Need Help : Haproxy as server with CA signed cert to fetch self-signed client certificate

Hi Baptiste, As discussed, Please help with inputs on the following. http://discourse.haproxy.org/t/haproxy-as-server-with-ca-signed-cert-to-fetch-self-signed-client-certificate/551 http://discourse.haproxy.org/t/how-to-fetch-ssl-subjectaltname-san-extension-data-in-haproxy/539 Thanks, Deepak

Re: Help! HAProxy randomly failing health checks!

ptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! Ok! Here is a bunch of info that might be

Re: Help! HAProxy randomly failing health checks!

ompasscorporation.com>> Date: Wednesday, March 16, 2016 at 5:01 PM To: Zachary Punches <zpunc...@getcake.com<mailto:zpunc...@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>"

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 10:47 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > > > On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches > wrote: > >> I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 >> routing. If one of the proxy boxes fails

Re: Help! HAProxy randomly failing health checks!

ume we would go down all the time > yeah? > > From: Igor Cicimov <ig...@encompasscorporation.com> > Date: Wednesday, March 16, 2016 at 4:50 PM > To: Zachary Punches <zpunc...@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < > hapro

Re: Help! HAProxy randomly failing health checks!

.@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing healt

Re: Help! HAProxy randomly failing health checks!

03]: 66.87.151.25:3325 > [17/Mar/2016:18:37:06.938] shared_incoming shared_incoming/ > -1/-1/-1/-1/0 400 0 - - CR-- 312/312/0/0/0 0/0 "" > Mar 17 18:37:45 localhost haproxy[28703]: 108.59.8.48:33611 > [17/Mar/2016:18:36:55.938] shared_incoming provedmedia/provedmedia_http > 279/

Re: Help! HAProxy randomly failing health checks!

icimov <ig...@encompasscorporation.com> >> Date: Wednesday, March 16, 2016 at 5:01 PM >> To: Zachary Punches <zpunc...@getcake.com> >> Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < >> haproxy@formilux.org> >> Subject: Re: Help! HA

Re: Help! HAProxy randomly failing health checks!

t; >> From: Igor Cicimov <ig...@encompasscorporation.com> >> Date: Thursday, March 17, 2016 at 4:18 PM >> To: Zachary Punches <zpunc...@getcake.com> >> Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < >> haproxy@formilux.org>

Re: Help! HAProxy randomly failing health checks!

:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! So is port 1027 used for health checks over SSL or not? I don't see any ssl settings on that port.

Re: Help! HAProxy randomly failing health checks!

I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 checks done a second) then Route53 changes its routing from the first proxy box to the second On 3/15/16, 9:46 PM, "Baptiste"

Re: Help! HAProxy randomly failing health checks!

..@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < > haproxy@formilux.org> > Subject: Re: Help! HAProxy randomly failing health checks! > > So is port 1027 used for health checks over SSL or not? I don't see any > ssl settings on that

Re: Help! HAProxy randomly failing health checks!

day, March 16, 2016 at 5:01 PM To: Zachary Punches <zpunc...@getcake.com<mailto:zpunc...@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@for

Re: Help! HAProxy randomly failing health checks!

roxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Thu, Mar 17, 2016 at 10:47 AM, Igor Cicimov <ig...@encompasscorporation.com<mailto:ig...@encompasscorporation.com>> wrote: On Thu, Mar 17, 2016 at 5:29 AM, Zac

Re: Help! HAProxy randomly failing health checks!

96 > > What would lowering the tune.ssl.default-dh-param to 1024 do? > From: Igor Cicimov <ig...@encompasscorporation.com> > Date: Wednesday, March 16, 2016 at 5:01 PM > To: Zachary Punches <zpunc...@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilu

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches wrote: > I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 > routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 > checks done a second) then Route53 changes its routing from the

Re: Help! HAProxy randomly failing health checks!

g<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Fri, Mar 18, 2016 at 1:38 PM, Igor Cicimov <ig...@encompasscorporation.com<mailto:ig...@encompasscorporation.com>> wrote

Re: Help! HAProxy randomly failing health checks!

Has ELB changed its IP address??? Maybe you're checking a third party VM :) Baptiste

Re: Help! HAProxy randomly failing health checks!

On Wed, Mar 16, 2016 at 5:54 AM, Zachary Punches wrote: > Hello! > > > > My name is Zack, and I have been in the middle of an on going HAProxy > issue that has me scratching my head. > > > > Here is the setup: > > > > Our setup is hosted by amazon, and our HAProxy (1.6.3)

Re: Help! HAProxy randomly failing health checks!

Greetings, On 03/15/2016 02:54 PM, Zachary Punches wrote: Hello! My name is Zack, and I have been in the middle of an on going HAProxy issue that has me scratching my head. Here is the setup: Our setup is hosted by amazon, and our HAProxy (1.6.3) boxes are in each region in 3 regions. We

Help! HAProxy randomly failing health checks!

Hello! My name is Zack, and I have been in the middle of an on going HAProxy issue that has me scratching my head. Here is the setup: Our setup is hosted by amazon, and our HAProxy (1.6.3) boxes are in each region in 3 regions. We have 2 HAProxy boxes per region for a total of 6 proxy boxes.

Re: Help haproxy

Yes, i have just the option that's make gone right. It's just the option as you know. Regards, Mathieu 2015-02-05 10:03 GMT+01:00 Yuan Long yuan.l...@chinanetcloud.com: Do you have the words option forward for in your config.

Re: Help haproxy

Maybe that is why the clinet ipaddress is forwarded. What is your webserver (ngix/apache) software and what is the logformat configuration in it. Regards, Long Wu Yuan 龙 武 缘 Sr. Linux Engineer 高级工程师 ChinaNetCloud

Re: Help haproxy

Do you have the words option forward for in your config. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20forwardfor Can you copy/paste your config (without sensitive info if needed). Regards, Long

Re: Help haproxy

2015-02-02 16:45 GMT+01:00 Sander Klein roe...@roedie.nl: The only other thing that I can think of is that your client is behind a proxy server which adds the X-Forward-For header for you... Or you got something strange in your config... Sander You're totally right. My client have a proxy

Re: Help haproxy

On 02.02.2015 12:09, Mathieu Sergent wrote: Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option source ip usesrc but you need to be root. If you want to not be root, you have

Re: Help haproxy

Hi, On Mon, Feb 02, Sander Klein wrote: On 02.02.2015 12:09, Mathieu Sergent wrote: Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option source ip usesrc but you need to

Help haproxy

Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option source ip usesrc but you need to be root. If you want to not be root, you have to used HAProxy with Tproxy. But Tproxy

Re: Help haproxy

Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i found my client's address. But this is really

Re: Help haproxy

Hi Mathieu, Pleas keep the list in the CC. On 02.02.2015 15:26, Mathieu Sergent wrote: Thanks for your reply. I just used the option forwardfor in the haproxy configuration. And i can find client's address from my web server (with tcpdump). But if i don't use the option forwardfor, the web

Re: Help haproxy

On 02.02.2015 16:33, Mathieu Sergent wrote: Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i

Re: Help! haproxy+nginx+tomcats cluster problems.

Hi, On Sat, Jan 23, 2010 at 12:05:16PM +0800, ËïéªËÉ wrote: Hello ! I have questions ! please help me ! thank you very much ! my cluster works , but not excellent. that's please see this architecture below my questions first. Q1:on the tomcats ,there are always 500~800 TIME_WAIT connections

Help! haproxy+nginx+tomcats cluster problems.

Hello ! I have questions ! please help me ! thank you very much ! my cluster works , but not excellent. that's please see this architecture below my questions first. Q1:on the tomcats ,there are always 500~800 TIME_WAIT connections from haproxy; Q2:when I use loadrunner to test this cluster ,