Re: Forcing SSL encryption (a.k.a. 'redirect' keyword not recognised)

2009-04-03 Thread Willy Tarreau
Hi, On Fri, Apr 03, 2009 at 10:44:37PM +0300, John Doe wrote: > I added the following two lines into the config file: > acl stunnel src 10.0.0.100/32 # > Stunnel > uses 10.0.0.100 > redirect prefix https://www.website.com unless stunnel # If the > re

Re: tcp proxy

2009-04-03 Thread Willy Tarreau
Hi Nicolas, On Fri, Apr 03, 2009 at 10:29:32PM -0300, Nicolas Cohen wrote: > hi, > > i want to use haproxy to load balance a virtual world app we are > developing in java, > > the app server benefits if most connected users in one particular > machine are in the same regions of the virtual w

Re: patch: nested acl evaluation

2009-04-03 Thread Jeffrey 'jf' Lim
On Fri, Apr 3, 2009 at 3:11 PM, Willy Tarreau wrote: > On Fri, Apr 03, 2009 at 01:37:53PM +0800, Jeffrey 'jf' Lim wrote: >> > OK. Just so that I get an idea, how many use_backend rules (and how many >> > backends) do you have in a large config ? I'm asking because I want to be >> > able to support

tcp proxy

2009-04-03 Thread Nicolas Cohen
hi, i want to use haproxy to load balance a virtual world app we are developing in java, the app server benefits if most connected users in one particular machine are in the same regions of the virtual world (less objects need to be referrenced and caching strategies are more efficient) i

RE: Forcing SSL encryption (a.k.a. 'redirect' keyword not recognised)

2009-04-03 Thread John Doe
# Stunnel uses 10.0.0.100 redirect prefix https://www.website.com unless stunnel# If the request doesn't originate from Stunnel, it is redirected And this simple approach seems to work alright. For some reason acl stunnel src 10.0.0.0/8 doesn't seem to work (with ve

Re: patch: nested acl evaluation

2009-04-03 Thread Willy Tarreau
On Fri, Apr 03, 2009 at 01:37:53PM +0800, Jeffrey 'jf' Lim wrote: > > OK. Just so that I get an idea, how many use_backend rules (and how many > > backends) do you have in a large config ? I'm asking because I want to be > > able to support ACL files and rules files, and the way to implement them >