Regarding migration on version haproxy-1.7.3

2017-06-07 Thread Devendra Joshi
Hi, currently we are using haproxy-1.5.14 & now we want to migrate on haproxy-1.7.3 is there any config changes or need to do some setting.

Re: [PATCH]: BUG/MINOR: general build fix for solaris based oses

2017-06-07 Thread Willy Tarreau
Hi David, On Wed, Jun 07, 2017 at 08:14:24PM +0100, David CARLIER wrote: > Hi, just tried a build under Illumos and the CMSG* macros implies XPG4V2 > enabled. > > Hope it is useful. Sure, now applied, thanks! Willy

Re: RFC: ipv6mask converter

2017-06-07 Thread Willy Tarreau
Hi Jarno, On Wed, Jun 07, 2017 at 08:18:55PM +0300, Jarno Huuskonen wrote: > So something like: > > > + { "ipmask", sample_conv_ipmask,ARG2(1,MSK4,MSK6), NULL, SMP_T_ADDR, > > > SMP_T_ADDR }, > > (using SMP_T_ADDR output type makes stick table complain: > http-request track-sc0

Re: OpenSSL engine and async support

2017-06-07 Thread Willy Tarreau
Hi Emeric, On Tue, Jun 06, 2017 at 03:16:39PM +0200, Emeric Brun wrote: > Here 3 new fixes: > > I noticed a segfault sometime at connection closure (first patch) > > I noticed buffer overflows using the cipher offloading in async: > > The moving or reuse of buffer addresses passed to

[PATCH]: BUG/MINOR: general build fix for solaris based oses

2017-06-07 Thread David CARLIER
Hi, just tried a build under Illumos and the CMSG* macros implies XPG4V2 enabled. Hope it is useful. Kind regards. From 9ec3a111fc885528d7ac5d78d40f0b89079b5bb3 Mon Sep 17 00:00:00 2001 From: David Carlier Date: Wed, 7 Jun 2017 20:02:43 +0100 Subject: [PATCH] BUG/MINOR:

Re: RFC: ipv6mask converter

2017-06-07 Thread Jarno Huuskonen
Hi, On Wed, Jun 07, Willy Tarreau wrote: > On Sun, Jun 04, 2017 at 07:12:38PM +0300, Jarno Huuskonen wrote: > > Hi Willy, > > > > On Sat, May 27, Willy Tarreau wrote: > > > On Sun, May 21, 2017 at 07:49:00PM +0300, Jarno Huuskonen wrote: > > > > I noticed that ipv6 version of ipmask() converter

Re: exit error regression on haproxy1.8dev

2017-06-07 Thread Emmanuel Hocdet
> Le 7 juin 2017 à 15:20, William Lallemand a écrit : > > On Wed, Jun 07, 2017 at 02:13:58PM +0200, Emmanuel Hocdet wrote: >> >>> Le 7 juin 2017 à 10:34, Emmanuel Hocdet a écrit : >>> >>> Hi, >>> >>> ok: haproxy -f test.cfg -W echo $? >>> 0

Re: exit error regression on haproxy1.8dev

2017-06-07 Thread William Lallemand
On Wed, Jun 07, 2017 at 02:13:58PM +0200, Emmanuel Hocdet wrote: > > > Le 7 juin 2017 à 10:34, Emmanuel Hocdet a écrit : > > > > Hi, > > > > ok: > >> haproxy -f test.cfg -W > >> echo $? > > 0 > > > > bad: > >> haproxy -f test.cfg > >> echo $? > > 1 > > > > With bunch of

Re: exit error regression on haproxy1.8dev

2017-06-07 Thread Emmanuel Hocdet
> Le 7 juin 2017 à 10:34, Emmanuel Hocdet a écrit : > > Hi, > > ok: >> haproxy -f test.cfg -W >> echo $? > 0 > > bad: >> haproxy -f test.cfg >> echo $? > 1 > > With bunch of modified code, i am a little lost to track the bug. > > Manu > > This patch seem correct the

Re: [PATCH] BUG/MINOR: contrib/mod_defender

2017-06-07 Thread Dragan Dosen
Hi David, Thanks for feedback! On 7.6.2017. 12:45, David CARLIER wrote: > Hi all, > similarly to modsecurity, here is a proposal for mod_defender. > > Hope it is useful. > > Kind regards. It looks good to me and can be merged to upstream if there are no objections from the others. Best

Re: HaProxy Hang

2017-06-07 Thread Dave Cottlehuber
On Wed, 7 Jun 2017, at 10:42, David King wrote: > Just to close the loop on this, last night was the time at which we were > expecting the next hang. All of the servers we updated haproxy to the > patched versions did not hang. The test servers which were running the > older version hung as

[PATCH] BUG/MINOR: contrib/mod_defender

2017-06-07 Thread David CARLIER
Hi all, similarly to modsecurity, here is a proposal for mod_defender. Hope it is useful. Kind regards. From 8cbe58187a71eb505f7439b28847dccbc82a328a Mon Sep 17 00:00:00 2001 From: David Carlier Date: Wed, 7 Jun 2017 12:39:16 +0100 Subject: [PATCH] BUG/MINOR:

Re: HaProxy Hang

2017-06-07 Thread Willy Tarreau
Hi David, On Wed, Jun 07, 2017 at 09:42:58AM +0100, David King wrote: > Just to close the loop on this, last night was the time at which we were > expecting the next hang. All of the servers we updated haproxy to the > patched versions did not hang. The test servers which were running the > older

Re: How to add custom options to CFLAGS

2017-06-07 Thread Dmitry Sivachenko
> On 07 Jun 2017, at 11:41, Willy Tarreau wrote: > > Hi Dmitry, > > On Sun, Jun 04, 2017 at 02:54:23PM +0300, Dmitry Sivachenko wrote: >>> Same here, and it's important not to create confusion on the way >>> CFLAGS are computed. >>> >>> By the way, usually if I need to add some

Re: HaProxy Hang

2017-06-07 Thread David King
Just to close the loop on this, last night was the time at which we were expecting the next hang. All of the servers we updated haproxy to the patched versions did not hang. The test servers which were running the older version hung as expected Thanks so much to everyone who fixed the issue! On

Re: How to add custom options to CFLAGS

2017-06-07 Thread Willy Tarreau
Hi Dmitry, On Sun, Jun 04, 2017 at 02:54:23PM +0300, Dmitry Sivachenko wrote: > > Same here, and it's important not to create confusion on the way > > CFLAGS are computed. > > > > By the way, usually if I need to add some specific flags (eg #define), > > I do it via DEFINE or SMALL_OPTS. If I

exit error regression on haproxy1.8dev

2017-06-07 Thread Emmanuel Hocdet
Hi, ok: > haproxy -f test.cfg -W > echo $? 0 bad: > haproxy -f test.cfg > echo $? 1 With bunch of modified code, i am a little lost to track the bug. Manu

Re: RFC: ipv6mask converter

2017-06-07 Thread Willy Tarreau
Hi Jarno, On Sun, Jun 04, 2017 at 07:12:38PM +0300, Jarno Huuskonen wrote: > Hi Willy, > > On Sat, May 27, Willy Tarreau wrote: > > On Sun, May 21, 2017 at 07:49:00PM +0300, Jarno Huuskonen wrote: > > > I noticed that ipv6 version of ipmask() converter is missing ? > > > > > > I'm attaching an