Re: [PATCH] Memory corruption building Proxy Protocol V2 header

2014-07-17 Thread Willy Tarreau
On Wed, Jul 16, 2014 at 11:50:30PM -0400, Dave McCowan wrote: Hi Willy, blush Yes, I changed my variable names after testing to clean up and failed. Is my obvious corrected patch the correct fix? Yes I think so. Or should we clamp down on the use of global chunks being passed downstream?

What are the problems building/running/maintaining haproxy on windows?

2014-07-17 Thread Aleksandr Vinokurov
Hello all, I'm asked to evaluate possible pitfalls about subj. Can you point me to any info? -- With all the respect, Aleksandr Vinokurov +7 (921) 982-21-43 @aleksandrvin

How can I force all frontend traffic to be temporarily queued/buffered by HAProxy?

2014-07-17 Thread Abe Voelker
My use case is that I have a non-backwards compatible database migration to run, so there is a brief period of time where I do not want any requests to be serviced by frontends. So I would like HAProxy to temporarily queue all traffic while the database migration runs, buffering it until I bring

Re: How can I force all frontend traffic to be temporarily queued/buffered by HAProxy?

2014-07-17 Thread Abe Voelker
Apologies, I had a copy/paste error in the disable server command I provided at the end. The actual command I'm using is this: echo disable server nodes/web01 | sudo socat stdio /run/haproxy/admin.sock On Thu, Jul 17, 2014 at 8:49 AM, Abe Voelker a...@abevoelker.com wrote: My use case is

Re: What are the problems building/running/maintaining haproxy on windows?

2014-07-17 Thread Baptiste
On Thu, Jul 17, 2014 at 2:36 PM, Aleksandr Vinokurov aleksandr@gmail.com wrote: Hello all, I'm asked to evaluate possible pitfalls about subj. Can you point me to any info? -- With all the respect, Aleksandr Vinokurov +7 (921) 982-21-43 @aleksandrvin I see only one problem: why is

skipping incompatible /usr/lib/libcrypt.so when searching for -lcrypt

2014-07-17 Thread Kuldip Madnani
Does anybody know about this error, and how it can be fixed: I installed the required devel packages and the compilation went fine but i could see a message at the bottom(skipping incompatible /usr/lib/libcrypt.so when searching for -lcrypt) .Is it severe or can be ignored? gcc -g -o haproxy

Using a Whitlist to Redirect Users not on the Whitelist

2014-07-17 Thread JDzialo John
Hi Guys, I am creating a whitelist of subnets allowed to access HAPROXY during maintenance. Basically I want to redirect everyone to our maintenance page other than users in the whitelisted file. Here is my config... frontend https-in bind *:443 ssl crt

Re: How can I force all frontend traffic to be temporarily queued/buffered by HAProxy?

2014-07-17 Thread Jonathan Matthews
On 17 Jul 2014 14:50, Abe Voelker a...@abevoelker.com wrote: So basically I'm wondering if there is a way to expire these pre-existing sessions or connections or somehow force them to behave like a new one so that they will queue up in HAProxy? I believe 1.5 has the on-marked-down

Re: What are the problems building/running/maintaining haproxy on windows?

2014-07-17 Thread Vincent Bernat
❦ 17 juillet 2014 16:36 +0400, Aleksandr Vinokurov aleksandr@gmail.com : I'm asked to evaluate possible pitfalls about subj. Can you point me to any info? Without a POSIX layer like Cygwin, this is unlikely to work. With Cygwin, poll() is mapped to select() so you won't be able to handle

Re: Using a Whitlist to Redirect Users not on the Whitelist

2014-07-17 Thread Jonathan Matthews
On 17 Jul 2014 18:15, JDzialo John jdzi...@edrnet.com wrote: I am creating a whitelist of subnets allowed to access HAPROXY during maintenance. Basically I want to redirect everyone to our maintenance page other than users in the whitelisted file. This is not working and is forwarding everyone

RE: Using a Whitlist to Redirect Users not on the Whitelist

2014-07-17 Thread JDzialo John
It was a method I found online without really understanding what X-Forwarded-For header does. Traffic does not pass through a reverse proxy before hitting HAProxy. It should be a direct hit from the client. Is there a header I can compare to our whitelist to reliably get all incoming

Re: [PATCH] Memory corruption building Proxy Protocol V2 header

2014-07-17 Thread Dave McCowan
Here is the corrected (and retested) :-) patch. Commit comment: Use temporary trash chunk, instead of global trash chunk in make_proxy_line_v2() to avoid memory overwrite. --Dave On Thu, Jul 17, 2014 at 4:17 AM, Willy Tarreau w...@1wt.eu wrote: On Wed, Jul 16, 2014 at 11:50:30PM -0400, Dave

Re: [PATCH] Memory corruption building Proxy Protocol V2 header

2014-07-17 Thread Willy Tarreau
Hi Dave, On Thu, Jul 17, 2014 at 02:34:01PM -0400, Dave McCowan wrote: Here is the corrected (and retested) :-) patch. Commit comment: Use temporary trash chunk, instead of global trash chunk in make_proxy_line_v2() to avoid memory overwrite. Thank you, I've just applied it now. Best

Re: skipping incompatible /usr/lib/libcrypt.so when searching for -lcrypt

2014-07-17 Thread Sasha Pachev
This means that you have incompatible (from the point of view of ld) versions of libcrypt.so and libc.so that would have otherwise been first preference to resolve the dependencies, but since the compilation succeeded those apparently were found somewhere else. If haproxy starts up and is able to

Re: What are the problems building/running/maintaining haproxy on windows?

2014-07-17 Thread Willy Tarreau
Hi guys, On Thu, Jul 17, 2014 at 07:26:45PM +0200, Vincent Bernat wrote: ??? 17 juillet 2014 16:36 +0400, Aleksandr Vinokurov aleksandr@gmail.com : I'm asked to evaluate possible pitfalls about subj. Can you point me to any info? Without a POSIX layer like Cygwin, this is

Re: skipping incompatible /usr/lib/libcrypt.so when searching for -lcrypt

2014-07-17 Thread Kuldip Madnani
What minimum version of libcrypt.so and libc.so is required to perfectly compile haproxy 1.5.2? On Thu, Jul 17, 2014 at 2:17 PM, Sasha Pachev sa...@asksasha.com wrote: This means that you have incompatible (from the point of view of ld) versions of libcrypt.so and libc.so that would have

Re: skipping incompatible /usr/lib/libcrypt.so when searching for -lcrypt

2014-07-17 Thread Sasha Pachev
Kuldip - haproxy should compile just fine with any reasonably recent version of libc/libcrypt. I think your problem is that you possibly have an extra libc.so (in addition to the one that is actually used by your system) that is for an incompatible architecture or something of that kind. What kind