Obtenez votre crédit immédiatement, réponse sans engagement

Title: KreditConso.com Cliquez ici pour lire cet e-mail dans votre navigateur.

Haproxy disconnecting SSL clients with minimal changes from last week

Hi all, SSL sessions appear to be being closed by haproxy (FIN being sent to client and server). This seems to be pretty intermittent in frequency but very reproducible over time with enough data. Haproxy is logging it as a client disconnect (cd) ... This was fine last week and no changes have

Real client IP address question

Hi, There is a setting('forward for' option) in haproxy allowing to forward the traffic with the real client IP address to the end server. This setting works only for HTTP traffic. Is there a way to make a similar setting for TCP? I run haproxy on Linux OS. Best regards, Evgeny Semenov

Re: Real client IP address question

You can use the proxy protocol for this. Haproxy doesn't allow manipulation of the TCP stream itself as it could be any number of protocols which haproxy doesn't support. However the proxy protocol sends a line at the very beginning of the stream containing the client source IP, port, destination,

Is there a way to mention ssl password in haproxy.cfg file

Hello Guys, We are using HAProxy version 1.5-dev17 for our load balancer, In the configuration(haproxy.cfg) file we bind port 443 becoz we are using https and we do mentioned ssl certifciate in the conf file. The ssl file is password restricted so at the time of restart haproxy it is asking

Re: Real client IP address question

Don't forget to change the server's default gateway to point to your HAProxy box. Baptiste On Mon, Jan 27, 2014 at 7:26 PM, PiBa-NL piba.nl@gmail.com wrote: Another option if proxy protocol isn't available for the server software is to use source 0.0.0.0 usesrc clientip. You need to

Re: Haproxy disconnecting SSL clients with minimal changes from last week

On 27 Jan 2014 21:26, Baptiste bed...@gmail.com wrote: HAProxy 1.5-dev12 is the very first version with SSL inside. Please upgrade to the latest GIT version which includes so many fixes and improvements. Hi Baptiste, We figured that would be a good step and have indeed just done so...

Re: HAProxy graceful restart old process not going away

On Mon, Jan 27, 2014 at 11:24:46PM +, Wei Kong wrote: We use /usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg -D -p /var/run/haproxy.pid -sf pid In production to gracefully restart haproxy. But sometimes we notice that the old haproxy process taking a long time to go away and if we

Re: Is there a way to mention ssl password in haproxy.cfg file

On Mon, Jan 27, 2014 at 10:24:35PM +0100, Baptiste wrote: Hi, You can't do this from HAProxy's configuration file. The passphrase is requested by your OpenSSL library. If there is a passphrase on your private key, there is a good reason: keep it secret. Maybe hacking HAProxy start script

Re: memory usage with 1.5dev21

Hi Thomas, On Thu, Jan 23, 2014 at 06:15:50PM +0100, Thomas Heil wrote: Hi, On 23.01.2014 16:43, Baptiste wrote: Hi Thomas, Please share your configuration (anonymized). Ive attached the config. Thank you. Could you check using netstat -a and in /proc/haproxy_pid/fd if there is

Re: determine size of http headers

On Thu, Jan 23, 2014 at 01:19:40PM -0500, Patrick Hemmer wrote: What I'd like to do is add a few items to the log line which contain the size of the headers, and then the value of the Content-Length header. This way if the connection is broken for any reason, we can determine if the client

Re: HAProxy graceful restart old process not going away

We got the simlar problem, then capture the traffic and found it's result in websocket. So we had to kill the old process manually when finished graceful restart. 于 28/1/14 下午2:37, Willy Tarreau 写道: On Mon, Jan 27, 2014 at 11:24:46PM +, Wei Kong wrote: We use /usr/sbin/haproxy -f