Hiring for Java Developer - FIX protocol::Dublin,County Dublin,Ireland::Contract

Hi, Greetings from Avance Consulting Services! This is *Manisha Devaruppala,* from *Avance Consulting Services, a global recruitment and staffing firm based in London. *I would like to update you on the open positions of *Java Developer - FIX protocol**. *Appreciate if you can send me your

Your blog may miss this opportunity;haproxy

Hi, I hope this email finds you well. I'm reaching out to invite you to contribute a guest post. We're always on the lookout for fresh perspectives and valuable content, and after reviewing your work, we believe your expertise would be a great fit for our audience. I have two more options. 1-

Patch proposal for FEATURE/MAJOR: Add upstream-proxy-tunnel feature (was: Re: Maybe stupid question but can HAProxy now use a upstream proxy)

Hi. I have done some progress with the feature :-) The test setup runs in 4 shells. # shell1: curl -vk --connect-to www.test1.com:4433:127.0.0.1:8080 -H "Host: www.test1.com" https://www.test1.com:4433 # shell2: ./haproxy -d -f examples/upstream-proxy.cfg # shell3: sudo podman run --rm -it

[ANNOUNCE] haproxy-3.0-dev13

Hi, HAProxy 3.0-dev13 was released on 2024/05/24. It added 66 new commits after version 3.0-dev12. Well, first, I really want to thank all those who've been trying 3.0-dev recently, this has been useful to nail down various issues, some quite recent and other ones much older, and it's way more

Need people - Haproxy Technologies?

Hi there, Just a quick note to follow back… Is your company swarmed with work / too few employees? We can help with tasks like Marketing Support, Entering Data, Helping Customers, Virtual Assistance, Research & more Worth 90 seconds to explore? Ivana Carter Asychab | Assistant Marketing

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024 at 03:58:45PM +0100, William Manley wrote: > I can also report that I no longer need to avoid `nbthread 1` in the config > on the node. Presumably thanks to ceebb09744df367ad84586a341d9336f84f72bce > "rhttp: fix preconnect on single-thread". BTW keep in mind that connections

Re: Maybe stupid question but can HAProxy now use a upstream proxy

Hi. I have seen https://github.com/haproxy/haproxy/issues/1542 which requests that feature. Now I have tried to "port" the https://github.com/brentcetinich/haproxy/commit/bc258bff030677d855a6a84fec881398e8f1e082 to the current dev branch and attached the patch. I'm pretty sure that there

Maybe stupid question but can HAProxy now use a upstream proxy

Hi. I follow the development more or less closely and I must say I not always understand all changes :-). Just for my clarification is the following setup now possible with HAProxy with all the new shiny features :-) client => frontend | \-> backend server

HAProxy 2.0 EOL?

Hi HAProxy 2.0 is expected to go EOL this quarter. The maintainers of the Docker images provided by the "Docker Official Images" program already assumed that it was EOL [1] when needing to remove the Alpine builds due to the EOL of the Alpine version. The Debian-based images have been

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024 at 03:58:45PM +0100, William Manley wrote: > On Thu, May 23, 2024, at 3:52 PM, William Manley wrote: > > On Thu, May 23, 2024, at 3:45 PM, Amaury Denoyelle wrote: > > [...] > > Thank you for your quick testing. I have manage to reproduce what I > > think could be a similar

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024, at 3:52 PM, William Manley wrote: > On Thu, May 23, 2024, at 3:45 PM, Amaury Denoyelle wrote: > > On Thu, May 23, 2024 at 02:47:15PM +0100, William Manley wrote: > > > On Thu, May 23, 2024, at 2:08 PM, Amaury Denoyelle wrote: > > > > On Thu, May 23, 2024 at 11:55:13AM +0100,

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024, at 3:45 PM, Amaury Denoyelle wrote: > On Thu, May 23, 2024 at 02:47:15PM +0100, William Manley wrote: > > On Thu, May 23, 2024, at 2:08 PM, Amaury Denoyelle wrote: > > > On Thu, May 23, 2024 at 11:55:13AM +0100, William Manley wrote: > > > > On Thu, May 23, 2024, at 11:34 AM,

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024 at 02:47:15PM +0100, William Manley wrote: > On Thu, May 23, 2024, at 2:08 PM, Amaury Denoyelle wrote: > > On Thu, May 23, 2024 at 11:55:13AM +0100, William Manley wrote: > > > On Thu, May 23, 2024, at 11:34 AM, William Manley wrote: > > > > On Thu, May 23, 2024, at 10:08 AM,

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024, at 2:08 PM, Amaury Denoyelle wrote: > On Thu, May 23, 2024 at 11:55:13AM +0100, William Manley wrote: > > On Thu, May 23, 2024, at 11:34 AM, William Manley wrote: > > > On Thu, May 23, 2024, at 10:08 AM, Amaury Denoyelle wrote: > > > > On Wed, May 22, 2024 at 04:58:44PM

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024 at 11:55:13AM +0100, William Manley wrote: > On Thu, May 23, 2024, at 11:34 AM, William Manley wrote: > > On Thu, May 23, 2024, at 10:08 AM, Amaury Denoyelle wrote: > > > On Wed, May 22, 2024 at 04:58:44PM +0100, William Manley wrote: > > > > On Wed, May 22, 2024, at 1:06 PM,

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024, at 11:34 AM, William Manley wrote: > On Thu, May 23, 2024, at 10:08 AM, Amaury Denoyelle wrote: > > On Wed, May 22, 2024 at 04:58:44PM +0100, William Manley wrote: > > > On Wed, May 22, 2024, at 1:06 PM, Amaury Denoyelle wrote: > > > > FYI, I just merged a series of fix to

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Thu, May 23, 2024, at 10:08 AM, Amaury Denoyelle wrote: > On Wed, May 22, 2024 at 04:58:44PM +0100, William Manley wrote: > > On Wed, May 22, 2024, at 1:06 PM, Amaury Denoyelle wrote: > > > FYI, I just merged a series of fix to improve reverse HTTP. It is now > > > possible to use PROXY

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Wed, May 22, 2024 at 04:58:44PM +0100, William Manley wrote: > On Wed, May 22, 2024, at 1:06 PM, Amaury Denoyelle wrote: > > FYI, I just merged a series of fix to improve reverse HTTP. It is now > > possible to use PROXY protocol on preconnect stage. Also, you have the > > availability to use

Proszę o kontakt

Dzień dobry, Czy jest możliwość nawiązania współpracy z Państwem? Z chęcią porozmawiam z osobą zajmującą się działaniami związanymi ze sprzedażą. Pomagamy skutecznie pozyskiwać nowych klientów. Zapraszam do kontaktu. Pozdrawiam serdecznie Marcin Gard

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Wed, May 22, 2024, at 1:06 PM, Amaury Denoyelle wrote: > FYI, I just merged a series of fix to improve reverse HTTP. It is now > possible to use PROXY protocol on preconnect stage. Also, you have the > availability to use PROXY v2 TLV to differentiate connections. Note > however that PROXY

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Tue, May 14, 2024, at 3:48 PM, Amaury Denoyelle wrote: > On Wed, May 08, 2024 at 11:43:11AM +0100, William Manley wrote: > > An attach-srv config line usually looks like this: > > tcp-request session attach-srv be/srv name ssl_c_s_dn(CN) > > while a rhttp server line usually looks like

Re: [PATCH] CI: scripts/build-ssl.sh: loudly fail on unsupported platforms

On Wed, May 15, 2024 at 09:41:42PM +0200, Ilia Shipitsin wrote: > Subject: [PATCH] CI: scripts/build-ssl.sh: loudly fail on unsupported > platforms > --- > scripts/build-ssl.sh | 4 > 1 file changed, 4 insertions(+) > > diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh > index

Haproxy Technologies - need people?

Hi there, Curious if Haproxy Technologies could use help completing extra work in your company. We’re like a plug-and-play department that adds extra resources within your business (without having to hire). Help with Marketing, Operations, Research, Virtual Assistance, Customer Service & more.

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Tue, May 14, 2024 at 04:48:16PM +0200, Amaury Denoyelle wrote: > On Wed, May 08, 2024 at 11:43:11AM +0100, William Manley wrote: > > An attach-srv config line usually looks like this: > > tcp-request session attach-srv be/srv name ssl_c_s_dn(CN) > > while a rhttp server line usually looks

[ANNOUNCE] haproxy-3.0-dev12

Hi, HAProxy 3.0-dev12 was released on 2024/05/18. It added 54 new commits after version 3.0-dev11. In terms of bugs, we're starting to scratch the low importance or less visible stuff, which generally is a good hint that we're getting close to have something releasable. We've also fixed a few

haproxy.org : Need a Digital Marketing services in 2024

Hi *haproxy.org ,* Greetings! I am sending this email to let you know that we are offering *SEO*, *website design, development, Re-design, Revamp, Web Application, Web Portal, Mobile Websites, E-commerce sites, CMS Websites,Logo Design* at *very competitive prices.* If

Re: FCGI calls return 500 with "IH" Stream State

Hi. I have added fcgi trace ``` global   log stdout format raw daemon debug   pidfile /data/haproxy/run/haproxy.pid   # maxconn  auto config from hap   # nbthread auto config from hap   master-worker   #tune.comp.maxlevel 5   expose-experimental-directives   trace fcgi sink stdout  

FCGI calls return 500 with "IH" Stream State

Hi. I have a strange behavior with HAProxy and FCGI PHP App. When I call an admin URL returns HAProxy a 500, after a refresh of the same page returns the HAProxy 200. ``` 10.128.2.35:39684 [16/May/2024:14:54:26.229] craft-cms fcgi-servers/craftcms1 0/0/0/-1/1138 500 15416 - - IH-- 2/2/0/0/0

[PATCH v2] FEATURE: add opt-in MPTCP support

From: Dorian Craps Multipath TCP (MPTCP), standardized in RFC8684 [1], is a TCP extension that enables a TCP connection to use different paths. Multipath TCP has been used for several use cases. On smartphones, MPTCP enables seamless handovers between cellular and Wi-Fi networks while

[PATCH] CI: scripts/build-ssl.sh: loudly fail on unsupported platforms

--- scripts/build-ssl.sh | 4 1 file changed, 4 insertions(+) diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh index 608d6beb1..d8cbc97e8 100755 --- a/scripts/build-ssl.sh +++ b/scripts/build-ssl.sh @@ -53,6 +53,10 @@ build_openssl () { 'Linux')

[PATCH 2/2] BUILD: switch to using macros HAVE_PTHREAD_GETCPUCLOCKID

--- include/haproxy/signal-t.h | 5 - src/clock.c| 19 --- src/wdt.c | 6 -- 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/include/haproxy/signal-t.h b/include/haproxy/signal-t.h index 85d4b3396..4ae856a97 100644 ---

[PATCH 0/2] RFC: introducing HAVE_PTHREAD_GETCPUCLOCKID macro

I think it needs some discussion whether this can be actual improvement or rather caveat itself. while it looks like a good idea, I'm afraid that once "#include " is accidently lost, #ifdef HAVE_PTHREAD_GETCPUCLOCKID will silently switch to opposite without any visible error Ilia Shipitsin

[PATCH 1/2] BUILD: introduce HAVE_PTHREAD_GETCPUCLOCKID flag

pthread_getcpuclockid() is optional POSIX function present iff _POSIX_THREAD_CPUTIME >= 0 thanks to Miroslav Zagorac: https://docs.oracle.com/cd/E88353_01/html/E37842/unistd-3head.html "If a symbolic constant is defined with the value -1, the option is not supported. Headers, data types, and

Re: [PATCH] DOC: Update UUID references to RFC 9562

On Sun, May 12, 2024 at 05:08:34PM +0200, Tim Duesterhus wrote: > When support for UUIDv7 was added in commit > aab6477b67415c4cc260bba5df359fa2e6f49733 > the specification still was a draft. > > It has since been published as RFC 9562. Excellent timing ;-) Now merged, thank you Tim! Willy

Re: Meeting with LML Studios

Hi Guys, Was this something you needed? I'd appreciate an answer. Happy to help. Best wishes, Sami On Mon, May 6, 2024 at 1:10 PM M Sami Kerrouche < s...@londonmedialounge.co.uk> wrote: > Hi, > > I am waiting for you on our call that you booked. > > Let me know if you'd like to reschedule. >

Re: [PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

On Wed, May 08, 2024 at 11:43:11AM +0100, William Manley wrote: > An attach-srv config line usually looks like this: > tcp-request session attach-srv be/srv name ssl_c_s_dn(CN) > while a rhttp server line usually looks like this: > server srv rhttp@ sni req.hdr(host) > The server sni

Re: [PATCH 1/2] CI: reduce ASAN log redirection umbrella size

пн, 13 мая 2024 г. в 11:29, William Lallemand : > On Thu, May 09, 2024 at 10:24:55PM +0200, Илья Шипицин wrote: > > sorry for th delay. > > > > indeed, it's better to drop asan redirection. I sent a patch to the list. > > > > for my defence I can say that in my experiments asan.log worked as >

Re: [PATCH 0/1] CI: drop asan.log umbrella for good

On Thu, May 09, 2024 at 10:19:17PM +0200, Ilia Shipitsin wrote: > for some reasons it appeared to be a good idea > to collect ASAN log separately from VTest error logs, > but also it appeared to work poorly in real life (compared to > specially prepared synthetic environments). > > let drop

Re: [PATCH 1/2] CI: reduce ASAN log redirection umbrella size

On Thu, May 09, 2024 at 10:24:55PM +0200, Илья Шипицин wrote: > sorry for th delay. > > indeed, it's better to drop asan redirection. I sent a patch to the list. > > for my defence I can say that in my experiments asan.log worked as expected > :) > No worries, we had a change of distribution

Instalacja pv

Dzień dobry, czy są Państwo otwarci na niezobowiązującą rozmowę na temat fotowoltaiki? Jako firma specjalizująca się w instalacji i serwisie najlepszych jakościowo paneli słonecznych na rynku chciałbym przedstawić propozycję, jaką wspólnie z zespołem przygotowaliśmy dla Państwa obiektu. Będę

[PATCH] DOC: Update UUID references to RFC 9562

When support for UUIDv7 was added in commit aab6477b67415c4cc260bba5df359fa2e6f49733 the specification still was a draft. It has since been published as RFC 9562. This patch updates all UUID references from the obsoleted RFC 4122 and the draft for RFC 9562 to the published RFC 9562. ---

Haproxy Technologies, Getting in touch.

Hi there, Ever found that Haproxy Technologies gets more calls than you’re able answer? I’m with Troacer: We can be an extension of your business that answers incoming calls on your behalf: Live Receptionist, Servicing Customers, Scheduling Appointments, Sales & more. Would it be worth checking

Production House for a Cost of 1 Videographer

Hi, Not sure if you saw my previous emails, I want to make sure you understand how the industry is looking right now.  Either hire a videographer or work with a production house (an extension of your marketing team) for the same price. The choice is your  Working with a professional

[ANNOUNCE] haproxy-3.0-dev11

Hi, HAProxy 3.0-dev11 was released on 2024/05/10. It added 43 new commits after version 3.0-dev10. Another very calm release, thanks to two days off here in France, combined with the return of the sun today :-) Some 3.0 regressions were fixed, such as the broken logs over TCP after recent ring

AW: [EXT] Re: error HAproxy with Galera Cluster v4

Hey, There actually is some stuff in the haproxy documentation about this: https://docs.haproxy.org/2.9/configuration.html#4-option%20mysql-check MySQL will block a client host when it does more unsuccessful authentication requests than configured in the global variable “max_connect_errors”.

Re: error HAproxy with Galera Cluster v4

Hello, On Fri, May 10, 2024 at 12:00:17PM +, Iglesias Paz, Jaime wrote: > Hey guys, I have a problem with HAProxy and Galera Cluster v4 MySQL (3 > nodes). I boot the HAProxy server and it returns the following error: > > may 10 13:48:20 phaproxysql1 haproxy[661]: Proxy stats started. > may

error HAproxy with Galera Cluster v4

Hey guys, I have a problem with HAProxy and Galera Cluster v4 MySQL (3 nodes). I boot the HAProxy server and it returns the following error: may 10 13:48:20 phaproxysql1 haproxy[661]: Proxy stats started. may 10 13:48:20 phaproxysql1 haproxy[661]: Proxy stats started. may 10 13:48:20

Proszę o kontakt

Dzień dobry, Czy jest możliwość nawiązania współpracy z Państwem? Z chęcią porozmawiam z osobą zajmującą się działaniami związanymi ze sprzedażą. Pomagamy skutecznie pozyskiwać nowych klientów. Zapraszam do kontaktu. Pozdrawiam serdecznie Marcin Gard

Re: some QUIC questions

On Mon, May 06, 2024 at 08:16:34PM +0200, Björn Jacke wrote: > On 06.05.24 15:34, Shawn Heisey wrote: > > On 5/6/24 06:02, Björn Jacke wrote: > > > frontend ft_443 > > >    bind :::443 ssl crt /ssl/combined.pem > > >    bind quic6@:443 ssl crt /ssl/combined.pem alpn h3 > > >    option

[PATCH 0/1] CI: drop asan.log umbrella for good

for some reasons it appeared to be a good idea to collect ASAN log separately from VTest error logs, but also it appeared to work poorly in real life (compared to specially prepared synthetic environments). let drop asan.log redirection Ilia Shipitsin (1): CI: drop asan.log umbrella completely

[PATCH 1/1] CI: drop asan.log umbrella completely

asan.log redirection appeared to work poorly, let's cease that practice for good. ML: https://www.mail-archive.com/haproxy@formilux.org/msg44844.html --- .github/workflows/vtest.yml | 9 - 1 file changed, 9 deletions(-) diff --git a/.github/workflows/vtest.yml

Bussiness inquiry[Backlink Expert]

*Hey,* *Are you want to promote your websites or want on google,no need for further search.here you will get google news sites guest posts with do/follow backlinks. for getting the first position,y*Bussiness Inquiry [BackLinks Expert]*ou* *need to get high/authority guest posts with do/ follow

Re: [PATCH] FEATURE: Adding MPTCP with option to disable it and fall-back to TCP

On Wed, May 08, 2024 at 01:19:22PM +, Dorian Craps wrote: > first of all, thank you for your interest. > > I already made a version with an option to enable MPTCP > -https://github.com/CrapsDorian/haproxy/pull/1 > > I'm working on a new version with "mptcp@address" as Willy requested. OK,

RE: [PATCH] FEATURE: Adding MPTCP with option to disable it and fall-back to TCP

first of all, thank you for your interest. I already made a version with an option to enable MPTCP -https://github.com/CrapsDorian/haproxy/pull/1 I'm working on a new version with "mptcp@address" as Willy requested. Dorian

[PATCH v2] MINOR: config: rhttp: Don't require SSL when attach-srv name parsing

An attach-srv config line usually looks like this: tcp-request session attach-srv be/srv name ssl_c_s_dn(CN) while a rhttp server line usually looks like this: server srv rhttp@ sni req.hdr(host) The server sni argument is used as a key for looking up connection in the connection pool.

Re: [PATCH] MINOR: config: rhttp: Downgrade error on attach-srv name parsing

On Thu, Apr 25, 2024, at 2:07 PM, Amaury Denoyelle wrote: > Sorry for the delay. We have rediscussed this issue this morning and > here is my answer on your patch. Sorry for the even larger delay in responding :). Thanks for looking at this. > It is definitely legitimate to want to be able to

Faktoring

Dzień dobry, rozważali Państwo wybór finansowania, które spełni potrzeby firmy, zapewniając natychmiastowy dostęp do gotówki, bez zbędnych przestojów? Przygotowaliśmy rozwiązania faktoringowe dopasowane do Państwa branży i wielkości firmy, dzięki którym, nie muszą Państwo martwić się o

Bussiness inquiry[Backlink Expert]

*Hey,* *Are you want to promote your websites or want on google,no need for further search.here you will get google news sites guest posts with do/follow backlinks. for getting the first position,y*Bussiness Inquiry [BackLinks Expert]*ou* *need to get high/authority guest posts with do/ follow

Re: How to configure DH groups for TLS 1.3

Hi Dominik, On Thu, 2 May 2024 at 17:14, Froehlich, Dominik wrote: The closest I’ve gotten is the “curves” property: https://docs.haproxy.org/2.8/configuration.html#5.1-curves However, I think it only restricts the available elliptic curves in a ECDHE handshake, but it does not prevent a

Re: [PR] fix show-sess-to-flags.sh cob fd state

Hi! On Tue, May 07, 2024 at 02:23:02AM +, PR Bot wrote: > Author: zhibin.zhu > Number of patches: 1 > > This is an automated relay of the Github pull request: >fix show-sess-to-flags.sh cob fd state (...) > From 95be08c6f4f382ec1b0e34765d4c1f09ddcdebb6 Mon Sep 17 00:00:00 2001 > From:

[PR] fix show-sess-to-flags.sh cob fd state

Dear list! Author: zhibin.zhu Number of patches: 1 This is an automated relay of the Github pull request: fix show-sess-to-flags.sh cob fd state Patch title(s): fix show-sess-to-flags.sh cob fd state Link: https://github.com/haproxy/haproxy/pull/2560 Edit locally: wget

Re: Error While deviceatlas 3.2.2 and haproxy 2.9.6 make from source

hi and sorry for the long reply. I will let you know once it is officially release, it needs to pass our QA test still. Kind regards. On Mon, 6 May 2024 at 22:52, Mahendra Patil wrote: > any update when we can get 3.2.3 release > > On Wed, Apr 3, 2024 at 10:51 AM David CARLIER wrote: > >>

Re: Error While deviceatlas 3.2.2 and haproxy 2.9.6 make from source

any update when we can get 3.2.3 release On Wed, Apr 3, 2024 at 10:51 AM David CARLIER wrote: > Hi all, > > Thanks for your report. This is a known issue the 3.2.3 release is > scheduled within this month. > > Regards. > > On Wed, 3 Apr 2024 at 04:38, Willy Tarreau wrote: > >> Hello, >> >> On

Re: some QUIC questions

On 06.05.24 15:34, Shawn Heisey wrote: On 5/6/24 06:02, Björn Jacke wrote: frontend ft_443    bind :::443 ssl crt /ssl/combined.pem    bind quic6@:443 ssl crt /ssl/combined.pem alpn h3    option tcp-smart-accept    http-after-response add-header alt-svc 'h3=":443"; ma=600; persistent=1'

Re: some QUIC questions

On 5/6/24 06:02, Björn Jacke wrote: frontend ft_443   bind :::443 ssl crt /ssl/combined.pem   bind quic6@:443 ssl crt /ssl/combined.pem alpn h3   option tcp-smart-accept   http-after-response add-header alt-svc 'h3=":443"; ma=600; persistent=1' frontend ft_quic_test     mode tcp    

Meeting with LML Studios

Hi, I am waiting for you on our call that you booked. Let me know if you'd like to reschedule. Here's my phone number, call me for a quicker response. +44 7577 295184 Best wishes, *Sami Kerrouche* Managing Director London Media Lounge Ltd 16a/17a Windsor St Uxbridge Middx UB8 1AB

Re: [PATCH] FEATURE: Adding MPTCP with option to disable it and fall-back to TCP

Hi, I came up a while ago with a patchset for MPTCP support for HAProxy also, see https://github.com/haproxy/haproxy/issues/1028 Back then I also discussed some ideas with Willy how to implement it more elegantly in HAProxy. It's still somewhere on my todo list but unfortunately I didn't

some QUIC questions

Hi, now that HAProxy 2.9 from haproxy.debian.net is usabel with QUIC if you (with limited-quic), I finylly gave it a try. I set extended my http frontend accordingly like this: frontend ft_443 bind :::443 ssl crt /ssl/combined.pem bind quic6@:443 ssl crt /ssl/combined.pem alpn h3

postfix with postscreen behind haproxy

Hi, I am running (trying to, really) postfix with postscreen (really Zimbra) behind haproxy. I enabled proxy protocol support in Zimbra 08:27:26 (TEST) zimbra@zcs-fe5 [~] $ postconf |grep haproxy postscreen_upstream_proxy_protocol = haproxy 08:26:47 (TEST) zimbra@zcs-fe6 [~] $ postconf

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On Sun, May 05, 2024 at 01:43:33PM +0200, ??? wrote: > updated patches. Cool, thanks, now applied. > I'll address reorg to "compat.h" a bit later, once it is settled in my head No worries, I've seen your other comment about the need to include pthread.h, and this alone would be a good

regression in libc resolver since 2.9.0

Hi, Since c886fb58eb56 ("MINOR: server/ip: centralize server ip updates"), there is a regression with server address resolution made against libc with getaddrinfo(), specifically when returned address are IPv6 address with % notation which specifies which interface index to access given address

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

updated patches. I'll address reorg to "compat.h" a bit later, once it is settled in my head вс, 5 мая 2024 г. в 12:48, Илья Шипицин : > I will test and send simplified patch, i.e. I'll patch directly clock.c > > if we want to move that macro to compat.h, I'd postpone that for some >

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

I will test and send simplified patch, i.e. I'll patch directly clock.c if we want to move that macro to compat.h, I'd postpone that for some investigation 1) we will need to include "pthread.h" from compat.h (currently it's not true) 2) we will need to make sure compat.h is included everywhere

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On Sun, May 05, 2024 at 11:15:24AM +0200, ??? wrote: > ??, 5 ??? 2024 ?. ? 10:42, Willy Tarreau : > > > On Sun, May 05, 2024 at 09:12:41AM +0200, Miroslav Zagorac wrote: > > > On 05. 05. 2024. 08:32, Willy Tarreau wrote: > > > > On Sun, May 05, 2024 at 07:49:55AM +0200, ???

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

вс, 5 мая 2024 г. в 10:42, Willy Tarreau : > On Sun, May 05, 2024 at 09:12:41AM +0200, Miroslav Zagorac wrote: > > On 05. 05. 2024. 08:32, Willy Tarreau wrote: > > > On Sun, May 05, 2024 at 07:49:55AM +0200, ??? wrote: > > >> ??, 5 ??? 2024 ?. ? 02:05, Miroslav Zagorac : > > >>> I think

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On Sun, May 05, 2024 at 09:12:41AM +0200, Miroslav Zagorac wrote: > On 05. 05. 2024. 08:32, Willy Tarreau wrote: > > On Sun, May 05, 2024 at 07:49:55AM +0200, ??? wrote: > >> ??, 5 ??? 2024 ?. ? 02:05, Miroslav Zagorac : > >>> I think that this patch is not satisfactory because, for

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On Sun, May 05, 2024 at 08:52:08AM +0200, ??? wrote: > > I'm wondering what the point of defining _POSIX_THREAD_CPUTIME can be > > then :-/ > > > > Just guessing, are you sure you're building with -pthread -lrt ? Just in > > case, please double-check with V=1. Solaris sets USE_RT, but

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On 05. 05. 2024. 08:32, Willy Tarreau wrote: > On Sun, May 05, 2024 at 07:49:55AM +0200, ??? wrote: >> ??, 5 ??? 2024 ?. ? 02:05, Miroslav Zagorac : >>> I think that this patch is not satisfactory because, for example, Solaris >>> 11.4.0.0.1.15.0 (from 2018) has _POSIX_TIMERS and

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

вс, 5 мая 2024 г. в 08:32, Willy Tarreau : > On Sun, May 05, 2024 at 07:49:55AM +0200, ??? wrote: > > ??, 5 ??? 2024 ?. ? 02:05, Miroslav Zagorac : > > > > > On 04. 05. 2024. 17:36, Ilya Shipitsin wrote: > > > > this function is considered optional for POSIX and not implemented > > > >

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On Sun, May 05, 2024 at 07:49:55AM +0200, ??? wrote: > ??, 5 ??? 2024 ?. ? 02:05, Miroslav Zagorac : > > > On 04. 05. 2024. 17:36, Ilya Shipitsin wrote: > > > this function is considered optional for POSIX and not implemented > > > on Illumos > > > > > > Reference: > >

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

вс, 5 мая 2024 г. в 02:05, Miroslav Zagorac : > On 04. 05. 2024. 17:36, Ilya Shipitsin wrote: > > this function is considered optional for POSIX and not implemented > > on Illumos > > > > Reference: > https://www.gnu.org/software/gnulib/manual/html_node/pthread_005fgetcpuclockid.html > >

Re: [PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

On 04. 05. 2024. 17:36, Ilya Shipitsin wrote: > this function is considered optional for POSIX and not implemented > on Illumos > > Reference: > https://www.gnu.org/software/gnulib/manual/html_node/pthread_005fgetcpuclockid.html > According to >

[PATCH 2/3] CI: add Illumos scheduled workflow

this is very initial implementation. I was not able to install gcc-11, thus I mimic it's define --- .github/workflows/illumos.yml | 24 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/illumos.yml diff --git a/.github/workflows/illumos.yml

[PATCH 3/3] CI: netbsd: limit scheduled workflow to parent repo only

it is not very useful for most of forks. --- .github/workflows/netbsd.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/netbsd.yml b/.github/workflows/netbsd.yml index ea0345954..6514725e1 100644 --- a/.github/workflows/netbsd.yml +++ b/.github/workflows/netbsd.yml @@ -7,6

[PATCH 0/3] initial Illumos CI, netbsd CI cleanup

very initial Illumos CI Ilya Shipitsin (3): BUILD: illumos: pthread_getcpuclockid is not available CI: add Illumos scheduled workflow CI: netbsd: limit scheduled workflow to parent repo only .github/workflows/illumos.yml | 24 .github/workflows/netbsd.yml | 1 +

[PATCH 1/3] BUILD: illumos: pthread_getcpuclockid is not available

this function is considered optional for POSIX and not implemented on Illumos Reference: https://www.gnu.org/software/gnulib/manual/html_node/pthread_005fgetcpuclockid.html According to https://github.com/cpredef/predef/blob/master/OperatingSystems.md Illumos is identified by __illumos__ macro

[ANNOUNCE] haproxy-3.0-dev10

Hi, HAProxy 3.0-dev10 was released on 2024/05/04. It added 47 new commits after version 3.0-dev9. This week was short, with days off explaining the reduced number of commits, but there are still interesting ones that made it worth producing another release. Last week's log updates caused a few

Haproxy Technologies: Quick talk tomorrow?

Hi there, Quickly circling back on my note from the other day: We are working with companies to save them around 34% by switching payroll providers. Would take a few minutes to check what savings would be possible. Alright to give you a brief call sometime? Jenny Brown, Commercial Accounts

Re: How to configure DH groups for TLS 1.3

On Thu, 2 May 2024 at 19:50, Lukas Tribus wrote: > > On Thu, 2 May 2024 at 17:14, Froehlich, Dominik > wrote: > > The closest I’ve gotten is the “curves” property: > > https://docs.haproxy.org/2.8/configuration.html#5.1-curves > > > > However, I think it only restricts the available elliptic

Re: [PATCH 0/2] CI fixes, spelling cleanup

On Tue, Apr 30, 2024 at 04:11:25PM +0200, Ilia Shipitsin wrote: > NetBSD image was updated to 10.0, pcre2 is available out > of box now (...) Both merged now, thank you Ilya! Willy

Re: How to configure DH groups for TLS 1.3

On Thu, 2 May 2024 at 17:14, Froehlich, Dominik wrote: > The closest I’ve gotten is the “curves” property: > https://docs.haproxy.org/2.8/configuration.html#5.1-curves > > However, I think it only restricts the available elliptic curves in a ECDHE > handshake, but it does not prevent a TLS 1.3

Re: maxconn definition in frontend or backend section ?

On Thu, 2 May 2024 at 15:22, Roberto Carna wrote: > > Dear all, I have HAproxy in front of a web server node. > > I want the web server node to accept just 1000 concurrent connections. > > So I want to use the maxconn parameter in order to let new connections > above 1000 to wait until the web

Re: How to configure DH groups for TLS 1.3

I'd try openssl.cnf чт, 2 мая 2024 г. в 17:17, Froehlich, Dominik : > Hello everyone, > > > > I’m hardening HAProxy for CVE-2002-20001 (DHEAT attack) at the moment. > > > > For TLS 1.2 I’m using the “tune.ssl.default-dh-param” option to limit the > key size to 2048 bit so that an attacker can’t

Bussiness inquiry[Backlink Expert]

*Hey,* *Are you want to promote your websites or want on google,no need for further search.here you will get google news sites guest posts with do/follow backlinks. for getting the first position,y*Bussiness Inquiry [BackLinks Expert]*ou* *need to get high/authority guest posts with do/ follow

How to configure DH groups for TLS 1.3

Hello everyone, I’m hardening HAProxy for CVE-2002-20001 (DHEAT attack) at the moment. For TLS 1.2 I’m using the “tune.ssl.default-dh-param” option to limit the key size to 2048 bit so that an attacker can’t force huge keys and thus lots of CPU cycles on the server. However, I’ve noticed that

maxconn definition in frontend or backend section ?

Dear all, I have HAproxy in front of a web server node. I want the web server node to accept just 1000 concurrent connections. So I want to use the maxconn parameter in order to let new connections above 1000 to wait until the web service has free workers. According to what I read, if I define

RE: Updated list RSA Conference 2024

Hi, I can forward the pricing and other details for your consideration. awaiting for positive response. Bonny Rodger From: Bonny Rodger Sent: Monday, April 22, 2024 4:37 PM To: haproxy@formilux.org Subject: Updated list RSA Conference 2024 Hi, Recently updated Attendees contacts of RSA

Haproxy Technologies - Quick minute tomorrow?

Hi there, How is Haproxy Technologies set up to run payroll? I can help: We can automate everything from salaries, tax withholding & more. Does this sound good? Let me know a few easy timeslots (and the best number to reach you). Jenny Brown Goensera Commercial Accounts Manager

Votre Carte Bancaire a été Acceptée!!

          Direction Générale de la Répression des Fraudes à la Carte.          Madame, Monsieur,  Nous vous informons que votre carte bancaire a été acceptée.   Le paiement concerne CDISCOUNT.  Identifiant

RSA Conference 2024

Hi, Hope it all goes well! I am following up to confirm, if you are interested acquiring the Customized Audience List. RSA Conference 2024 06 - 09 May 2024, Moscone center San Francisco CA, San Francisco, USA Each record will contain details like Contact Name, Number, Email Address, Company

  1   2   3   4   5   6   7   8   9   10   >