RE: Heath check responds up even when server is down

2020-10-29 Thread Wesley Lukehart
I am still trying to fight this battle... This is the command I am running on Exchange to put it into maintenance mode: Set-ServerComponentState $nodeDOWN -Component HubTransport -State Draining -Requester Maintenance Set-ServerComponentState $nodeDOWN -Component ServerWideOffline

Re: [PATCH v4 0/2] add set server ssl command

2020-10-29 Thread Willy Tarreau
Hi William, On Thu, Oct 29, 2020 at 01:17:54PM +0100, William Dauchy wrote: > remaining questions/comments: > - to follow up the work done on `show stats` with weight done by Willy, > I was thinking to display use_ssl in that command as well, completely > removing the use of `show servers

[PATCH v4 2/2] MEDIUM: cli/ssl: configure ssl on server at runtime

2020-10-29 Thread William Dauchy
in the context of a progressive backend migration, we want to be able to activate SSL on outgoing connections to the server at runtime without reloading. This patch adds a `set server ssl` command; in order to allow that: - add `srv_use_ssl` to `show servers state` command for compatibility,

[PATCH v4 0/2] add set server ssl command

2020-10-29 Thread William Dauchy
Hello, This patchset is an attempt to add a new command for configure ssl on server at runtime: - the first patch is a simple preparation work - the second one is adding the new command. Now that I understand how ssl backend connections are initialized, I change it to: init SSL connection at

[PATCH v4 1/2] MINOR: ssl: create common ssl_ctx init

2020-10-29 Thread William Dauchy
so we can reuse it later Signed-off-by: William Dauchy --- src/cfgparse-ssl.c | 50 +++--- 1 file changed, 21 insertions(+), 29 deletions(-) diff --git a/src/cfgparse-ssl.c b/src/cfgparse-ssl.c index 3bac5f9dc..ca2a2efa2 100644 --- a/src/cfgparse-ssl.c

Re: Health check logging differences between 1.9 and 2.0

2020-10-29 Thread Veiko Kukk
On 2020-10-24 10:32, Willy Tarreau wrote: That sounds strange, I don't like this. This sounds like an uninitialized variable. Did you observe that the facility used is stable inside a backend for example, or does it seem to be affected by other activity ? After investigation, it appears that

Re: TCP Proxy for database connections

2020-10-29 Thread Jarno Huuskonen
Hi, On Thu, 2020-10-29 at 10:21 +0200, Jonathan Matthews wrote: > I don’t think haproxy is what you’re looking for. You’re looking for more > than a TCP proxy: you need a DB-specific-protocol-proxy. Haproxy can > listen for HTTP, above the TCP layer, but not any specific DB protocols. > > I

Re: TCP Proxy for database connections

2020-10-29 Thread Jonathan Matthews
On Thu, 29 Oct 2020 at 03:41, Anand Rao wrote: > Hi, > > I'm looking for a TCP proxy that can proxy the connection between a > database client and the database server. I want to be able to look at the > traffic and log the queries etc for mining later. I also want to use the > proxy to remove