Re: Could we reduce spam in the list?

Perhaps something about the spam philosophy and reasoning on this list could be included on the website and/or initial subscription email. It is a subject that comes up again and again. Sent from my iPhone > On 23 Nov 2015, at 09:53, Jarno Huuskonen wrote: > > Hi, > >>

Re: Spam

As someone that reads the content on this list very regularly, I see next to no spam because gmail spam filters in the most part work really well. Actually someone coming along avery few months and whining about spam is far more annoying and spammy. Perhaps Willy should add a rule to blacklist

maps and nbproc

Hi If you load a large map into memory, such as a ip-range — country/region, and use nbproc 12. Does the map get loaded into shared memory, or is it allocated and read per process? Thanks Will

Re: Server Sent Events on iOS

On 2 Oct 2014, at 15:36, Lukas Tribus luky...@hotmail.com wrote: Try (please ignore the tunnel test from my previous mail): frontend external bind :80 acl DYN path_beg /events use_backend backend_httpclose if DYN default_backend test backend test server test localhost:3000 backend

Re: Server Sent Events on iOS

the URLs for them. You just charged more than 3 MiB of a user's mobile limit without any benefit for most of them, at least not on a mobile tariff ;) Thx, cheers. l8er manfred On Tue, 30 Sep 2014, 14:14:11 +0200, William Lewis wrote: Hi Baptiste / Benjamin, I’ve attached haproxy log

Server Sent Events on iOS

Hi all I have a problem with a website which uses Server-Sent Events where the long lived connection for the Server Events seems to be blocking other resources from loading on iOS clients only and only when I have haproxy between client and server. This is my test case. * Create a node

OCSP Stapling update issue

Hi all, I’m trying to setup OCSP stapling for my setup, I’ve got it working on reload but am trying to use the stats socket to update the responses. My dev setup on OS X works as expected, I run the following echo set ssl ocsp-response $(base64 -w 1 ${CERT}.ocsp) | nc $STATS_HOST

Re: OCSP Stapling update issue

Problem solved nc wasn’t working correctly on my linux distro switched to netcat and it started working properly On 26 Jul 2014, at 09:18, William Lewis m...@wlewis.co.uk wrote: Hi all, I’m trying to setup OCSP stapling for my setup, I’ve got it working on reload but am trying to use

F5's Local Traffic Manager

Hi Does anyone know of an existing comparison of features between haproxy and LTM by f5 ? Or have any experience of evaluating one against the other? Thanks Will

Re: Spam

+1 Keep up the good work Willy On 14 Apr 2014, at 17:00, Willy Tarreau w...@1wt.eu wrote: On Mon, Apr 14, 2014 at 04:39:21PM +0100, Kobus Bensch wrote: I'd like to say something as a user of the software and and avid follower of each conversation via this list. The few spam messages that

Re: Crash on removing response header

Hi Willy, I can reproduce this on every request that contains a header that matches the regex of the rspidel rule. This is the output of the debug logging in the patch you sent. 0: cur_next=+17 used=16 buf.p=0x7fd1c18eb414 buf.size=16384 buf.p=+0 buf.o=0 buf.i=7450 1: old_idx=0 cur_idx=1

Re: Crash on removing response header

+, William Lewis wrote: Hi Willy, I can reproduce this on every request that contains a header that matches the regex of the rspidel rule. Cool, hopefully we'll finally manage to sort it out then. This is the output of the debug logging in the patch you sent. 0: cur_next=+17 used

Re: Crash on removing response header

Hi Willy, Looks like you were right about a libpcre bug, with that patch applied I no longer get the crash. Is there anything more I can do other than not use libpcre? Thanks Will On 1 Jan 2014, at 14:36, Willy Tarreau w...@1wt.eu wrote: On Wed, Jan 01, 2014 at 12:58:11PM +, William

Crash on removing response header

Hi, I've just upgraded to the latest dev build 1.5-dev21-6b07bf7 Running on OSX 10.8.5, installed as follows make TARGET=generic ARCH=`uname -m` USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=yes sudo make install And now if a response matches a rule to delete a response header the haproxy instance

Difference in compression behavior between platforms

Hi all, Bit of a weird one that has caught me out. I'm using compression offloading to fix a problem with the gzip implementation in my web server. However my requests are also returning the cache-control: no-transform header, mainly to stop mobile network operators helpfully optimizing my

Comparison to nginx

Hi I'm looking for some advice in comparing haproxy to nginx. I've been happily using haproxy for all my load balancing needs for the past few years and in my opinion I think its great. I've recently been working to deploy it my latest role but am coming up against resistance from supporters

Re: Comparison to nginx

, Steven On 1 February 2013 11:09, William Lewis m...@wlewis.co.uk wrote: Hi I'm looking for some advice in comparing haproxy to nginx. I've been happily using haproxy for all my load balancing needs for the past few years and in my opinion I think its great. I've recently been working

Re: Comparison to nginx

I couldn't agree more, but I'm really in need of more concrete reasons for pushing back against this. On Feb 1, 2013, at 12:40 PM, shouldbe q931 shouldbeq...@gmail.com wrote: On Fri, Feb 1, 2013 at 11:22 AM, William Lewis m...@wlewis.co.uk wrote: Hi Steve, Its not a question of replacing

ACL question

How do I define such an ACL so that's valid acl is_secure dst_port eq 9443 || dst_port eq 9444

Re: Weird Aborted Server Requests

a bug :/ Baptiste On Tue, Jan 8, 2013 at 5:45 PM, William Lewis m...@wlewis.co.uk wrote: Hi, Thanks for the reply. I'm using 2 different ports because the ports are dynamically assigned on startup and the haproxy config rewritten and reloaded. The web server isn't actually sending

Re: Weird Aborted Server Requests

, it sounds related to a network or server issue... cheers On Tue, Jan 8, 2013 at 1:38 PM, William Lewis m...@wlewis.co.uk wrote: Further to this I've found if I add a large comment at the bottom of the file to increase the file size then the problem goes away. It might be that xlightweb

Re: Copying a Header before Modifying it

Baptiste wrote: On Thu, Mar 29, 2012 at 11:42 PM, William Lewis m...@wlewis.co.uk wrote: Hi Cyril, Cyril Bont wrote: Hi William, Le 29/03/2012 14:30, William Lewis a crit : Hi, So I use Haproxy to rewrite some URL requests infront of my java webservers, but I also want my

Copying a Header before Modifying it

Hi, So I use Haproxy to rewrite some URL requests infront of my java webservers, but I also want my java webservers to be able to issue redirects relative to the url that hit haproxy. Specifically I want the developers that have access to application platform but not the haproxy to be able

Re: Copying a Header before Modifying it

Hi Cyril, Cyril Bont wrote: Hi William, Le 29/03/2012 14:30, William Lewis a crit : Hi, So I use Haproxy to rewrite some URL requests infront of my java webservers, but I also want my java webservers to be able to issue redirects relative to the url that hit

1.5 Regression

Hi, I'm new to HAProxy but I think I might have found a regression in 1.5 I'm declaring these 2 servers in a backend declaration and using different ports than for the data to check the aliveness of the backend nodes such that I can use firewall rules to soft remove a node from the cluster.