vtest update

2019-03-06 Thread Frederic Lecaille
Hello ML, We have recently modified some reg tests which require an update for vtest, especially these ones: reg-tests/peers/s_basic_sync.vtc (added) reg-tests/peers/s_tls_basic_sync.vtc (added) reg-tests/http-messaging/h0.vtc(modified) So, if some reg tests fail

Re: QAT intermittent healthcheck errors

2019-03-06 Thread Marcin Deranek
Hi, On 3/6/19 6:36 PM, Emeric Brun wrote: To avoid this issue, you should ensure to use QAT only for the asymmetric computing algorithm (such as RSA DSA ECDSA). and not for ciphering ones (AES and everything else ...) The ssl engine statement allow you to filter such algos: ssl-engine

Re: QAT intermittent healthcheck errors

2019-03-06 Thread Emeric Brun
Hi Marcin, On 3/6/19 3:23 PM, Marcin Deranek wrote: > Hi, > > In a process of evaluating performance of Intel Quick Assist Technology in > conjunction with HAProxy software I acquired Intel C62x Chipset card for > testing. I configured QAT engine in the following manner: > > *

QAT intermittent healthcheck errors

2019-03-06 Thread Marcin Deranek
Hi, In a process of evaluating performance of Intel Quick Assist Technology in conjunction with HAProxy software I acquired Intel C62x Chipset card for testing. I configured QAT engine in the following manner: * /etc/qat/c6xx_dev[012].conf [GENERAL] ServicesEnabled = cy ConfigVersion = 2

Re: read async auth date from file

2019-03-06 Thread Baptiste
Hi Jeff, If the file is only stored in the FS and you can't put its content into HAProxy's memory at run time (using a map as explained by Jarno), then you may want to use SPOE. So the blocking files IO will be done in a process running outside of HAProxy. You have an SPOA (agent) example in

Re: read async auth date from file

2019-03-06 Thread Jarno Huuskonen
Hi, On Sun, Mar 03, Jeff wrote: > I need to add an authorization header for a target server, e.g. >http-request add-header Authorization Bearer\ MYTOKENDATA > > where MYTOKENDATA is read from a file for each proxy message. Does this mean that each http request needs to read the MYTOKENDATA