how to handle error in haproxy action

2021-06-25 Thread reshma r
Hello all, I have an haproxy action called get_some_data in which I return nil whenever something goes wrong. In this case I don't want the send-spoe-group action to be executed (see below config), since the data to be sent is decided by the action and if there was any failure there, then there is

Re: SNI spoofing in HAproxy?

2021-06-25 Thread Tim Düsterhus
Dominik, On 6/25/21 10:42 AM, Froehlich, Dominik wrote: Your code sends a 421 if the SNI and host header don't match. Is this the recommended behavior? The RFC is pretty thin here: " Since it is possible for a client to present a different server_name in the application protocol, applicat

Re: SNI spoofing in HAproxy?

2021-06-25 Thread Froehlich, Dominik
Tim, Thank you for your reply. Your code sends a 421 if the SNI and host header don't match. Is this the recommended behavior? The RFC is pretty thin here: " Since it is possible for a client to present a different server_name in the application protocol, application server implementations

Re: [PATCH spoa-server] BUG/MINOR: build: install binary inside bin/ directory

2021-06-25 Thread Willy Tarreau
On Sun, Jun 13, 2021 at 01:13:52AM +0100, Bertrand Jacquin wrote: > Prior to the change, spoa is installed under DESTDIR with name `bin` Thanks Bertrand. I've merged it now, after realizing that I still had access to this now external repo :-) Willy

Re: [EXTERNAL] Re: built in ACL, REQ_CONTENT

2021-06-25 Thread Willy Tarreau
On Tue, Jun 08, 2021 at 06:32:50PM +0200, Lukas Tribus wrote: > Please try to ask the actual question directly next time, so we can > help you right away (https://xyproblem.info/). I didn't know this extremely common problem had a name, thanks Lukas for the link, I'll share it more often! Willy