Re: BUG/FEATURE? http-request always applied if backend not available

2014-04-02 Thread Willy Tarreau
Hi, On Wed, Apr 02, 2014 at 12:50:08AM +0200, Cyril Bonté wrote: Le 02/04/2014 00:16, Bertrand Jacquin a écrit : What is adding the Vary and Strict-Transport-Security headers in this second case ? A missing 'http-response set-header' in the previous copy and paste. http-response

Re: BUG/FEATURE? http-request always applied if backend not available

2014-04-02 Thread Bertrand Jacquin
On 2014-04-02 14:05, Willy Tarreau wrote: Hi, On Wed, Apr 02, 2014 at 12:50:08AM +0200, Cyril Bonté wrote: Le 02/04/2014 00:16, Bertrand Jacquin a écrit : What is adding the Vary and Strict-Transport-Security headers in this second case ? A missing 'http-response set-header' in the previous

FTP with 1.5 release

2014-04-02 Thread Naveen Chandra Sekhara
Hi, Sorry if this is a repeat. I am trying FTP with HAProxy I have two servers load balanced by HAproxy. ftp login works fine. Data channel fails. When I capture packets at the server, server receives PORT packet, but responds with Illegal port command. My setup has

Re: BUG/FEATURE? http-request always applied if backend not available

2014-04-02 Thread Willy Tarreau
On Wed, Apr 02, 2014 at 07:40:54PM +0200, Bertrand Jacquin wrote: My bad, too much crap in my eyes yesterday evening, I had another proxy in the round due to some (old) iptables rules. Sorry for noise Willy and Cyril. Thanks No problem, better double-check than ignore possible bugs. Thanks,

modifing default haproxy emit codes

2014-04-02 Thread Piavlo
Hi, According to the docs: Haproxy may emit the following status codes by itself : 503 when no server was available to handle the request, or in response to monitoring requests which match the monitor fail condition 504 when the response timeout strikes before the server

Re: modifing default haproxy emit codes

2014-04-02 Thread Patrick Hemmer
You want the errorfile config param. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#errorfile -Patrick *From: *Piavlo lolitus...@gmail.com *Sent: * 2014-04-02 15:16:22 E *To: *haproxy@formilux.org *Subject:

Re: modifing default haproxy emit codes

2014-04-02 Thread Baptiste
Hi, You can use the errorfile directive with a fake 204 status code in the HTTP file to use as an answer. Check the doc and come back here if you did not manage to configure it. Baptiste On Wed, Apr 2, 2014 at 9:16 PM, Piavlo lolitus...@gmail.com wrote: Hi, According to the docs: Haproxy

Re: haproxy ssl questions

2014-04-02 Thread Willy Tarreau
Hi Jarno, On Tue, Apr 01, 2014 at 04:22:02PM +0300, Jarno Huuskonen wrote: concerning nbproc, you should makes all your SSL processes to point to a single HAProxy process in clear where you do your stick-table stuff. Each frontend and backend must be in the same process, so you must pass

Re: haproxy intermittently not connecting to backend

2014-04-02 Thread Cyril Bonté
Hi Patrick, Le 01/04/2014 21:52, Patrick Hemmer a écrit : Apologies, my mail client went stupid. Here's the log entry unmangled: 198.228.211.13:60848 api~ platform-push/i-84d931a5 49562/0/-1/-1/49563 0/0/0/0/0 0/0 691/212 503 CC-- 4F8E-4624 + GET

Re: haproxy intermittently not connecting to backend

2014-04-02 Thread Willy Tarreau
Hi Patrick, On Tue, Apr 01, 2014 at 03:20:15PM -0400, Patrick Hemmer wrote: We have an issue with haproxy (1.5-dev22-1a34d57) where it is intermittently not connecting to the backend server. However the behavior it is exhibiting seems strange. The reason I say strange is that in one example,

Re: [PATCH] proxy: support use_backend with dynamic names

2014-04-02 Thread Willy Tarreau
Hi Thomas, On Mon, Mar 31, 2014 at 12:29:25PM +0200, Thomas Heil wrote: Hi, On 31.03.2014 10:45, Willy Tarreau wrote: On Thu, Mar 27, 2014 at 08:57:09PM -0400, Rajat Chopra wrote: Hi! This solution very much solves the problem that I have been facing i.e. large number of acl rules

Re: ereq steadily increasing

2014-04-02 Thread Willy Tarreau
On Sun, Mar 30, 2014 at 03:44:38PM -0500, Patrick Schless wrote: Very interesting, thanks for the tip. I only see two requests there, one of which seems like nonsense or a vulnerability scan (\r\n\r\n\x00\x00\x00), and the other has a space in the path that's being requested due to

Re: haproxy intermittently not connecting to backend

2014-04-02 Thread Patrick Hemmer
That makes perfect sense. Thank you very much. -Patrick *From: *Willy Tarreau w...@1wt.eu *Sent: * 2014-04-02 15:38:04 E *To: *Patrick Hemmer hapr...@stormcloud9.net *CC: *haproxy@formilux.org *Subject: *Re: haproxy

Re: modifing default haproxy emit codes

2014-04-02 Thread Piavlo
Hi Baptiste , So if i need webserver to respond within 50ms and if not haproxy should reply with 204 i need: timeout server 50ms errorfile 504 /etc/haproxy/errors/204.http where /etc/haproxy/errors/204.http would be a 204 response with no body? What is the exact action for haproxy to