502 Bad Gateway

2018-05-07 Thread UPPALAPATI, PRAVEEN
Hi Haproxy-Team, I have the following configuration: listen http_proxy-1000 bind *:1000 mode http option httplog http-request set-uri https://%[url_param(redirHost)]%[capture.req.uri] option http_proxy If I issue a request to that port : https://:1000 /test/test.txt?Host=:

Re: haproxy startup at boot too quick

2018-05-07 Thread Bill Waggoner
On Mon, May 7, 2018 at 8:44 PM Kevin Decherf wrote: > Hello, > > On 8 May 2018 02:32:01 CEST, Bill Waggoner wrote: > > >Anyway, when the system boots haproxy fails to start. Unfortunately I > >forgot to save the systemctl status message but the impression I get is > >that it's starting too soon.

Re: haproxy startup at boot too quick

2018-05-07 Thread Kevin Decherf
Hello, On 8 May 2018 02:32:01 CEST, Bill Waggoner wrote: >Anyway, when the system boots haproxy fails to start. Unfortunately I >forgot to save the systemctl status message but the impression I get is >that it's starting too soon. You can find all past logs of your service using `journalctl -u

haproxy startup at boot too quick

2018-05-07 Thread Bill Waggoner
I feel I should tap the screen and say "Is this on?" I just signed up for the list but the haproxy+help address didn't supply much info at all. SO I'll try this ... I just moved my running haproxy instance over to a new Intel NUC box running Ubuntu Server 18.04. SO much faster that the Raspberry

Re: 1.8.8 & 1.9dev, lua, xref_get_peer_and_lock hang / 100% cpu usage after restarting haproxy a few times

2018-05-07 Thread PiBa-NL
Hi List, Thierry, Actually this is not limited to restarts, and also happens with 1.9dev. It now happens while haproxy was running for a while and no restart was attempted while running/debugging in my NetBeans IDE.. Root cause imo is that hlua_socket_receive_yield and hlua_socket_release bo

Re: http-response set-header is unreliable

2018-05-07 Thread Tim Düsterhus
Willy, Am 03.05.2018 um 18:18 schrieb Willy Tarreau: >> Personally I'd prefer the rate limited warning over the counter. As >> outlined before: A warning counter probably will be incremented for >> multiple unrelated reasons in the longer term and thus loses it >> usefulness. Having a warning_head

Re: Domain fronting

2018-05-07 Thread Tim Düsterhus
Holger, Mildis, Am 07.05.2018 um 22:54 schrieb Holger Just: > This approach is a bit special since regular expressions (or generally > any compared value) needs to be static in HAProxy can can't contain > dynamically generated values. > FWIW on April, 27th 2018 I shipped a patch adding a strcmp

Re: Domain fronting

2018-05-07 Thread Holger Just
Hi Mildis (and this time the list too), Mildis wrote: > Is there a simple way to limit TLS domain fronting by forcing SNI and Host > header to be the same ? > Maybe add an optional parameter like "strict_sni_host" ? You can do a little trick here to enforce this without having to rely on additio

Re: Question on Caching.

2018-05-07 Thread Aaron West
Hi Willy, I think what we are looking for is some kind of small cache to accelerate the load times of a single page; this is particularly for things such as WordPress where page load times can be slow. I imagine it being set to cache the homepage only, fairly small(just a few K) and I guess it wou

stable-bot: WARNING: 13 bug fixes in queue for next release

2018-05-07 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent every week once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses to