrited to www.mysite.com I think I have to use reqirep but I don't know how. Thanks

Re: CSS not displayed

2013-03-06 Thread Olivier Desport
I've found the solution. I have enabled the line EXTRAOPTS="-de -m 16" in /etc/default/haproxy. It works when this line is commented. Thanks for your help. Le 23/01/2013 17:13, shouldbe q931 a écrit : Hi Olivier, Just to recap, you have a webserver in subnet A, you have a HA

Re: CSS not displayed

2013-01-23 Thread Olivier Desport
Le 23/01/2013 14:02, shouldbe q931 a écrit : On Wed, Jan 23, 2013 at 11:43 AM, Olivier Desport <mailto:olivier.desp...@ac-versailles.fr>> wrote: Le 22/01/2013 17:06, Tait Clarridge a écrit : Olivier Desport <mailto:olivier.desp...@ac-versailles.fr> <m

Re: CSS not displayed

2013-01-23 Thread Olivier Desport
Le 22/01/2013 17:06, Tait Clarridge a écrit : Olivier Desport <mailto:olivier.desp...@ac-versailles.fr> 22 January, 2013 10:59 AM The site I want to display is designed with Joomla. There are no errors in Apache logs et Firebugs shows several warnings for js files. The site i

Re: CSS not displayed

2013-01-23 Thread Olivier Desport
Le 22/01/2013 19:35, Thomas Heil a écrit : Hi, On 22.01.2013 15:57, Olivier Desport wrote: I use Haproxy with two web servers. The CSS are not well displayed (images, fonts...). The look of the page is different every time I refresh ! It works correctly when Haproxy is not used. Is there

Re: CSS not displayed

2013-01-22 Thread Olivier Desport
The site I want to display is designed with Joomla. There are no errors in Apache logs et Firebugs shows several warnings for js files. The site is well displayed when I connect directly to the Apache server. Le 22/01/2013 16:21, Ben Timby a écrit : On Tue, Jan 22, 2013 at 9:57 AM, Olivier

Re: use_backend complex rules

2010-08-03 Thread Olivier Le Cam
Chris Sarginson wrote: By default doesn't haproxy use AND when matching ACLs? If so the last line should be: use_backend rule-csp if mydom req_path Still not tested but that makes sense! -- Olivier

Re: use_backend complex rules

2010-08-03 Thread Olivier Le Cam
7;and' condition in the use_backend directory but having multiple acls with the same name just works for me (rules are managed as an 'or' condition between all of them) with v1.3.15.2-2+lenny2. HTH -- Olivier

mod_security and/or fail2ban

2010-03-16 Thread Olivier Le Cam
modsecurity CRS? Another alternative could be to scan the haproxy logs with fail2ban or equivalent. I was wondering if that could be a satisfying enough and if some fail2ban rulesets could be already available for that. Thanks in anticipation for any idea/pointers! -- Olivier Le Cam Département des

<    1   2   3   4