Re: Debian/Ubuntu packages for HAProxy

2013-09-10 Thread Josip Lazic
Vincent Bernat bernat@... writes:
  ❦ 24 juin 2013 14:50 CEST, Hervé COMMOWICK herve.commowick at lizeo-
group.com :
 
  Something i do in my personal package is to include halog tool, which is
  in contrib directory, would be great if you can include that too.
 
 OK, will do.

Do you know when you will be able to include halog? Thanks.







Re: Debian/Ubuntu packages for HAProxy

2013-09-10 Thread Vincent Bernat
 ❦ 10 septembre 2013 10:18 CEST, Josip Lazic jo...@togs.biz :

  Something i do in my personal package is to include halog tool, which is
  in contrib directory, would be great if you can include that too.
 
 OK, will do.

 Do you know when you will be able to include halog? Thanks.

It has been included by Apollon but we didn't make a release yet. I was
waiting for a new -dev, but maybe this won't happen until some time?
-- 
die_if_kernel(Penguin instruction from Penguin mode??!?!, regs);
2.2.16 /usr/src/linux/arch/sparc/kernel/traps.c



RE: help with long connect times and timeout

2013-09-10 Thread Lukas Tribus
Hi Ricardo,


 I'm using the current defaults and added this to the config: 

Can you post the full configuration? The part about timeouts
is important in this case.

Also, please specify what release you are using.



 However once I startup haproxy, and I attempt to connect to the proxy 
 from the outside server, it usually (95% of the time) takes a few 
 seconds for the connect to establish and sometimes it even times out 
 and the connection is closed. 
 
 However, even though going from the outside server through haproxy I 
 get delays and timeouts, I can still go directly from the outside 
 server to any of the 3 servers above without any delays or timeouts. 
 The issue is only when going through the proxy 

That sounds like simple packet loss issue to me.

Can you tcpdump frontend and backend traffic of such a broken session?
Could you start haproxy in debug mode, reproduce the issue and post the
log?



Regards,

Lukas 


Question concerning the server entity

2013-09-10 Thread Andreas Mock
Hi all,

for my understanding. When I have a declaration in HAProxy 1.5.x
like the following:

frontend F1
default BE1

frontend F2
default BE2

backend BE1
server S1 IP1:Port1
server S2 IP2:Port2

backend BE2
server S1 IP1:Port1
server S2 IP2:Port2


Is then S1 (identified by IP1:Port1) ONE entity
or are BE1-S1 and BE2-S1 two entities and
HAProxy does not set this both into relation?

E.g. for doing a check not for every backend/server
combination but for a server alone.

Best regards
Andreas Mock




Re: Debian/Ubuntu packages for HAProxy

2013-09-10 Thread Josip Lazic
Vincent Bernat bernat@... writes:
 It has been included by Apollon but we didn't make a release yet. I was
 waiting for a new -dev, but maybe this won't happen until some time?

Could you bump minor version to 1.5-dev19-0ubuntu2 and include halog?




Re: Debian/Ubuntu packages for HAProxy

2013-09-10 Thread Willy Tarreau
On Tue, Sep 10, 2013 at 10:29:24AM +0200, Vincent Bernat wrote:
  ??? 10 septembre 2013 10:18 CEST, Josip Lazic jo...@togs.biz :
 
   Something i do in my personal package is to include halog tool, which is
   in contrib directory, would be great if you can include that too.
  
  OK, will do.
 
  Do you know when you will be able to include halog? Thanks.
 
 It has been included by Apollon but we didn't make a release yet. I was
 waiting for a new -dev, but maybe this won't happen until some time?

My work on haproxy has been significantly delayed by my day-to-day job
these days, I'm sorry. I don't think it's worth releasing a new version
before we merge Simon's work, considering that there is almost nothing
new.

Willy




Re: Question concerning the server entity

2013-09-10 Thread Willy Tarreau
Hi Andreas,

On Tue, Sep 10, 2013 at 09:57:48AM +, Andreas Mock wrote:
 Hi all,
 
 for my understanding. When I have a declaration in HAProxy 1.5.x
 like the following:
 
 frontend F1
 default BE1
 
 frontend F2
 default BE2
 
 backend BE1
 server S1 IP1:Port1
 server S2 IP2:Port2
 
 backend BE2
 server S1 IP1:Port1
 server S2 IP2:Port2
 
 
 Is then S1 (identified by IP1:Port1) ONE entity
 or are BE1-S1 and BE2-S1 two entities and
 HAProxy does not set this both into relation?
 
 E.g. for doing a check not for every backend/server
 combination but for a server alone.

A server is specific to the backend it's declared in. So there is no
relation between BE1/S1 and BE2/S1 even if they share the same settings.
If you want to avoid sending health checks twice, you can have one do the
checks and the other track the first one (please check for track
and check in the config manual).

Regards,
Willy




AW: Question concerning the server entity

2013-09-10 Thread Andreas Mock
Hi Willy,

thank you for your answer and your hint concerning 
check and track.

By the way: When will 1.6.x be out?  ;-)

Best regards
Andreas Mock


-Ursprüngliche Nachricht-
Von: Willy Tarreau [mailto:w...@1wt.eu] 
Gesendet: Dienstag, 10. September 2013 15:12
An: Andreas Mock
Cc: haproxy@formilux.org
Betreff: Re: Question concerning the server entity

Hi Andreas,

On Tue, Sep 10, 2013 at 09:57:48AM +, Andreas Mock wrote:
 Hi all,
 
 for my understanding. When I have a declaration in HAProxy 1.5.x
 like the following:
 
 frontend F1
 default BE1
 
 frontend F2
 default BE2
 
 backend BE1
 server S1 IP1:Port1
 server S2 IP2:Port2
 
 backend BE2
 server S1 IP1:Port1
 server S2 IP2:Port2
 
 
 Is then S1 (identified by IP1:Port1) ONE entity
 or are BE1-S1 and BE2-S1 two entities and
 HAProxy does not set this both into relation?
 
 E.g. for doing a check not for every backend/server
 combination but for a server alone.

A server is specific to the backend it's declared in. So there is no
relation between BE1/S1 and BE2/S1 even if they share the same settings.
If you want to avoid sending health checks twice, you can have one do the
checks and the other track the first one (please check for track
and check in the config manual).

Regards,
Willy





Delete response headers unless condition give me a warning

2013-09-10 Thread Ricardo F
Hello,

I'm trying to delete some headers in a frontend based on a condition, but when 
i set the acl:

acl header_app hdr_cnt(X-JSON) gt 0
rspidel ^X-.* unless header_app

A warning message is print:

acl 'header_app' will never match because it only involves keywords that are 
incompatible with 'frontend http-response header rule'
Configuration file is valid

I don't understand exactly how can i do that.

Any alternative?


Thanks,
Ricardo F.


Balancing between multiple backends from a single frontend?

2013-09-10 Thread Michael Lasevich
Perhaps the best way to ask this question is to show what I am trying to
accomplish. I got two backends with two frontends (config greatly
over-simplified):

backend BE_1
server server1 1.2.3.1 maxconn 2
server server2 1.2.3.2 maxconn 2

backend BE_2
server server3 1.2.3.3 maxconn 2
server server4 1.2.3.4 maxconn 2

frontend FE_1
default_backend BE_1

frontend FE_2
default_backend BE_2

So far so good, but now I need to add another frontend that balances
between all 4 servers, something like:

frontend FE_1
default_backend BE_1
default_backend BE_2

But this only sends stuff to BE_2, I can create a new backend BE_3 which
contains all 4 servers, but this has a huge drawback that my maxconn
settings are no longer respected as it is used in two places, doubling
the total max. I can reduce maxconn, but then I get bottlenecks whenever
load is not perfectly balanced.

What is the right way to configure this?

Thanks in advance!

-M

(In case you are wondering why this config, each server in each backend
serves two separate but related requests (a common one, and a backend
specific one) - I need to balance the request to specific backends AND
requests for common info shared but both pools.)