RE: http-keep-alive broken?

2014-01-28 Thread Lukas Tribus
Hey guys, Do you still want me to bisect? Or should I wait? If you think the problem is the same I'll just test the fix :-) Don't waste your time bisecting. I'll propose you to test the patch instead. The problem I've seen is always the same and is related to the fact that the SSL layer

Re: http-keep-alive broken?

2014-01-28 Thread Willy Tarreau
Hi Lukas, On Tue, Jan 28, 2014 at 08:24:39PM +0100, Lukas Tribus wrote: Hey guys, Do you still want me to bisect? Or should I wait? If you think the problem is the same I'll just test the fix :-) Don't waste your time bisecting. I'll propose you to test the patch instead. The

Re: http-keep-alive broken?

2014-01-10 Thread Willy Tarreau
Hi Sander, On Fri, Jan 10, 2014 at 08:57:18AM +0100, Sander Klein wrote: Hi, I'm sorry you haven't heard from me yet. But I didn't have time to look into this issue. Hope to do it this weekend. Don't rush on it, Baptiste has reported to me a reproducible issue on his lab which seems to

Re: http-keep-alive broken?

2014-01-10 Thread Sander Klein
Heyz, On 10.01.2014 09:14, Willy Tarreau wrote: Hi Sander, On Fri, Jan 10, 2014 at 08:57:18AM +0100, Sander Klein wrote: Hi, I'm sorry you haven't heard from me yet. But I didn't have time to look into this issue. Hope to do it this weekend. Don't rush on it, Baptiste has reported to me

Re: http-keep-alive broken?

2014-01-10 Thread Willy Tarreau
On Fri, Jan 10, 2014 at 10:47:51AM +0100, Sander Klein wrote: Heyz, On 10.01.2014 09:14, Willy Tarreau wrote: Hi Sander, On Fri, Jan 10, 2014 at 08:57:18AM +0100, Sander Klein wrote: Hi, I'm sorry you haven't heard from me yet. But I didn't have time to look into this issue. Hope to

Re: http-keep-alive broken?

2014-01-09 Thread Sander Klein
Hi, I'm sorry you haven't heard from me yet. But I didn't have time to look into this issue. Hope to do it this weekend. Greets, Sander

Re: http-keep-alive broken?

2014-01-06 Thread Willy Tarreau
Hi guys, On Sun, Jan 05, 2014 at 09:36:03PM +0100, Lukas Tribus wrote: Hi, Disabling epoll doesn't fix it... drat... Tested it with ss-20140104. Could it be that it's a more subtle bug somewhere else? If disabling epoll doesn't workaround that problem then another patch must be the

Re: http-keep-alive broken?

2014-01-06 Thread Sander Klein
On 06.01.2014 15:10, Willy Tarreau wrote: I would go even further (using git). What I understand here is that the issue was introduced after the epoll optimization and is hidden by this one. So I'd rather start by reverting that patch and then looking up for another faulty patch after those :

Re: http-keep-alive broken?

2014-01-06 Thread Willy Tarreau
On Mon, Jan 06, 2014 at 06:21:47PM +0100, Sander Klein wrote: On 06.01.2014 15:10, Willy Tarreau wrote: I would go even further (using git). What I understand here is that the issue was introduced after the epoll optimization and is hidden by this one. So I'd rather start by reverting that

RE: http-keep-alive broken?

2014-01-05 Thread Lukas Tribus
Hi, Well, after spending some time compiling testing compiling testing I finally found that the patch 0103-OPTIM-MEDIUM-epoll-fuse-active-events-into--1.5-dev19.diff done between 20131115 and 20131116 is causing my problems. I also found that this problem is much easier to reproduce on

RE: http-keep-alive broken?

2014-01-05 Thread Sander Klein
Hey, On 05.01.2014 17:33, Lukas Tribus wrote: Hi, Well, after spending some time compiling testing compiling testing I finally found that the patch 0103-OPTIM-MEDIUM-epoll-fuse-active-events-into--1.5-dev19.diff done between 20131115 and 20131116 is causing my problems. I also found that

RE: http-keep-alive broken?

2014-01-05 Thread Lukas Tribus
Hi, Disabling epoll doesn't fix it... drat... Tested it with ss-20140104. Could it be that it's a more subtle bug somewhere else? If disabling epoll doesn't workaround that problem then another patch must be the reason for this. But, Yes, that is correct. 20131115 works and 2013116

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Heyz, On 03.01.2014 22:52, Lukas Tribus wrote: Hi, The problem I'm having (also tested with ss-20140101 yesterday) happens with http-keep-alive enabled and also when just running in tunnel mode. But, when http-keep-alive is enabled I get the problem with ~98% of the requests and in tunnel

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Hey, On 03.01.2014 22:52, Lukas Tribus wrote: You said that one of your backends is exchange 2012. What release are the other ntlm-auth backends exactly and is the issue the same on all of them? All backends are windows 2012 with the standard IIS that comes with it. I have the problem on

Re: http-keep-alive broken?

2014-01-03 Thread Sander Klein
Hi Baptiste, Lukas, @Lukas: Sorry I misread your tunnel-mode for tcp-mode. Tunnel-mode works (almost) fine as you can read below. I have been investigating my problem a bit more, and then I remembered that I also updated haproxy a week before we started using our new Windows 2012 servers.

Re: http-keep-alive broken?

2014-01-03 Thread Baptiste
Hi Sander, In my configuration, I enabled option http-keep-alive in the default section, that way, it is applied to all next frontend and backend. Then you can disable it locally by prefixing the same option by no. And it works :) I've attached to this mail, the log session showing myself

RE: http-keep-alive broken?

2014-01-03 Thread Lukas Tribus
Hi, The problem I'm having (also tested with ss-20140101 yesterday) happens with http-keep-alive enabled and also when just running in tunnel mode. But, when http-keep-alive is enabled I get the problem with ~98% of the requests and in tunnel mode I get it with ~10% of the requests.

RE: http-keep-alive broken?

2014-01-02 Thread Sander Klein
On 31.12.2013 00:50, Lukas Tribus wrote: Hi, Subject: http-keep-alive broken? Hi, I'm using haproxy ss-20131229 to reverse proxy some windows iis server with ntlm-auth enabled (one of them being exchange 2012). While I understood that using 'option http-keep-alive' would make ntlm-auth work,

Re: http-keep-alive broken?

2014-01-02 Thread Baptiste
Sander, I successfully use mode http-keep-alive in my lab for outlook clients getting connected to an exchange 2010 cluster with RPC over HTTP and NTLM auth. So please share here your configuration, so we can have a look at it. Baptiste On Thu, Jan 2, 2014 at 9:16 PM, Sander Klein

RE: http-keep-alive broken?

2014-01-02 Thread Lukas Tribus
Hi, Wile I do agree that using tcp-mode would make stuff easier, I also need to do some redirecting on the host-header. Which is AFAIK not possible while in tcp-mode. (I might be wrong) No, I really meant http mode, but in the (default) tunneling mode, which can only analyze the first

RE: http-keep-alive broken?

2013-12-30 Thread Lukas Tribus
Hi, Subject: http-keep-alive broken? Hi, I'm using haproxy ss-20131229 to reverse proxy some windows iis server with ntlm-auth enabled (one of them being exchange 2012). While I understood that using 'option http-keep-alive' would make ntlm-auth work, it doesn't work for me. Are there

Re: http-keep-alive broken?

2013-12-30 Thread Thomas Heil
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On 31.12.2013 00:50, Lukas Tribus wrote: Hi, Subject: http-keep-alive broken? Hi, I'm using haproxy ss-20131229 to reverse proxy some windows iis server with ntlm-auth enabled (one of them being exchange 2012). While I understood

Re: http-keep-alive broken?

2013-12-30 Thread Willy Tarreau
On Tue, Dec 31, 2013 at 03:22:43AM +0100, Thomas Heil wrote: While I understood that using 'option http-keep-alive' would make ntlm-auth work, it doesn't work for me. Are there still some issue with http-keep-alive and ntlm-auth? Honestly I would just use the default tunnel mode for