Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
On Wed, Apr 16, 2014 at 01:56:29PM +0800, k simon wrote: > Hi,Willy, > I'm sorry about strace only support i386 on FreeBSD box, but I'm > working on amd64. Argh! Without that we'll be fairly limited. You can try with truss but we'll surely miss some information. On a personal note, I'd say tha

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, I'm sorry about strace only support i386 on FreeBSD box, but I'm working on amd64. # uname -a FreeBSD ha-l1-n2 10.0-STABLE FreeBSD 10.0-STABLE #0 r264098: Fri Apr 4 10:57:19 CST 2014 root@ha-l1-n2:/usr/obj/usr/src/sys/10-stable-r264098 amd64 Simon 于 14-4-16 13:40, Willy Tarr

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
Hi Simon, On Wed, Apr 16, 2014 at 10:25:46AM +0800, k simon wrote: > Hi,Willy, > > > You must never have timewaits on a client, only on a server. So if > > on your haproxy box you're seeing timewaits for connections going > > to the backend servers, there's something wrong. Haproxy deploys > > gr

Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Remy van Elst
Andy Walker schreef op 15/04/14 01:19: That's pretty close to our method as well. We've been using haproxy for just over a year, and started with 1.5 because of the built-in SSL capabilities... specifically, version 1.5-dev17. We actually did a fairly minimal amount of testing, and just started

柏蹲级--面试通知

2014-04-15 Thread pvsr
辛兹雌|開韵饶闭啡纯讼鞠 ↙贺众胀游發李韩 院备4857曹票穆迸次险俺kDlBD --138--2652--2656--刘

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, > You must never have timewaits on a client, only on a server. So if > on your haproxy box you're seeing timewaits for connections going > to the backend servers, there's something wrong. Haproxy deploys > great efforts at avoiding them by doing a setsockopt(SO_LINGER) to > force the sy

session persistence timeouts?

2014-04-15 Thread Tomasz Chmielewski
How do I set session persistence timeout in haproxy? For those using LVS, I'm looking for the equivalent of "persistent = 3600" option, which would set session persistence to 1 hour. -- Tomasz Chmielewski http://wpkg.org

Re: redirecting based on Accept-Language

2014-04-15 Thread Thierry FOURNIER
On Tue, 15 Apr 2014 21:57:29 +0200 Cyril Bonté wrote: > Hi Thierry, > > Le 14/04/2014 21:30, Thierry FOURNIER a écrit : > > Hi Marc, > > > > This dev is done in the current haproxy version. The keyword is > > "language", this is the documentation: > > > > language([,]) > >Returns the

fail the backend immediately if check fails?

2014-04-15 Thread Tomasz Chmielewski
How can I fail the backend immediately, for existing and new connections, if the check fails? With the following settings, if the client is still sending queries, it may take long time (10 mins, perhaps much more), before haproxy sends queries for existing connections to the healthy server: gl

Re: redirecting based on Accept-Language

2014-04-15 Thread Cyril Bonté
Hi Thierry, Le 14/04/2014 21:30, Thierry FOURNIER a écrit : Hi Marc, This dev is done in the current haproxy version. The keyword is "language", this is the documentation: language([,]) Returns the value with the highest q-factor from a list as extracted from the "accept-lang

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
On Wed, Apr 16, 2014 at 12:46:40AM +0800, k simon wrote: > Hi,Willy, > Does your mean "BUG/MINOR: tcpcheck connect wrong behavior" or " > BUG/MEDIUM: checks: immediately report a connection success" ? I don't remember, all I can say is that whatever is tagged BUG must be applied. > I have not

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, Does your mean "BUG/MINOR: tcpcheck connect wrong behavior" or " BUG/MEDIUM: checks: immediately report a connection success" ? I have not used tcp-check, just used http-check. Does it have the same bug? And the out connections to the server farm is about just 900+, is TW state r

RE: handle error on haproxy

2014-04-15 Thread Lukas Tribus
Hi, > Hi Team,  >  > I have install haproxy load balancer and it working fine. But some  > issue occur in load balancer.  > 1. If any error occur in response from web server, error like 40X, 50X  > then haproxy load balancer forward request to previous or next server.  > Is it possible in zen loa

Re: handle error on haproxy

2014-04-15 Thread Thomas Heil
Hi, On 15.04.2014 12:57, jogendar kushwaha wrote: > Hi Team, > > I have install haproxy load balancer and it working fine. But some issue occur in load balancer. > 1. If any error occur in response from web server, error like 40X, 50X then haproxy load balancer forward request to previous or next

Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Lukas Tribus
Hi, key is certainly to do some fair amount of testing, don't use a release with a lot of very recent activity, but let it "cool down" a few days, or better, 1 - 3 weeks (and then check fixed bugs 'git log --oneline \ v1.5-devXY..master | grep BUG' to see if anything is relevant for you). You al

Fwd: Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Philipp
Missed the reply-to :) Originalnachricht Thanks for the data point, Philipp. If you resend your reply to the list, that might be useful for people other than just me :-) J On 15 April 2014 09:26, Philipp wrote: Am 14.04.2014 23:27 schrieb Jonathan Matthews: What do /you/

handle error on haproxy

2014-04-15 Thread jogendar kushwaha
Hi Team, I have install haproxy load balancer and it working fine. But some issue occur in load balancer. 1. If any error occur in response from web server, error like 40X, 50X then haproxy load balancer forward request to previous or next server. Is it possible in zen load balancer or not ? if y

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
Hi Simon, On Tue, Apr 15, 2014 at 04:22:35PM +0800, k simon wrote: > Hi,List, >I got a 1.5 dev22 issue on freebsd 10-stable. It reported like below, > it's generate about 2-3 errors per minute when using "http-keep-alive" > ,it's about 5-8 errors per minute with "http-server-close". I tried us

Re: Stick on SSL Session ID (ssl_session_id)

2014-04-15 Thread Volker Dormeyer
Hi Lukas, Thank you! This really seems to be the case. Did many tests and tcpdumps - TLS session tickets are being exchanged. If I align the browser to SSLv3, only it works. Thanks and Best Regards, Volker // On Mon, Apr 14, 2014 at 12:20:33PM +0200, // Lukas Tribus wrote: > > > Hi Volker,

Re: [PATCH] FEATURE Extending PROXY protocol for SSL

2014-04-15 Thread Willy Tarreau
Hi David, On Mon, Apr 14, 2014 at 09:54:19PM -0400, David S wrote: > Hello-- > Part of my solution uses a non-HTTP protocol. My backend server need > L3/L4 information, so the PROXY protocol is a perfect fit. In addition to > TCP and IP addresses, my backend server needs information from the

Re: Spam

2014-04-15 Thread Simon Dick
I couldn't care less about the spam that comes through, the bit that annoys me is the mailing list emails when gmail doesn't accept spam and the software complains messages are bouncing :) On 15 April 2014 00:23, Steven Le Roux wrote: > Ok let's do the math. > > search(in:spam in:lists-haproxy be

1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,List, I got a 1.5 dev22 issue on freebsd 10-stable. It reported like below, it's generate about 2-3 errors per minute when using "http-keep-alive" ,it's about 5-8 errors per minute with "http-server-close". I tried use "source ip:port1-port2" in "server" section, but nothing helped. Then I st

Re: src_inc_gpc0 not working with IPv4 source and IPv6 stick-tables

2014-04-15 Thread Apollon Oikonomopoulos
Hi Thierry, On 21:31 Mon 14 Apr , Thierry FOURNIER wrote: > Hi, > > Thanks for the bug repport, this is fixed in the current HAProxy version. > Tested and it works fine, thanks for the fix! Apollon