Re: HAProxy in front of Docker Enterprise problem

Hi. Am 13.02.2019 um 00:21 schrieb Norman Branitsky: > I have an HAProxy 1.7 server sitting in front of a number of Docker Enterprise > Manager nodes and Worker nodes. > > The Worker nodes don’t appear to have any problem with HAProxy terminating the > SSL and connecting to them via HTTP. > > Th

Re: haproxy segfault

Hi. Am 12.02.2019 um 18:36 schrieb Mildis: > Hi list, > > haproxy is segfaulting multiple times these days for no apparent reason. > At first i thought is was a load issue but even few RPS made it crash. > > Symptoms are always the same : segfault of a worker then spawn of a new. > If load is ve

Re: Anyone heard about DPDK?

Hi all. Wow so much feedback, thanks all for the answers ;-) Am 12.02.2019 um 15:23 schrieb Alexandre Cassen: > There has been a lot of applications/stack built around DPDK last few years. > Mostly because people found it easy to code stuff around DPDK and are so happy > to display perf graph abo

Re: [PATCH] CONTRIB: contrib/prometheus-exporter: Add a Prometheus exporter for HAProxy

Am 11.02.2019 um 10:40 schrieb Christopher Faulet: > Le 09/02/2019 à 10:47, Aleksandar Lazic a écrit : >> Hi Christopher. >> >> Am 07-02-2019 22:09, schrieb Christopher Faulet: >>> Hi, >>> >>> This patch adds a new component in contrib. It is a P

Re: Anyone heard about DPDK?

Am 10.02.2019 um 12:06 schrieb Lukas Tribus: > On Sun, 10 Feb 2019 at 10:48, Aleksandar Lazic wrote: >> >> Hi. >> >> I have seen this in some twitter posts and asked me if it's something >> useable for a Loadbalancer like HAProxy ? >> >> https:

Anyone heard about DPDK?

Hi. I have seen this in some twitter posts and asked me if it's something useable for a Loadbalancer like HAProxy ? https://www.dpdk.org/ To be honest it looks like a virtual NIC, but I'm not sure. Regards Aleks

Re: [PATCH] CONTRIB: contrib/prometheus-exporter: Add a Prometheus exporter for HAProxy

Hi Christopher. Am 07-02-2019 22:09, schrieb Christopher Faulet: Hi, This patch adds a new component in contrib. It is a Prometheus exporter for HAProxy. [snipp] More details in the README. I'm not especially a Prometheus expert. And I must admit I never use it. So if anyone have comments

Re: [ANNOUNCE] haproxy-1.9.4

Am 06.02.2019 um 17:19 schrieb Willy Tarreau: > Hi Aleks, > > On Wed, Feb 06, 2019 at 05:16:58PM +0100, Aleksandar Lazic wrote: >> Maybe this patch was to late for 1.9.4 please can you consider to add it >> to 2.0 and later 1.9.5, thanks. >> >> https://www.mail

Re: Weighted Backend's

Hi James. Am 06.02.2019 um 16:16 schrieb James Root: > Hi All, > > I am doing some research and have not really found a great way to configure > HAProxy to get the desired results. The problem I face is that I a service > backed by two separate collections of servers. I would like to split traffi

Re: [ANNOUNCE] haproxy-1.9.4

Hi willy. Am 06.02.2019 um 15:25 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9.4 was released on 2019/02/06. It added 65 new commits > after version 1.9.3. Images are updated. https://hub.docker.com/r/me2digital/haproxy-19-boringssl https://hub.docker.com/r/me2digital/haproxy19 Maybe this patch

Re: info defaults maxconn

Hi Federico. Am 06.02.2019 um 15:33 schrieb Federico Iezzi: > Hey there, > > Maybe this is gonna be a very simple answer. > In HAProxy 1.5.18 seems that the defaults maxconn have a global influence and > not per backend one. > > In my case I have global maxconn at 5120001, while defaults at 256

Re: Opinions about DoH (=DNS over HTTPS) as resolver for HAProxy

Hi Lukas. Am 04.02.2019 um 21:39 schrieb Lukas Tribus: > Hello, > > On Mon, 4 Feb 2019 at 12:14, Aleksandar Lazic wrote: >> >> Hi. >> >> I have just opened a new Issue about DoH for resolving. >> >> https://github.com/haproxy/haproxy/issues/33 >&

Opinions about DoH (=DNS over HTTPS) as resolver for HAProxy

Hi. I have just opened a new Issue about DoH for resolving. https://github.com/haproxy/haproxy/issues/33 As I know that this is a major change in the Infrastructure I would like to here what you think about this suggestion. My opinion was at the beginning against this change as there was only

Re: [PATCH] DOC: Add HTX part in the documentation

Sorry have forgotten to add. Need to backport to 1.9 Regards Aleks Ursprüngliche Nachricht Von: Aleksandar Lazic Gesendet: 2. Februar 2019 10:01:26 MEZ An: haproxy@formilux.org Betreff: [PATCH] DOC: Add HTX part in the documentation Hi. attached a doc update for the new

[PATCH] DOC: Add HTX part in the documentation

Hi. attached a doc update for the new features of HAProxy 1.9. I hope the patch full fills the CONTRIBUTING rules as I haven't send patched to the list for long time ;-) Regards AleksFrom c0e025e81b87a23f679aff80bddc02a96c4d43b0 Mon Sep 17 00:00:00 2001 From: Aleksandar Lazic Date: Sat,

Re: Early connection close, incomplete transfers

Hi. Do you have any errors in lighthttpds log? Regards Aleks Ursprüngliche Nachricht Von: Veiko Kukk Gesendet: 1. Februar 2019 12:33:39 MEZ An: Aleksandar Lazic CC: haproxy@formilux.org Betreff: Re: Early connection close, incomplete transfers On 2019-01-31 12:57

Re: RTMP and Seamless Reload

ential and/or privileged information. If you are not the named > addressee or have received this e-mail in error, please notify the sender > immediately. The unauthorised disclosure, use or reproduction of this email's > content is prohibited. Unless expressly agreed, no reliance on

Re: Early connection close, incomplete transfers

Hi. Am 31.01.2019 um 10:29 schrieb Veiko Kukk: > HAproxy 1.9.3, but happens also with 1.7.10, 1.7.11. > > Connections are getting closed during data transfer phase at random sizes on > backend. Sometimes just as little as 420 bytes get transferred, but usually > more is transferred before sudde

Re: RTMP and Seamless Reload

Hi. Am 30.01.2019 um 13:08 schrieb Erlangga Pradipta Suryanto: > Hi, > > I'm trying to use haproxy to proxy rtmp stream to an nginx rtmp backend. > what we want to achieve is, we will add more nginx rtmp servers on the > backend, and when we do we want to reload the haproxy config without closin

Re: HTTP connection is reset after each request

t; — > Luke Seelenbinder > Stadia Maps | Founder > stadiamaps.com > > ‐‐‐ Original Message ‐‐‐ > On Wednesday, January 30, 2019 12:02 PM, Aleksandar Lazic > wrote: > >> Hi. >> > >> Am 30.01.2019 um 11:53 schrieb Marco Corte: >> > >

Re: HTTP connection is reset after each request

Hi. Am 30.01.2019 um 11:53 schrieb Marco Corte: > Il 2019-01-30 11:40 Luke Seelenbinder ha scritto: > > >> Are you on 1.9.x? 1.8.x does not support reuse of backend connections >> when using an h2 frontend. 1.9.x does support this and it works quite >> nicely. > > Yes! I am on version 1.8.17. >

Cache question

Hi. I plan to use HAProxy 1.9.x cache with ~50-100k Objects which will could use 1-2G RAM. Have anyone used the cache features in prod with such specs? The Idea is to use HAProxy in AUS for a Webserver in FR for caching as the latency delays the delivery from FR to AUS Clients. Thank you for

Re: [ANNOUNCE] haproxy-1.9.3

Am 29.01.2019 um 06:52 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9.3 was released on 2019/01/29. It added 35 new commits after > version 1.9.2. > > It mainly addresses a few stability issues affecting versions up to 1.9.2. > Several of these issues are only reproducible when using H2 to connect

Re: V1.9 SSL engine and ssl-mode-async is unstable

Hi. Am 25-01-2019 08:55, schrieb Kevin Zhu: HI HAProxy Team,: I am trying to use Intel qat work with HAProxy-1.9.0, but it work very unstable. and i had other try HAProxy-1.8.16 and it work will, How can i find what is wrong? 1.8.16 and 1.9.0 use same hardwave and system to running and compil

Re: h1-client to h2-server host header / authority conversion failure.?

Hi List. Am 25-01-2019 01:01, schrieb PiBa-NL: Hi List, Attached a regtest which i 'think' should pass. **   s1    0.0 === expect tbl.dec[1].key == ":authority" s1    0.0 EXPECT tbl.dec[1].key (host) == ":authority" failed It seems to me the Host <> Authority conversion isn't happening p

Re: haproxy 1.9.2 with boringssl

Am 24.01.2019 um 15:09 schrieb Aleksandar Lazic: > Am 24.01.2019 um 03:49 schrieb Willy Tarreau: >> On Wed, Jan 23, 2019 at 09:37:46PM +0100, Aleksandar Lazic wrote: >>> >>> Am 23.01.2019 um 21:27 schrieb Willy Tarreau: >>>> On Wed, Jan 23, 2019 at 0

Re: haproxy 1.9.2 with boringssl

Am 24.01.2019 um 03:49 schrieb Willy Tarreau: > On Wed, Jan 23, 2019 at 09:37:46PM +0100, Aleksandar Lazic wrote: >> >> Am 23.01.2019 um 21:27 schrieb Willy Tarreau: >>> On Wed, Jan 23, 2019 at 09:08:00PM +0100, Aleksandar Lazic wrote: >>>> Should it be possible

Re: haproxy 1.9.2 with boringssl

Am 23.01.2019 um 21:27 schrieb Willy Tarreau: > On Wed, Jan 23, 2019 at 09:08:00PM +0100, Aleksandar Lazic wrote: >> Should it be possible to have fe with h1 and be server h2(alpn h2), as I >> expect this or similar return value when I go thru haproxy? > > Yes absolutely.

Re: haproxy 1.9.2 with boringssl

Hi Willy. Am 23.01.2019 um 19:50 schrieb Willy Tarreau: > Hi Aleks, > > On Wed, Jan 23, 2019 at 06:58:25PM +0100, Aleksandar Lazic wrote: >> backend be_generic_tcp >> mode http >> balance source >> timeout check 5s >> option tcp-check >> &g

Re: haproxy 1.9.2 with boringssl

n/2019:17:50:50.727] public_tcp public_tcp/ -1/-1/-1/-1/0 0 0 - - PR-- 1/1/0/0/0 0/0 "" <30>1 2019-01-23T17:50:50+00:00 doh-001 haproxy 1 - - 127.0.0.1:54178 [23/Jan/2019:17:50:50.715] public_tcp be_generic_tcp/google-mail 0/0/13/-1/13 502 208 - - SH-- 1/1/0/0/0 0/0 "GET / HTTP/1.1"

Re: H2 Server Connection Resets (1.9.2)

Hi Lukas. Am 23.01.2019 um 10:24 schrieb Luke Seelenbinder: > Hi Willy, > > Thanks for continuing to look into this. > >> > >> I've place an nginx instance after my local haproxy dev config, and >> found something which might explain what you're observing : the process >> apparently leaks FDs

Re: haproxy 1.9.2 with boringssl

Am 22.01.2019 um 21:45 schrieb Adam Langley: > On Tue, Jan 22, 2019 at 12:13 PM Aleksandar Lazic wrote: >> Sorry for my dump question, I just want to be save not to break something. >> >> It would be nice to have the option '-key-update' in client.cc and server.cc

Re: haproxy 1.9.2 with boringssl

Tim. Am 22.01.2019 um 20:57 schrieb Tim Düsterhus: > Aleks, > > Am 22.01.19 um 20:50 schrieb Aleksandar Lazic: >> This means that the function in haproxy works but the check should be >> adopted to >> match both cases, right? > > At least one should investiga

Re: haproxy 1.9.2 with boringssl

Am 22.01.2019 um 20:54 schrieb Adam Langley: > On Tue, Jan 22, 2019 at 11:45 AM Aleksandar Lazic wrote: >> Can it be reused to test a specific server like? >> >> ssl/test/runner/runner -test "KeyUpdate-ToServer" 127.0.0.1:8443 > > Not easily: it drives the i

Re: haproxy 1.9.2 with boringssl

Tim. Am 22.01.2019 um 20:26 schrieb Tim Düsterhus: > Aleks, > > Am 22.01.19 um 19:38 schrieb Aleksandar Lazic: >> ## test results in: >> "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.76167f9e" >> s10.0 EXPECT req.http.test3maskff (2001:db8:

Re: haproxy 1.9.2 with boringssl

Am 22.01.2019 um 20:30 schrieb Adam Langley: > On Tue, Jan 22, 2019 at 11:16 AM Aleksandar Lazic wrote: >> Agree that I get a 400 with this command. >> >> `echo 'K' | ./tool/bssl s_client -connect mail.google.com:443` > > (Note that "K" on its

Re: haproxy 1.9.2 with boringssl

Am 22.01.2019 um 20:04 schrieb Adam Langley: > On Tue, Jan 22, 2019 at 10:54 AM Aleksandar Lazic wrote: >> Do have boringssl a similar tool like s_client? > > BoringSSL builds tool/bssl (in the build directory), which is similar. > However it doesn't have any magic in

Re: haproxy 1.9.2 with boringssl

Am 22.01.2019 um 19:54 schrieb Aleksandar Lazic: > Cool, thanks. > > Do have boringssl a similar tool like s_client? > > I don't like to build openssl just for s_client call :-) Answer my own question. bssl is the boringssl tool command. The open question is why the test

Re: haproxy 1.9.2 with boringssl

Cool, thanks. Do have boringssl a similar tool like s_client? I don't like to build openssl just for s_client call :-) Regards Aleks Ursprüngliche Nachricht Von: Janusz Dziemidowicz Gesendet: 22. Jänner 2019 19:49:15 MEZ An: Aleksandar Lazic CC: HAProxy Betref

haproxy 1.9.2 with boringssl

Hi. I have now build haproxy with boringssl and it looks quite good. Is it the recommended way to simply make a git clone without any branch or tag? Does anyone know how the KeyUpdate can be tested? ### HA-Proxy version 1.9.2 2019/01/16 - https://haproxy.org/ Build options : TARGET = linux262

Re: Automatic Redirect transformations using regex?

Am 21.01.2019 um 23:40 schrieb Joao Guimaraes: > Hi Haproxy team! > > I've been trying to figure out how to perform automatic redirects based on > source URL transformations.  > > *Basically I need the following redirect: * > > mysite.*abc* redirected to *abc*.mysite.com . Maybe you can reu

Re: H2 Server Connection Resets (1.9.2)

Hi Luke. Am 21.01.2019 um 10:30 schrieb Luke Seelenbinder: > Hi all, > > One more bug (or configuration hole) from our transition to 1.9.x using > end-to-end h2 connections. > > After enabling h2 backends (technically `server … alpn h2,http/1.1`), we > began seeing a high number of backend /se

Re: HAProxy with OpenSSL 1.1.1 breaks when TLS 1.3 KeyUpdate is used.

Thank you for clarification. Regard Aleks Ursprüngliche Nachricht Von: Adam Langley Gesendet: 21. Jänner 2019 00:12:59 MEZ An: Aleksandar Lazic CC: haproxy@formilux.org, Willy Tarreau , eb...@haproxy.com Betreff: Re: HAProxy with OpenSSL 1.1.1 breaks when TLS 1.3 KeyUpdate

Re: HAProxy with OpenSSL 1.1.1 breaks when TLS 1.3 KeyUpdate is used.

Hi. As far as I understood the keyupdate https://tools.ietf.org/html/rfc8446 4.6.3 which you refer proper isn't it also a option to use https://wiki.openssl.org/index.php/TLS1.3#Renegotiation which refers to https://www.openssl.org/docs/manmaster/man3/SSL_key_update.html instead of the sugge

Re: haproxy issue tracker discussion

Cool, thanks :-) Ursprüngliche Nachricht Von: Lukas Tribus Gesendet: 18. Jänner 2019 14:14:06 MEZ An: Aleksandar Lazic CC: haproxy , Willy Tarreau , "Tim Düsterhus" Betreff: Re: haproxy issue tracker discussion Hello Aleksandar, On Fri, 18 Jan 2019 at 12:54,

Re: haproxy issue tracker discussion

Hi. As there are now the github templates in the repo can / should we start to create issues & features on github? Regards Aleks Ursprüngliche Nachricht Von: Willy Tarreau Gesendet: 14. Jänner 2019 04:11:17 MEZ An: "Tim Düsterhus" CC: Lukas Tribus , haproxy Betreff: Re: h

Re: [ANNOUNCE] haproxy-1.9.2

Hi Willy, Am 17-01-2019 15:41, schrieb Willy Tarreau: Hi Aleks, On Thu, Jan 17, 2019 at 01:02:56PM +0100, Aleksandar Lazic wrote: > Very likely, yes. If you want to inspect the body you simply have to > enable "option http-buffer-request" so that haproxy waits for the body &g

Re: [ANNOUNCE] haproxy-1.9.2

Hi Willy. Am 17.01.2019 um 04:25 schrieb Willy Tarreau: > Hi Aleks, > > On Wed, Jan 16, 2019 at 11:52:12PM +0100, Aleksandar Lazic wrote: >> For service routing are the standard haproxy content routing options possible >> (path, header, ...) , right? > > Yes absolutel

Re: [ANNOUNCE] haproxy-1.9.2

Hi. Am 16.01.2019 um 19:02 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9.2 was released on 2019/01/16. It added 58 new commits > after version 1.9.1. > > It addresses a number of lower importance pending issues that were not > yet merged into 1.9.1, one bug in the cache and fixes some long-standi

Re: How to replicate RedirectMatch (apache reverse proxy) in Haproxy

Hi. Am 16.01.2019 um 16:35 schrieb mirko stefanelli: > Hi to all, > > we are trying to move from Apache reverse proxy to Haproxy, you can see below > a > part of del file Apache httpd.conf: > > >  ServerName dipendenti.xxx.xxx.it >  ErrorLog logs/intranet_ssl_error_log >  TransferLog l

Re: Get client IP

gt; From: Vũ Xuân Học > Sent: Wednesday, January 16, 2019 10:37 AM > To: 'Aleksandar Lazic' ; 'haproxy@formilux.org' > ; 'PiBa-NL' > Subject: RE: Get client IP > > Hi, > > I have other problem. I want to only allow some ip access my website.

Re: Get client IP

conf/haproxy-config.template#L180 https://github.com/openshift/router/blob/master/images/router/haproxy/conf/haproxy-config.template#L198 Regards Aleks > *From:* Aleksandar Lazic > *Sent:* Monday, January 14, 2019 8:45 AM > *To:* haproxy@formilux.org; Vũ Xuân Học ; 'PiBa-NL' >

RE: Get client IP

the client ip as the setup works in the http config. Best regards Aleks Ursprüngliche Nachricht Von: "Vũ Xuân Học" Gesendet: 14. Jänner 2019 02:17:23 MEZ An: 'PiBa-NL' , 'Aleksandar Lazic' , haproxy@formilux.org Betreff: RE: Get client IP Thanks

Re: Get client IP

Hi. Am 13.01.2019 um 12:17 schrieb Vũ Xuân Học: > Hi, > > Please help me to solve this problem. > > I use HAProxy version 1.5.18, SSL transparent mode and I can not get client IP > in my .net mvc website. With mode http, I can use option forwardfor to catch > client ip but with tcp mode, my web

Re: haproxy issue tracker discussion

Am 09.01.2019 um 15:22 schrieb Willy Tarreau: > Hi Tim, > > On Wed, Jan 09, 2019 at 12:58:30PM +0100, Tim Düsterhus wrote: >> Am 09.01.19 um 05:31 schrieb Willy Tarreau: >>> Except that the "naturally" part here is manually performed by someone, >>> and an issue tracker is nothing more than an org

Re: Question about Maglev algorithm

Am 29.12.2018 um 19:25 schrieb Valentin Vidic: > On Sat, Dec 29, 2018 at 06:03:51PM +0100, Aleksandar Lazic wrote: >> I thought I have misunderstood the Idea behind maglev, thanks for >> clarification. > > Found another mention of Maglev [Eis16] for high-level lo

Re: Question about Maglev algorithm

Am 29.12.2018 um 07:41 schrieb Willy Tarreau: > On Fri, Dec 28, 2018 at 07:55:11PM +0100, Aleksandar Lazic wrote: >> Well as far as I understood the pdf one of the biggest difference is that >> Maglev is a distributed system where the consistent hash is for local system. > >

Re: Question about Maglev algorithm

Well as far as I understood the pdf one of the biggest difference is that Maglev is a distributed system where the consistent hash is for local system. What I think is if consistent hash uses the peers table for balancing it could be similar to Maglev, but I'm not a algo expert, just an Idea. I

Question about Maglev algorithm

Hi. Have anyone take a look into the Maglev algorithm ? This paper looks very interesting https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/44824.pdf Regards Aleks

Tweet about Facebook's implementation and deployment of QUIC

Hi. I just have seen this tweet, maybe it's also interesting for you. Subodh Iyengar (@__subodh) twitterte um 10:18 nachm. on Mi., Dez. 26, 2018: Slides for my presentation at ACM conext on Facebook's implementation and deployment of QUIC are now live https://conferences2.sigcomm.org/co-next/2

RE: Http HealthCheck Issue

prüngliche Nachricht Von: "UPPALAPATI, PRAVEEN" Gesendet: 27. Dezember 2018 06:24:43 MEZ An: Aleksandar Lazic , haproxy Betreff: RE: Http HealthCheck Issue Hi Alex, If I have one vhost representing all the nexus host's how can haproxy identify which server is down ? I

Re: haproxy AIX 7.1.0.0 compile issues

Hi Patrick. Am 26-12-2018 22:26, schrieb Overbey, Patrick (Sioux Falls): Hello, First off, I want to say thank you for your hard work on haproxy. It is a very fine piece of software. I recently ran into a bug compiling haproxy 1.9+ on AIX 7.1 7100-00-03-1115 using gmake 4.2 and gcc 8.1.0. I

Re: HA Proxy Load Balancer

oxy.com/blog/the-four-essential-sections-of-an-haproxy-configuration/ https://www.haproxy.com/blog/introduction-to-haproxy-acls/ In any case please post some logs, configs or anything directly in the mail body so that the persons which reads this list via a console are able to follow it without to ope

Re: HA Proxy Load Balancer

help you. haproxy -vv anonymized config Regards Aleks -Original Message----- From: Aleksandar Lazic Sent: Thursday, December 20, 2018 2:00 PM To: Lance Melancon Cc: haproxy@formilux.org Subject: Re: HA Proxy Load Balancer CAUTION: This email originated from outside Cypress-Fairban

Re: [ANNOUNCE] haproxy-1.9.0

Hi Willy. Am 20-12-2018 10:29, schrieb Willy Tarreau: On Thu, Dec 20, 2018 at 09:17:00AM +0100, Aleksandar Lazic wrote: Runtime API Improvements: It would be nice when you add a block that hanging or dead processes can also be debugged with this API now. Maybe I have overseen it. It is

Re: HA Proxy Load Balancer

Hi Lance. Am 20-12-2018 18:20, schrieb Lance Melancon: We are testing the load balancer and it's working but I can't see how to direct the server to a specific website such as server.net/site. Is this possible? Syntax? Thanks! Well yes. I think it is a good starting point to read and underst

Re: Http HealthCheck Issue

version, as it's normally not a big deal to setup a vhost. Regards Aleks PS: What's this urldefense.proofpoint.com crap 8-O > Please advice. > > Thanks, > Praveen. > > > > -Original Message- > From: Aleksandar Lazic [mailto:al-hapr...@none.at] > Sent: Wednesday, Dece

Re: [ANNOUNCE] haproxy-1.9.0

Am 20.12.2018 um 06:48 schrieb Willy Tarreau: > On Wed, Dec 19, 2018 at 11:31:33PM +0100, Aleksandar Lazic wrote: >>> Well, I know that so quick a summary doesn't do justice to the developers >>> having done all this amazing work, but I've seen that some of my cowo

Re: [ANNOUNCE] haproxy-1.9.0

Hi. Am 19.12.2018 um 19:33 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9.0 was released on 2018/12/19. It added 45 new commits > after version 1.9-dev11. > > We still had a number of small issues causing the various artefacts that > have been visible on haproxy.org since this week-end, but now ev

Re: Http HealthCheck Issue

Am 19.12.2018 um 21:04 schrieb UPPALAPATI, PRAVEEN: > Ok then do I need to add the haproxy server? I suggest to use a `curl -v /nexus/v1/repository/rawcentral/com.att.swm.attpublic/healthcheck.txt` and see how curl make the request. I assume that nexus have a general URL and not srv1,srv2, ... Fo

Re: MQTT CONNECT parsing in Lua

Hi Baptiste. Am 11.12.2018 um 03:29 schrieb Baptiste: > Hi guys, > > At last AWS conference, I met with a engineer who was using HAProxy to > load-balance IoT devices through HAProxy using MQTT protocol and he was > complaining about the poor performance of the server with 10k of devices just > g

Re: sample fetch: add bc_http_major

Hi Jerome. Am 07.12.2018 um 15:37 schrieb Jerome Magnin: > Hi Aleks, > > On Fri, Dec 07, 2018 at 01:46:53PM +0100, Aleksandar Lazic wrote: >> Hi Jerome. >> [...] >> I suggest to use a dedicated function for that, jm2c. >> >> { "bc_http_major&qu

Re: Simply adding a filter causes read error

Requests/sec: 229817.63 > Transfer/sec:    186.30MB > > thanks > > - Original Message - > *From:* "flamese...@yahoo.co.jp" > *To:* Aleksandar Lazic ; "haproxy@formilux.org" > > *Date:* 2018/12/7, Fri 09:06 > *Subject:* R

Re: sample fetch: add bc_http_major

Hi Jerome. Am 07.12.2018 um 10:26 schrieb Jerome Magnin: > Hi, > > the attached patch adds bc_http_major. It returns the HTTP major encoding of > the > backend connection, based on the the on-wire encoding. cool Idea ;-) I suggest to use a dedicated function for that, jm2c. { "bc_http_major"

Re: Simply adding a filter causes read error

Hi. Am 06.12.2018 um 15:20 schrieb flamese...@yahoo.co.jp: > Hi, > > I have a haproxy(v1.8.14) in front of several nginx backends, everything works > fine until I add compression in haproxy. There is a similar thread about this topic. https://www.mail-archive.com/haproxy@formilux.org/msg31897.h

Re: [ANNOUNCE] haproxy-1.9-dev9 : the last mile

Am 02.12.2018 um 20:29 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev9 was released on 2018/12/02. It added 147 new commits > after version 1.9-dev8. Image is now updated ;-) https://hub.docker.com/r/me2digital/haproxy19/ ### HA-Proxy version 1.9-dev9 2018/12/02 Copyright 2000-2018 Willy Tarr

Re: Generic backend in HAProxy config with server options as placeholders

roxy-dconv/1.8/configuration.html#4-server-template So you would like to have something like this, is this possible, I don't think so? backend generic server-template myserver 1-3 %[req.hdr(X-MyHeader)]:80 check source 0.0.0.0 usesrc %[dst] Which version of HAProxy do you use? haproxy -vv

Re: Generic backend in HAProxy config with server options as placeholders

Hi. Am 14.11.2018 um 08:46 schrieb Vijay Bais: > Hello, > > We have a requirement wherein a single generic backend with server options > configured as placeholders, which will resolve on the fly or at runtime. > > Currently, we have to define multiple backends (has to be hardcoded) and > select

Re: [PATCH] HTTP 103 response (Early Hints)

Hi Fred. Sorry to be picky but I still think that there is some missing text in the documentation, as mentioned before. http://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=06f5b6435ba99b7a6a034d27b56192e16249f6f0 MINOR: doc: Add information about "early-hint" http-request action. As I could b

Re: HTTP/3 | daniel.haxx.se

Am 12.11.2018 um 23:31 schrieb Willy Tarreau: > On Mon, Nov 12, 2018 at 10:52:41PM +0100, Aleksandar Lazic wrote: >> Oh wow this is really a good time to get the hands dirty as QUIC is a major >> design change in HTTP, IMHO. > > Some first approaches were already attempt

Re: HTTP/3 | daniel.haxx.se

Hi Willy. Am 12.11.2018 um 21:01 schrieb Willy Tarreau: > On Mon, Nov 12, 2018 at 07:42:21PM +0100, Aleksandar Lazic wrote: >> Even I agree with you to the point that HAProxy should be able to handle this >> next upcomming/available technology, I'm not sure if it's really

Re: [PATCH] HTTP 103 response (Early Hints)

Hi Willy. Am 12.11.2018 um 21:14 schrieb Willy Tarreau: > Hi Aleks, > > On Mon, Nov 12, 2018 at 06:00:25PM +0100, Aleksandar Lazic wrote: >> Hi Fred. >> >> Am 12.11.2018 um 15:38 schrieb Frederic Lecaille: >>> Hello, >>> >>> Here is a li

Re: HTTP/3 | daniel.haxx.se

let's discuss it further off the list, if you like. Regads aleks Ursprüngliche Nachricht Von: Emmanuel Hocdet Gesendet: 12. November 2018 18:44:40 MEZ An: Aleksandar Lazic CC: haproxy@formilux.org Betreff: Re: HTTP/3 | daniel.haxx.se Hi Aleks, > Le 12 nov. 2018 à

Re: HTTP/3 | daniel.haxx.se

proxy will be able to proxy/load balance UDP? > ++ > Manu > >> Le 11 nov. 2018 à 20:38, Aleksandar Lazic a écrit : >> >> Hi. >> >> FYI. >> >> Oh no, that was quite fast after HTTP/2 >> >> https://daniel.haxx.se/blog/2018/11/11/http-3/ >> >> Regards >> Aleks >> > >

Re: [PATCH] HTTP 103 response (Early Hints)

Hi Fred. Am 12.11.2018 um 15:38 schrieb Frederic Lecaille: > Hello, > > Here is a little series of patches to implement a new http-request > action named "early-hint" to add HTTP 103 responses prior to any other > response with headers whose values are defined by log-format rules, as > this is do

HTTP/3 | daniel.haxx.se

Hi. FYI. Oh no, that was quite fast after HTTP/2 https://daniel.haxx.se/blog/2018/11/11/http-3/ Regards Aleks

Re: Issue with HAProxy as a forward proxy

Hi Vijay. Am 06.11.2018 um 10:06 schrieb Vijay Bais: > Hello, > > I'm using HAProxy 1.8 as a forward proxy with below configuration > > > > defaults >     mode                    tcp >     log                     global >     option                  tcplog >     option     

Re: CLI proxy for master process

Hi. In the meantime you can use Socklog [1] or fluent-bit [2] to listen to syslog and write to stdout as I use it in my Image. Pay attention that Fluent-bit writes by default json format to stdout. https://gitlab.com/aleks001/haproxy18-centos/blob/master/containerfiles/container-entrypoint.sh#L

Re: Design Proposal: http-agent-check, explict health checks & inline-mode

Hi Robin. Am 29.10.2018 um 20:15 schrieb Robin H. Johnson: > On Sat, Oct 27, 2018 at 01:52:29PM +0200, Aleksandar Lazic wrote: >>> Right now, if you want to use load feedback for weights, you either need >>> something entirely out-of-band from the servers back to HAProxy, o

Re: [ANNOUNCE] haproxy-1.9-dev5

Hi. Am 28.10.2018 um 21:01 schrieb Willy Tarreau: > Hi, > > HAProxy 1.9-dev5 was released on 2018/10/28. It added 58 new commits > after version 1.9-dev4. Image is updated. https://hub.docker.com/r/me2digital/haproxy19/ ## HA-Proxy version 1.9-dev5 2018/10/28 Copyright 2000-2018 Willy Tarreau

Re: apache proxy pass rules in HAproxy

all, there is a direct connection between the client and the backend node over a public IP ( of the backend node). But, what I don't understand is, if a connection attempt is made through HAProxy, why would it allow the connection to be handed off to the backend node directly ( client -> backend

Re: Design Proposal: http-agent-check, explict health checks & inline-mode

Hi Robin. Am 26.10.2018 um 20:49 schrieb Robin H. Johnson: > Hi, > > This is something I have a vague recollection of existing somewhere, but > didn't find any leads in documentation or source. > > Right now, if you want to use load feedback for weights, you either need > something entirely out-

Re: apache proxy pass rules in HAproxy

. How you > do > that depends on the backend app you are using but most of them > like apache2, tomcat etc. have specific configs that you can > find in their documentation. For example if your backend is >

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

h a silly question. No probs. Finally you fixed it. > Cheers! Regards Aleks > On Wed, Oct 24, 2018 at 12:21 AM Aleksandar Lazic <mailto:al-hapr...@none.at>> wrote: > > Am 24.10.2018 um 09:18 schrieb Igor Cicimov: > > > > > > On Wed, 24 Oct

Re: CLI proxy for master process

Am 26.10.2018 um 18:10 schrieb Willy Tarreau: > On Fri, Oct 26, 2018 at 05:58:43PM +0200, Aleksandar Lazic wrote: >> BTW what's nb in "nb(thread|proc)"? >> >> [ ] No block >> [ ] never been >> [ ] real answer, something in french ;-): > > &

Re: CLI proxy for master process

Hi, William. Am 26.10.2018 um 17:41 schrieb William Lallemand: > On Fri, Oct 26, 2018 at 05:13:00PM +0200, Aleksandar Lazic wrote: >> Hi William. >> >> Sorry for my lack of knowledge and my curiosity, you know I'm always curious >> ;-), but for which usecase ca

Re:

Hi William. Sorry for my lack of knowledge and my curiosity, you know I'm always curious ;-), but for which usecase can I use this feature? Best regards. Aleks Ursprüngliche Nachricht Von: William Lallemand Gesendet: 26. Oktober 2018 14:47:28 MESZ An: haproxy@formilux.org C

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

Am 24.10.2018 um 09:18 schrieb Igor Cicimov: > > > On Wed, 24 Oct 2018 5:06 pm Aleksandar Lazic <mailto:al-hapr...@none.at>> wrote: > > Hi. > > Am 24.10.2018 um 03:02 schrieb Igor Cicimov: > > On Wed, Oct 24, 2018 at 9:16 AM James Brown

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

Hi. Am 24.10.2018 um 03:02 schrieb Igor Cicimov: > On Wed, Oct 24, 2018 at 9:16 AM James Brown wrote: >> >> I tested enabling HTTP/2 on the frontend for some of our sites today and >> immediately started getting a flurry of failures. Browsers (at least Chrome) >> showed a lot of SPDY protocol e

Re: Lots of PR state failed connections with HTTP/2 on HAProxy 1.8.14

Hi. SPDY is not HTTP/2 . Please can you share the config and the haproxy version. Best regards Aleks Ursprüngliche Nachricht Von: James Brown Gesendet: 24. Oktober 2018 00:13:37 MESZ An: HAProxy CC: jared Betreff: Lots of PR state failed connections with HTTP/2 on HAProxy

<    1   2   3   4   5   6   7   8   9   10   >