RFC: receive side scaling, need help with approach to port ranges

2019-07-16 Thread Richard Russo
Here are my current patches for comments. -- Richard Russo to...@enslaves.us On Fri, Jul 5, 2019, at 12:23 PM, Richard Russo wrote: > Hi, > > I've been experimenting with Recieve Side Scaling (RSS) for a tcp proxy > application. The basic idea with RSS is by configuring the NICs, >

receive side scaling, need help with approach to port ranges

2019-07-05 Thread Richard Russo
Hi, I've been experimenting with Recieve Side Scaling (RSS) for a tcp proxy application. The basic idea with RSS is by configuring the NICs, kernel, and application to use the same CPU for a given socket, cross CPU locking and communication is eliminated or at least significantly reduced. On

Re: Need help on CVE-2019-11323

2019-05-16 Thread Willy Tarreau
Hi, On Fri, May 17, 2019 at 02:54:05AM +, ??? wrote: > Recently I found an issue CVE-2019-11323, it already fixed in 1.9.7 > > But it looks like all other haproxy branches affected by this issue according > to the following link. > > > https://www.cvedetails.com/cve/CVE-2019-11323/ > >

Need help on CVE-2019-11323

2019-05-16 Thread 白晨红
Hi guys, I need your help. Recently I found an issue CVE-2019-11323, it already fixed in 1.9.7 But it looks like all other haproxy branches affected by this issue according to the following link. https://www.cvedetails.com/cve/CVE-2019-11323/ CVE-2019-11323 : HAProxy before 1.9.7

Re: need help with sftp and http config on a single config file

2018-10-19 Thread Imam Toufique
Aah.., I see , it’s been awhile I have this, I seem to vaguely remember about this now. Yes I have sshd running on port 22, let me try a higher port for the proxy. But I can keep the 22 port number for my backend sftp servers, correct? Thanks Jarno, I appreciate your help very much! —imam On

Re: need help with sftp and http config on a single config file

2018-10-19 Thread Jarno Huuskonen
Hi, On Thu, Oct 18, Imam Toufique wrote: > *[root@crsplabnet2 examples]# haproxy -c -V -f /etc/haproxy/haproxy.cfg* > *Configuration file is valid* > > *when trying to start HA proxy, i see the following:* > > *[root@crsplabnet2 examples]# haproxy -D -f /etc/haproxy/haproxy.cfg -p >

need help with sftp and http config on a single config file

2018-10-19 Thread Imam Toufique
Hi, I am working on a setup where I can host sftp and http from the same HA proxy frontend, as I am having trouble with it. here is my config file: - global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats timeout 30s

FW: Need Help!

2018-06-26 Thread Ray Jender
-Original Message- From: Ray Jender [mailto:rayjen...@gmail.com] Sent: Tuesday, June 26, 2018 9:34 AM To: 'Jonathan Matthews' Subject: RE: Need Help! Thanks for the response Jonathan, Could you explain how I can set up the 4 front-ends? I am confused on how the routing would look

Re: Need Help!

2018-06-26 Thread Jonathan Matthews
You may not have had many replies as your email was marked as spam. You might want to address this by, amongst other things, using plain text and not HTML. On 24 June 2018 at 18:32, Ray Jender wrote: > I am sending rtmp from OBS with the streaming set to rtmp://”HAproxy server > IP”:1935/LPC1

Need Help!

2018-06-24 Thread Ray Jender
So, I am trying to forward incoming rtmp to a HAproxy server to a container that has the media server on the same server. I am sending rtmp from OBS with the streaming set to rtmp://"HAproxy server IP":1935/LPC1 And here is my haproxy.cfg: ray@LPC-HAproxy:/etc/haproxy$ cat haproxy.cfg

Re: Need help?

2018-03-19 Thread Willy Tarreau
Hi Nikhil, On Sat, Mar 17, 2018 at 05:39:29PM +, Nikhil Kapoor wrote: > Actually, I just wanted to deeply understand the code of haproxy. So just > wanted to know which tool should i use in order to understand the code. Is it > only gdb that you all use or any other? Well, gdb is not suited

Need help?

2018-03-17 Thread Nikhil Kapoor
Hi, I hope u all are doing well. It feels great to be a part of haproxy community. Actually, I just wanted to deeply understand the code of haproxy. So just wanted to know which tool should i use in order to understand the code. Is it only gdb that you all use or any other? Please help me as

Re: cannot bind socket - Need help with config file

2018-01-11 Thread Lukas Tribus
Hello, On 11 January 2018 at 16:36, Jonathan Matthews wrote: > On 11 January 2018 at 00:03, Imam Toufique wrote: >> So, I have everything in the listen section commented out: >> >> frontend main >>bind :2200 >>default_backend sftp >>

Re: cannot bind socket - Need help with config file

2018-01-11 Thread Jonathan Matthews
On 11 January 2018 at 00:03, Imam Toufique wrote: > So, I have everything in the listen section commented out: > > frontend main >bind :2200 >default_backend sftp >timeout client 5d > > > #listen stats > # bind *:2200 > # mode tcp > # maxconn 2000 > #

Re: cannot bind socket - Need help with config file

2018-01-10 Thread Imam Toufique
Thanks, Lukas! Sorry, I think I have been just replying to you by accidentally hitting the 'reply' button. So, I have everything in the listen section commented out: frontend main bind :2200 default_backend sftp timeout client 5d #listen stats # bind *:2200 # mode tcp # maxconn

Re: cannot bind socket - Need help with config file

2018-01-10 Thread Lukas Tribus
Hello Imam, On Wed, Jan 10, 2018 at 11:49 PM, Imam Toufique wrote: > Lukas, > > Sorry to keep on dragging this, I am confused here. I will admit that I > have not had the time to read the documentation on this. From what I was > able to read, I slapped togather this

Re: cannot bind socket - Need help with config file

2018-01-10 Thread Lukas Tribus
Hi Imam, On Tue, Jan 9, 2018 at 6:54 PM, Imam Toufique wrote: > Hi Lukus, > > thanks again for your continued help and support! Here is my config file > with updates now: > > frontend main >bind :2200 >default_backend sftp >timeout client 5d > > > listen stats

Re: cannot bind socket - Need help with config file

2018-01-09 Thread Imam Toufique
Hi Lukus, thanks again for your continued help and support! Here is my config file with updates now: frontend main bind :2200 default_backend sftp timeout client 5d listen stats bind *:2200 mode tcp maxconn 2000 option redis-check retries 3 option redispatch

Re: cannot bind socket - Need help with config file

2018-01-09 Thread Lukas Tribus
Hello Imam, On Tue, Jan 9, 2018 at 2:30 AM, Imam Toufique wrote: > > Hi Jonathan, and Lucas, > > Thanks for your replies. With your help, I was able to get it work > partially. Please always CC the mailing list though. > frontend main *:2200 >#bind *:22 >

Re: cannot bind socket - Need help with config file

2018-01-08 Thread Lukas Tribus
Hello Imam, On Mon, Jan 8, 2018 at 11:24 AM, Jonathan Matthews wrote: > On Mon, 8 Jan 2018 at 08:29, Imam Toufique wrote: >> >> [ALERT] 007/081940 (1416) : Starting frontend sftp-server: cannot bind >> socket [0.0.0.0:22] >> [ALERT] 007/081940

Re: cannot bind socket - Need help with config file

2018-01-08 Thread Jonathan Matthews
On Mon, 8 Jan 2018 at 08:29, Imam Toufique wrote: > [ALERT] 007/081940 (1416) : Starting frontend sftp-server: cannot bind > socket [0.0.0.0:22] > [ALERT] 007/081940 (1416) : Starting proxy stats: cannot bind socket [ > 10.0.15.23:22] > [ALERT] 007/081940 (1416) : Starting

cannot bind socket - Need help with config file

2018-01-08 Thread Imam Toufique
Hi, I need some help figuring out why my config below is failing to start the haproxy daemon. I am totally new to this. Below is my confg: global # local2.* /var/log/haproxy.log # log 127.0.0.1 local2 #local2.* /var/log/haproxy.log chroot /var/log/haproxy #stats

Re: Need help to reolsve haproxy issue

2017-01-23 Thread Praveen Koppula
Sorry for the late reply, I was on unplanned leave. What I observed in my investigation, when I commented below line it's working as expected. Means even after reboot the machine the haproxy service get started automatically. #stats socket /etc/haproxy/haproxysock level admin I'm not sure what

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Aaron West
I've not personally had any issues with systemd which I know doesn't mean there isn't any... However, on closer inspection, it gets started through a wrapper "haproxy-systemd-wrapper" for me : [Unit] Description=HAProxy Load Balancer After=network.target [Service]

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Baptiste
Might be a systemd dependency issue, where the socket is not created before the process is started. Baptiste On Mon, Jan 16, 2017 at 4:46 PM, Aaron West wrote: > Hi Praveen, > > Am I right in assuming it's a socket for the stats page? Also what user is > starting

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Aaron West
Hi Praveen, Am I right in assuming it's a socket for the stats page? Also what user is starting HAproxy because maybe it doesn't have permissions to create the socket? We might need your whole config or at least the GLOBAL section... Aaron West Loadbalancer.org Limited +44 (0)330 380 1064

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Aaron West
There are some very knowledgeable people on this list so I'm sure someone can help, however, what might the problem actually be? Aaron West Loadbalancer.org Limited +44 (0)330 380 1064 www.loadbalancer.org On 16 January 2017 at 15:32, Praveen Koppula wrote: >

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Praveen Koppula
Some content was missing. Adding again. When we reboot our machine (Where haproxy installed) teh haproxy going to be down and it's not starting after machine boot. When we force to start haproxy service getting below error. Error: Starting haproxy [ALERT] 047/083514 : Starting frontend GLOBAL:

Need help to reolsve haproxy issue

2017-01-16 Thread Praveen Koppula
Can you please help me on this. Haproxy version is : 1.5.4-2.1 Thanks in advance

You need help?

2016-11-05 Thread Victoria Xusa
Need Help ? Look no further. Your answer is just a click away. There’s a new method on the block that people are finding works for them. And I figured out how to gain access. Explore this tried and tested new method here. Have a good day Talk soon, Victoria Moral story of the day

Need help with configuration its not working on a new Archlinux VPS

2016-09-28 Thread Jeffrey Scott Flesher Gmail
anything that needs to be changed or delete let me know, I am not very good at this, I just need it to work and need help. Thanks for any help. # nano -c /etc/haproxy/haproxy.cfg global log 127.0.0.1 local0  log 127.0.0.1 local1 notice maxconn 4096 user haproxy group haproxy

Re: Need help to configure ha proxy

2016-09-07 Thread Harish Chander
the inservice. Regard's Harish Chander 8529142143 * From: Jeff Palmer <j...@palmerit.net> Sent: Tuesday, August 30, 2016 7:05 PM To: Harish Chander Cc: haproxy@formilux.org Subject: Re: Need help to configure ha proxy This config appears to be a decent

Re: Need help to configure ha proxy

2016-09-02 Thread Harish Chander
* From: Jeff Palmer <j...@palmerit.net> Sent: Tuesday, August 30, 2016 7:05 PM To: Harish Chander Cc: haproxy@formilux.org Subject: Re: Need help to configure ha proxy This config appears to be a decent start. and looks to meet your requirements for http. Now you jus

Re: Need help to configure ha proxy

2016-08-30 Thread Jeff Palmer
This config appears to be a decent start. and looks to meet your requirements for http. Now you just need another frontend configured for 443, it would match the :80 frontend, aside from port, using SSL, and a path to the certificates. On Tue, Aug 30, 2016 at 8:47 AM, Harish Chander

Re: Configure Log in Haproxy ( Need help )

2016-08-23 Thread ge...@riseup.net
Hi Qing, On 16-08-23 00:02:17, Qing Wang wrote: > And the haproxy.conf in /etc/rsyslog.d/ is: > # Create an additional socket in haproxy's chroot in order to allow > logging via > # /dev/log to chroot'ed HAProxy processes > #$AddUnixListenSocket /var/lib/haproxy/dev/log Uncomment this ^^^

Need Help : Haproxy as server with CA signed cert to fetch self-signed client certificate

2016-08-09 Thread Deepak Agarwal
Hi Baptiste, As discussed, Please help with inputs on the following. http://discourse.haproxy.org/t/haproxy-as-server-with-ca-signed-cert-to-fetch-self-signed-client-certificate/551 http://discourse.haproxy.org/t/how-to-fetch-ssl-subjectaltname-san-extension-data-in-haproxy/539 Thanks, Deepak

New projects need help

2016-07-28 Thread jerrychen

Re: Need Help

2015-09-22 Thread Nitesh Kumar Gupta
Hi Jeff, I am having below configurations in haproxy ~ global log 127.0.0.1 local0 log 127.0.0.1 local1 debug chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user

Re: Need Help

2015-09-21 Thread Nitesh Kumar Gupta
Hi Jeff,joris Actually this is what i am looking for exactly for our production the earlier configuration for a test server only but the below is the exact thing which i am looking for can you please help on this please its very urgent for me Currently the connector is pointing to

Re: Need Help

2015-09-19 Thread Jeff Palmer
As I previously mentioned, your frontend will need to use mode TCP. You v have a defaults of mode http, and don't change the mode on your front end. Give that a try, and report back. On Sep 19, 2015 9:44 AM, "Nitesh Kumar Gupta" wrote: > > Hi All, > > I am repeating

Re: Need Help

2015-09-19 Thread Nitesh Kumar Gupta
Hi All, I am repeating my question again coz all the suggestions din't here I am having 4 servers server1 server2 server3 server4 Now what i want if any request come from dev1.server.com that should forward to tcp on server4 and the normal opertion should be between the rest there servers I

Re: Need Help

2015-09-19 Thread Jeff Palmer
I also noticed, you aren't doing anything on the frontend to determine if the connection is TCP or http. In fact, this looks nothing like the example configuration I suggested. On Sep 19, 2015 10:12 AM, "Jeff Palmer" wrote: > As I previously mentioned, your frontend will need

Re: Need Help

2015-09-18 Thread joris dedieu
Hi, 2015-09-18 3:13 GMT+02:00 Nitesh Kumar Gupta : > Hi, > > I want to setup haproxy in way there that will work on both http and https > and also tpc but that will be conditional mean if any perticular link will > come that will go via tcp > > So can you help me how can

Re: Need Help

2015-09-17 Thread Nitesh Kumar Gupta
But how it will be conditional Mean suppose if I want anything that will access help that should go to TCP rest should work with normal http or HTTPS How can I configure this one On Sep 18, 2015 7:05 AM, "Jeff Palmer" wrote: > You can have haproxy listen in both http mode, and

Need Help

2015-09-17 Thread Nitesh Kumar Gupta
Hi, I want to setup haproxy in way there that will work on both http and https and also tpc but that will be conditional mean if any perticular link will come that will go via tcp So can you help me how can i setup this -- Regards Nitesh Kumar Gupta

Re: Need Help

2015-09-17 Thread Jeff Palmer
You can have haproxy listen in both http mode, and tcp mode. You'll just need to setup multiple frontends. something like: frontend myhttpservice bind *:80 mode http ... frontend mytcpservice bind *:3306 mode tcp ... If I misunderstood the request, please feel free to post

Re: Need Help

2015-09-17 Thread Jeff Palmer
Can you give us an example scenario? Tell us the actual services you want to use on the frontends and backends. and how you would envision your conditions to work? On Thu, Sep 17, 2015 at 9:39 PM, Nitesh Kumar Gupta wrote: > But how it will be conditional > Mean

Re: Need Help

2015-09-17 Thread Nitesh Kumar Gupta
We have 4 servers where tomcat is running server1 server2 server3 server4 and what i want the normal request will serve by the load balanced server via http or https server1 server2 server3 but if any request coming to access /portal that should routed through mode tpc with port 80 or 443 to

Re: Need Help

2015-09-17 Thread Jeff Palmer
Oh, I see now. so you want this to all be over the same port? If so, your frontend would have to be in mode tcp, and you'll lose some of the benefits of http mode. With that said, the following should work: frontend foo bind *:80 mode tcp tcp-request inspect-delay 5s tcp request

Re: Need Help

2015-09-17 Thread Nitesh Kumar Gupta
Thanks will try and let you know if it works On Sep 18, 2015 7:44 AM, "Jeff Palmer" wrote: > Oh, I see now. so you want this to all be over the same port? > > > If so, your frontend would have to be in mode tcp, and you'll lose > some of the benefits of http mode. With

Re: Need Help

2015-09-17 Thread Jeff Palmer
Please do, I'd be interested in knowing if it worked in reality, the way I suspect it'd work in theory! On Thu, Sep 17, 2015 at 10:29 PM, Nitesh Kumar Gupta wrote: > Thanks will try and let you know if it works > > On Sep 18, 2015 7:44 AM, "Jeff Palmer"

Re: Need help about ACLs settings

2015-06-17 Thread Thierry FOURNIER
@formilux.org haproxy@formilux.org Objet : Re: Need help about ACLs settings On Thu, 11 Jun 2015 16:51:14 +0200 Thibault Labrut thibault.lab...@enioka.com wrote: Hi Thierry, If I understand your propsition, my settings shourld be like this : You must add option forwardfor

Re: Need help about ACLs settings

2015-06-12 Thread Thibault Labrut
haproxy@formilux.org Objet : Re: Need help about ACLs settings On Thu, 11 Jun 2015 16:51:14 +0200 Thibault Labrut thibault.lab...@enioka.com wrote: Hi Thierry, If I understand your propsition, my settings shourld be like this : You must add option forwardfor in the RP frontend. Thierry

Re: Need help about ACLs settings

2015-06-11 Thread Baptiste
On Thu, Jun 11, 2015 at 11:06 AM, Thibault LABRUT t.lab...@pickup-services.com wrote: Hello, I’m going to install HA Proxy. My architecture is as folows : - 2 servers in DMZ = reverse proxy (RP) - 2 servers in LAN = Load balancing (LB) Several applications contact RP with different IP

Re: Need help about ACLs settings

2015-06-11 Thread Thierry FOURNIER
On Thu, 11 Jun 2015 09:06:43 + Thibault LABRUT t.lab...@pickup-services.com wrote: Hello, I’m going to install HA Proxy. My architecture is as folows : - 2 servers in DMZ = reverse proxy (RP) - 2 servers in LAN = Load balancing (LB) Several applications contact RP with different

Re: Need help about ACLs settings

2015-06-11 Thread Thibault Labrut
server test01 xx.xx.xx.xx:42 check server test02 xx.xx.xx.xx:42 check Thibault Labrut. De : Thierry FOURNIER tfourn...@haproxy.com Date : jeudi 11 juin 2015 11:56 À : Thibault Labrut t.lab...@pickup-services.com Cc : haproxy@formilux.org haproxy@formilux.org Objet : Re: Need help about ACLs

Re: Need help about ACLs settings

2015-06-11 Thread Baptiste
Or enable the proxy-protocol : http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.5.html#send-proxy http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.5.html#accept-proxy Baptiste On Thu, Jun 11, 2015 at 11:56 AM, Thierry FOURNIER tfourn...@haproxy.com wrote: On

Re: Need help about ACLs settings

2015-06-11 Thread Thierry
tfourn...@haproxy.com Date : jeudi 11 juin 2015 11:56 À : Thibault Labrut t.lab...@pickup-services.com Cc : haproxy@formilux.org haproxy@formilux.org Objet : Re: Need help about ACLs settings On Thu, 11 Jun 2015 09:06:43 + Thibault LABRUT t.lab...@pickup-services.com wrote: Hello

Re: Need help with HAProxy configuration mixed content http and https

2015-05-21 Thread Tu Nguyen
Thanks Baptise, Let me give this a try. On May 21, 2015, at 5:26 AM, Baptiste bed...@gmail.com wrote: it seems your client get connected using HTTPs on the HTTP port of haproxy. you must make your application aware that SSL offloading is being performed by a device in front of it. Some hints:

Re: Need help with HAProxy configuration mixed content http and https

2015-05-20 Thread Baptiste
On Wed, May 20, 2015 at 6:49 AM, Tu Nguyen nguyenhongtu...@gmail.com wrote: Hello, I’m new to HAProxy. I’m trying to set up HA to handle mixed content site (http and https). My site runs on http except login box which needs https. When I apply the configure with mode tcp, everything is fine.

Need help with HAProxy configuration mixed content http and https

2015-05-19 Thread Tu Nguyen
Hello, I’m new to HAProxy. I’m trying to set up HA to handle mixed content site (http and https). My site runs on http except login box which needs https. When I apply the configure with mode tcp, everything is fine. But I cannot modify header, which I need to identify user’s real IP. So I want

Re: Need help with url rewrite

2014-07-08 Thread Baptiste
On Fri, Jul 4, 2014 at 8:42 PM, Jeffrey Scott Flesher Gmail jeffrey.scott.fles...@gmail.com wrote: If a Picture is worth a 1000 Words: If the url does not have any path like this: http://mad-news.net/ acl has_ww_uri path_beg -i /ww returns false reqirep ^([^\ :]*)\ /(.*) \1\ /ww/\2 if

Re: Need help with url rewrite

2014-07-04 Thread Jeffrey Scott Flesher Gmail
If a Picture is worth a 1000 Words: If the url does not have any path like this: http://mad-news.net/ acl has_ww_uri path_beg -i /ww returns false reqirep ^([^\ :]*)\ /(.*) \1\ /ww/\2 if !has_ww_uri http://mad-news.net/ww/en/ it adds the ww, the program with is wthttpd (Wt) defaults to en for

Need help with url rewrite

2014-07-03 Thread Jeffrey Scott Flesher Gmail
I have a url that always begins with ww, ie http://domain.tdl/ww/en/..., I want to rewrite the url to include the ww, I tried the below, it works, but changes the path or something, because it cause the resources like css and images to not appear (404), does anyone know how to fix this or do

Re: Need help with url rewrite

2014-07-03 Thread Baptiste
On Thu, Jul 3, 2014 at 9:38 PM, Jeffrey Scott Flesher Gmail jeffrey.scott.fles...@gmail.com wrote: I have a url that always begins with ww, ie http://domain.tdl/ww/en/..., I want to rewrite the url to include the ww, I tried the below, it works, but changes the path or something, because it

Re: Need help with url rewrite

2014-07-03 Thread Jeffrey Scott Flesher Gmail
I have a URL lets say: http://example.com I want it to be rewritten by haproxy to: http://example.com/ww All I want is for haproxy to rewrite the URL only if it does not have any path, ie http://example.com, then add the ww to it, so it becomes http://example.com/ww I do not have Apache on the

RE: Need help with haproxy config

2014-07-02 Thread Lukas Tribus
Hi Jeffrey, Below is my haproxy config, I have 1 server and 1 backend for testing  This is a Wt wthttpd app, with no Apache loaded,  Problem I have is that the path to the app seems to change when running from port 80 or haproxy,  meaning I lost all my style sheets and resources, not sure

Re: Need help with configuration file

2014-06-20 Thread Scott McKeown
Hi Jeffrey, The 'AND' key word is implicit and therefore you do not need to include it in your ACL's also the 'if' word is only needed once so for example your use_backend statement should look something like this: use_backend bck1 if srv1_up srv1 has_ww_uri use_backend bck2 if srv2_up srv2

Need help with configuration file

2014-06-19 Thread Jeffrey Scott Flesher Gmail
Below is the configuration, what I need is for all urls like http//domain.tdl/ww/... to use back end 1 or 2 or default load balancer, and all other request to go to Apache, but I get an error: [ALERT] 170/013846 (5151) : parsing [/etc/haproxy/haproxy.cfg:43] : error detected while parsing

RE: Need help with 1.5 crashing when browser refreshed

2013-10-13 Thread Lukas Tribus
Hi Kevin, With the line commented out it ended up with: Built with PCRE version : 8.02 2010-03-19 The crash still occurred just as before. Ok, can you post the full output of haproxy -vv please. Next I decided to try without SSL and it didn’t crash. Compiled with SSL it crashes even if

Re: Need help with 1.5 crashing when browser refreshed

2013-10-13 Thread Kevin
On Oct 13, 2013, at 5:39 AM, Lukas Tribus luky...@hotmail.com wrote: Hi Kevin, With the line commented out it ended up with: Built with PCRE version : 8.02 2010-03-19 The crash still occurred just as before. Ok, can you post the full output of haproxy -vv please. HA-Proxy version

Re: Need help with 1.5 crashing when browser refreshed

2013-10-12 Thread Kevin
On Oct 12, 2013, at 12:38 AM, Willy Tarreau w...@1wt.eu wrote: So everything is normal but it crashes. At this time, I'm inclined to believe the following causes in order of most to least likely : - bug in libpcre 8.33 - bug in how haproxy uses libpcre which is revealed by 8.33 -

RE: Need help with 1.5 crashing when browser refreshed

2013-10-12 Thread Lukas Tribus
Hi Kevin, what I also see different between those 2 builds is that the openssl seems to be build with OpenSSL 0.9.8y in your former, working build and OpenSSL 0.9.8r in the latter, crashing build, but always runs with 0.9.8y: Built with OpenSSL version : OpenSSL 0.9.8y 5 Feb 2013 Running on

Re: Need help with 1.5 crashing when browser refreshed

2013-10-12 Thread Kevin
On Oct 12, 2013, at 7:47 AM, Lukas Tribus luky...@hotmail.com wrote: So I wonder if something changed on your side between those 2 builds or whether the Makefile is screwing with the paths when compiling with PCRE. Could this be related to the fact that we call pcre-config call in the

Re: Need help with 1.5 crashing when browser refreshed

2013-10-11 Thread Kevin
My initial builds were done using HomeBrew for both 1.4.24 and 1.5dev19. It is configured with the following arguments to make: TARGET=generic USE_KQUEUE=1 USE_POLL=1 USE_PCRE=1 The 1.5dev19 settings add to those: USE_OPENSSL=1 USE_ZLIB=1 ADDLIB=-lcrypto When I did my test compiles I

Re: Need help with 1.5 crashing when browser refreshed

2013-10-11 Thread Willy Tarreau
Hi Kevin, On Fri, Oct 11, 2013 at 07:39:32PM -0500, Kevin wrote: My initial builds were done using HomeBrew for both 1.4.24 and 1.5dev19. It is configured with the following arguments to make: TARGET=generic USE_KQUEUE=1 USE_POLL=1 USE_PCRE=1 The 1.5dev19 settings add to those:

Need help with 1.5 crashing when browser refreshed

2013-10-10 Thread Kevin
I am having an issue with the 1.5dev19 and the latest snapshot. It crashes sometimes when loading our site. It’s repeatable simply by refreshing the browser several times rapidly. I’ve tried using poll instead of kqueue and there was no change. Version 1.4 does not display the problem. I was

Re: Need help with 1.5 crashing when browser refreshed

2013-10-10 Thread Kevin
So after some more troubleshooting the problem seems to be related to PCRE. If I compile without it I don’t see the problem. In 1.4 there does not appear to be any issue using PCRE. Any ideas? - Kevin On Oct 10, 2013, at 4:23 PM, Kevin k...@gatorgraphics.com wrote: I am having an issue

Re: Need help with 1.5 crashing when browser refreshed

2013-10-10 Thread Willy Tarreau
Hi Kevin, On Thu, Oct 10, 2013 at 08:28:07PM -0500, Kevin wrote: So after some more troubleshooting the problem seems to be related to PCRE. If I compile without it I don?t see the problem. In 1.4 there does not appear to be any issue using PCRE. OK, thanks for tracking this down. I'm not

Re: NTLM/Issues With HaProxy to SQUID need help...

2012-12-05 Thread David Touzeau
-Original Message- From: Willy Tarreau Sent: Wednesday, December 05, 2012 8:13 AM To: David Touzeau Cc: haproxy@formilux.org Subject: Re: NTLM/Issues With HaProxy to SQUID need help... Hi David, [ your MUA still emits those Ctrl-M at the end of each line ] On Tue, Dec 04, 2012

Re: NTLM/Issues With HaProxy to SQUID need help...

2012-12-05 Thread Jonathan Matthews
On 5 December 2012 12:47, David Touzeau da...@articatech.com wrote: Thanks Willy for this clarification but if i turn to tunnel mode,did i lose the x-forwarded-for HTTP header ? Yes, on all but the first request I believe. Jonathan -- Jonathan Matthews // Oxford, London, UK

NTLM/Issues With HaProxy to SQUID need help...

2012-12-04 Thread David Touzeau
HI all   I have 3 Squid servers connected to my Active Directory (about 1500 users) I have setup HaProxy to balance connections from users to the 3 squid servers in order to go Internet.   When connecting browsers trough HaProxy:

Re: NTLM/Issues With HaProxy to SQUID need help...

2012-12-04 Thread Willy Tarreau
Hi David, [ your MUA still emits those Ctrl-M at the end of each line ] On Tue, Dec 04, 2012 at 11:09:09PM +0100, David Touzeau wrote: HI all   I have 3 Squid servers connected to my Active Directory (about 1500 users) I have setup HaProxy to balance connections from users to the 3 squid

Re: current_con , need help

2012-11-06 Thread Willy Tarreau
Hi Benoit, On Tue, Nov 06, 2012 at 03:16:27PM +0100, Benoit GEORGELIN (web4all) wrote: Hi everybody , I try to figured out and understand more the information in haproxy web interface regarding : Current conns Queue Session Rate Sessions Because I have a problem on my

Re: Need help with HAProxy

2012-01-13 Thread Chris Sarginson
Could this be related to the number of concurrent connections being run? maxconn 1024 under global seems quite low, and if your servers are holding connections open due to responding slowly could this be the cause? Chris On 13/01/2012 03:37, John Lauro wrote: If the refused connection

Need help with HAProxy

2012-01-12 Thread contractor
I am using HAProxy on RedHat 5.5 and have below configuration. global daemon maxconn 1024 log 127.0.0.1 local1 info defaults log global balance roundrobin mode http retries3 option redispatch timeout connect 30ms timeout client

RE: Need help with HAProxy

2012-01-12 Thread John Lauro
, January 12, 2012 5:03 PM To: haproxy@formilux.org Subject: Need help with HAProxy I am using HAProxy on RedHat 5.5 and have below configuration. global daemon maxconn 1024 log 127.0.0.1 local1 info defaults log global balance roundrobin mode http retries3 option

Re: Need Help

2012-01-05 Thread Willy Tarreau
On Wed, Jan 04, 2012 at 07:39:23PM +0530, Ravi Ranjan wrote: Hi, Thanks for your guidance. I am using stunnel too, but still its failing. failing is not a useful term to describe your issues ! What are you observing ? Are you sure that your servers *really* send the Location header you're

Need Help

2012-01-04 Thread Ravi Ranjan
Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode http balance roundrobin option ssl-hello-chk reqadd X-Is-Secure-Request:True option

Re: Need Help

2012-01-04 Thread Ravi Ranjan
+Support. With Warm Regards Ravi Ranjan On Wed, Jan 4, 2012 at 3:58 PM, Ravi Ranjan rran...@apigee.com wrote: Hi All, Please can some one help me on setting rewrite rule for haproxy ssl. I tried a lot but it fails. Here is the config: listen example_ssl 0.0.0.0:1443 mode

Re: Need Help

2012-01-04 Thread support
__ Please type your reply at the top of the email... -- Jonas Ramsin | JAN 04, 2012 11:57AM CET Hi, Not sure if this was meant for our Support team. Mvh / Best regards Jonas Ramsin Head

Re: Need Help

2012-01-04 Thread Baptiste
Hi, As far as I can read, your configuration can't work. From my understanding your traffic seems to be encripted, so HAProxy can't manipulate it. You must use stunnel or stud or pound in front of HAProxy in order to decrypt traffic. Then, your rewrite rule might work. cheers On Wed, Jan 4,

Re: Need Help

2012-01-04 Thread Ravi Ranjan
Hi, Thanks for your guidance. I am using stunnel too, but still its failing. With Warm Regards Ravi Ranjan On Wed, Jan 4, 2012 at 7:37 PM, Baptiste bed...@gmail.com wrote: Hi, As far as I can read, your configuration can't work. From my understanding your traffic seems to be encripted,

Re: Need help about reqrep (urgent)

2011-09-24 Thread Willy Tarreau
Hi, On Fri, Sep 23, 2011 at 11:20:52AM +, DerekLiao wrote: Hey there, I have trouble with direct ??reqrep?? what I want is : My main web site is : caipiao.aaa.com My second web site is: www.bbb.com My goal is redirect URL from caipiao.aaa.com/ kaijiang

RE: Need help about reqrep (urgent)

2011-09-24 Thread DerekLiao
Is it set correctly I only see 503/404 error on haproxy log, I already set debug level ! version 1.4.14 I really need your help My Skype account : derek.liao66 Date: Sat, 24 Sep 2011 12:43:35 +0200 From: w...@1wt.eu To: y...@hotmail.com CC: haproxy@formilux.org Subject: Re: Need help

Re: Need help about reqrep (urgent)

2011-09-24 Thread Willy Tarreau
On Sat, Sep 24, 2011 at 10:46:23AM +, DerekLiao wrote: Is it set correctly It does not indicate what's in it. What do you mean by correctly ? I only see 503/404 error on haproxy log, I already set debug level ! version 1.4.14 503s indicate that sometimes there is no server to connect

RE: Need help about reqrep (urgent)

2011-09-24 Thread DerekLiao
health check is normal, I checked from haproxy monitor screen , How to check reqrep is working fine or not ? I double the URI has not been replaced Date: Sat, 24 Sep 2011 12:52:01 +0200 From: w...@1wt.eu To: y...@hotmail.com CC: haproxy@formilux.org Subject: Re: Need help about reqrep

Re: Need help about reqrep (urgent)

2011-09-24 Thread Willy Tarreau
On Sat, Sep 24, 2011 at 11:06:07AM +, DerekLiao wrote: health check is normal, I checked from haproxy monitor screen , OK, maybe it's your server which is returning 503 then. How to check reqrep is working fine or not ? That's what I explained, in apache's logs. I double the URI has

RE: Need help about reqrep (urgent)

2011-09-24 Thread DerekLiao
is it possible to get detail rewrite infomation like apache error log does? tcpdump, little bit diffcult ,too much taffice need to analyse From: luky...@hotmail.com To: y...@hotmail.com; w...@1wt.eu CC: haproxy@formilux.org Subject: RE: Need help about reqrep (urgent) Date: Sat, 24 Sep 2011 13

Re: Need help about reqrep (urgent)

2011-09-24 Thread Willy Tarreau
On Sat, Sep 24, 2011 at 11:23:07AM +, DerekLiao wrote: is it possible to get detail rewrite infomation like apache error log does? No, what haproxy logs is what it *receives*. That's why we're asking for what is seen on the other side. tcpdump, little bit diffcult ,too much taffice need

  1   2   >