Re: Converting from sticking on src-ip to custom auth header

2015-10-02 Thread Baptiste
You can create "dummy" backends, whose main purpose will to host a table only. IE: backend tbl_ip stick-table type ip size 10k backend tbl_hdr stick-table type string len 12 size 10k and refer them in your rules: stick on src table tbl_ip tcp-request content track-sc1 hdr(x-app-authorization)

Re: url_ip is not properly extracted in HTTP CONNECT method ?

2015-10-02 Thread Baptiste
I think the difference is in second case, HAProxy takes into account the subnet. make it faster like this: acl forbidden_dst url -m ip 192.168.0.0/24 172.16.0.0/12 10.0.0.0/8 acl forbidden_dst url_dom -m ip 192.168.0.0/24 172.16.0.0/12 10.0.0.0/8 the IP list is stored into a tree, so that's

Trasportation and Storage Service

2015-10-02 Thread Paula Sanchez
Hi, Would you like to acquire Trasportation Contacts or any Specific industry Contacts? Traget titles Comes with ( C-level, VP-level, Mid-level Owners, Managers, Directors, Operation manager and key decision Makers, etc) Information We Provide Contact Name, Title, Email, Company Name, Mailing

Re: [PATCH] BUG: config: external-check command validation is checking for incorrect arguments.

2015-10-02 Thread Igor Wiedler
Hello, I wanted to test the external-check option in 1.6 (master) and it seems like the validation logic is broken. I was wondering what the status of this patch is: http://marc.info/?l=haproxy=144240175729490=2 . Can we get it merged? Many

MINOR: doc-lua: few typos.

2015-10-02 Thread David Carlier
Hi, found few typos in the lua doc. regards, From 2b6d53fa07adfbd09edfd841b004f8cd2d7d6f82 Mon Sep 17 00:00:00 2001 From: David Carlier Date: Fri, 2 Oct 2015 11:59:38 +0100 Subject: [PATCH] MINOR: doc-lua: few typos. --- doc/lua-api/index.rst | 22 +++---

Re: retry new backend on http errors?

2015-10-02 Thread Bjorn Blomqvist
JCM writes: > > On 25 September 2014 14:47, Klavs Klavsen wrote: > > Any way to make haproxy retry requests with certain http response codes > > X times (or just until all backends have been tried) ? > > Nope. You really don't want to do this. And I'd be sad if the devs >

Re: Interactive stats socket broken on master

2015-10-02 Thread Andrew Hayworth
Hi all - On Thu, Oct 1, 2015 at 8:55 AM, Jesse Hathaway wrote: > It appears the following commit broke the interactive stats socket. > When this commit is applied the stats socket disconnects after typing > prompt and hitting enter. Attached is a patch that fixes the

Thank you.

2015-10-02 Thread Susheel Jalali
Dear Bryan and HAProxy Developers, Your insights from Sep 23 and Sep 29 helped us create a successfully accessing (HTTP mode) our products via HAProxy. We incorporated all of your insights regarding: * HTTP-request set-header (instead of reqadd path matcher) * #dontlognull * more

Re: Implementing HAProxy First Time: Conditional backend issue

2015-10-02 Thread Susheel Jalali
Dear Bryan and HAProxy Developers, Your insights from Sep 23 and Sep 29 helped us create an HAProxy configuration, successfully accessing (HTTP mode) our products via HAProxy. We incorporated all of your insights regarding: * HTTP-request set-header (instead of reqadd path matcher) *

L’actualité hebdomadaire par RFI - La nouvelle vie du père Vandenbeusch, ex-otage de...

2015-10-02 Thread RFI L'HEBDO
L’actualité hebdomadaire par RFI - 02/10/2015 Visualisez cet email dans votre navigateur http://rfi.nlfrancemm.com/HM?b=sQDDwTV3zgWiS_QkBwoQif1SYkgE4aq9qhV8xNklDUGgYdYdlxU_yVJwaswQfXQm=2cpf0W_IxdSgjvmC7wfO1w La nouvelle vie du père Vandenbeusch, ex-otage de Boko Haram Fin 2013, le prêtre

[PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-02 Thread Andrew Hayworth
Hi all - Below is a patch for the 'show stat resolvers' cli command. It changes the command such that it will show all resolvers configured, if you do not specify a resolver id. I found this useful for debugging, and plan on using it in the hatop tool. Let me know if you have any feedback on

Re: Converting from sticking on src-ip to custom auth header

2015-10-02 Thread Jason J. W. Williams
Hi Baptiste, Thank you for the help. What is the proper syntax for referencing the table in the if clause? I've tried these variations but HAProxy doesn't like any of them: tcp-request connection reject if { src_conn_cur ge 100 } table ip_map_table tcp-request connection reject if { table

truer zero downtime haproxy reloads

2015-10-02 Thread Josh Snyder
Hello, A few months ago, my colleague Joey Lynch described a "true zero downtime haproxy reload" on this mailing list [1]. The solution he implemented uses a qdisc to block outgoing SYNs to an haproxy instance that is shutting down. This prevents the operating system from assigning new

[SPAM] Account Inactivity Alert; Please Sign In!

2015-10-02 Thread Tangerine Banking
The information in this electronic mail message is private and confidential, and only intended for the addressee. Authorized Address: haproxy@formilux.org You have not signed-in to your account for a long period of time. We ask all our clients to periodically sign-in to keep their account

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-02 Thread Cyril Bonté
Hi, Le 02/10/2015 22:48, Daren Sefcik a écrit : I Hope this is the right place to ask for help..if not please flame me and send me on my way So I had haproxy 1.5 installed (as a front end for a cluster of squid proxies) on a low end Dell server with pfsense(PFS) 2.1.5 and was experiencing

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-02 Thread Daren Sefcik
Thanks Bryan/Cyril for trying to help me outI am not super familiar with dealing with systems at that level so I may need a little hand holding... Here is what the system currently tells me: [2.2.4-RELEASE][root@HTPL-PROXY-03]/root:* pfctl -si | grep current* current entries

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-02 Thread Bryan Talbot
On Fri, Oct 2, 2015 at 1:48 PM, Daren Sefcik wrote: > I Hope this is the right place to ask for help..if not please flame me and > send me on my way > > So I had haproxy 1.5 installed (as a front end for a cluster of squid > proxies) on a low end Dell server with

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-02 Thread Daren Sefcik
So after making the changes (somewhat implied by Cyril) I ran apache bench with 2 concurrent instances of "-n 1 -c 500 -w -k" and the result on haproxy stats page is: pid = 18093 (process #1, nbproc = 1) uptime = 0d 2h55m08s system limits: memmax = unlimited; ulimit-n = 100043 maxsock =

Ne passez pas à côté d'une belle rencontre

2015-10-02 Thread Marion de MecACroquer
Title: La rentrée des rencontres Site de rencontre généraliste où les femmes ont le pouvoir Découvrez le site de rencontre MecACroquer ! Un site qui change les codes de la rencontre. Ce sont les femmes qui ont le pouvoir.