Re: IP binding and standby health-checks

2015-07-14 Thread Jarno Huuskonen
Hi, On Mon, Jul 13, Nathan Williams wrote: It seems like the easiest way to sort it out would be if the health-checks weren't also bound to the VIP so that the standby could complete them successfully. i do still want the proxied requests bound to the VIP though, forthe benefit of our

Haproxy 1.5.9 logging

2015-07-14 Thread Haim Ari
Hello, How can log requests only if path begins with /testing I already use acl with path_beg to redirect to a backend. How can i use the same method for logging ? (or any other way for the above) Thank you, Haim

Re: Rewrite cookie path cookie domain

2015-07-14 Thread rickytato rickytato
Anyone can help me? I keep using Nginx? 2015-07-07 10:46 GMT+02:00 rickytato rickytato rickyt...@r2consulting.it: 1.5.12 2015-07-06 17:58 GMT+02:00 Aleksandar Lazic al-hapr...@none.at: Dear rickytato rickytato. Am 06-07-2015 15:32, schrieb rickytato rickytato: Hi all, I've problem to

Re: IP binding and standby health-checks

2015-07-14 Thread Baptiste
On Mon, Jul 13, 2015 at 6:03 PM, Nathan Williams nath.e.w...@gmail.com wrote: Hi all, I'm hoping I can get some advice on how we can improve our failover setup. At present, we have an active-standby setup. Failover works really well, but on the standby, none of the backend servers are marked

Re: Haproxy 1.5.9 logging

2015-07-14 Thread Baptiste
On Tue, Jul 14, 2015 at 10:57 AM, Haim Ari haim@startapp.com wrote: Hello, How can log requests only if path begins with /testing I already use acl with path_beg to redirect to a backend. How can i use the same method for logging ? (or any other way for the above) Thank you, Haim hi

RE: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-07-14 Thread Lukas Tribus
Hey guys, I haven’t gotten any feedback for this feature. Unless there’s severe objections, I’ll go ahead and push this to up to master. Emeric responded here: http://marc.info/?l=haproxym=143643724320705w=2 Not sure what you mean by pushing this to master...? Lukas

Re: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-07-14 Thread Dave Zhu (yanbzhu)
Hey guys, I haven’t gotten any feedback for this feature. Unless there’s severe objections, I’ll go ahead and push this to up to master. Thanks, -Dave On 7/7/15, 3:21 PM, Dave Zhu (yanbzhu) yanb...@cisco.com wrote: Hey guys, Sorry for the radio silence, other projects picked up and so I was

Re: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-07-14 Thread Dave Zhu (yanbzhu)
Emeric responded here: http://marc.info/?l=haproxym=143643724320705w=2 Not sure what you mean by pushing this to master...? Lukas I¹m so sorry for that. I did not get that email. Even though I am subscribed to the list. IT must be filtering it somehow. I¹ll use the website from now on.

Re: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-07-14 Thread Dave Zhu (yanbzhu)
Emeric responded here: http://marc.info/?l=haproxym=143643724320705w=2 Not sure what you mean by pushing this to master...? Lukas I¹ve corrected the indentation to use tabs instead of spaces. Here¹s the new diff: Is there a better method to do code reviews other than using the mailing list?

Re: IP binding and standby health-checks

2015-07-14 Thread Nathan Williams
Hi Baptiste/Jarno, Thanks so much for responding. addr does indeed look like a promising option (though a strangely lacking explanation in the docs, which explains what it makes possible while leaving the reader to deduce what it actually does), thanks for pointing that out. Here's our config:

haproxy/hapee Transparent LB

2015-07-14 Thread Bearly Breathin
I at a bit of a loss… Last week I tried, quite unsuccessfully, to make haproxy work as I understand it should after reading the docs, FAQs, and a variety of other sources i found with Google. I purchased hapee last Friday so that I could obtain support and hopefully stop banging my head against

[SPAM] Sea freight China

2015-07-14 Thread tcyx
haproxy 0:27 Good China sea freight: Contact and get quotation: qu...@worldfreightforwarding.com

Re: Rewrite cookie path cookie domain

2015-07-14 Thread Baptiste
Please repost your question. I can't see it in my mail history. Baptiste On Tue, Jul 14, 2015 at 3:33 PM, rickytato rickytato rickyt...@r2consulting.it wrote: Anyone can help me? I keep using Nginx? 2015-07-07 10:46 GMT+02:00 rickytato rickytato rickyt...@r2consulting.it: 1.5.12

Re: IP binding and standby health-checks

2015-07-14 Thread Baptiste
As for details, it's advantageous for us for a couple of reasons... the realip module in nginx requires that you list trusted hosts which are permitted to set the X-Forwarded-For header before it will set the source address in the logs to the x-forwarded-for address. as a result, using

Tout à -50% et 10% supplémentaires !

2015-07-14 Thread IKKS
Title: IKKS Bienvenue : Tout - 50 pour cent et -10 pour cent supplmentaires !Si ce message ne s'affiche pas correctement, visualisez la version en ligne. MERCI.Nous vous

Re: Server IP resolution using DNS in HAProxy

2015-07-14 Thread Baptiste
On Sun, Jul 12, 2015 at 11:38 PM, Baptiste bed...@gmail.com wrote: hi all, As you may have noticed already, HAProxy 1.6-dev2 version has integrated a new feature: server IP address resolution using DNS. Main purpose of this dev is to make HAProxy aware of a server IP change when using

Re: IP binding and standby health-checks

2015-07-14 Thread Baptiste
Nathan, The question is: why do you want to use the VIP to get connected on your backend server? Please give a try to the following source line, instead of your current one: source 0.0.0.0 usesrc 10.240.36.13 Baptiste On Tue, Jul 14, 2015 at 9:06 PM, Nathan Williams nath.e.w...@gmail.com

FIX: wrong time unit for some default DNS timers

2015-07-14 Thread Baptiste
Hi, Madison May reported that the timeout applied by the default configuration is inproperly set up. This patch fix this: - hold valid default to 10s - timeout retry default to 1s Baptiste From d84e08b599c30fb1d0d35a3715d76c331ee4c1c4 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann

Re: substring matching backend names...

2015-07-14 Thread Phillip Decker
Tested, and very nice; that works! Thanks so much! Phillip On Sat, Jul 11, 2015 at 2:20 AM, Willy Tarreau w...@1wt.eu wrote: Hi, On Fri, Jul 10, 2015 at 04:32:38PM -0400, Phillip Decker wrote: Hello again, I was migrating a setup from the older style acl-based host to backend

Re: IP binding and standby health-checks

2015-07-14 Thread Nathan Williams
Hi Baptiste, That's a fair question :) I understand it's a rather particular request, it's just the first time we've really hit something that we weren't easily able to address with haproxy (really marvelous software, thanks y'all), so I figured we'd ask before accepting an inferior solution...

DOWN LIGHT

2015-07-14 Thread Vicky
Goodday! ThisisVicky,fromDongguanJiuLianglightingfactory.Co. Ltd. WeareLEDfactoryand have morethan10yearswork experienceinthisline,

Re: IP binding and standby health-checks

2015-07-14 Thread Nathan Williams
OK, that did not seem to work, so I think the correct interpretation of that addr option must be as an override for what address/port to perform the health-check *against* instead of from (which makes more sense in context of it being a server option). i was hoping for an option like

Re: Contribution for HAProxy: Peer Cipher based SSL CTX switching

2015-07-14 Thread Willy Tarreau
Hi Dave, On Tue, Jul 14, 2015 at 03:38:47PM +, Dave Zhu (yanbzhu) wrote: Emeric responded here: http://marc.info/?l=haproxym=143643724320705w=2 Not sure what you mean by pushing this to master...? Lukas I¹ve corrected the indentation to use tabs instead of spaces. Here¹s the

Re: haproxy/hapee Transparent LB

2015-07-14 Thread Baptiste
On Tue, Jul 14, 2015 at 7:15 PM, Bearly Breathin bearly.breet...@gmail.com wrote: I at a bit of a loss… Last week I tried, quite unsuccessfully, to make haproxy work as I understand it should after reading the docs, FAQs, and a variety of other sources i found with Google. I purchased hapee