[PATCH] BUG/MINOR: log: properly format IPv6 address when LOG_OPT_HEXA modifier is used.

In lf_ip(), when LOG_OPT_HEXA modifier is used, there is a code to format the IP address as a hexadecimal string. This code does not properly handle cases when the IP address is IPv6. In such case, the code only prints ``. This patch adds support for IPv6. For legacy IPv4, the format

Re: [PATCH] ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites

Hi Pierre, On 3/21/19 5:15 PM, Pierre Cheynier wrote: > Any attempt to put TLS 1.3 ciphers on servers failed with output 'unable > to set TLS 1.3 cipher suites'. > > This was due to usage of SSL_CTX_set_cipher_list instead of > SSL_CTX_set_ciphersuites in the TLS 1.3 block (protected by >

[PATCH] MINOR: ssl: Add aes_gcm_dec converter

The converter can be used to decrypt the raw byte input using the AES-GCM algorithm, using provided nonce, key and AEAD tag. This can be useful to decrypt encrypted cookies for example and make decisions based on the content. --- doc/configuration.txt | 11 src/ssl_sock.c| 140

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

I've just renamed the converter based on Emeric's suggestion. And fixed a typo in the doc of course. Regards, Nenad

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

On 3/22/19 12:04 PM, Nenad Merdanovic wrote: > I've just renamed the converter based on Emeric's suggestion. And fixed a > typo in the doc of course. > > Regards, > Nenad > Thanks Nenad, well done! R, Emeric

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

Hi Nenad, On Fri, Mar 22, 2019 at 12:02:24PM +0100, Nenad Merdanovic wrote: > The converter can be used to decrypt the raw byte input using the > AES-GCM algorithm, using provided nonce, key and AEAD tag. This can > be useful to decrypt encrypted cookies for example and make decisions > based on

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

Hmmm sorry, but I'm getting this here : CC src/ssl_sock.o src/ssl_sock.c: In function 'sample_conv_aes_gcm_dec': src/ssl_sock.c:9166:27: error: 'EVP_CTRL_AEAD_SET_IVLEN' undeclared (first use in this function) src/ssl_sock.c:9166:27: note: each undeclared identifier is reported only once

Re: [PATCH] ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites

On Fri, Mar 22, 2019 at 11:26:31AM +0100, Emeric Brun wrote: > Hi Pierre, > > On 3/21/19 5:15 PM, Pierre Cheynier wrote: > > Any attempt to put TLS 1.3 ciphers on servers failed with output 'unable > > to set TLS 1.3 cipher suites'. > > > > This was due to usage of SSL_CTX_set_cipher_list

Re: [PATCH] BUG/MINOR: log: properly format IPv6 address when LOG_OPT_HEXA modifier is used.

Hi Radek, On Fri, Mar 22, 2019 at 10:21:54AM +, Radek Zajic wrote: > In lf_ip(), when LOG_OPT_HEXA modifier is used, there is a code to format the > IP address as a hexadecimal string. This code does not properly handle cases > when the IP address is IPv6. In such case, the code only prints

Re: High p99 latency with HAProxy 1.9 in http mode compared to 1.8

Hey Willy, Thats great news. Thanks for the quick action. I will verify and get back. Thanks, Ashwin On Fri, Mar 22, 2019 at 10:19 AM Willy Tarreau wrote: > Hi Ashwin, > > We have found the root cause of this. The H2 streams were not getting > the fairness they deserved due to their wake-up

Re: High p99 latency with HAProxy 1.9 in http mode compared to 1.8

Hi Ashwin, We have found the root cause of this. The H2 streams were not getting the fairness they deserved due to their wake-up ordering : it happened very often that a stream interrupted on a ux buffer full condition could be placed at the end of the list and/or its place preempted by another

??????Found a bug in haproxy.init

-- ?? E-mail??m...@zhaoyanan.cn -- -- ??: ""; : 2019??3??22??(??) 4:09 ??: "simon.matter"; : Found a bug in haproxy.init ??