Re: [PATCH 1/1]: BUILD/MEDIUM: tcp_sample porting get_tcp_info to macOs

2022-04-10 Thread Willy Tarreau
Hi David, On Sat, Apr 09, 2022 at 02:44:54PM +0100, David CARLIER wrote: > Hi, > > here a patch proposal to port a subset of the get_tcp_info samples to macOs. Thanks, that's quite interesting, but I really don't like the reordering of the functions to try to group between OSes, for me this is

Re: [PATCH 1/2] CI: Update to actions/checkout@v3

2022-04-10 Thread Willy Tarreau
On Sat, Apr 09, 2022 at 10:08:41PM +0200, Tim Duesterhus wrote: > No functional change, but we should keep this current. (...) both patches applied, thank you Tim! Willy

Re: QUIC and HTTP/3

2022-04-10 Thread Willy Tarreau
Hi Shawn, responding to all your messages at once. On Sun, Apr 10, 2022 at 04:16:55PM -0600, Shawn Heisey wrote: > On 4/9/2022 3:30 AM, Willy Tarreau wrote: > > I'd encourage you to place QUIC in a separate haproxy process. > > I have this working. > > On another system where things are less

Re: [PATCH 1/1]: pool UAF pools ID setting on Linux 5.17 and onwards.

2022-04-10 Thread Willy Tarreau
Hi David, On Sun, Apr 10, 2022 at 10:51:27AM +0100, David CARLIER wrote: > From 7f599d96c248ea6b7a67168ea68b31470c08b61d Mon Sep 17 00:00:00 2001 > From: David Carlier > Date: Sun, 10 Apr 2022 10:47:16 +0100 > Subject: [PATCH] BUILD/MEDIUM: pool UAF's pool set an id on Linux 5.17 and > onwards.

Re: [PATCH] doc: adjust QUICTLS part

2022-04-10 Thread Willy Tarreau
On Sun, Apr 10, 2022 at 12:14:23PM +0500, ??? wrote: > Hello, > > small fix for guide how to build QUICTLS Applied, thank you Ilya! Willy

[PATCH] doc: adjust QUICTLS part

2022-04-10 Thread Илья Шипицин
Hello, small fix for guide how to build QUICTLS Ilya From 3ffd8d1b8d54f5dccd04d2cee6069e2d89d249ec Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 10 Apr 2022 12:09:31 +0500 Subject: [PATCH] DOC: adjust QUIC instruction in INSTALL enable-tls1_3 is default, no need to specify it. make

[PATCH 1/1]: pool UAF pools ID setting on Linux 5.17 and onwards.

2022-04-10 Thread David CARLIER
Hi, Here a little patch for the use-after-free memory pool, allowing to identify them. Kind regards. From 7f599d96c248ea6b7a67168ea68b31470c08b61d Mon Sep 17 00:00:00 2001 From: David Carlier Date: Sun, 10 Apr 2022 10:47:16 +0100 Subject: [PATCH] BUILD/MEDIUM: pool UAF's pool set an id on Linux

Re: [EXTERNAL] Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 3:41 AM, Frederic Lecaille wrote: Here is a "bind" line example (SSL must be enable as for TCP) for a QUIC/h3 listener: bind quic4@ ssl crt proto quic alpn h3 Frederic is replying only to me, not including the list. I'm following the advice from Willy to put quic handling

Re: [EXTERNAL] Re: QUIC and HTTP/3

2022-04-10 Thread Frederic Lecaille
On 4/10/22 16:09, Shawn Heisey wrote: > On 4/10/2022 3:41 AM, Frederic Lecaille wrote: >> Here is a "bind" line example (SSL must be enable as for TCP) for a >> QUIC/h3 listener: >> >> bind quic4@ ssl crt proto quic alpn h3 > > Frederic is replying only to me, not including the list. Ooop,

Re: [EXTERNAL] Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 8:09 AM, Shawn Heisey wrote: I still have config errors. I figured out why I was getting those errors.  When I stated that the build worked, I had done the "make" command manually.  Then I updated my script and ran that to build and install haproxy. Turns out that I made a

Re: [EXTERNAL] Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 10:19 AM, Shawn Heisey wrote: After a whole bunch of OTHER config issues dealt with, I now have the following website using http3.  Green lightning bolt in Chrome and orange in Firefox. I get a green lightning bolt in both chrome and firefox now.  Not sure why it was orange in

Re: [EXTERNAL] Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 10:38 AM, Shawn Heisey wrote: Now that I've dealt with all the problems, I'm having fun with it.  Thanks to all who provided help on getting QUIC working. I spoke a little too soon. When I would visit the stats URL, I only got the 2.4.15 page, not the newer one.  I thought I

Possible bug in stats page dark mode

2022-04-10 Thread Shawn Heisey
On the dark mode stats page served by version 2.6-dev5, the frontend or backend description is grey text on a white background.  It's very hard to read. This problem can't be seen on stats.haproxy.org, possibly because the frontend and backend configs do not have any descriptions. Thanks,

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/9/2022 3:30 AM, Willy Tarreau wrote: I'd encourage you to place QUIC in a separate haproxy process. I have this working. On another system where things are less important, I want to try and run it all in one haproxy process.  Is that doable? I added the new bind line, put the alt-svc

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 4:16 PM, Shawn Heisey wrote: I have this working. I *DID* have it working.  It seems to have stopped working and I do not know what I did to break it. :)  The http/3 checker page still says everything's OK.

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 4:35 PM, Shawn Heisey wrote: I *DID* have it working.  It seems to have stopped working and I do not know what I did to break it. :)  The http/3 checker page still says everything's OK. Ah, I figured it out!  It seems that ssl_fc is not set to true for encrypted quic

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 4:48 PM, Shawn Heisey wrote: I think that's probably a bug.  A workaround could maybe be found, if there is another condition I can use for the redirect that will redirect tcp/80 connections but not tcp/443 or udp/443. I did think of a workaround.  I can set up another frontend

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 5:51 PM, John Lauro wrote: If you always redirect 80 to 443 then you could do a separate frontend for port 80 that always redirects (one simple rule) then you don't need to duplicate the rules.  If you have some sites you allow http, then the duplicates could get annoying,

Re: QUIC and HTTP/3

2022-04-10 Thread Shawn Heisey
On 4/10/2022 5:54 PM, Shawn Heisey wrote: That would be a much simpler setup than duplicating the entire front end so one handles TCP and the other UDP.  I will do that. And if a future version enables ssl_fc for quic with TLS, I can drop that frontend. This is what I have done for that