RE: HAProxy 1.7.9 Not Capturing Application Session Cookie

2017-11-22 Thread Coscend@Coscend
Dear HAProxy Community, This is a follow up on a previous post after doing several additional configuration changes and tests. We would appreciate your insights to resolve the issue we are facing with non-capture of application session cookie in HAProxy logs. HAProxy 1.7.9 provides SSL

Re: haproxy-1.8-rc4 - FreeBSD 11.1 - master-worker daemon parent staying alive/process-owner

2017-11-22 Thread PiBa-NL
Hi William, Found the 'crash?' i was talking about earlier again. Start haproxy like this:     haproxy -f /root/hap.conf -W -D -dk -q Then issues a USR2 to the master. (the first parent/zombie is already gone so thats good imho..) It will temporarily start new workers and then immediately

Re: [PATCH] do the handshake if we can't send early data

2017-11-22 Thread Willy Tarreau
On Wed, Nov 22, 2017 at 07:15:07PM +0100, Olivier Houchard wrote: > And a second patch on top of this one. We should not stop trying to read > early data until SSL_read_early_data() returns SSL_READ_EARLY_DATA_FINISH. Both patches applied, thanks! Willy

Re: [PATCH] do the handshake if we can't send early data

2017-11-22 Thread Olivier Houchard
On Wed, Nov 22, 2017 at 05:42:42PM +0100, Olivier Houchard wrote: > Hi, > > We mistakely only try to go back to the SSL handshake when not able to send > early data if we're acting as a client, that is wrong, and leads to an > infinite loop if it happens on the server side. > The attached patch

Re: haproxy-1.8-rc4 - FreeBSD 11.1 - master-worker daemon parent staying alive/process-owner

2017-11-22 Thread PiBa-NL
Hi William, I'm not 100% sure but i think the stdout and errout files should be closed before process exit? It seems to me they are not. At least with the following php script it fails to 'read' where the output from haproxy ends and it keeps waiting. Without the -W it succeeds. Could you

Re: [RFC PATCH] BUG/MINOR: h2: use valid stream id in GOAWAY

2017-11-22 Thread Lukas Tribus
Hello Willy, 2017-11-22 6:50 GMT+01:00 Willy Tarreau : > Hi Lukas, > > On Wed, Nov 22, 2017 at 01:43:32AM +0100, Lukas Tribus wrote: >> In fact this confuses Chrome and leads to a hung connection that clears >> only by "timeout client" or "timeout server" (whatever strikes first). >

Re: haproxy 1.8-rc4: cache and HTTP/1.1 response for HTTP/1.0 request

2017-11-22 Thread Willy Tarreau
Hi Cyril, On Wed, Nov 22, 2017 at 12:07:09AM +0100, Cyril Bonté wrote: > Hi Willy and William, > > I ran some tests with the cache filter. > > In http_action_store_cache(), the code indicates that only HTTP/1.1 is > cached. This explains why I failed on my first tests with apachebench :) > The