Re: Linux or FreeBSD ?

2015-09-30 Thread joris dedieu
2015-10-01 1:48 GMT+02:00 Rainer Duffner : > >> Am 01.10.2015 um 01:22 schrieb Willy Tarreau : >> >>> >> >> I'd be tempted to place my judgement between yours and Jeff's. I'd say >> that if the company is already using the target OS on any other place, >> the cost of switching is low. If the load b

Re: Converting from sticking on src-ip to custom auth header

2015-09-30 Thread Jason J. W. Williams
I still would like to keep the rate limiting based on source ip but the persistence based on header. My thought was to create a second named stick table but I didn't see a name parameter to the stick-table declaration. Sent via iPhone > On Sep 30, 2015, at 18:23, Igor Cicimov > wrote: > >

Re: Converting from sticking on src-ip to custom auth header

2015-09-30 Thread Igor Cicimov
Well in case of header you would have something like this I guess: tcp-request content track-sc1 hdr(x-app-authorization) On Thu, Oct 1, 2015 at 9:47 AM, Jason J. W. Williams < jasonjwwilli...@gmail.com> wrote: > Wondered about that... Do the "tcp-request" rate limiters use the stick > table (

Re: Linux or FreeBSD ?

2015-09-30 Thread Rainer Duffner
> Am 01.10.2015 um 01:22 schrieb Willy Tarreau : > >> > > I'd be tempted to place my judgement between yours and Jeff's. I'd say > that if the company is already using the target OS on any other place, > the cost of switching is low. If the load balancer is the opportunity > to introduce a new

Re: Converting from sticking on src-ip to custom auth header

2015-09-30 Thread Jason J. W. Williams
Wondered about that... Do the "tcp-request" rate limiters use the stick table (I assume they need type ip) or another implied table? -J On Wed, Sep 30, 2015 at 3:41 PM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > The stick-table type would be string and not ip in that case though > >

Re: Linux or FreeBSD ?

2015-09-30 Thread Willy Tarreau
On Wed, Sep 30, 2015 at 09:03:48PM +0200, Rainer Duffner wrote: > > > Am 30.09.2015 um 16:25 schrieb Jeff Palmer : > > > > Arnall, > > > > > > This advice is less of an haproxy specific response, and more of > > general information. > > > > As someone who's tried to manage mixed infrastructure

Re: Converting from sticking on src-ip to custom auth header

2015-09-30 Thread Igor Cicimov
The stick-table type would be string and not ip in that case though On 01/10/2015 5:07 AM, "Jason J. W. Williams" wrote: > > We've been seeing CenturyLink and a few other residential providers NATing their IPv4 traffic, making client persistency on source IP result in really lopsided load balancin

Re: Implementing HAProxy First Time: Conditional backend issue

2015-09-30 Thread Bryan Talbot
On Wed, Sep 30, 2015 at 1:27 PM, Susheel Jalali wrote: > Dear Bryan and HAProxy Developers: > > As requested, here is the complete haproxy config content. > > The relevant error logs are below: > > -- -- > global > log 127.0.0.1 local2 > log-tag haproxy > chroot /var/

crimp BNC connector

2015-09-30 Thread admin
Contactmeformoreinformationabout BNCconnec=tors andothercompetitiveproducts. Whycooperatewithus? 1、Webelongtoastate-unitedpubliccompanywithab=igfactoryandastrongR&Dteam.Strongcapital,technologyandm=anagementbackgroundaretheguaranteeofreliablequality,fastdeliv=eryandcompetitiveprice. 2、WeR&Dand

Re: Implementing HAProxy First Time: Conditional backend issue

2015-09-30 Thread Susheel Jalali
Dear Bryan and HAProxy Developers: As requested, here is the complete haproxy config content. The relevant error logs are below: -- -- global log 127.0.0.1 local2 log-tag haproxy chroot /var/haproxy/lib pidfile /var/run/haproxy.pid user haproxy

Re: Address selection policy in dual-stack environments

2015-09-30 Thread Willy Tarreau
Hi Dmitry! On Wed, Sep 30, 2015 at 01:33:56PM +0300, Dmitry Sivachenko wrote: > > > On 29 . 2015 ??., at 23:06, Willy Tarreau wrote: > > > > On Tue, Sep 29, 2015 at 10:59:15PM +0300, Dmitry Sivachenko wrote: > >>> I *think* that getaddrinfo() provides this. You can try to build by > >>>

Re: Implementing HAProxy First Time: Conditional backend issue

2015-09-30 Thread Bryan Talbot
On Wed, Sep 30, 2015 at 12:37 PM, Susheel Jalali wrote: > Dear HAProxy Developers community: > > After incorporating inputs from some of you, we tested with an updated > haproxy.cfg (see below). Product-1 is still not accessible > Without the complete haproxy config and some logs, it was imposs

Re: Implementing HAProxy First Time: Conditional backend issue

2015-09-30 Thread Susheel Jalali
Dear HAProxy Developers community: After incorporating inputs from some of you, we tested with an updated haproxy.cfg (see below). Product-1 is still not accessible via HAProxy (see logs below). We would appreciate any insights to solve this issue. ___Haproxy.cfg file_ frontend webapps-fro

Converting from sticking on src-ip to custom auth header

2015-09-30 Thread Jason J. W. Williams
We've been seeing CenturyLink and a few other residential providers NATing their IPv4 traffic, making client persistency on source IP result in really lopsided load balancing lately. We'd like to convert to sticking on a custom header we're already using that IDs the user. There isn't a lot of exa

Re: Linux or FreeBSD ?

2015-09-30 Thread Rainer Duffner
> Am 30.09.2015 um 16:25 schrieb Jeff Palmer : > > Arnall, > > > This advice is less of an haproxy specific response, and more of > general information. > > As someone who's tried to manage mixed infrastructure, I would push > back if possible, unles syour organization has decided to move to >

Re: LUA

2015-09-30 Thread thierry . fournier
Hello, its not a dumb question, because all of this is a little bit confused. Lua is a programation language. The basics of the labguage and the main API are avalaible on the web site: http://www.lua.org/ More precisely the manual according with the Lua version in use in Haproxy is here:

Re: Linux or FreeBSD ?

2015-09-30 Thread Jeff Palmer
Arnall, This advice is less of an haproxy specific response, and more of general information. As someone who's tried to manage mixed infrastructure, I would push back if possible, unles syour organization has decided to move to freebsd entirely. Having more than one OS to maintain means writing

Re: Linux or FreeBSD ?

2015-09-30 Thread Dmitry Sivachenko
> On 30 сент. 2015 г., at 16:05, Arnall wrote: > > Hi Eveyone, > > just a simple question, is FreeBSD a good choice for Haproxy ? > Our Haproxy runs under Debian for years, but the new IT want to put it under > FreeBSD. > Any cons ? > > Thanks. > Should be roughly the same I think.

Re: Linux or FreeBSD ?

2015-09-30 Thread Kobus Bensch
I dont think it matters really. I would respond with, if it ain't broke... On 30/09/2015 14:05, Arnall wrote: Hi Eveyone, just a simple question, is FreeBSD a good choice for Haproxy ? Our Haproxy runs under Debian for years, but the new IT want to put it under FreeBSD. Any cons ? Thanks.

Linux or FreeBSD ?

2015-09-30 Thread Arnall
Hi Eveyone, just a simple question, is FreeBSD a good choice for Haproxy ? Our Haproxy runs under Debian for years, but the new IT want to put it under FreeBSD. Any cons ? Thanks.

Re: Address selection policy in dual-stack environments

2015-09-30 Thread Dmitry Sivachenko
> On 29 сент. 2015 г., at 23:06, Willy Tarreau wrote: > > On Tue, Sep 29, 2015 at 10:59:15PM +0300, Dmitry Sivachenko wrote: >>> I *think* that getaddrinfo() provides this. You can try to build by >>> adding USE_GETADDRINFO=1 to your makefile. It's not enabled by default >>> because there are nu

Re: haproxy 1.5.4 with ssl-bridging

2015-09-30 Thread Janusz Dziemidowicz
2015-09-29 21:36 GMT+02:00 Douglas Harmon : > Hello group. I'm new to haproxy. I have read the documentation but > still require some assistance. I'm trying to configure haproxy to: > > 1. accept https connection with client certs required. > 2. pass the client cert to a backend https server based

Re: LUA

2015-09-30 Thread Kobus Bensch
Ignore this, I found what I was looking for. On 30/09/2015 10:16, Kobus Bensch wrote: Hi I have been seeing a lot of LUA posts and wanted to read up on it. Is this the right site: http://www.lua.org/ I am aware of the API docs at http://www.arpalert.org/src/haproxy-lua-api/1.6dev/index.html

LUA

2015-09-30 Thread Kobus Bensch
Hi I have been seeing a lot of LUA posts and wanted to read up on it. Is this the right site: http://www.lua.org/ I am aware of the API docs at http://www.arpalert.org/src/haproxy-lua-api/1.6dev/index.html, but wanted to read a bit more and Google returned a rather long list of potential si

Re: [ANNOUNCE] haproxy-1.6-dev6

2015-09-30 Thread Willy Tarreau
Hi Joris, On Wed, Sep 30, 2015 at 08:50:12AM +0200, joris dedieu wrote: > > OK I found the reason, in my case the RST I was seeing was caused by pending > > data otherwise haproxy didn't send it by itself since we're facing the > > client. > > I've fixed it so that lingering is *really* disabled