Re: redirect prefix, use variable host

2012-05-23 Thread Finn Arne Gangstad
On Thu, May 17, 2012 at 2:41 PM, Willy Tarreau w...@1wt.eu wrote: Hi, On Wed, May 16, 2012 at 05:05:05PM +0200, hapr...@serverphorums.com wrote: I think I am in this exact same boat. I have a site with wildcard subdomains as well. Is there an ETA on this this pattern extraction? I browsed

Re: SSL farm

2012-05-23 Thread Hervé COMMOWICK
Or you may use PROXY protocol and set send-proxy in your haproxy configuration and ask stud to merge this : https://github.com/bumptech/stud/pull/81 Hervé. On 05/22/2012 05:48 PM, Allan Wind wrote: I read through the last 6 months of archive and the usual answer for SSL support is put

Comments on proposed config for compartmentalised testing

2012-05-23 Thread Ben Tisdall
Dear list, first of all apologies if this is a re-post - I've had no reply since sending this on 2012-05-21 and having lurked on the list for a few months now that seems unusual. I can't check whether the message hit the list because the archive contains no recent posts. Anyway, I'd appreciate

No PID file when running in foreground

2012-05-23 Thread Chad Gatesman
Is there a major reason the -p option to generate a pid file is ignored when running haproxy the foreground (e.g. using -db)? It would be nice if this file was still generated when specified--even in foreground mode. Could this be something that could be changed in a future releases? The change

Re: SSL farm

2012-05-23 Thread Allan Wind
On 2012-05-23 11:42:24, Hervé COMMOWICK wrote: Or you may use PROXY protocol and set send-proxy in your haproxy configuration and ask stud to merge this : https://github.com/bumptech/stud/pull/81 This is the single ssl server configuration that I explicitly wanted to avoid. Right? /Allan

Re: SSL farm

2012-05-23 Thread Hervé COMMOWICK
No, you may have multiple stud. On 05/23/2012 04:12 PM, Allan Wind wrote: On 2012-05-23 11:42:24, Hervé COMMOWICK wrote: Or you may use PROXY protocol and set send-proxy in your haproxy configuration and ask stud to merge this : https://github.com/bumptech/stud/pull/81 This is the single ssl

Re: SSL farm

2012-05-23 Thread Allan Wind
On 2012-05-23 16:21:35, Hervé COMMOWICK wrote: No, you may have multiple stud. And how do you load balance between them? DNS round robin is not good enough. /Allan -- Allan Wind Life Integrity, LLC http://lifeintegrity.com

RE: SSL farm

2012-05-23 Thread Jens Dueholm Christensen (JEDC)
Or put keepalived in front of 2 or more machines with stud/stunnel/nginx for SSL termination and HAProxy for distributing the traffic to all backends. Keepalived can move a floating IP between multiple machines, and as long as each machine can do ssl termination and load balancing, you've got

Re: SSL farm

2012-05-23 Thread Allan Wind
On 2012-05-23 16:37:53, Hervé COMMOWICK wrote: just use HAProxy to load balance to multiple stud, with send-proxy on HAProxy side, and --read-proxy on stud side. Thanks for the pointers, Hervé. stud is not in debian stable, and both haproxy and stunnel are too old to have this feature.

Re: SSL farm

2012-05-23 Thread Baptiste
Without SSL resume, the client will make the server to generate a new asymetric key. Which takes much more resources than a simple SSL transaction. So it's better to be able to resume if your clients move from one LB to an other one very often ;) cheers

mysql failover and forcing disconnects

2012-05-23 Thread Justin Karneges
Hello list, I'm using haproxy to handle failover between a mysql master and slave. The slave replicates from master and is read-only. I specify both mysql servers in my haproxy configuration, and use the backup option on the slave. Applications connect to haproxy instead of mysql directly.

haproxy conditional healthchecks/failover

2012-05-23 Thread Zulu Chas
Hi! I'm trying to use HAproxy to support the concepts of offline, in maintenance mode, and not working servers. I have separate health checks for each condition and I have been trying to use ACLs to be able to switch between backends. In addition to the fact that this doesn't seem to work,

mysql failover and forcing disconnects

2012-05-23 Thread Justin Karneges
(Apologies if this comes through twice. The first time I sent was before subscription approval, and I don't think it went through.) Hello list, I'm using haproxy to handle failover between a mysql master and slave. The slave replicates from master and is read-only. I specify both mysql servers

Re: haproxy conditional healthchecks/failover

2012-05-23 Thread Baptiste
Hi, My questions and remarks inline. On Wed, May 23, 2012 at 11:42 PM, Zulu Chas zuluc...@hotmail.com wrote: Hi! I'm trying to use HAproxy to support the concepts of offline, in maintenance mode, and not working servers. Any good reason to do that??? (I'm a bit curious)  I have separate