RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lukas Tribus
Hi, Have been wondering about if/how i could persist ssl sessions between servers myself if i ever need it. And found the concept of a SSL-session-id rather promising, then after looking into how to use it and its reliability i found some articles saying it might not be wise..

RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lauri-Alo Adamson
Hello ! I will try to answer qustions and explain my case How do you know HAProxy doesn't maintains the correct affinity? My web servers contain text file wich contain name of that server. Then put following line to web browser https://X.X.X.X/index.txt and browse this page it displays

Re: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Cyril Bonté
Hi, Le 04/01/2014 20:09, Lauri-Alo Adamson a écrit : Are you tcpdumping the frontent traffic? If undestood correctly tcpdump displays encrypted traffic without necessary information about affinity Yes it does. This will allow to check the SSL session id in each ClientHello/ServerHello

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Heyz, On 03.01.2014 22:52, Lukas Tribus wrote: Hi, The problem I'm having (also tested with ss-20140101 yesterday) happens with http-keep-alive enabled and also when just running in tunnel mode. But, when http-keep-alive is enabled I get the problem with ~98% of the requests and in tunnel

RE: http-keep-alive broken?

2014-01-04 Thread Sander Klein
Hey, On 03.01.2014 22:52, Lukas Tribus wrote: You said that one of your backends is exchange 2012. What release are the other ntlm-auth backends exactly and is the issue the same on all of them? All backends are windows 2012 with the standard IIS that comes with it. I have the problem on

RE: HA-Proxy version 1.5-dev21-51437d2 2013/12/29 sticky ssl sessons are not working in my environment

2014-01-04 Thread Lauri-Alo Adamson
Hello ! Many thanks for your help I´m using Apache web server 2.4.x I used three browsers under MS Windows 7 Professional Service Pack 1 64-bit operatingsystem Windows Internet Explorer Version 9.0.8112.16421 Update Versions 9.0.23 Chiper Strength 256-bit Firefox 25.0.1 Google Chrome

Re: Tuning HAProxy for Production

2014-01-04 Thread Jordan Arentsen
Just wanted to bump this, see if anyone had any suggestions. Thanks. On Thu, Jan 2, 2014 at 2:09 PM, Jordan Arentsen jor...@bliss.io wrote: Hi Baptiste, Sorry about that, it makes sense that you would want that information. :) Mostly this will be routing to various front-end web servers