Re: -sf/-st not working

2013-02-07 Thread Eugene Istomin
Thanks for the answer, as written in http://www.mgoff.in/2010/04/18/haproxy-reloading-your-config-with- minimal-service-impact/ The end-result is a reload of the configuration file which is not visible by the customer But in our case it leads to unbinding from all ports and finishing haproxy

Re: failing to redirect http to https using HAProxy 1.5dev15

2013-02-07 Thread Guillaume Castagnino
Hi, You should consider to use the brand new redirect just ment for that : redirect scheme https code 301 if ! secure Regards Le jeudi 07 février 2013 11:38:34 Robbert van Waveren a écrit : Hi, I'm trying out HAProxy and would like to use as our general purpose proxy/loadbalancer.

compress only if response size is big enough

2013-02-07 Thread Dmitry Sivachenko
Hello! It would be nice to add some parameter min_compress_size. So haproxy will compress HTTP response only if response size is bigger than that value. Because compressing small data can lead to size increase and is useless. Thanks.

Re: -sf/-st not working

2013-02-07 Thread Baptiste
You should have a new HAProxy process started using the new configuration and binding the ports... cheers On 2/7/13, Eugene Istomin e.isto...@edss.ee wrote: Thanks for the answer, as written in http://www.mgoff.in/2010/04/18/haproxy-reloading-your-config-with- minimal-service-impact/ The

Re: SSL handshake failure

2013-02-07 Thread Samat Galimov
Thank you very much, overlooked your email due to filters, sorry for delay. I am very happy to help, sure I would accept a patch. Server is available from outside world but is not heavily used — we dont point load to it because of this SSL errors. By the way, I am using default haproxy-devel port

Re: SSL handshake failure

2013-02-07 Thread Willy Tarreau
On Thu, Feb 07, 2013 at 06:49:14PM +0400, Samat Galimov wrote: Thank you very much, overlooked your email due to filters, sorry for delay. I am very happy to help, sure I would accept a patch. Server is available from outside world but is not heavily used ??? we dont point load to it because

Re: -sf/-st not working

2013-02-07 Thread Eugene Istomin
I think the main problem is in systemd: - from commandline -sf working as expected - from sysvinit -sf working as expected - from systemd -sf only stop process. I try both init.d systemd scripts in systemd-based linux - all results are the same: Loaded: loaded

Re: -sf/-st not working

2013-02-07 Thread Marc-Antoine Perennou
It is totally normal that systemd kills the new process as the main one which was the first has exited. This is the expected behaviour. I'm currently patching haproxy to fully support systemd, I'll probably submit my patches by tomorrow (It's fully functionnal here, only needs a little cleaning)

Re: could a single ha proxy server sustain 1500 requests per second

2013-02-07 Thread S Ahmed
Thanks Willy. On the same note you said not to run anything on the same machine, to lower costs I want to run other things on the haproxy front-end load balancer. What are the critical things to watch for on the server so I can be notified at what point having 2 things on the server are becoming

Re: SSL handshake failure

2013-02-07 Thread Samat Galimov
Funny, with patch applied it establishes first connection after start normally. Then old thing continues. On Thu, Feb 7, 2013 at 6:58 PM, Willy Tarreau w...@1wt.eu wrote: On Thu, Feb 07, 2013 at 06:49:14PM +0400, Samat Galimov wrote: Thank you very much, overlooked your email due to filters,

Re: SSL handshake failure

2013-02-07 Thread Willy Tarreau
On Thu, Feb 07, 2013 at 09:22:37PM +0400, Samat Galimov wrote: Funny, with patch applied it establishes first connection after start normally. Then old thing continues. I'm unsure what you mean, do you mean the patch has slightly improved the situation but not completely ? Willy

Re: could a single ha proxy server sustain 1500 requests per second

2013-02-07 Thread Willy Tarreau
On Thu, Feb 07, 2013 at 11:34:43AM -0500, S Ahmed wrote: Thanks Willy. On the same note you said not to run anything on the same machine, to lower costs I want to run other things on the haproxy front-end load balancer. What are the critical things to watch for on the server so I can be

Re: installing SSL, and backend communication is non-ssl

2013-02-07 Thread Robin Lee Powell
On Thu, Feb 07, 2013 at 11:54:56AM -0500, S Ahmed wrote: Is it hard to install SSL with haproxy? I want all incoming connections to use SSL, but when haproxy communicates with the backends I don't want them to be ssl based. ANy tutorials on setting this up? With 1.5-dev17 (or whatever's

Re: Consistent hashing based on cookie - across multiple HAProxy boxes

2013-02-07 Thread Alex Davies
Hi Willy, Thanks for your suggestion. I'm guessing you mean something like this backend: backend x balance roundrobin stick-table type string size 32k peers other_haproxy_server expire 24h stick store-response set-cookie(PHPSESSID) If I understand you correctly, you are saying that

Re: Consistent hashing based on cookie - across multiple HAProxy boxes

2013-02-07 Thread Baptiste
ahah, you can call me Baptiste :) You miss a stick on cookie(PHPSESSID). Also consider using the same expire delay you have on your application server. And last but not least, add a peers section (and a peer directive on the stick-table definition) where you provide all your HAProxy server IPs