Re: How to test HTTP/3 on version 2.8?

2023-02-24 Thread Willy Tarreau
On Fri, Feb 24, 2023 at 04:52:23PM +0800, AiDai wrote: > I tried to test outside of Docker, but I encountered the same problem. > ``` > curl --http3-only https://0.0.0.0:443 -k -v > * Trying 0.0.0.0:443... > * ipv4 connect timeout after 30ms, move on! > * Failed to connect to 0.0.0.0 port

Re: How to test HTTP/3 on version 2.8?

2023-02-24 Thread AiDai
I tried to test outside of Docker, but I encountered the same problem. ``` curl --http3-only https://0.0.0.0:443 -k -v * Trying 0.0.0.0:443... * ipv4 connect timeout after 30ms, move on! * Failed to connect to 0.0.0.0 port 443 after 300357 ms: Timeout was reached * Closing connection 0 curl:

MQTT mqtt_field_value for CONNACK messages

2023-02-24 Thread Noureddine El Saidi
I'm using HAProxy as a proxy for MQTT connections, and I'm looking to add data from the MQTT CONNACK message (from the server) to my logs. I have tried the following, however the result is empty ("") tcp-response inspect-delay 5s tcp-response content set-var(txn.pv)

Re: How to test HTTP/3 on version 2.8?

2023-02-24 Thread AiDai
``` global log /dev/log local0 info pidfile /var/run/haproxy.pid stats socket /var/run/haproxy/api.sock mode 660 level admin stats timeout 30s ssl-load-extra-del-ext ssl-load-extra-files key defaults log global mode http option httplog option dontlognull timeout connect 10m

AND OR priority when forming conditions

2023-02-24 Thread Arnall
Hello everyone, I have been using Haproxy for years but I still have trouble understanding this part of the documentation: 7.2. Using ACLs to form conditions A condition is formed as a disjunctive form:    [!]acl1 [!]acl2 ... [!]acln  { or [!]acl1 [!]acl2 ... [!]acln } ... first it does

Re: Host header not copied to :authority when using a proto h2 backend

2023-02-24 Thread Willy Tarreau
Hello, On Fri, Feb 24, 2023 at 02:19:30PM +0100, Óscar Frías Barranco wrote: > Hello > > I am using haproxy 2.4.18 with a frontend configured with alpn h2,http/1.1 > > The problem that I am facing is that if I add "proto h2" to the backends, > when a remote client connects to the frontend using

Host header not copied to :authority when using a proto h2 backend

2023-02-24 Thread Óscar Frías Barranco
Hello I am using haproxy 2.4.18 with a frontend configured with alpn h2,http/1.1 The problem that I am facing is that if I add "proto h2" to the backends, when a remote client connects to the frontend using HTTP 1.1, the request is sent to the backend server without copying the "Host" header to

RE: Marketing list RSA 2023

2023-02-24 Thread Teresa Turner
Hi, I hope my emails are reaching your inbox! If are you still interested to acquire the attendee contacts! I can get back to you with pricing and counts. Regards, Teresa Turner Event coordinator From: Teresa Turner Sent: Thursday, February 16, 2023 10:55 AM To: haproxy@formilux.org Subject:

Re: Host header not copied to :authority when using a proto h2 backend

2023-02-24 Thread Óscar Frías Barranco
Hello Willy. Thank you very much for the detailed answer. I have reported this in Jetty issue tracker, I hope they can support this use case: https://github.com/eclipse/jetty.project/issues/9436 Kind regards, Óscar On Fri, Feb 24, 2023 at 2:44 PM Willy Tarreau wrote: > Hello, > > On Fri,

Re: Can you block this?

2023-02-24 Thread Bryan Arenal
On Fri, Feb 24, 2023 at 12:33 AM Willy Tarreau wrote: > > On Fri, Feb 24, 2023 at 05:39:13AM +, Robin H. Johnson wrote: > > On Thu, Feb 23, 2023 at 06:48:14PM -0700, Bryan Arenal wrote: > > > Hi there, > > > > > > I'm seeing some traffic from what appears to be bad actors and am > > > wanting

Re: Can you block this?

2023-02-24 Thread Willy Tarreau
On Fri, Feb 24, 2023 at 10:18:14AM -0700, Bryan Arenal wrote: > And would this work to reject any request that has the > 'X-Forwarded-For' header? > > acl is-forwarded hdr_sub(x-forwarded-for) > http-request reject if is-forwarded No, not like this, as you're searching for sub-strings in

[PR] BUG/MINOR: http-fetch: recognize IPv6 addresses in square brackets in req.hdr_ip()

2023-02-24 Thread PR Bot
Dear list! Author: Oto Valek Number of patches: 2 This is an automated relay of the Github pull request: BUG/MINOR: http-fetch: recognize IPv6 addresses in square brackets in req.hdr_ip() Patch title(s): BUG/MINOR: http-fetch: recognize IPv6 addresses in square brackets in