New commitment invitation - haproxy@formilux.org

2015-04-06 Thread Ervin Marino
Sarah Smith Hi Namailu User,

Re: "proxy haproxy has no server available!"

2015-04-06 Thread Krishna Kumar Unnikrishnan (Engineering)
Thanks Igor, you pointed me to the correct answer. I removed the check.txt. I am not sure how the file got missing, my systems were down for a few days and I moved to KVM last night. Regards, - KK On Tue, Apr 7, 2015 at 11:56 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > Forgot to

Fwd: "proxy haproxy has no server available!"

2015-04-06 Thread Igor Cicimov
Forgot to cc the list. -- Forwarded message -- From: Igor Cicimov Date: Tue, Apr 7, 2015 at 4:25 PM Subject: Re: "proxy haproxy has no server available!" To: "Krishna Kumar Unnikrishnan (Engineering)" On Tue, Apr 7, 2015 at 3:58 PM, Krishna Kumar Unnikrishnan (Engineering) <

Re: "proxy haproxy has no server available!"

2015-04-06 Thread Krishna Kumar Unnikrishnan (Engineering)
It seems to be a problem with my configuration file. I tried the one from Section 2.3 of haproxy.org/download/1.5/doc/configuration.txt, and it works good now: global log 127.0.0.1 local0 log 127.0.0.1 local1 notice daemon maxconn 256 defaults log g

Re: "proxy haproxy has no server available!"

2015-04-06 Thread Krishna Kumar Unnikrishnan (Engineering)
Thanks Igor for the suggestion. I get: root@haproxy-2:/var/www# curl --http1.0 -X HEAD 192.168.122.101:80/check.txt curl: (18) transfer closed with 168 bytes remaining to read root@haproxy-2:/var/www# curl --http1.0 -X HEAD 192.168.122.102:80/check.txt curl: (18) transfer closed with 168 bytes rem

Re: "proxy haproxy has no server available!"

2015-04-06 Thread Igor Cicimov
On Tue, Apr 7, 2015 at 3:24 PM, Krishna Kumar Unnikrishnan (Engineering) < krishna...@flipkart.com> wrote: > Sorry, forgot to mention, this is haproxy version 1.5.11 > > > On Tue, Apr 7, 2015 at 10:52 AM, Krishna Kumar Unnikrishnan (Engineering) > wrote: > >> Hi all, >> >> I am moving from using

Re: "proxy haproxy has no server available!"

2015-04-06 Thread Krishna Kumar Unnikrishnan (Engineering)
Sorry, forgot to mention, this is haproxy version 1.5.11 On Tue, Apr 7, 2015 at 10:52 AM, Krishna Kumar Unnikrishnan (Engineering) < krishna...@flipkart.com> wrote: > Hi all, > > I am moving from using LXC to KVM for haproxy on my Debian 7 system. When I > start haproxy, I get this error: > _

"proxy haproxy has no server available!"

2015-04-06 Thread Krishna Kumar Unnikrishnan (Engineering)
Hi all, I am moving from using LXC to KVM for haproxy on my Debian 7 system. When I start haproxy, I get this error: _ Apr 7 10:38:22 localhost haproxy[3418]: Proxy haproxy started. Apr 7 10:38:24 localhost haproxy[3420]: Server haproxy/nginx-1 is DOWN, re

Re: Health check for backend constituted with multiple socks proxies.

2015-04-06 Thread Hongyi Zhao
On Fri, 03 Apr 2015 11:10:31 +0200, Baptiste wrote: > I mean what happens if you point your browser directly to one of the Ip > address? > Cause, what you're doing with your HAProxy configuration currently, is > only forwarding the TCP connection from a browser client to a socks5 > server. > If yo

global maxconn limit in pure TCP mode

2015-04-06 Thread Florin Andrei
HAproxy 1.5 on CentOS 7. 5 front-ends, 5 backends, mapped 1:1. Pure TCP mode. I'm basically port-forwarding the backends from a different subnet. The actual servers behind HAproxy are custom Tomcat apps capable of handling lots of connections. I suspect I cannot increase the global maxconn ind

Re: 1.5, reload and zero downtime

2015-04-06 Thread Dennis Jacobfeuerborn
On 06.04.2015 22:45, Pavlos Parissis wrote: > On 06/04/2015 08:41 μμ, Brian Fleming wrote: >> I can do reload and there will be no downtime? > > Yes, reload is a safe operation. But, don't be surprised if you see the > old process alive for long time(days). This behavior is caused by insane > time

Re: 1.5, reload and zero downtime

2015-04-06 Thread Pavlos Parissis
On 06/04/2015 08:41 μμ, Brian Fleming wrote: > I can do reload and there will be no downtime? Yes, reload is a safe operation. But, don't be surprised if you see the old process alive for long time(days). This behavior is caused by insane timeout values on the client-side used by some people(inclu

server-side connection pool manager

2015-04-06 Thread Pavlos Parissis
Hoi, While I was reading commit descriptions I saw in REORG/MAJOR: session: rename the "session" entity to "stream" [..snip..] Some more cleanup is needed because some code was already far from being clean. The server queue management still refers to sessions at many places while comments talk ab

1.5, reload and zero downtime

2015-04-06 Thread Brian Fleming
I can do reload and there will be no downtime?

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
On Mon, Apr 06, 2015 at 02:54:13PM +0200, Evgeniy Sudyr wrote: > this is server with 2x Intel I350-T4 1G Quad port NICs, where on first > card each NIC is connected to uplink provider and 2nd NIC 4 ports are > used for trunk interface with lacp connected to internal 1Gb switch > with lacp configure

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Baptiste
On Mon, Apr 6, 2015 at 2:54 PM, Evgeniy Sudyr wrote: > Btw, where Pavlos reported his test results? There in list or somewhere else? On this ML. Pavlos was running Linux ;) Baptiste

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Evgeniy Sudyr
this is server with 2x Intel I350-T4 1G Quad port NICs, where on first card each NIC is connected to uplink provider and 2nd NIC 4 ports are used for trunk interface with lacp connected to internal 1Gb switch with lacp configured as well. I've tested uplinks and internal link with iperf and was abl

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
On Mon, Apr 06, 2015 at 12:34:05PM +0200, Evgeniy Sudyr wrote: > Hi Willy, > > pleasure for me to get answer from you! > > 1) I've tested with OpenBSD's SP kernel and single process (no nbproc) > in haproxy.conf and it was no significant difference in load. OK, I was not sure whether it was the

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Evgeniy Sudyr
Hi Willy, pleasure for me to get answer from you! 1) I've tested with OpenBSD's SP kernel and single process (no nbproc) in haproxy.conf and it was no significant difference in load. I can't test to disable PF to test, because it's some kind of production router. 2) I guess solution is to get s

Re: Trouble with getting ocsp response to work

2015-04-06 Thread Vasileios Tzimourtos
Hello Jarno, thanks for the response. First of all, it worked! It was the issue that you mentioned with the 300sec SKEW. I compiled haproxy with smaller value (30 :) ) and id returns the response :) The test with the openssl that toy mentioned returns Verified OK. The problem was the reffer

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
Hi Evgeniy, On Sun, Apr 05, 2015 at 06:29:53PM +0200, Evgeniy Sudyr wrote: > Nenad, > > thank your answer! > > 1) this is only Haproxy server active (active/passive config exists, > but using carp on OpenBSD). > > 2) As I understand with nbcproc 4 I can't get stats working correctly ... > > ho

Re: Trouble with getting ocsp response to work

2015-04-06 Thread Jarno Huuskonen
Hi, On Mon, Apr 06, Vasileios Tzimourtos wrote: > **/usr/bin/openssl ocsp -noverify -issuer $ROOT_CERT_FILE -cert > $SERVER_CERT_FILE -url "$OCSP_URL" -no_nonce -header Host `echo > "$OCSP_URL" | cut -d"/" -f3` -respout $OCSP_FILE** > **echo "set ssl ocsp-response $(/usr/bin/base64 -w 1 > $OCS

Trouble with getting ocsp response to work

2015-04-06 Thread Vasileios Tzimourtos
Hello to all, i have trouble on getting a ocsp response from haproxy when i ask him with openssl. I will be detailing bellow all the steps i have taken and i get a 'OCSP Response updated!' when i pass the setting to the haproxy socket The version of the haproxy that i use is as follows: ===