Certificate order

2017-04-06 Thread Sander Hoentjen
Hi guys, We have a setup where we sometimes have multiple certificates for a domain. We use multiple directories for that and would like the following behavior: - Look in dir A for any match, use it if found - Look in dir B for any match, use it if found - Look in dir .. etc This works great, exc

Re: ssl & default_backend

2017-04-06 Thread Antonio Trujillo Carmona
El 03/04/17 a las 19:12, PiBa-NL escribió: Hi Antonio, Op 3-4-2017 om 13:29 schreef Antonio Trujillo Carmona: It's well documented that Windows XP with Internet Explorer don't support sni, so I try to redirect call

Re: Certificate order

2017-04-06 Thread Sander Klein
Hi Sander, On 2017-04-06 10:45, Sander Hoentjen wrote: Hi guys, We have a setup where we sometimes have multiple certificates for a domain. We use multiple directories for that and would like the following behavior: - Look in dir A for any match, use it if found - Look in dir B for any match, u

Re: HaProxy Hang

2017-04-06 Thread Mark S
On Mon, 03 Apr 2017 12:45:57 -0400, Dave Cottlehuber wrote: On Mon, 13 Mar 2017, at 13:31, David King wrote: Hi All Apologies for the delay in response, i've been out of the country for the last week Mark, my gut feeling is that is network related in someway, so thought we could comp

[RFC][PATCHES] seamless reload

2017-04-06 Thread Olivier Houchard
Hi, The attached patchset is the first cut at an attempt to work around the linux issues with SOREUSEPORT that makes haproxy refuse a few new connections under heavy load. This works by transferring the existing sockets to the new process via the stats socket. A new command-line flag has been adde

Re: [RFC][PATCHES] seamless reload

2017-04-06 Thread Pavlos Parissis
On 06/04/2017 04:25 μμ, Olivier Houchard wrote: > Hi, > > The attached patchset is the first cut at an attempt to work around the > linux issues with SOREUSEPORT that makes haproxy refuse a few new connections > under heavy load. > This works by transferring the existing sockets to the new process

Re: [RFC][PATCHES] seamless reload

2017-04-06 Thread Olivier Houchard
On Thu, Apr 06, 2017 at 04:56:47PM +0200, Pavlos Parissis wrote: > On 06/04/2017 04:25 μμ, Olivier Houchard wrote: > > Hi, > > > > The attached patchset is the first cut at an attempt to work around the > > linux issues with SOREUSEPORT that makes haproxy refuse a few new > > connections > > unde

[PATCH] DOC: stick-table is available in frontend sections

2017-04-06 Thread Adam Spiers
Fix the proxy keywords matrix to reflect that it's permitted to use stick-table in frontend sections. Signed-off-by: Adam Spiers --- doc/configuration.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 81b641e..05f0701 1006

[PATCH] BUILD: fix for non-transparent builds

2017-04-06 Thread Steven Davidovitz
Broke in dba9707713eb49a39b218f331c252fb09494c566. --- src/server.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/server.c b/src/server.c index 23343d86..536bf853 100644 --- a/src/server.c +++ b/src/server.c @@ -1742,12 +1742,14 @@ int parse_server(const char *file, int linenum, char