RE: Owncloud through Haproxy makes upload not possible

> No, I have checked both lo0 and lo1 (I have lo1 set up for jails). Can you try outside of the jail? Somehow it must be possible to tcpdump this traffic. Lukas

Re: Owncloud through Haproxy makes upload not possible

No, I have checked both lo0 and lo1 (I have lo1 set up for jails). On 11/26/15 15:21, Lukas Tribus wrote: >> I'm not sure now, but it seems that packets routed in Haproxy are >> somehow protected from dumping: >> root@owncloud:~ # tcpdump -i em1 -vv port 80 >> tcpdump: listening on em1, link-type

RE: Owncloud through Haproxy makes upload not possible

> I'm not sure now, but it seems that packets routed in Haproxy are > somehow protected from dumping: > root@owncloud:~ # tcpdump -i em1 -vv port 80 > tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size > 10 bytes > ^C > 0 packets captured > 3774 packets received by filter > 0 pack

Re: Owncloud through Haproxy makes upload not possible

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm not sure now, but it seems that packets routed in Haproxy are somehow protected from dumping: root@owncloud:~ # tcpdump -i em1 -vv port 80 tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size 10 bytes ^C 0 packets captured 3774 pa

RE: Owncloud through Haproxy makes upload not possible

> I'm not sure why, but after doing haproxy -vv I now get kevent() in > truss output. I'm attaching another truss output. Ok, so thats not the problem, good. > While browsing the logs I've notices that besides the usual 200 > output, when uploading was > finished (unsuccessfully) I got the follo

Re: Owncloud through Haproxy makes upload not possible

I'm not sure why, but after doing haproxy -vv I now get kevent() in truss output. I'm attaching another truss output. While browsing the logs I've notices that besides the usual 200 output, when uploading was finished (unsuccessfully) I got the following 504 code: Nov 24 11:03:13 anongoth haproxy[7

RE: Owncloud through Haproxy makes upload not possible

Hi, >> Still seeing poll() in this trace. Are you sure nokqueue was removed >> in the configuration and haproxy was restarted? > Yes, I definitely did that. > [...] > Total: 3 (3 usable), will use kqueue. I don't get it. The trace doesn't match the configuration. When you start haproxy with th

Re: Owncloud through Haproxy makes upload not possible

On 11/23/15 17:29, Lukas Tribus wrote: >>> Ok, could you redo this trace with the "-d" option and >>> without the nokqueue configuration. >> Attached. > > Still seeing poll() in this trace. Are you sure nokqueue was removed > in the configuration and haproxy was restarted? > > Please also provide

RE: Owncloud through Haproxy makes upload not possible

>> Ok, could you redo this trace with the "-d" option and >> without the nokqueue configuration. > Attached. Still seeing poll() in this trace. Are you sure nokqueue was removed in the configuration and haproxy was restarted? Please also provide the output of "haproxy -vv". Thanks, Lukas

RE: Owncloud through Haproxy makes upload not possible

Hi Piotr, >> - try nokqueue mode [1] > Didn't change anything. >> - try option http-no-delay [2] > Didn't change anything. Ok, please remove both options again. >> - check cpu usage (system and haproxy) while uploading > Load average is about 0.2-0.4 What we have to find out is if haproxy or

RE: Owncloud through Haproxy makes upload not possible

Hi Piotr, > Unfortunately, using 1.5.15 didn't change anything. a few things I would suggest to try/troubleshoot: - try nokqueue mode [1] - try option http-no-delay [2] - check cpu usage (system and haproxy) while uploading - truss ([3]) haproxy while uploading - tcpdump the frontend connection

Re: Owncloud through Haproxy makes upload not possible

On 11/20/2015 21:05, Bryan Talbot wrote: > On Fri, Nov 20, 2015 at 1:39 AM, Piotr Kubaj > wrote: > > > > Unfortunately, using 1.5.15 didn't change anything. The logs are: > > > We can see from the logs below that the connection is aborting with CD > or sH codes. > >

Re: Owncloud through Haproxy makes upload not possible

On 11/20/2015 21:05, Bryan Talbot wrote: > On Fri, Nov 20, 2015 at 1:39 AM, Piotr Kubaj > wrote: > > > > Unfortunately, using 1.5.15 didn't change anything. The logs are: > > > We can see from the logs below that the connection is aborting with CD > or sH codes.

Re: Owncloud through Haproxy makes upload not possible

On Fri, Nov 20, 2015 at 1:39 AM, Piotr Kubaj wrote: > > > Unfortunately, using 1.5.15 didn't change anything. The logs are: > We can see from the logs below that the connection is aborting with CD or sH codes. The docs say: CD The client unexpectedly aborted during data transfer. This c

Re: Owncloud through Haproxy makes upload not possible

On 11/19/15 22:43, Igor Cicimov wrote: > > It might be something specific to BSD os causing issues for you > since I haven't heard of anyone complaining about ssl till now. > You can also try latest stable 1.5.15 since I can't see any 1.6 > specific feature in your config. > Unfortunately, using

Re: Owncloud through Haproxy makes upload not possible

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/19/15 22:43, Igor Cicimov wrote: > > It might be something specific to BSD os causing issues for you > since I haven't heard of anyone complaining about ssl till now. > You can also try latest stable 1.5.15 since I can't see any 1.6 > spec

Re: Owncloud through Haproxy makes upload not possible

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/19/15 22:43, Igor Cicimov wrote: > > On 20/11/2015 7:23 AM, "Piotr Kubaj" > wrote: >> >> On 11/19/2015 17:01, Janusz Dziemidowicz wrote: >>> 2015-11-19 15:45 GMT+01:00 Piotr Kubaj >: >>>

Re: Owncloud through Haproxy makes upload not possible

On 20/11/2015 7:23 AM, "Piotr Kubaj" wrote: > > On 11/19/2015 17:01, Janusz Dziemidowicz wrote: > > 2015-11-19 15:45 GMT+01:00 Piotr Kubaj : > >> Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a > >> lot of questions about constants used by ECDSA, which seem to be > >> chosen

Re: Owncloud through Haproxy makes upload not possible

On 11/19/2015 17:01, Janusz Dziemidowicz wrote: > 2015-11-19 15:45 GMT+01:00 Piotr Kubaj : >> Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a >> lot of questions about constants used by ECDSA, which seem to be >> chosen quite arbitrarily by its creator, which happens to be NS

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 15:45 GMT+01:00 Piotr Kubaj : > Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a > lot of questions about constants used by ECDSA, which seem to be > chosen quite arbitrarily by its creator, which happens to be NSA. > These questions of course remain unanswered. Eve

Re: Owncloud through Haproxy makes upload not possible

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/19/15 14:41, Janusz Dziemidowicz wrote: > 2015-11-19 11:13 GMT+01:00 Piotr Kubaj : >>> 4096 bit DH params will be pretty slow to handshake. Maybe >>> that's okay in your circumstance though since you seem to be >>> using this for a personal u

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 11:13 GMT+01:00 Piotr Kubaj : >> 4096 bit DH params will be pretty slow to handshake. Maybe that's >> okay in your circumstance though since you seem to be using this >> for a personal use and not expecting a high connection rate. You >> also have a 8 kbit RSA self signed certificate and

Re: Owncloud through Haproxy makes upload not possible

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/18/15 19:45, Bryan Talbot wrote: > Hard to guess what the issue is but haproxy logging would probably > help. However, the logging configuration is a bit of a mess as it's > configured to be "all on" and "all off" at the same time. There are

Re: Owncloud through Haproxy makes upload not possible

2015-11-18 19:45 GMT+01:00 Bryan Talbot : > AFAIK, HPKP is only somewhat supported by only the most recent browser > releases. I believe that it's also ignored by them for certificates which > are self-signed or signed by a CA that is not in the browsers system-defined > CA set. Probably doesn't ca

Re: Owncloud through Haproxy makes upload not possible

On Wed, Nov 18, 2015 at 3:45 AM, Piotr Kubaj wrote: > Hi, > > I've got a home server with 1 public IP, on which I host a couple of my > websites. Each of them is in a separate jail. Haproxy listens on the > outgoing IP and directs the traffic to the appropriate jail. Each of my > websites works f

Owncloud through Haproxy makes upload not possible

Hi, I've got a home server with 1 public IP, on which I host a couple of my websites. Each of them is in a separate jail. Haproxy listens on the outgoing IP and directs the traffic to the appropriate jail. Each of my websites works fast. However, if uploading files in Owncloud goes VERY slow and i