Re: Frontend ACL rewrites URL incorrectly to backend

2015-10-05 Thread Daren Sefcik
Hey Joris, I appreciate the help...I am not sure I quite understand though, is there something I can configure in haproxy to resolve this? It is not just a Wordpress problem, I have other sites also that do not behave correctly when I put haproxy in front of them. On Mon, Oct 5, 2015 at 8:22 AM,

Re: [PATCH] BUG: config: external-check command validation is checking for incorrect arguments.

2015-10-05 Thread Ben Cabot
Sorry I'd not noticed that. Everything looks good now thank you Willy. Ben On 4 October 2015 at 09:41, Willy Tarreau wrote: > Resending after some mails were lost du to low space on device... > > On Fri, Oct 02, 2015 at 11:15:35PM +0200, Willy Tarreau wrote: > > On Fri, Oct 02,

Re: [PATCH] BUG: config: external-check command validation is checking for incorrect arguments.

2015-10-05 Thread Willy Tarreau
On Mon, Oct 05, 2015 at 06:33:36PM +0100, Ben Cabot wrote: > Sorry I'd not noticed that. Everything looks good now thank you Willy. OK thanks Ben. Willy

Re: core dump, lua service, 1.6-dev6 ss-20150930

2015-10-05 Thread PiBa-NL
Hi Thierry, With or without "option http-server-close" does not seem to make any difference. Adding a empty backend does seem to resolve the problem, stats also show the backend handling connections and tracking its 2xx http result session totals when configured like this.: frontend

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Willy Tarreau
On Mon, Oct 05, 2015 at 11:57:08PM +0200, Baptiste wrote: > Andrew, > > My appologies about the proxy_find_by_name function, I was not in the > right context!!! > Tested and approved. > > Willy, you can apply :) > > Thanks a lot for your contribution, Andrew. Applied, thanks guys! Willy

Does Haproxy supports backend on https for reverse proxy

2015-10-05 Thread Kuchekar, Yogita (Yogita)
Hi , I have installed Haproxy servere 5.1 on linux RHEL 6.1 I have configured Haproxy servere on linux at 80 port and trying to do reverse proxy with backend on https protocol (443). Is it possible in haparoxy ? Client -->http traffic -->Haproxy server-->https traffic-->backend server If I

Re: Does Haproxy supports backend on https for reverse proxy

2015-10-05 Thread Bryan Talbot
On Mon, Oct 5, 2015 at 12:49 PM, Kuchekar, Yogita (Yogita) < ykuche...@avaya.com> wrote: > Hi , > > > > I have installed Haproxy servere 5.1 on linux RHEL 6.1 > Assuming you mean haproxy version 1.5, then yes both scenarios are possible. I'm sure you can find many blog posts and sample

Re: Does Haproxy supports backend on https for reverse proxy

2015-10-05 Thread Bryan Talbot
On Mon, Oct 5, 2015 at 1:42 PM, Kuchekar, Yogita (Yogita) < ykuche...@avaya.com> wrote: > Thanks for your reply.. > > > > Sorry for the typo. Version for Haproxy is 1.5. > > > > I have been trying to achieve this for a while referring to forum examples. > > My configuration is like this. Could

RE: req_ssl_ver ACL not working

2015-10-05 Thread Lukas Tribus
Hi Julien, >> Maybe you can also try with "curl --tlsv1.2" which should use a 3.3 >> version. > > That's a very interesting details. Indeed curl sets the HELLO version to > 0x0303 > whereas OpenSSL uses 0x0301. Interestingly, both Firefox and Chrome also > use 0x0301 > in the version of the

RE:recycled shopping canvas bag / cotton canvas bag/ printing canvas bag 10/5/2015 4:46:04 PM

2015-10-05 Thread Custom_bags
Dear Sir/Madam, Good day! This is RONTA(XIAMEN)CO.,LTD. We are specializing in design, development, production and sales of different types of bags for many years, the company passed ISO9001 quality system certification. Following are some featured bags we’re doing: 1.Drawstring bags

Re: Health check and flapping

2015-10-05 Thread Baptiste
Hi, I've not forgotten you, I'm just running out of time. Baptiste On Tue, Sep 29, 2015 at 5:43 PM, wrote: > Le 2015-08-28 16:40, Baptiste a écrit : >> >> Le 28 août 2015 15:45, a écrit : >> > >> > Hello, >> > >> > We have tcp-check configured on some

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Baptiste
Andrew, My appologies about the proxy_find_by_name function, I was not in the right context!!! Tested and approved. Willy, you can apply :) Thanks a lot for your contribution, Andrew. Baptiste On Mon, Oct 5, 2015 at 5:47 PM, Andrew Hayworth wrote: > On Mon,

RE: Does Haproxy supports backend on https for reverse proxy

2015-10-05 Thread Yogita
Thanks for your reply.. Sorry for the typo. Version for Haproxy is 1.5. I have been trying to achieve this for a while referring to forum examples. My configuration is like this. Could you please point me to a working example . defaults modehttp log

Outbound SMTP connection with HAProxy

2015-10-05 Thread Charles Meruwoma
Hi Everyone, Please I need help. I have this setup and I want to be able to route SMTP traffic from the client access servers to the internet via HAProxy: HAProxy: Management IP: 10.0.0.133 Virtual IP: 10.0.0.101 [A Public IP address is NAT'ed to this VIP] Microsoft Exchange 2013:

Re: Frontend ACL rewrites URL incorrectly to backend

2015-10-05 Thread Igor Cicimov
Sorry don't know why the previous message was sent only to you and not to the forum as well. Maybe because I sent it from my phone. Anyway, rectifying that now. >From what you posted about haproxy config, I can't see how can that acl cause any problems and why would haproxy rewrite the url in the

Les plus belles rencontres pour une nuit ou pour la vie

2015-10-05 Thread Marion de MecACroquer
Title: La rentrée des rencontres Site de rencontre généraliste où les femmes ont le pouvoir Découvrez le site de rencontre MecACroquer ! Un site qui change les codes de la rencontre. Ce

x-forwarded-for help

2015-10-05 Thread Travis Fitch
Hello, Some quick background; My current setup is haproxy in front of Apache on the same host. If I send a request to haproxy, I see the x-forwarded-for entry in Apache's logs and also with tcpdump tcpdump -i any -nn -A - -s 'host x.x.x.51

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Baptiste
Hi, No problem for me about the feature itself. That said, a few things should be changed in the code: - use of proxy_find_by_name() instead of parsing the proxy list - the following statement is hardly readable: "if (appctx->ctx.resolvers.ptr != NULL && appctx->ctx.resolvers.ptr != presolvers)

NOSRV error

2015-10-05 Thread Kevin COUSIN
Hi list I want to LB an https backend (Layer 4 LB), but I have a lot of NOSRV errors in log : Oct 5 15:09:38 localhost haproxy[13839]: 10.250.0.4:43318 [05/Oct/2015:15:09:38.486] fe_pp-portail-https be_pp-xctl-https/ -1/-1/0 0 -- 0/0/0/0/3 0/0 Oct 5 15:09:43 localhost haproxy[13839]:

Re: x-forwarded-for help

2015-10-05 Thread Aleksandar Lazic
Hi. Am 05-10-2015 14:29, schrieb Travis Fitch: Hello, Some quick background; My current setup is haproxy in front of Apache on the same host. If I send a request to haproxy, I see the x-forwarded-for entry in Apache's logs and also with tcpdump tcpdump -i any -nn -A - -s 'host

Re: Frontend ACL rewrites URL incorrectly to backend

2015-10-05 Thread joris dedieu
Hi, 2015-10-04 23:33 GMT+02:00 Daren Sefcik : > I am trying to make some requests go to specific backends but am finding > that in certain backends that the url gets doubled up or otherwise mangled, > ie: > > request to frontend = http://my.company.com > what the backend

Re: x-forwarded-for help

2015-10-05 Thread Daren Sefcik
On Mon, Oct 5, 2015 at 5:29 AM, Travis Fitch wrote: > My issue is, if I bypass the hardware LB, I see the X-Forwarded-For > header, if I go via the the Hardware LB to haproxy and onto Apache, I don't > see any x-forwarded-for headers in Apaches log files. I am new to

Re: core dump, lua service, 1.6-dev6 ss-20150930

2015-10-05 Thread Thierry FOURNIER
Hi, I process this email later. For waiting, I propose to you to set the "option http-server-close". Actually, the "services" doesn't support itself the keepalive, but HAProxy does this job. The "option http-server-close" expectes a server-close from the service stream. The front of HAProxy

Re: NOSRV error

2015-10-05 Thread Conrad Hoffmann
Hi, (comments inline) On 10/05/2015 03:23 PM, Kevin COUSIN wrote: > Hi list > > I want to LB an https backend (Layer 4 LB), but I have a lot of NOSRV errors > in log : > > Oct 5 15:09:38 localhost haproxy[13839]: 10.250.0.4:43318 > [05/Oct/2015:15:09:38.486] fe_pp-portail-https

OPTIM : IPv6 literal address parsing

2015-10-05 Thread Mildis
Hi list, It looks like IPv6 parsing may lead to errors. The logic cannot distinguish from ‘2001:db8::1234:80’ as : - a plain IPv6 address 2001:db8::1234:80 - IPv6 2001:db8::1234 on port 80 It always default to the latter, considering any valid word made only of digits as a port. (see

Re: NOSRV error

2015-10-05 Thread Baptiste
On Mon, Oct 5, 2015 at 5:24 PM, Kevin COUSIN wrote: > Hi, > > - Mail original - >> De: "Conrad Hoffmann" >> À: "Kevin COUSIN" , haproxy@formilux.org >> Envoyé: Lundi 5 Octobre 2015 15:49:36 >> Objet: Re: NOSRV error >

Re: NOSRV error

2015-10-05 Thread Kevin COUSIN
Hi, - Mail original - > De: "Conrad Hoffmann" > À: "Kevin COUSIN" , haproxy@formilux.org > Envoyé: Lundi 5 Octobre 2015 15:49:36 > Objet: Re: NOSRV error > Hi, > > (comments inline) > > On 10/05/2015 03:23 PM, Kevin COUSIN wrote: >> Hi

Re: OPTIM : IPv6 literal address parsing

2015-10-05 Thread David du Colombier
> It looks like IPv6 parsing may lead to errors. > The logic cannot distinguish from ‘2001:db8::1234:80’ as : > - a plain IPv6 address 2001:db8::1234:80 > - IPv6 2001:db8::1234 on port 80 As far I remember, to prevent this confusion, we made the final colon mandatory on IPv6 addresses. This way,

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Andrew Hayworth
On Mon, Oct 5, 2015 at 7:24 AM, Baptiste wrote: > Hi, > > No problem for me about the feature itself. > That said, a few things should be changed in the code: > > - use of proxy_find_by_name() instead of parsing the proxy list I'm fairly certain that 'proxy_find_by_name' does