Re: Healthcheck via https

2016-07-01 Thread Ray Cote
Hi Cerrie: I was wondering if you were successful with your changes. —Ray On Thu, Jun 23, 2016 at 10:19 AM, Cerrie Russell wrote: > Hello, > > Hoping to get some help please. > > I have an issue with httpchk whereby the layer7 check can only see the 301 > which is redirecting to SSL page. So it

Re: Healthcheck via https

2016-06-23 Thread Ray Cote
Hi Cerrie: On Thu, Jun 23, 2016 at 10:19 AM, Cerrie Russell wrote: > So we are seeing the 301/2 to HTTPS/SSL. > Since the server to which you are connecting simply forwards you to the HTTPS, why not connect the backend directly to the HTTPS service and avoid the redirect? —Ray -- Raymond Cote

Re: SNI healthcheck on backend?

2016-06-19 Thread Ray Cote
Hi Willy: On Fri, Jun 17, 2016 at 5:59 AM, Willy Tarreau wrote: > I think at this point we'd rather add an "sni" argument to the tcp-check > connect, then you could resort to this one instead. That would allow you > to write whatever complex sequence as you'd like. > Agree that this sounds like

Re: SNI healthcheck on backend?

2016-06-15 Thread Ray Cote
Hi Willy: On Tue, Jun 14, 2016 at 5:02 AM, Willy Tarreau wrote: > > Can the Health Check be driven by the SNI parameter in the server line? > > No because the SNI parameter takes an expression. People will typically > use "ssl_fc_sni" here, meaning that the SNI of the front connection has > to b

Re: SNI healthcheck on backend?

2016-06-10 Thread Ray Cote
On Fri, Jun 10, 2016 at 12:50 PM, Willy Tarreau wrote: > Hi Ray, > > On Thu, Jun 09, 2016 at 01:49:02PM -0400, Ray Cote wrote: > > On Thu, Jun 9, 2016 at 12:10 PM, wrote: > > > > > http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 > > > >

Re: SNI healthcheck on backend?

2016-06-09 Thread Ray Cote
On Thu, Jun 9, 2016 at 12:10 PM, wrote: > http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 > I’ve been looking for an official place to post a request ticket for this (I’m the originator of that thread). Yes, it does seem that HAProxy 1.6 does not send the SNI header during the he