Re: 25% of requests shown as error-req

Hi Dennis, On Fri, Oct 31, 2014 at 04:35:59PM +0100, Dennis Jacobfeuerborn wrote: > On 31.10.2014 10:05, Willy Tarreau wrote: > > Hi Dennis, > > > > On Fri, Oct 31, 2014 at 12:51:21AM +0100, Dennis Jacobfeuerborn wrote: > >> On 30.10.2014 19:01, Dennis Jacobfeuerborn wrote: > >> ... > >>> > >>> [

Re: 25% of requests shown as error-req

On 31.10.2014 10:05, Willy Tarreau wrote: > Hi Dennis, > > On Fri, Oct 31, 2014 at 12:51:21AM +0100, Dennis Jacobfeuerborn wrote: >> On 30.10.2014 19:01, Dennis Jacobfeuerborn wrote: >> ... >>> >>> [30/Oct/2014:18:46:36.035] front-http front-http/ >>> -1/-1/-1/-1/19117 400 187 - - CR-- 49/49/0/0/0

Re: ssl client certificate forwarding

Hi, On Thu, Oct 30, Emeric Brun wrote: > On 10/30/2014 10:38 AM, Emeric Brun wrote: > >>>So currently with the last merged patch, we can directly encode the > >>>header in base64: > >>> > >>>http-request add-header Client-Cert %[ssl_c_der,base64] > >>> > >>>And add pem's header/footer: > >>> > >>>

Re: [RFC] stick: Allowing you to extract some field from a string

On Fri, Oct 31, 2014 at 11:56:08AM +0100, Emeric Brun wrote: > In your case, you don't need to modify data so i think the most > elegant(zerocopy) way to do this converter is to not use smp_dup: > > You only need to do a manual parsing to reach your token based on string > length and not char '0

Re: monitor fail condition

On Fri, Oct 31, 2014 at 01:38:11PM +0100, Sebastian Fohler wrote: > This is the option I've set in my backend pool: > > optionssl-hello-chk HEAD /rmo/login.rmo HTTP/1.0 > > and the configuration is: > > apache[proxy]:443 -> jboss:8080 and if that fails apache shows a serv

Re: monitor fail condition

This is the option I've set in my backend pool: option ssl-hello-chk HEAD /rmo/login.rmo HTTP/1.0 and the configuration is: apache[proxy]:443 -> jboss:8080 and if that fails apache shows a service is not available site which is at least in the browser a 503 error. On 31.10.2

Re: [RFC] stick: Allowing you to extract some field from a string

On 10/15/2014 09:37 PM, Tejas Dinkar wrote: I've seen a few places online where people are trying to use a substring in the path / hostname as the stick-key, and I was trying to do the same today. [1] The current solution appears to be to statically declare every path / hostname possible, but I w

Re: [ANNOUNCE] haproxy-1.5.8

On 31 October 2014 11:33, Willy Tarreau wrote: > On Fri, Oct 31, 2014 at 11:30:14AM +0100, Pavlos Parissis wrote: > > Git tag 1.5.8 is missing:-) > > Ah indeed, I used Ctrl-R to recall the last history command line > to push the new version, so I pushed only v1.5.7 as found on the > previous comm

Re: [ANNOUNCE] haproxy-1.5.8

On Fri, Oct 31, 2014 at 11:30:14AM +0100, Pavlos Parissis wrote: > Git tag 1.5.8 is missing:-) Ah indeed, I used Ctrl-R to recall the last history command line to push the new version, so I pushed only v1.5.7 as found on the previous command line :-) Fixed now, thanks Pavlos! willy

Re: [ANNOUNCE] haproxy-1.5.8

Git tag 1.5.8 is missing:-)

Re: [ANNOUNCE] haproxy-1.5.7

Hello Eugene, On Fri, Oct 31, 2014 at 11:42:40AM +0200, Eugene Istomin wrote: > Hello Willy, > > thanks to ssl_c_der! Can you implement ssl_c_pem like in nginx > (ssl_client_raw_cert) ? >From the information we got here, nginx seems to require an incorrect header encoding that's explicitly forb

Re: monitor fail condition

On Fri, Oct 31, 2014 at 10:44:30AM +0100, Sebastian Fohler wrote: > Hi Willy, > > thank you for answering. > The problem is that the standard health check right now checks the URI > /.../ > But as soon as the jboss backend fails, I get a 503 error page, which > still is responding to the health

Re: monitor fail condition

Hi Willy, thank you for answering. The problem is that the standard health check right now checks the URI /.../ But as soon as the jboss backend fails, I get a 503 error page, which still is responding to the health check. So the failover I configured does not trigger. Eighter I must be able t

Re: [ANNOUNCE] haproxy-1.5.7

Hello Willy, thanks to ssl_c_der! Can you implement ssl_c_pem like in nginx (ssl_client_raw_cert) ? /---/ */Best regards,/* /Eugene Istomin/ > Hi all! > > At last, a release before the end of the week so that those of us with > a bad weather have something to do on Friday and something to fea

[ANNOUNCE] haproxy-1.5.8

Hi all, Dmitry reported that a "-ldl" accidently slipped into the makefile in 1.5.7, so that will cause build issues to users of systems without libdl, so I preferred to fix this before users start to upgrade. I also included Godbach's fix of the maxrewrite 0 case, which fortunately nobody runs wi

Re: 25% of requests shown as error-req

Hi Dennis, On Fri, Oct 31, 2014 at 12:51:21AM +0100, Dennis Jacobfeuerborn wrote: > On 30.10.2014 19:01, Dennis Jacobfeuerborn wrote: > ... > > > > [30/Oct/2014:18:46:36.035] front-http front-http/ > > -1/-1/-1/-1/19117 400 187 - - CR-- 49/49/0/0/0 0/0 "" > ... > > So after a bit more googling I

Re: monitor fail condition

Hi Sebastian, On Fri, Oct 31, 2014 at 03:37:39AM +0100, Sebastian Fohler wrote: > Hi Guys, > > I've searched the documentation but can't find a condition to set the > "monitor fail" to react to a page with error code 503. I have an apache > server which uses a jboss as proxy backend. So every t

Mal au dos ? Ne vous baissez plus au practice

Neuroswing, votre distributeur personnel de balles de golf View this email in your browser (http://us3.campaign-archive1.com/?u=42e9982ae64bd5ad0c1695930&id=37965b6870&e=5375e54178) Vous êtes golfeur ? Vous souhaitez AMELIORER VOTRE SWING UN MEILLEUR CONFORT DE JEU UNE CONCENTRATION OPTIMALE AU