Re: Help tracking "connection refused" under pressure on v2.9

Hi Willy, On Fri, 29 Mar 2024 07:17:56 +0100 Willy Tarreau wrote: > > These "connection refused" is from our watchdog; but the effects are as > > perceptible from the outside. When our watchdog hits this situation, > > it will forcefully restart HAProxy (we have 2 instances) because there > > w

Re: Help tracking "connection refused" under pressure on v2.9

Hi Ricardo, On Thu, Mar 28, 2024 at 06:21:16PM -0300, Ricardo Nabinger Sanchez wrote: > Hi Willy, > > On Thu, 28 Mar 2024 04:37:11 +0100 > Willy Tarreau wrote: > > > Thanks guys! So there seems to be an annoying bug. However I'm not sure > > how this is related to your "connection refused", exc

Re: Help tracking "connection refused" under pressure on v2.9

Hi Willy, On Thu, 28 Mar 2024 04:37:11 +0100 Willy Tarreau wrote: > Thanks guys! So there seems to be an annoying bug. However I'm not sure > how this is related to your "connection refused", except if you try to > connect at the moment the process crashes and restarts, of course. I'm > seeing t

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, Mar 27, 2024 at 02:26:47PM -0300, Ricardo Nabinger Sanchez wrote: > On Wed, 27 Mar 2024 11:06:39 -0300 > Felipe Wilhelms Damasio wrote: > > > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 > > sp:7fd7c002f100 error:0 in haproxy[42c000+1f7000] > > We managed to get a core f

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, 27 Mar 2024 11:06:39 -0300 Felipe Wilhelms Damasio wrote: > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 > sp:7fd7c002f100 error:0 in haproxy[42c000+1f7000] We managed to get a core file, and so created ticket #2508 (https://github.com/haproxy/haproxy/issues/2508) with m

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, 27 Mar 2024 11:06:39 -0300 Felipe Wilhelms Damasio wrote: > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 sp:7fd7c002f100 > error:0 in haproxy[42c000+1f7000] In our build, this would be where instruction pointer was: (gdb) list *0x5b10e6 0x5b10e6 is in __task_queue (src

Re: Help tracking "connection refused" under pressure on v2.9

Hi, We've confirmed a few findings after we poured ~75-80Gbps of traffic on purpose on a single machine: - haproxy does indeed crashes; - hence, we have no stats socket to collect a few things; It seems that under pressure (not sure which conditions yet) the kernel seems to be killing it. dmesg s

Re: Help with peer setup and "srv_conn(bk_customer/haproxy-dest1)"

Hi. Anyone which can help to protect the backen with backend states? Regards Alex On 05.12.21 11:42, Aleksandar Lazic wrote: Hi. I try to protect an backend server against a overload within a master/master setup. The test setup looks like this lb1: 8081 \    -hap-dest: 8080 lb2: 8

Re: Help

[mailto:emerson.go...@gmail.com] *Sent:* 7 de julho de 2021 12:34 *To:* Anilton Silva Fernandes *Cc:* haproxy@formilux.org *Subject:* Re: Help Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also, make sure tha

RE: Help

: Emerson Gomes [mailto:emerson.go...@gmail.com] Sent: 7 de julho de 2021 12:34 To: Anilton Silva Fernandes Cc: haproxy@formilux.org Subject: Re: Help Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also, make

Re: Help

Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also, make sure that both the certificate and private key are contained within the same PEM file. It should look like this: -BEGIN CERTIFICATE- xxx -

Re: Help

On 7/7/2021 6:45 AM, Anilton Silva Fernandes wrote: Hi there. Can I get some help from you. I’m configuring HAProxy as a frontend on HTTPS with centified and I want clients to be redirect to BACKEND on HTTPS as well (443) but I want clients to see only HAProxy certificate, as the backend one

Re: help for implementation of first fetch function "sample_fetch_json_string"

Tim, you are great ;-) On 08.04.21 18:14, Tim Düsterhus wrote: Aleks, On 4/8/21 5:07 PM, Aleksandar Lazic wrote: http-request set-var(sess.json) %[req.hdr(Authorization),b64dec,json_string("\$.kubernetes\\.io/serviceaccount/namespace")] http-request set-var() does not expect the %[] syntax,

Re: help for implementation of first fetch function "sample_fetch_json_string"

Aleks, On 4/8/21 5:07 PM, Aleksandar Lazic wrote: http-request set-var(sess.json) %[req.hdr(Authorization),b64dec,json_string("\$.kubernetes\\.io/serviceaccount/namespace")] http-request set-var() does not expect the %[] syntax, because it always takes a sample. Even the following returns th

Re: [HELP] slim is being set to 1

Hi. On 07.01.20 07:27, Shah, Aman wrote: Hello all, We have an haproxy server and we are getting some odd values. Value of slim is coming as 1 for most of the domains. The value is nowhere being set and maxconn is being set to 2000. Can you please help me to figure out what could be the actu

Re: Re: Help, URL does not work with CHINESE charactor?

Hi! On Tue, Dec 24, 2019 at 07:59:25PM +0800, JWD wrote: > It works with "option accept-invalid-http-request". > Thanks a lot. > > Yes, it does not work with IE only. > Other web browser is fine. I already noticed this behaviour with very old versions of IE in the past, it would do this on redir

Re: Re: Help, URL does not work with CHINESE charactor?

It works with "option accept-invalid-http-request". Thanks a lot. Yes, it does not work with IE only. Other web browser is fine. JWD From: Lukas Tribus Date: 2019-12-24 19:31 To: JWD CC: Aleksandar Lazic; haproxy Subject: Re: Re: Help, URL does not work with CHINESE charactor? On T

Re: Re: Help, URL does not work with CHINESE charactor?

On Tue, 24 Dec 2019 at 11:46, JWD wrote: > > I have tried version 1.7,1.8,2.0,2.1, all the same. > > Config: > frontend www > acl acl-app hdr(host) -i sharepoint.domain.com > use_backend app if acl-app > backend > cookie HA-Server insert indirect nocache > server app 192.168.129.66

Re: Re: Help, URL does not work with CHINESE charactor?

Egif; Ribbo 00529+ n.Document=973830|-1|0|-533254637\r\n 00564 \r\n JWD From: Aleksandar Lazic Date: 2019-12-24 17:08 To: JWD; haproxy Subject: Re: Help, URL does not work with CHINESE charactor? Hi JWD. On 24.12.19 02:53, JWD wrote: > Hi,all > I have a backend, which is sharepo

Re: Help, URL does not work with CHINESE charactor?

Hi JWD. On 24.12.19 02:53, JWD wrote: Hi,all I have a backend, which is sharepoint website. If URL include CHINESE charactor, it return HTTP 400 ERROR from IE 11 with haproxy. But it is ok without haproxy. Can anyone help me? Thanks. This can not access, return HTTP 400 ERROR: http://sharepoint

RE: Help required ehhe

xy@formilux.org Objet : Re: Help required ehhe Am 23-08-2019 02:04, schrieb andy.anthoine@opt.nc: > REALLY SORRY ABOUT THAT lo > > I'll copy paste my bad :D > > admin@sld-loadb-01-prd-cit:~$ curl -v -o /dev/null --max-time 5 > --http1.0 http://10.154.2.29:8080/iw

Re: Help required ehhe

lto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 10:57 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 01:43, schrieb andy.anthoine@opt.nc: Hi, I can't launch the command from the LB I love screenshots! It's so easy to co

RE: Help required ehhe

he LB & BE? Yes there is one -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 10:57 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 01:43, schrieb andy.anthoine@opt.nc

Re: Help required ehhe

c [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 10:33 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Am 23-08-2019 00:49, schrieb andy.anthoine@opt.nc: Hi, Ehhe not an external ip don't worry, or i would have deleted it hehe No ch

RE: Help required ehhe

anager.suspendTransaction(response.transactionNum);window.isc.Timer.setTimeout(function () {window.isc.RPCManager.resendTransaction(response.transactionNum);});}}});} var $cwCurrentCss = '/css/ui_common.css' isc.setAutoDraw(false); * Closing connection 2 Best regards And

Re: Help required ehhe

of the mail. mode http [snip more config] -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 09:41 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 00:28, schrieb andy.anthoine@opt.

RE: Help required ehhe

backup servers left. 62 sessions active, 0 requeued, 0 remaining in queue. What do you mean by that ? > mode http [snip more config] -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 09:41 À : ANTHOINE Andy (EXT) Cc : hap

Re: Help required ehhe

Hi. Am 23-08-2019 00:28, schrieb andy.anthoine@opt.nc: Hi, I got that email on this site, not sure if it's still working etc https://www.slideshare.net/haproxytech/haproxy-best-practice I'm having some issue with a service (white page sometimes for a webservice), and i m not totally sure

Re: Help with 1.8.1/4 and spoa_server/spoa_example

Hi Christopher. Am 05.07.2019 um 16:29 schrieb Christopher Faulet: > Le 03/07/2019 à 16:16, Aleksandar Lazic a écrit : >> I know this is a old haproxy version but I have not the option to update as >> it's >> part of a vendor product. >> >> I need to bring the `[haproxy-2.0.git]/ contrib/spoa_ser

Re: Help with 1.8.1/4 and spoa_server/spoa_example

Le 03/07/2019 à 16:16, Aleksandar Lazic a écrit : I know this is a old haproxy version but I have not the option to update as it's part of a vendor product. I need to bring the `[haproxy-2.0.git]/ contrib/spoa_server/` up and runnig or `[haproxy-1.8.git]/contrib/spoa_example/` from 1.8.4 to be a

Re: Help you generate more revenue for your haproxy.com.

On Wed, Sep 05, 2018 at 10:14:55PM +1000, Rob Thomas wrote: > You gotta wonder how this guy got this mailing list. He must have actually > LOOKED at the website, right? > > Sigh. Spammers. > > For anyone who cares, I don't think it's possible for haproxy to get MORE > exposure on google. > > [i

Re: Help with backend server sni setup

Hi. On 30/07/2018 16:39, Lukas Tribus wrote: On Mon, 30 Jul 2018 at 13:30, Aleksandar Lazic wrote: Hi. I have the following Setup. APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP The external HAProxy is configured with multiple TLS Vhost. Never use SNI for Vhosting. It should

Re: Help with backend server sni setup

On Mon, 30 Jul 2018 at 13:30, Aleksandar Lazic wrote: > > Hi. > > I have the following Setup. > > APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP > > The external HAProxy is configured with multiple TLS Vhost. Never use SNI for Vhosting. It should work with the host header only. SNI sh

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 05:44:44PM +0100, Jonathan Matthews wrote: > No. Sudo doesn't pass envvars through to its children by default: > https://stackoverflow.com/questions/8633461/how-to-keep-environment-variables-when-using-sudo > > Read that page *and* the comments - in particular be aware that

Re: Help with environment variables in config

No. Sudo doesn't pass envvars through to its children by default: https://stackoverflow.com/questions/8633461/how-to-keep-environment-variables-when-using-sudo Read that page *and* the comments - in particular be aware that you have to request (at the CLI) that sudo preserve envvars, and you also

Re: Help with environment variables in config

actually, looking at this now I realize my sudo is messing it up. I need to set the env variables for the su environment. Yeah it works now. Thanks for helping me get to that conclusion. On Sat, Jul 21, 2018 at 10:31 AM jdtommy wrote: > would this chain of calls not work? > > ubuntu@ip-172-

Re: Help with environment variables in config

would this chain of calls not work? ubuntu@ip-172-31-30-4:~$ export GRAPH_ADDRESS=graph.server.com ubuntu@ip-172-31-30-4:~$ export GRAPH_PORT=8182 ubuntu@ip-172-31-30-4:~$ sudo haproxy -d -V -f /etc/haproxy/haproxy.cfg On Sat, Jul 21, 2018 at 3:26 AM Igor Cicimov wrote: > On Sat, Jul 21, 2018 a

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 7:12 PM, Jonathan Matthews wrote: > On Sat, 21 Jul 2018 at 09:12, jdtommy wrote: > >> I am setting them before I start haproxy in the terminal. I tried both >> starting it as a service and starting directly, but neither worked. It >> still would not forward it along. >> >

Re: Help with environment variables in config

On Sat, 21 Jul 2018 at 09:12, jdtommy wrote: > I am setting them before I start haproxy in the terminal. I tried both > starting it as a service and starting directly, but neither worked. It > still would not forward it along. > Make sure that, as well as setting them, you're *exporting* the env

Re: Help with environment variables in config

I am setting them before I start haproxy in the terminal. I tried both starting it as a service and starting directly, but neither worked. It still would not forward it along. On Sat, Jul 21, 2018, 2:06 AM Igor Cicimov wrote: > > > On Sat, Jul 21, 2018 at 4:49 PM, jdtommy wrote: > >> here is my

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 4:49 PM, jdtommy wrote: > here is my simple `listen` section of the haproxy config file: > > listen graph_front >bind *:8182 >mode tcp >server graph_server graph.server.com:8182 > > this works just fine, but I need the address and port to be a e

Re: help for setting up haproxy using Linux system proxy

I had faced the same issue and have documented my solution at https://www.mail-archive.com/haproxy@formilux.org/msg26387.html Regards, Vivek On Sat, Jul 8, 2017 at 5:44 AM, Aaron West wrote: > On 8 July 2017 at 11:25, Aaron West wrote: >> for me at least, it would >> boggle the mind that you ha

Re: help for configuration between http and tcp mode

Hi, > > Because your Host header is certainly "influxdb-drp.example.net:8086", not > "influxdb-drp.example.net". You can verify this with this acl instead : > acl host_influxdb-drp.example.net hdr(host) -i influxdb-drp.example.net:8086 > > Or you can even capture the header in your logs, it's

Re: help for configuration between http and tcp mode

Hi, Le 09/07/2017 à 17:58, M a écrit : Hi, It seems the error is related to acl and I don’t yet understand why > [...] frontend https_influxdb bind 192.168.246.17:8086 ssl crt /data/ssl_certs no-sslv3 ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA

Re: help for configuration between http and tcp mode

Hi, It seems the error is related to acl and I don’t yet understand why. I have done additional tests with configuration: ——— frontend https bind 0.0.0.0:443 ssl crt /data/ssl_certs no-sslv3 ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA

Re: help for configuration between http and tcp mode

Hello M Looking at your configuration you are trying to use HTTPS/TCP/SSL Connection for HTTP frontend https_influxdb bind 192.168.246.17:8086 ssl crt /data/ssl_certs no-sslv3 ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:E

Re: help for setting up haproxy using Linux system proxy

On 8 July 2017 at 11:25, Aaron West wrote: > for me at least, it would > boggle the mind that you have a reverse proxy using a forward proxy. I think I I should clarify the above... I don't mean using forward proxies as a real server(Think webfilters) because that makes sense I just mean routing

Re: help for setting up haproxy using Linux system proxy

I'm going to go out on a limb here and say that you can't(Or shouldn't just in case somehow you can...), first, for me at least, it would boggle the mind that you have a reverse proxy using a forward proxy. I guess you could use a transparent proxy although I'm still not sure why but HAproxy would

Re: Help Needed || haproxy limiting the connection rate per user

Greetings, On 08/30/2016 01:10 PM, Samrat Roy wrote: Thank you sir for your quick reply. I am now able to give custom error code for my HAproxy configuration. However I am facing one more issue . With the above approach HAproxy is rejecting each and every calls once the limit has crossed.

Re: Help Needed || haproxy limiting the connection rate per user

Thank you sir for your quick reply. I am now able to give custom error code for my HAproxy configuration. However I am facing one more issue . With the above approach HAproxy is rejecting each and every calls once the limit has crossed. It is behaving as a circuit breaker . But my requirement is

Re: Help Needed || haproxy limiting the connection rate per user

Greetings, On 08/26/2016 09:14 AM, Samrat Roy wrote: Hello Sir, down votefavorite I am trying to achieve rate limiting using HAProxy. I am trying to follow the "Limiting the connection

Re: Help

Hi, It supports it, just need the right version: http://blog.haproxy.com/haproxy/proxy-protocol/ Baptiste On Tue, Aug 2, 2016 at 11:59 PM, Jeff Palmer wrote: > OK, then you'll need to enable the PROXY protocol in exim assuming it > supports the protocol. > > > > On Tue, Aug 2, 2016 at 5:39 PM

Re: Help

OK, then you'll need to enable the PROXY protocol in exim assuming it supports the protocol. On Tue, Aug 2, 2016 at 5:39 PM, Grégory MARCASSIN - Magic < gmarcas...@magic.fr> wrote: > It s true but i want the real IP of the client so i need this option. > > > > > Le 02/08/2016 à 23:37, Jeff Pal

Re: Help

Hi, Le 02/08/2016 à 23:21, Grégory MARCASSIN - Magic a écrit : Hi, Sorry to ask you something that I can probably find on the internet. :$ But I do not find clearly what I wish. Thank you in advance for your help. I wish to inform exim to support haproxy check: $ Telnet VIP 25 Trying 192.168

Re: Help

It s true but i want the real IP of the client so i need this option. Le 02/08/2016 à 23:37, Jeff Palmer a écrit : I'm not familiar with exim itself, but unless it supports the PROXY protocol, you should probably remove the "send-proxy" part of your bk_postfix backend. On Tue, Aug 2, 2

Re: Help

I'm not familiar with exim itself, but unless it supports the PROXY protocol, you should probably remove the "send-proxy" part of your bk_postfix backend. On Tue, Aug 2, 2016 at 5:21 PM, Grégory MARCASSIN - Magic < gmarcas...@magic.fr> wrote: > Hi, > > Sorry to ask you something that I can pr

Re: Help

Hi, Sorry to ask you something that I can probably find on the internet. :$ But I do not find clearly what I wish. Thank you in advance for your help. I wish to inform exim to support haproxy check: $ Telnet VIP 25 Trying 192.168.56.50 ... Connected to vip. Escape character is '^]'. 554 SMTP s

Re: Help

What specifically are you having issues with, and what are the configurations you have already tried? Just asking someone to do your job for you isn't likely to get a lot of replies. On Tue, Aug 2, 2016 at 4:36 PM, Grégory MARCASSIN - Magic wrote: > Hi, > Sorry to ask ... > > Can you send me

Re: Help! HAProxy randomly failing health checks!

ilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! Ok! Here is a bunch of info that might better assist with the issue: Each of our clients has an HAProxy install that forwards requests for 80 and 443 to 1025 a

Re: Help! HAProxy randomly failing health checks!

ion.com>> Date: Wednesday, March 16, 2016 at 5:01 PM To: Zachary Punches mailto:zpunc...@getcake.com>> Cc: Baptiste mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 10:47 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > > > On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches > wrote: > >> I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 >> routing. If one of the proxy boxes fails 3 checks in 30 seconds

Re: Help! HAProxy randomly failing health checks!

:zpunc...@getcake.com>> Cc: Baptiste mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Thu, Mar 17, 2016 at 12:46 PM, Igor Cicimov mailt

Re: Help! HAProxy randomly failing health checks!

e > yeah? > > From: Igor Cicimov > Date: Wednesday, March 16, 2016 at 4:50 PM > To: Zachary Punches > Cc: Baptiste , "haproxy@formilux.org" < > haproxy@formilux.org> > Subject: Re: Help! HAProxy randomly failing health checks! > > > > On Thu, Mar

Re: Help! HAProxy randomly failing health checks!

gt;>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Thu, Mar 17, 2016 at 12:46 PM, Igor Cicimov mailto:ig...@encompasscorporation.com>> wrote: On Thu, Mar 17, 2

Re: Help! HAProxy randomly failing health checks!

[17/Mar/2016:18:37:06.938] shared_incoming shared_incoming/ > -1/-1/-1/-1/0 400 0 - - CR-- 312/312/0/0/0 0/0 "" > Mar 17 18:37:45 localhost haproxy[28703]: 108.59.8.48:33611 > [17/Mar/2016:18:36:55.938] shared_incoming provedmedia/provedmedia_http > 279/0/0/-1/279 -1 0 - - CD-- 31

Re: Help! HAProxy randomly failing health checks!

tables" is an unknown key >> kernel.msgmnb = 65536 >> kernel.msgmax = 65536 >> kernel.shmmax = 68719476736 >> kernel.shmall = 4294967296 >> >> What would lowering the tune.ssl.default-dh-param to 1024 do? >> From: Igor Cicimov >> Date:

Re: Help! HAProxy randomly failing health checks!

>> Date: Thursday, March 17, 2016 at 4:18 PM >> To: Zachary Punches >> Cc: Baptiste , "haproxy@formilux.org" < >> haproxy@formilux.org> >> Subject: Re: Help! HAProxy randomly failing health checks! >> >> So is port 1027 used for health che

Re: Help! HAProxy randomly failing health checks!

quot; mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! So is port 1027 used for health checks over SSL or not? I don't see any ssl settings on that port.

Re: Help! HAProxy randomly failing health checks!

I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 checks done a second) then Route53 changes its routing from the first proxy box to the second On 3/15/16, 9:46 PM, "Baptiste" wrote: >Maybe you'

Re: Help! HAProxy randomly failing health checks!

entire process before it lights as green. > > Our health checks in route 53 are setup to ping 1027 as the SSL port > > From: Igor Cicimov > Date: Thursday, March 17, 2016 at 4:18 PM > To: Zachary Punches > Cc: Baptiste , "haproxy@formilux.org" < > haproxy@formilu

Re: Help! HAProxy randomly failing health checks!

Punches mailto:zpunc...@getcake.com>> Cc: Baptiste mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Thu, Mar 17, 2016 at 10:55 AM, Zach

Re: Help! HAProxy randomly failing health checks!

nesday, March 16, 2016 at 4:50 PM To: Zachary Punches mailto:zpunc...@getcake.com>> Cc: Baptiste mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks!

Re: Help! HAProxy randomly failing health checks!

g the tune.ssl.default-dh-param to 1024 do? > From: Igor Cicimov > Date: Wednesday, March 16, 2016 at 5:01 PM > To: Zachary Punches > Cc: Baptiste , "haproxy@formilux.org" < > haproxy@formilux.org> > Subject: Re: Help! HAProxy randomly failing health checks! > &g

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches wrote: > I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 > routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 > checks done a second) then Route53 changes its routing from the first proxy > box to the

Re: Help! HAProxy randomly failing health checks!

mailto:ig...@encompasscorporation.com>> Date: Thursday, March 17, 2016 at 8:40 PM To: Zachary Punches mailto:zpunc...@getcake.com>> Cc: Baptiste mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" mailto:haproxy@formilux.org>> Subject

Re: Help! HAProxy randomly failing health checks!

Has ELB changed its IP address??? Maybe you're checking a third party VM :) Baptiste

Re: Help! HAProxy randomly failing health checks!

On Wed, Mar 16, 2016 at 5:54 AM, Zachary Punches wrote: > Hello! > > > > My name is Zack, and I have been in the middle of an on going HAProxy > issue that has me scratching my head. > > > > Here is the setup: > > > > Our setup is hosted by amazon, and our HAProxy (1.6.3) boxes are in each > regi

Re: Help! HAProxy randomly failing health checks!

Greetings, On 03/15/2016 02:54 PM, Zachary Punches wrote: Hello! My name is Zack, and I have been in the middle of an on going HAProxy issue that has me scratching my head. Here is the setup: Our setup is hosted by amazon, and our HAProxy (1.6.3) boxes are in each region in 3 regions. We

Re: Help haproxy

Maybe that is why the clinet ipaddress is forwarded. What is your webserver (ngix/apache) software and what is the "logformat" configuration in it. Regards, Long Wu Yuan 龙 武 缘 Sr. Linux Engineer 高级工程师 ChinaNetCloud 云络网络科技

Re: Help haproxy

Yes, i have just the option that's make gone right. It's just the option as you know. Regards, Mathieu 2015-02-05 10:03 GMT+01:00 Yuan Long : > Do you have the words "option forward for" in your config. > http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20forwardfor > > Can y

Re: Help haproxy

Do you have the words "option forward for" in your config. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20forwardfor Can you copy/paste your config (without sensitive info if needed). Regards, Long

Re: Help haproxy

2015-02-02 16:45 GMT+01:00 Sander Klein : The only other thing that I can think of is that your client is behind a > proxy server which adds the X-Forward-For header for you... > > Or you got something strange in your config... > > Sander > You're totally right. My client have a proxy server. I f

Re: Help haproxy

On 02.02.2015 16:33, Mathieu Sergent wrote: Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i foun

Re: Help haproxy

Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i found my client's address. But this is really stra

Re: Help haproxy

Hi Mathieu, Pleas keep the list in the CC. On 02.02.2015 15:26, Mathieu Sergent wrote: Thanks for your reply. I just used the option forwardfor in the haproxy configuration. And i can find client's address from my web server (with tcpdump). But if i don't use the option forwardfor, the web ser

Re: Help haproxy

Hi, On Mon, Feb 02, Sander Klein wrote: > On 02.02.2015 12:09, Mathieu Sergent wrote: > >Hi, > > > >I try to set up a load balancing with HAProxy and 3 web servers. > >I want to receive on my web servers the address' client. > >I read that it is possible with the option " source ip usesrc " but >

Re: Help haproxy

On 02.02.2015 12:09, Mathieu Sergent wrote: Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option " source ip usesrc " but you need to be root. If you want to not be root, you have

RE: help!

> Ok, I wll compose an email and write to haproxy@formilux.org ? Yes, on every mail, including your responses to me (at least in CC). And please drop your "if you have received this email in error" signature when your a posting, that just looks silly since your mail is public anyway. Regar

RE: help!

Hi Matthew, > I have some basic queries on setting haproxy up for a novice! Just read the documentation and ask here. > Are you aware of any good support forums out there?  No forum, this mailing list is the proper way to ask for help/advice/support haproxy. There is also an irc channel,

Re: Help with dynamic backend selection

- Original Message - > From: "Willy Tarreau" > To: "Rajat Chopra" > Cc: "haproxy" > Sent: Saturday, May 10, 2014 12:01:14 AM > Subject: Re: Help with dynamic backend selection > > On Sat, May 10, 2014 at 07:58:25AM +0200, Willy T

Re: Help with dynamic backend selection

On Sat, May 10, 2014 at 07:58:25AM +0200, Willy Tarreau wrote: > > May I ask about the ETA on this? > > It's too early for me to know, I need to go down deep into the ebtrees first > to > see if longest match is compatible with strings storage-wise, then I need to > study how patterns are built a

Re: Help with dynamic backend selection

On Fri, May 09, 2014 at 07:54:33PM -0400, Rajat Chopra wrote: > > No that much. I'm thinking about something. Maps can retrieve the first > > matching prefix using "map_beg". So if you pass "base" to your map, you'll > > have the host+path on input, and take the first matching prefix. Thus, it > >

Re: Help with dynamic backend selection

> > > Wonder if we could use some pluggable logic for map. e.g. User can provide > > a > > .so with the user defined map function. So my call will become : > > It's still early to do this, there are strict types on the patterns and > their own alloc/release/insert/delete functions. > > > use_ba

Re: Help with dynamic backend selection

Hi Rajat, On Fri, May 09, 2014 at 02:13:47PM -0400, Rajat Chopra wrote: > > Why don't you run that based on ACLs if you're certain that service2 will > > not cause any trouble ? > > > > Eg: > > > > use_backend bk_%[hdr(host),host_to_backend.mapfile]_%[path] if { > > path_beg > > /servic

Re: Help with dynamic backend selection

- Original Message - > From: "Willy Tarreau" > To: "Rajat Chopra" > Cc: "haproxy" > Sent: Friday, May 9, 2014 10:43:32 AM > Subject: Re: Help with dynamic backend selection > > Hi Rajat, > > On Tue, May 06, 2014 at 07:3

Re: Help with dynamic backend selection

Hi Rajat, On Tue, May 06, 2014 at 07:34:34PM -0400, Rajat Chopra wrote: > Hi! > The new feature to dynamically select a backend has been going great for > me. > I use it like this and it all works like a charm : > > use_backend bk_%[hdr(host),host_to_backend.mapfile] if TRUE > > > Now I ne

RE: [Help] How can I use haproxy with ssl

Hi, > My Linux is > [...] > Description: CentOS release 5.10 (Final) > [...] > and Installed openssl-1.0.1e Please decide now: would you like to use the openssl from your repository or do you want to build it on your own? There is no point in troubleshooting 2 different problems at the same time

RE: [Help] How can I use haproxy with ssl

Hi, > but my web server use https (ssl)so load-balancer have to provide > this. download the haproxy-1.5-dev21and make this.but... error... > > src/shctx.o: In function `atomic_dec': > /root/haproxy-1.5-dev21/src/shctx.c:134: undefined reference to > `__sync_sub_and_fetch_4' > src/shctx.o: In fu

RE: help with long connect times and timeout

Hi! > Thank you Lukas  Please always answer to the list also; otherwise other people don't see the new informations. >> I'm using the current defaults and added this to the config:  >  > Can you post the full configuration? The part about timeouts  > is important in this case.  >  > global  >

RE: help with long connect times and timeout

Hi Ricardo, > I'm using the current defaults and added this to the config:  Can you post the full configuration? The part about timeouts is important in this case. Also, please specify what release you are using. > However once I startup haproxy, and I attempt to connect to the proxy > from

  1   2   >