Re: load 'drain' with load-server-state-from-file fails ?

2016-06-14 Thread Nenad Merdanovic
Hello Peter, On 6/14/2016 6:37 PM, PiBa-NL wrote: > Hi list, > > While trying out how to use load-server-state-from-file i noticed that > 'drain' state set through the stats page is not restored after loading > the state back. > > I'm using haproxy 1.6.4 / 1.7-dev2 . I realize these are not the

load 'drain' with load-server-state-from-file fails ?

2016-06-14 Thread PiBa-NL
Hi list, While trying out how to use load-server-state-from-file i noticed that 'drain' state set through the stats page is not restored after loading the state back. I'm using haproxy 1.6.4 / 1.7-dev2 . I realize these are not the latest (1.6.5 has dns resolver issues), but am wondering is

http_conn_rate

2016-06-14 Thread Predrag Aleksic
Is it possible to reset http_conn_rate counter to 0 , so we dont have to wait for interval timer.

Re: Setting OCSP response via socket

2016-06-14 Thread Thijs Kinkhorst
On 14-06-16 20:10, Lukas Tribus wrote: > Am 14.06.2016 um 18:31 schrieb Thijs Kinkhorst: >> If so, I'd like it to become possible, because I'd prefer to be able to >> set this entirely via the socket approach, and not having to special >> case the initial condition where the response was not

Re: Setting OCSP response via socket

2016-06-14 Thread Lukas Tribus
Hello, Am 14.06.2016 um 18:31 schrieb Thijs Kinkhorst: If so, I'd like it to become possible, because I'd prefer to be able to set this entirely via the socket approach, and not having to special case the initial condition where the response was not present. But then you will have a race

Re: Setting OCSP response via socket

2016-06-14 Thread PiBa-NL
Op 14-6-2016 om 18:31 schreef Thijs Kinkhorst: Hi all, First, thanks for haproxy which is really valuable to us. I'm trying to set up HAproxy so it does OCSP stapling. This works when I create the $certname.ocsp file and reload haproxy, but I'm trying to get it to work by using the socket.

Setting OCSP response via socket

2016-06-14 Thread Thijs Kinkhorst
Hi all, First, thanks for haproxy which is really valuable to us. I'm trying to set up HAproxy so it does OCSP stapling. This works when I create the $certname.ocsp file and reload haproxy, but I'm trying to get it to work by using the socket. The following works for me: 1. Create .ocsp file 2.

[BUMP] Re: external-check stdout ends up in load-balanced traffic, destroying tcp sessions

2016-06-14 Thread Lukas Erlacher
BUMP The patch looks good to me and should be merged. Best, Luke On 08.06.2016 03:17, Simon Horman wrote: > On Tue, Jun 07, 2016 at 08:18:21PM +0200, Willy Tarreau wrote: >> On Tue, Jun 07, 2016 at 12:01:31PM +0200, Benoit Garnier wrote: >>> You can always open /dev/null before chrooting and

[PATCH] MINOR: systemd: Use variable for config and pidfile paths

2016-06-14 Thread Pavlos Parissis
Hi, Please consider merging the attached patch which allows users to set the location of haproxy.cfg and pidfile files by providing a systemd overwrite file /etc/systemd/system/haproxy.service.d/overwrite.conf with the following content: [Service]

Re: HTTP Keep Alive : Limit number of sessions in a connection

2016-06-14 Thread Willy Tarreau
Hi Manas, On Thu, Jun 09, 2016 at 08:15:56AM -0700, Manas Gupta wrote: > On Wed, Jun 8, 2016 at 10:44 PM, Willy Tarreau wrote: > > At the moment, haproxy checks the frontend's stopped state to decide if it > > needs to force to disable keep-alive on client connections. By the way

Re: SNI healthcheck on backend?

2016-06-14 Thread Willy Tarreau
Hi Ray, On Fri, Jun 10, 2016 at 02:15:56PM -0400, Ray Cote wrote: > Can the Health Check be driven by the SNI parameter in the server line? No because the SNI parameter takes an expression. People will typically use "ssl_fc_sni" here, meaning that the SNI of the front connection has to be