Re: Makefile.bsd'd SYSTEM_MAXCONN=1024 ?

2011-09-27 Thread carlo flores
Thanks much Willy. We are moving forward with commenting this out in our installs, FYI. On Monday, September 26, 2011, Willy Tarreau w...@1wt.eu wrote: Hi Carlo, On Mon, Sep 26, 2011 at 04:18:38PM -0700, carlo flores wrote: Just wondering if this is enabled in Makefile.bsd for a particular

BAD REQUEST

2011-09-27 Thread maynardkeenan
Hello HAProxy community ! Do you think that HAProxy can block a request if spaces (and not %20) are located in the URI ? HAProxy.log: NOSRV -1/-1/-1/-1/0 400 87 - - PRNN 0/0/0/0/0 0/0 BADREQ The url is like this :

Source based session stickyness

2011-09-27 Thread Brane F. Gračnar
Hello! Is there a possibility to use source-based session stickyness when same backend is shared between many frontends, some with ipv6, some with ipv4 listeners? Something like: frontend FE4 bind 127.0.0.1:8001 accept-proxy default_backend BACK frontend FE6 bind

Re: BAD REQUEST

2011-09-27 Thread Willy Tarreau
Hello Vivien, On Tue, Sep 27, 2011 at 04:40:34PM +0200, maynardkee...@free.fr wrote: Hello HAProxy community ! Do you think that HAProxy can block a request if spaces (and not %20) are located in the URI ? HAProxy.log: NOSRV -1/-1/-1/-1/0 400 87 - - PRNN 0/0/0/0/0 0/0 BADREQ The

Re: Source based session stickyness

2011-09-27 Thread Willy Tarreau
Hi Brane, On Tue, Sep 27, 2011 at 07:27:34PM +0200, Brane F. Gra??nar wrote: Hello! Is there a possibility to use source-based session stickyness when same backend is shared between many frontends, some with ipv6, some with ipv4 listeners? Something like: frontend FE4 bind

TPROXY + Hearbeat

2011-09-27 Thread Jason J. W. Williams
Hello, Is anyone running redundant HAProxy servers that use TPROXY for transparent proxying (preserve source IP) and use Heartbeat for failover of VIPs and shared interface IPs? We're curious if you run into issues due to combination of shared IPs and TPROXY? Thank you in advance. -J

Log host info with uri

2011-09-27 Thread John Lauro
Is there an easy way to have haproxy log the host with the uri instead of just the relative uri? I have some 503 errors, and they are going to virtual hosts on the backend and I am having some trouble tracking them down. and the uri isn't specific enough as it is common among multiple hosts.

Re: Log host info with uri

2011-09-27 Thread Baptiste
You might want to use capture request header host len 64 cheers On Tue, Sep 27, 2011 at 11:46 PM, John Lauro john.la...@covenanteyes.com wrote: Is there an easy way to have haproxy log the host with the uri instead of just the relative uri?  I have some 503 errors, and they are going to

RE: TPROXY + Hearbeat

2011-09-27 Thread John Lauro
Works great. I have several pairs of vm haproxy servers in transparent mode and running heartbeat to take over the shared IP. -Original Message- From: Jason J. W. Williams [mailto:jasonjwwilli...@gmail.com] Sent: Tuesday, September 27, 2011 3:46 PM To: haproxy@formilux.org

Re: TPROXY + Hearbeat

2011-09-27 Thread Jason J. W. Williams
Hey John, Thanks for the quick response. That's great to know. So both the VIPs and the shared IP your backends use as their default gateway fail over well? Is your HAProxy pair the actual network boundary box between the subnets, or is it just the default gateway for your backends and the pair

RE: TPROXY + Hearbeat

2011-09-27 Thread John Lauro
As an example setup for some of systems: My haresources file has: hawebcl1 IPaddr2::xx.xx.xx.77/24/eth0 Actual IPs are xx.xx.xx.78 and xx.xx.xx.79 on the haproxy boxes. The real gateway is .1. So both haproxy hosts have the mangle setup for tproxy, gateway as .1, etc... All the backend

RE: Log host info with uri

2011-09-27 Thread John Lauro
Thanks, that worked. -Original Message- From: Baptiste [mailto:bed...@gmail.com] Sent: Tuesday, September 27, 2011 6:02 PM To: John Lauro Cc: haproxy@formilux.org Subject: Re: Log host info with uri You might want to use capture request header host len 64 cheers On Tue, Sep

RE: TPROXY + Hearbeat

2011-09-27 Thread John Lauro
Sorry, should have been like instead of link, and the next sentence didn't make much sense as-is... In summary, I meant to say that it is a relatively simple setup as long as everything is using standard public IPs. If you are doing NAT, or anycast it is a little more complex setup, but can

Re: TPROXY + Hearbeat

2011-09-27 Thread Willy Tarreau
Hi John, On Tue, Sep 27, 2011 at 07:39:50PM -0400, John Lauro wrote: As an example setup for some of systems: My haresources file has: hawebcl1 IPaddr2::xx.xx.xx.77/24/eth0 Actual IPs are xx.xx.xx.78 and xx.xx.xx.79 on the haproxy boxes. The real gateway is .1. So both haproxy

Re: status of master/worker model in 1.5

2011-09-27 Thread Simon Horman
On Mon, Sep 19, 2011 at 12:13:14PM -0400, Adam Kocoloski wrote: Hi all, Simon Horman posted a patch set back in March that enabled haproxy to reload its configuration without refusing connections. I don't think the patches have been merged yet -- are they on track for the 1.5 release?