Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-14 Thread Aleksandar Lazic
Am 13-02-2017 23:10, schrieb Willy Tarreau: On Mon, Feb 13, 2017 at 10:50:36PM +0100, Aleksandar Lazic wrote: What I mean is that. haproxy have already a config parser. Why not use this config parser and add new keyword for error files. With this approach the customers can reuse there

Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-13 Thread Aleksandar Lazic
Am 13-02-2017 14:47, schrieb Willy Tarreau: Hi Aleks, On Mon, Feb 13, 2017 at 01:19:54PM +0100, Aleksandar Lazic wrote: Hi. Am 13-02-2017 12:15, schrieb Willy Tarreau: > On Mon, Feb 13, 2017 at 11:33:53AM +0100, Michael Hamburger wrote: > > > Willy wrote: [snipp] > &

Re: Introduction and small changes to HAProxy for adding custom errorfiles for 401 and 407 http status page

2017-02-13 Thread Aleksandar Lazic
Hi. Am 13-02-2017 12:15, schrieb Willy Tarreau: On Mon, Feb 13, 2017 at 11:33:53AM +0100, Michael Hamburger wrote: > Willy wrote: [snipp] > Maybe you're interested in trying to implement the stuff above ? If > so, just let me know, I can give you a few hints which could possibly > help. I wo

Re: Haproxy reload fails on RHEL 7.2

2017-02-10 Thread Aleksandar Lazic
Hi, Am 09-02-2017 18:37, schrieb Gunuganti, Uma Maheshwar Rao: Is there a way I could make 1.7.2 work in RHEL 7.2 ? Yes. You will need to build it ;-) You can take a look into the Dockerfile for the required commands. https://gitlab.com/aleks001/haproxy16-rhel7/blob/master/Dockerfile Cheers

Re: Hitting rate limit?

2017-01-17 Thread Aleksandar Lazic
Hi. Am 17-01-2017 05:46, schrieb Atha Kouroussis: Hi all, I seem to hitting some kind of bottleneck at about 4k req/s and I'm not able to find the cause. I have HAproxy 1.7.2 installed on Ubuntu 16.04.1, VM with 8 cores, 2GB RAM, 1 Gbps networking. Testing with ab cannot get past ~4K req/s

Re: [PATCH 0/2] openssl 1.1 async mode and engine support

2017-01-14 Thread Aleksandar Lazic
Hi Grant. Am 14-01-2017 01:42, schrieb Grant Zhang: Hi list, This is to request comments regarding the support of openssl 1.1 async mode and async-capable engine. openssl s_time utility is used to compare the performance: #> openssl s_time -new -cipher ECDHE-RSA-AES128-GCM-SHA256 -nbio With

Re: [PATCH] MINOR: compression: fix -vv output without zlib/slz

2017-01-11 Thread Aleksandar Lazic
Hi. Am 11-01-2017 18:40, schrieb Lukas Tribus: Hello, Am 11.01.2017 um 18:40 schrieb Aleksandar Lazic: Just for my curiosity, why someone want no compression? There are a number of reasons to compile with a smaller number of dependencies: - smaller builds for embedded systems - faster

Re: [PATCH] MINOR: compression: fix -vv output without zlib/slz

2017-01-11 Thread Aleksandar Lazic
Hi. Am 11-01-2017 14:24, schrieb Lukas Tribus: When haproxy is compiled without zlib or slz, the output of haproxy -vv shows (null). Just for my curiosity, why someone want no compression? BR Aleks

Re: haproxy with support http/2 &apache - Remote IP

2017-01-08 Thread Aleksandar Lazic
Hi Pavel Am 08-01-2017 14:00, schrieb Pavel Urbánek: Hello, do you have configuration apache for suport http/2 with haproxy ? [snipp] But i dont how setup apache to accept mod proxy. Maybe this can help. https://github.com/roadrunner2/mod-proxy-protocol Best regards Aleks S pozdravem

Re: implementing http/2

2017-01-02 Thread Aleksandar Lazic
Hi Willy Am 01-01-2017 09:56, schrieb Willy Tarreau: Hi Aleks, On Sat, Dec 31, 2016 at 12:08:41AM +0100, Aleksandar Lazic wrote: Hi. I plan to try to implement http/2 into haproxy based on https://github.com/nghttp2/nghttp2. Before I start I must know if this the patches will be accepted

implementing http/2

2016-12-30 Thread Aleksandar Lazic
Hi. I plan to try to implement http/2 into haproxy based on https://github.com/nghttp2/nghttp2. Before I start I must know if this the patches will be accepted. There are some pros Lib is already used in some applications. It looks to me that the lib is able to handle event based traffic. al

Re: Issuse support http/2 on haproxy

2016-12-27 Thread Aleksandar Lazic
Hi. Am 27-12-2016 09:52, schrieb Lieu Nguyen: Hi Team! I have config http/2 on haproxy(version 1.7.1) I don't think so. Please can your share your config, thanks. and nginx(version 1.10.1),openssl (1.0.2j), result is http/2 working nginx but when config nginx is backend server of haproxy s

Re: [ANNOUNCE] haproxy-1.7.0

2016-11-27 Thread Aleksandar Lazic
Am 25-11-2016 18:51, schrieb Willy Tarreau: Hi, HAProxy 1.7.0 was released on 2016/11/25. It added 107 new commits after version 1.7-dev6. Most of them were late minor bug fixes and code cleanups. Over the last two weeks we finally managed to clean a lot of historical mess, just by splitting s

Re: HAProxy doesn't respect the `hold valid 1s` setting

2016-11-11 Thread Aleksandar Lazic
Hi. Am 11-11-2016 04:29, schrieb Tao Wang: Can any help to fix this bug? I reported here long time ago. Which version of haproxy do you use? On 14 August 2016 at 15:06, Tao Wang wrote: Hi, As the issue reported on Github haproxy repo are disabled, I transfer the issue here. I created a G

Re: [ANNOUNCE] haproxy-1.7-dev6

2016-11-10 Thread Aleksandar Lazic
Hi Willy. Thank you as always for the detailed answer. Am 10-11-2016 06:51, schrieb Willy Tarreau: Hi Aleks, On Thu, Nov 10, 2016 at 12:52:22AM +0100, Aleksandar Lazic wrote: > http://www.haproxy.org/download/1.7/doc/SPOE.txt I have read the doc. very interesting. When I underst

Re: [ANNOUNCE] haproxy-1.7-dev6

2016-11-09 Thread Aleksandar Lazic
Hi Willy. Am 10-11-2016 00:18, schrieb Willy Tarreau: Hi, HAProxy 1.7-dev6 was released on 2016/11/09. It added 61 new commits after version 1.7-dev5. Great ;-) [snip] - and the new stream processing offload engine (SPOE). Yes, we had to give it a name. And the protocol is called SPO

Re: Some clarification question

2016-10-28 Thread Aleksandar Lazic
Hi Cyril. Am 28-10-2016 19:21, schrieb Cyril Bonté: Hi Aleksandar, Le 28/10/2016 à 18:19, Aleksandar Lazic a écrit : Wrong lines in github link below [...] I have seen that when I use a browser, which accepts cookies, I always reach the same endpoint. https://caddy-template-usage-1-caddy

Re: Some clarification question

2016-10-28 Thread Aleksandar Lazic
Wrong lines in github link below Am 28-10-2016 17:57, schrieb Aleksandar Lazic: Hi. @openshift there is a discussion about stickiness. Let's say you have such a config. ### backend be_edge_http_1-caddy-teplate_caddy-template-usage mode http option redispatch option forwa

Some clarification question

2016-10-28 Thread Aleksandar Lazic
Hi. @openshift there is a discussion about stickiness. Let's say you have such a config. ### backend be_edge_http_1-caddy-teplate_caddy-template-usage mode http option redispatch option forwardfor balance leastconn timeout check 5000ms http-request set-header X-Forwarded-Host %[req

Re: [ANNOUNCE] haproxy-1.7-dev5

2016-10-26 Thread Aleksandar Lazic
Hi. Am 26-10-2016 23:54, schrieb Cyril Bonté: Le 26/10/2016 à 23:31, Willy Tarreau a écrit : Hi Cyril, On Wed, Oct 26, 2016 at 11:19:29PM +0200, Cyril Bonté wrote: Hi all, Le 25/10/2016 à 23:15, Willy Tarreau a écrit : Hi, HAProxy 1.7-dev5 was released on 2016/10/25. It added 65 new commit

Re: http-reuse always, work quite well

2016-10-14 Thread Aleksandar Lazic
Hi Am 14-10-2016 16:33, schrieb Pavlos Parissis: Hi, I just want to drop a note and mention that http-reuse works very well for us: % ss -t state established '( sport = :http )'|wc -l 2113 % ss -t state established '( dport = :http )'| wc -l 408 As, you can see connections established to bac

Re: [ANNOUNCE] experimental spam filtering

2016-09-22 Thread Aleksandar Lazic
Hi Willy. Am 22-09-2016 17:41, schrieb Willy Tarreau: Yeah yeah some of you will say "ah at last, it's been long". ;-) [snipp] For now it only adds the "x-bogosity" header to the e-mail and still delivers it so that I can monitor the activity, but the purpose is to very quickly switch to dr

Re: Haproxy custom log - apache replacement

2016-09-08 Thread Aleksandar Lazic
Hi. Am 08-09-2016 21:16, schrieb Benoit GEORGELIN - Association Web4all: Hello members of the list, I was wondering if Haproxy custom log could log the same things as apache log format does ? Well due to the fact that we don't know your apache log format I assume you mean CLF (common log fo

Re: haproxy as SSL-endpoint and as SSL forwarder (tcp mode)

2016-09-03 Thread Aleksandar Lazic
Hi Am 02-09-2016 22:58, schrieb Klaus Foerster: For one project I use haproxy in https tcp mode. I configured it such, that depending on the server name detected via SNI, the data is forwarded via the proxy protocol to a proxy protocol aware https server (e.g. nginx) However for a few servers

New mailing list archive

2016-08-11 Thread Aleksandar Lazic
Hi. sorry to disturb you again but gmane.org is history https://lars.ingebrigtsen.no/2016/07/28/the-end-of-gmane/ ;-( Maybe we can try to use this one? https://www.mail-archive.com/haproxy@formilux.org/ Best regards Aleks

Re: HAProxy is not redirecting to Apache Tomcat Server on SLES

2016-08-11 Thread Aleksandar Lazic
Hi. Am 11-08-2016 13:49, schrieb Rahul Shivalkar: Hello, I am using HAProxy. Which version of HAProxy? haproxy -vv I have Apache tomcat cluster, ElasticSearch cluster and OrientDB Cluster, every node is on different machine having different IP address. I have configured 3 HAProxies, 1 for

Re: SYN dropping at reload time

2016-08-10 Thread Aleksandar Lazic
Dear Willy. Am 09-08-2016 19:37, schrieb Willy Tarreau: On Tue, Aug 09, 2016 at 05:06:15PM +0200, Aleksandar Lazic wrote: [snnipp] Yes that's true. that's a different concept. Note that it's not a matter of process but of socket. In SO_REUSEPORT mode we have multiple soc

Re: SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Am 09-08-2016 17:03, schrieb Lukas Tribus: Am 09.08.2016 um 16:39 schrieb Aleksandar Lazic: On Linux yes, because there is a race condition: http://lwn.net/Articles/542866/ http://engineeringblog.yelp.com/2015/04/true-zero-downtime-haproxy-reloads.html Thanks. So every Software on Linux

Re: SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Hi Lukas. Am 09-08-2016 16:13, schrieb Lukas Tribus: Hi Aleksandar, Am 09.08.2016 um 13:42 schrieb Aleksandar Lazic: I know it's not the latest one ;-/. Is there really a possibility that at soft-reload incoming request are failed? On Linux yes, because there is a race condition:

SYN dropping at reload time

2016-08-09 Thread Aleksandar Lazic
Hi all. I just seen in the OpenShift repo the following comment. https://github.com/openshift/origin/blob/master/images/router/haproxy/reload-haproxy#L61-L63 ### # We install the syn eater so that connections that come in during the restart don't # go onto the wrong socket, which is then cl

Re: Unable to compile HAProxy on RHEL7

2016-07-23 Thread Aleksandar Lazic
Hi Am 22-07-2016 18:39, schrieb Dennis Jacobfeuerborn: On 22.07.2016 17:43, Kuldip Madnani wrote: I want to compile HAProxy version 1.6.7 for which i am using the following steps: 1. tar xzvf haproxy-1.6.7.tar.gz 2. make TARGET="generic" USE_STATIC_PCRE=1 USE_OPENSSL=1 USE_LIBCRYPT=1 USE_Z

haproxy as partly forward proxy

2016-07-15 Thread Aleksandar Lazic
Hi all. What do you think about this idea / statement. Due to the fact that HAProxy have now dns resolution and the possibility to use lua scripting is it possible to use haproxy as forward proxy? Yes I know this is a "crazy" idea but hey why not ;-) Opinions? Cheers Aleks

Re: How to convert a rewrite rule to a ACL rule correctly?

2016-06-23 Thread Aleksandar Lazic
Hi. Am 23-06-2016 18:49, schrieb Qingshan Xie: Hello Team, I'd like to convert a rewrite rule to a Haproxy ACL as below, RewriteRule ^(.*) http:///something/Search?q=/$1 I configured it as below but now working, acl is_test base_reg test.xyz.com/(.*) redirect location http://www.abc.com/$1

Re: rsyslog : splitting log by backend ?

2016-06-13 Thread Aleksandar Lazic
Hi Alexandre. Am 13-06-2016 12:07, schrieb Alexandre DERUMIER: Hi, I would like to split logs by backend through rsyslog dynamicaly. something like : /var/log/haproxy_($backend).log I think it can be done with rsyslog $template like this tutorial https://tehlose.wordpress.com/2011/10/10/a-log

Re: Rewriting Host Based on Path and Changing the Path

2016-06-09 Thread Aleksandar Lazic
ost) -i static. reqirep ^([^\ :]*\ \/)([^\/]+)(\/.*\n)Host:\ static\.([^\/]+?)$ \1\2\3Host:\ \2.\4 if host_static reqirep ^([^\ :]*)\ /[^/]+/(.*) \1\ /\2 if host_static On Thu, Jun 9, 2016 at 12:51 PM, Aleksandar Lazic wrote: Hi. Am 09-06-2016 11:18, schrieb Chaim Keren-Tzion: Hi, Is there a

Re: Rewriting Host Based on Path and Changing the Path

2016-06-09 Thread Aleksandar Lazic
Hi. Am 09-06-2016 11:18, schrieb Chaim Keren-Tzion: Hi, Is there a way to rewrite the Host based on Path? I'm trying to redirect all requests of type: static.domain.com/site1/resource.jpg static.domain.com/site1/resource2.js static.domain.com/site2/resource3.gif static.domain.com/site2/someD

Re: use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi Holger Am 20-05-2016 17:02, schrieb Holger Just: Hi Aleks, Aleksandar Lazic wrote: My conclusion is that with or without " the ${...} is not substituted, at least in the bind line. From your output, it looks like you are using an older version of HAProxy. yep. [root@4a9889b

Re: use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi Holger. Am 20-05-2016 15:49, schrieb Holger Just: Hi Aleks, Aleksandar Lazic wrote: ### bind :${ROUTER_SERVICE_HTTP_PORT} ${ROUTER_SERVICE_HTTP_PORT_BIND_OPTONS} ### It's look to me that this is not possible. To quote from Section 2.3 of configuration.txt: Those variable

Re: License questions

2016-05-20 Thread Aleksandar Lazic
Hi Jonathan. Am 20-05-2016 16:05, schrieb Jonathan Fisher: Hey guys, Reading through the license, I had a couple of questions. HAProxy does not speak AJP, which is not terrible, but I was thinking about implementing a module for it. Maybe off topic and just for my curiosity 'why'. I have als

use env variables in bind for bind options

2016-05-20 Thread Aleksandar Lazic
Hi. Today I tried some fancy stuff ;-). https://github.com/git001/openshift_custom_haproxy_ext/commit/d30fdb4fae0988b9a35ee43fef5cf247ae822f6f#diff-f81691f60803593ee683f75fb91cdd03 ### bind :${ROUTER_SERVICE_HTTP_PORT} ${ROUTER_SERVICE_HTTP_PORT_BIND_OPTONS} ### It's look to me that this is

Re: Support for Keep-Alive header and timeouts

2016-04-25 Thread Aleksandar Lazic
way to close the connection as gracefully as possible after X minutes, rather than the current scenario where it may get killed ungracefully. Running v1.6.4 Cheers. On Mon, Apr 25, 2016 at 2:20 PM, Aleksandar Lazic wrote: Hi. Am 25-04-2016 14:01, schrieb Craig McLure: Hi, Does HAProxy s

Re: Support for Keep-Alive header and timeouts

2016-04-25 Thread Aleksandar Lazic
Hi. Am 25-04-2016 14:01, schrieb Craig McLure: Hi, Does HAProxy support the Keep-Alive header, and a 'max connection duration' for Keep-Alive connections? I've poured through the manual, but can't see anything obvious, but it would be useful for better control over Keep-Alive connections. pl

Re: HTTP 2

2016-04-22 Thread Aleksandar Lazic
Hi. Am 22-04-2016 07:46, schrieb Anil Yachareni (ayachare): Hi, Does HAProxy support HTTP2 yet? Pl. let me know. Please take a look into this mail thread. http://thread.gmane.org/gmane.comp.web.haproxy/27294 Best regards Aleks

Re: Q: about HTTP/2

2016-04-07 Thread Aleksandar Lazic
Hi Willy. Am 07-04-2016 18:01, schrieb Willy Tarreau: Hi Aleks, On Fri, Apr 01, 2016 at 12:18:54PM +0200, Aleksandar Lazic wrote: Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and p

Re: Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Baptiste. Am 01-04-2016 12:25, schrieb Baptiste: On Fri, Apr 1, 2016 at 12:18 PM, Aleksandar Lazic wrote: Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and plans for HTTP/2. Do

Q: about HTTP/2

2016-04-01 Thread Aleksandar Lazic
Hi Willy & other core devs/pms. I know that HTTP/2 is on the road-map but not ready yet. Would you be so kind and share some of your thoughts, stats and plans for HTTP/2. Thank you very much. Best regards Aleks

Re: servers multiple sources

2016-03-25 Thread Aleksandar Lazic
Hi. Am 25-03-2016 11:05, schrieb Beluc: Hi, @James Brown : sure ;) I configure a server to use source a.b.c.d:1-6 and I got "Connect() failed for backend abcd: no free ports." Maybe a problem with kernel I use ... or the range is not high enough http://www.tldp.org/LDP/solrhe/Securi

Re: METH_CONNECT, HTTPS forward proxy

2016-03-23 Thread Aleksandar Lazic
Dear Jim. Am 23-03-2016 07:02, schrieb Jim Freeman: http://cbonte.github.io/haproxy-dconv/configuration-1.6.html#4.2-option%20http_proxy is probably the answer to my question, but does the system's libresolv() get used to dynamically map name to IP? (no resolvers list needed?) http://cbonte.g

Re: General SSL vs. non-SSL Performance

2016-03-20 Thread Aleksandar Lazic
Hi. Am 17-03-2016 16:55, schrieb Pavlos Parissis: On 17/03/2016 04:49 μμ, Nenad Merdanovic wrote: Hello Pavlos, On 3/17/2016 4:45 PM, Pavlos Parissis wrote: I am working(not very actively) on a solution which utilizes this. It will use www.vaultproject.io as central store, a generating engine

Re: General SSL vs. non-SSL Performance

2016-03-19 Thread Aleksandar Lazic
Hi. Am 17-03-2016 11:51, schrieb Gary Barrueto: Hi. On Mar 16, 2016 10:06 PM, "Willy Tarreau" < Here I don't know. TLS handshakes are one large part of what made me think that we must go multi-threaded instead of multi-process over the long term, just because I want to be able to pin some

Re: General SSL vs. non-SSL Performance

2016-03-19 Thread Aleksandar Lazic
Hi Nenad Am 17-03-2016 19:27, schrieb Nenad Merdanovic: Hello Aleksandar On 3/17/2016 6:00 PM, Aleksandar Lazic wrote: Okay I'm now lost 8-O please can anyone help me to understand how the flow works. 1st Request client -> ssl handshake -> haproxy server 1 (tls ticket?!) 2nd R

Re: General SSL vs. non-SSL Performance

2016-03-18 Thread Aleksandar Lazic
Hi. Am 16-03-2016 15:17, schrieb Christian Ruppert: Hi, this is rather HAProxy unrelated so more a general problem but anyway.. I did some tests with SSL vs. non-SSL performance and I wanted to share my results with you guys but also trying to solve the actual problem So here is what I did:

Re: [PATCH] BUG/MINOR: log: GMT offset not updated when entering/leaving DST

2016-03-12 Thread Aleksandar Lazic
Am 12-03-2016 10:50, schrieb Willy Tarreau: Hi Benoit, On Sat, Mar 12, 2016 at 09:45:25AM +0100, Beno?t GARNIER wrote: > On Sat, Mar 12, Willy Tarreau wrote: [snipp] > An extra benefit of proceeding like this is that when we move to > multi-threading, we won't have to lock for something

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

2016-03-04 Thread Aleksandar Lazic
Hi. Am 02-03-2016 07:48, schrieb Zoltan Lorincz: Jeff, thanks again for the detailed answer. I've already tested a configuration without various ACL's. Please can you try to run the connector with debug on. http://tomcat.apache.org/tomcat-8.0-doc/logging.html#Using_java.util.logging_%28defau

Re: Haproxy, Internet Explorer and sporadic 408 response

2016-02-29 Thread Aleksandar Lazic
Hi. Am 29-02-2016 12:35, schrieb Dennis Jacobfeuerborn: Hi, I'm getting reports that occasionally IE users see 408 error when calling out Site but the behavior is not easily reproducible. I found something about this Problem in the archives: http://comments.gmane.org/gmane.comp.web.haproxy/15263

Re: Feature Request for log stdout ...

2016-02-28 Thread Aleksandar Lazic
Hi. Am 18-02-2016 15:22, schrieb Willy Tarreau: Hi Aleks, On Thu, Feb 18, 2016 at 02:53:29PM +0100, Aleksandar Lazic wrote: [snipp] For openshift I will try to use 2 container in 1 pod. If there any interests I can write here if this works ;-) Sure, please report anyway. You can find

Re: Haproxy & Kubernetes, dynamic backend configuration

2016-02-25 Thread Aleksandar Lazic
Hi. Am 25-02-2016 16:15, schrieb Smain Kahlouch: Hi ! Sorry to bother you again with this question, but still i think it would be a great feature to loadbalance directly to pods from haproxy :) Is there any news on the roadmap about that ? How about DNS as mentioned below? https://github.c

Re: Feature Request for log stdout ...

2016-02-18 Thread Aleksandar Lazic
, Feb 18, 2016 at 02:53:29PM +0100, Aleksandar Lazic wrote: But this moves just the stdout handling to other tools and does not solve the problem with blocking handling of std*, as far as I have understood right. Yes it does because if the logging daemon blocks, logs are simply lost on the UDP so

Re: Feature Request for log stdout ...

2016-02-18 Thread Aleksandar Lazic
:30:06PM +0100, Aleksandar Lazic wrote: Hi. how difficult is it to be able to add "log stdout;" to haproxy? [snipp] It's been discussed a few times in the past. The response is "no". It's totally insane to emit logs to a blocking destination. Your whole haproxy pr

Feature Request for log stdout ...

2016-02-17 Thread Aleksandar Lazic
Hi. how difficult is it to be able to add "log stdout;" to haproxy? I ask because in some PaaS environment is it difficult to setup a dedicated user yust for haproxy. It fits also a little bit better to http://12factor.net/logs BR Aleks

Re: Force client IP with PROXY protocol

2016-01-28 Thread Aleksandar Lazic
Am 28-01-2016 12:01, schrieb Jonathan Leroy - Inikup: 2016-01-28 11:47 GMT+01:00 Lukas Tribus : Doesn't: http-request set-src hdr(CF-Connecting-IP) in combination with a standard proxy-protocol config already do that? Yes, but it doesn't work with SPDY or HTTP/2 backends. But then it is m

RE: Force client IP with PROXY protocol

2016-01-28 Thread Aleksandar Lazic
Am 28-01-2016 09:19, schrieb Lukas Tribus: Otherwise that would be nice to be able pass client IP address as an argument to send-proxy directive. Example: send-proxy hdr_ip(x-forwarded-for) Thats what Aleks proposed with something like this: http-request set-src hdr(CF-Connecting-IP) Thi

Re: Force client IP with PROXY protocol

2016-01-27 Thread Aleksandar Lazic
Dear Jonathan, Am 27-01-2016 21:58, schrieb Jonathan Leroy - Inikup: Hi, 2016-01-27 21:33 GMT+01:00 Aleksandar Lazic : I see this possible ways .) http://nginx.org/en/docs/http/ngx_http_realip_module.html .) http://cbonte.github.io/haproxy-dconv/configuration-1.6.html#4.2-http-request

Re: Force client IP with PROXY protocol

2016-01-27 Thread Aleksandar Lazic
Hi. Am 27-01-2016 21:18, schrieb Jonathan Leroy - Inikup: Hi, [snip] Now, I need to add CloudFlare in front HAProxy. CloudFlare return a "CF-Connecting-IP" containing client IP address. I know how to retrieve this header value, but not how to force it to be sent as client ip in the PROXY hea

Re: HAPROXY mailingarchive is not filling anymore since 2015-12-01

2016-01-16 Thread Aleksandar Lazic
ot is filling anymore since 2015-12-01. > > Could you take a look? Thanks in advance. > > Kind regards, > PiBa-NL > > Op 3-1-2016 om 18:00 schreef Aleksandar Lazic: >> Hi. >> >> It looks like that marc have no more mails since 2015-12-01 >> >> http://marc.info/?l=haproxy >> >> http://marc.info/?l=haproxy&r=1&b=201512&w=2 >> >> BR Aleks >> >

Re: marc have not anymore mails

2016-01-10 Thread Aleksandar Lazic
Hi Am 03-01-2016 21:41, schrieb PiBa-NL: Ive send a mail to webguy at marc , last year that worked. Have you received any answer? BR Aleks Op 3-1-2016 om 18:00 schreef Aleksandar Lazic: Hi. It looks like that marc have no more mails since 2015-12-01 http://marc.info/?l=haproxy http

marc have not anymore mails

2016-01-03 Thread Aleksandar Lazic
Hi. It looks like that marc have no more mails since 2015-12-01 http://marc.info/?l=haproxy http://marc.info/?l=haproxy&r=1&b=201512&w=2 BR Aleks

Re: Source IP Affinity

2015-12-31 Thread Aleksandar Lazic
Hi. Am 30-12-2015 15:57, schrieb Hall, Colton: Hello, was wondering if you could answer a couple of questions pertaining to HAPROXY. We are interested in evaluating the product but not sure it will accomplish our goals. The main concerns are listed below. 1. Can we set persistency before

Re: http/2 - missing something ...

2015-12-21 Thread Aleksandar Lazic
Hi. I have removed the direct mails on cc! Am 21-12-2015 16:34, schrieb Pavlo Zhuk: Folks, Sorry for offtopic, but I am observing more or less same situation with nginx. My HTTP/2 configuration works when frontend/backend are configured in TCP mode, but doesn't work if frontend/backend are in

Re: urlp strange behaviour ?

2015-12-08 Thread Aleksandar Lazic
Hi. Am 08-12-2015 11:23, schrieb Thierry FOURNIER: Hi, I agree with you, but in HAProxy, the ';' is considered as parameter delimiter. Its hardcoded, and I don't known the reason. There are several reasons for the ';' to be a separator similar like '&'. http://www.skorks.com/2010/05/what-e

Re: [SPAM] Architecture guide reworked

2015-11-29 Thread Aleksandar Lazic
Dear Olivier Am 27-11-2015 17:18, schrieb Olivier: Hello everyone ! I'm a huge fan of HAProxy. In my mind, this is a great toolbox. Like all toolbox, to use it at 100%, you need good examples. HAProxy blog is a great start. There are some code snippets in documentation too. But a long time ag

Re: CPU 100% when waiting for the client timeout

2015-11-20 Thread Aleksandar Lazic
Hi. Am 20-11-2015 11:59, schrieb baiyang: Hi Willy, This one seems to have missed 3 years of bugfixes I've just done a "apt-get update && apt-get upgrade" successfully and reboot the machine this week. I think the OS is fresh enough, but I'll try to upgrade the kernal to a newer one. :-) Ho

Re: appsession replacement in 1.6

2015-11-19 Thread Aleksandar Lazic
Hi Sylvain & Willy. Am 19-11-2015 19:41, schrieb Willy Tarreau: Hi Sylvain, On Thu, Nov 19, 2015 at 05:04:40PM +0100, Sylvain Faivre wrote: >What Aleks meant is that you don't need http-buffer-request as it's >only used to process POST data which isn't your case. Oh OK. Well, I did not talk a

Re: appsession replacement in 1.6

2015-11-16 Thread Aleksandar Lazic
Hi Sylvain. Am 16-11-2015 17:06, schrieb Sylvain Faivre: Hi Aleks, On 11/10/2015 10:56 PM, Aleksandar Lazic wrote: Dear Sylvain Faivre, [snipp] This would be helpfully to see the full response. Maybe some appserver behaves different. As far as I know, there is no way for the server to

Re: Experiences with Docker and linking containers for zero downtime deployments

2015-11-15 Thread Aleksandar Lazic
Hi Paul. Am 14-11-2015 14:00, schrieb Paul Menzel: Dear HAProxy folks, I am using a Docker setup to serve Web application using a database. HAProxy, the Web app and the database each run in a separate Docker container. The HAProxy container is than started with the command below. docker

Re: HAProxy and backend on the same box

2015-11-12 Thread Aleksandar Lazic
Hi. But do you really think this is a haproxy Problem? Am 13-11-2015 08:38, schrieb Aleksandar Lazic: Am 13-11-2015 06:14, schrieb jaleel: It works if HAProxy and backend are in different box, but when both are in same box it didn't work Maybe because the iptables rule is a different

Re: HAProxy and backend on the same box

2015-11-12 Thread Aleksandar Lazic
Am 13-11-2015 06:14, schrieb jaleel: It works if HAProxy and backend are in different box, but when both are in same box it didn't work Maybe because the iptables rule is a different from 'localhost' then from external. Please take a look at the picture https://ixquick-proxy.com/do/spg/sh

Re: acl regex

2015-11-12 Thread Aleksandar Lazic
Hi. Am 12-11-2015 21:16, schrieb Guillaume Bourque: Hi all, I’m not far but it does not work so any recommendation would be very helpfull I just need some very simple redirect but after looking into aloa doc the happy doc, I can’t find examples that could help me do this, okay I must admit I d

Re: appsession replacement in 1.6

2015-11-10 Thread Aleksandar Lazic
Dear Sylvain Faivre, Am 10-11-2015 12:48, schrieb Sylvain Faivre: On 11/10/2015 12:00 AM, Aleksandar Lazic wrote: Hi Sylvain Faivre. Am 09-11-2015 17:31, schrieb Sylvain Faivre: [snipp] So, I've got this so far : backend http stick-table type string len 24 size 10m expire 1h

Re: appsession replacement in 1.6

2015-11-09 Thread Aleksandar Lazic
Hi Sylvain Faivre. Am 09-11-2015 17:31, schrieb Sylvain Faivre: Hi, Sorry I'm late on this discussion, following this thread : https://marc.info/?l=haproxy&m=143345620219498&w=2 We are using appsession with HAproxy 1.5 like this : Thanks ;-) backend http appsession JSESSIONID len 24 ti

Re: Debug mode not working?!

2015-11-09 Thread Aleksandar Lazic
Hi Nenad, Am 09-11-2015 22:52, schrieb Nenad Merdanovic: Hello Aleksandar, Okay after removing accept-proxy from bind *:${HTTP_BIND_PORT} accept-proxy tfo It comes what expected. If you are using 'accept-proxy', HAproxy expects the payload to start with a PROXY protocol header. http://www

Re: Debug mode not working?!

2015-11-09 Thread Aleksandar Lazic
Am 09-11-2015 22:21, schrieb Willy Tarreau: On Mon, Nov 09, 2015 at 10:15:46PM +0100, Aleksandar Lazic wrote: ... epoll_wait(3, {}, 200, 1000)= 0 epoll_wait(3, {{EPOLLIN, {u32=5, u64=5}}}, 200, 1000) = 1 accept4(5, {sa_family=AF_INET, sin_port=htons(52310), sin_addr

Re: Debug mode not working?!

2015-11-09 Thread Aleksandar Lazic
Am 09-11-2015 11:34, schrieb Willy Tarreau: Hi Aleks, On Sun, Nov 08, 2015 at 04:24:29PM +0100, Aleksandar Lazic wrote: Hi. Today I have tried to debug haproxy as in the old days ;-), I was not able to see the communication on stderr. I'm sure I have something missed in the past o

Debug mode not working?!

2015-11-08 Thread Aleksandar Lazic
Hi. Today I have tried to debug haproxy as in the old days ;-), I was not able to see the communication on stderr. I'm sure I have something missed in the past on the list to be able to see the output. My steps. curl -vO http://www.haproxy.org/download/1.6/src/haproxy-1.6.2.tar.gz tar xfvz

Re: How to Externally Access PHP Application that has Internal Links to Itself

2015-11-02 Thread Aleksandar Lazic
un http://open-emr.org therefore please take a look into this code. https://github.com/openemr/openemr/blob/8b9d250de3c76aeb4f706342c2f3c3f1e1b9c6db/interface/globals.php#L137 https://github.com/openemr/openemr/blob/8b9d250de3c76aeb4f706342c2f3c3f1e1b9c6db/interface/globals.php#L38 Best regards A

Re: How to Externally Access PHP Application that has Internal Links to Itself

2015-10-31 Thread Aleksandar Lazic
Dear Susheel Jalali. Am 31-10-2015 08:43, schrieb Susheel Jalali: Dear HAProxy Developers: [snipp] This is same as what Apache server’s mod_proxy_html serves to: rewrite http://appserver.example.com/foo/bar.html";>foobar to http://www.example.com/appserver/foo/bar.html";>foobar. Is there an

haproxy 1.6 with lua in docker

2015-10-29 Thread Aleksandar Lazic
Hi. I have created a Dockerfile which build haproxy with lua and pcre jit, it is based on centos:latest. https://github.com/git001/haproxy I have already opend an Issue in the official Docker haproxy repo. That’s the output ;-) ## haproxy -vv HA-Proxy version 1.6.1 2015/10/20

Scaling out SSL with haproxy 1.5/6

2015-10-23 Thread Aleksandar Lazic
Hi. Currently we Need to scale out ssl handshakes and we Need to do this with haproxy ;-) In 2011 was a blog post with stud http://blog.haproxy.com/2011/11/07/scaling-out-ssl/ and in 2012 a post how to get out the stud ;-) http://blog.haproxy.com/2012/09/10/how-to-get-ssl-with-haproxy-getti

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-14 Thread Aleksandar Lazic
riginal Message Subject: Re: HTTP Response Rewriting to Replace Internal IP with FQDN From: Aleksandar Lazic Date: Tue, October 13, 2015 2:44 pm To: Susheel Jalali Cc: haproxy@formilux.org, "i...@coscend.com" Am 13-10-2015 23:36, schrieb Aleksandar Lazic: Dear Susheel Jal

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-13 Thread Aleksandar Lazic
Am 13-10-2015 23:36, schrieb Aleksandar Lazic: Dear Susheel Jalali. Am 13-10-2015 22:20, schrieb Susheel Jalali: Dear Aleks, [snipp] ++ Tomcat’s web.xml In web.xml, the context parameter is: globalScope default and the filter mapping for the

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-13 Thread Aleksandar Lazic
Dear Susheel Jalali. Am 13-10-2015 22:20, schrieb Susheel Jalali: Dear Aleks, [snipp] ++ Tomcat’s web.xml In web.xml, the context parameter is: globalScope default and the filter mapping for the application is: Product1Application

Re: [ANNOUNCE] haproxy-1.6.0 now released!

2015-10-13 Thread Aleksandar Lazic
Hi. Am 13-10-2015 21:50, schrieb Willy Tarreau: On Tue, Oct 13, 2015 at 09:42:25PM +0200, Baptiste wrote: Great, amazing! Looking forward to 1.7! Already online : $ ./haproxy -v HA-Proxy version 1.7-dev0 2015/10/13 :-) As always fast, quite fast, flashy ;-) BR Aleks

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-12 Thread Aleksandar Lazic
)Coscend(DOT)com -- CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages from Coscend Communications Solutions' posted at: www(DOT)Coscend(DOT)com/Terms_and_Conditions.html On 10/08/15 03:50, Aleksandar Lazic wrote: Dear Susheel Ja

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-07 Thread Aleksandar Lazic
Dear Susheel Jalali. Am 07-10-2015 23:24, schrieb Susheel Jalali: Dear Igor and Aleks, Thank you for your insights. Very useful to us, as we are implementing HAProxy for the first time. Below we have described how we have implemented your advise and the result. Output of "haproxy -vv" is give

Re: HTTP Response Rewriting to Replace Internal IP with FQDN

2015-10-07 Thread Aleksandar Lazic
Hi Susheel Jalali. please can you show us the out put of haproxy -vv Am 06-10-2015 22:06, schrieb Susheel Jalali: Dear HAProxy Developers, After incorporating insights from Bryan Talbot and articles from Baptiste Assman on HAProxy Web site, we have been able to get the basic configuration of H

Re: x-forwarded-for help

2015-10-05 Thread Aleksandar Lazic
Hi. Am 05-10-2015 14:29, schrieb Travis Fitch: Hello, Some quick background; My current setup is haproxy in front of Apache on the same host. If I send a request to haproxy, I see the x-forwarded-for entry in Apache's logs and also with tcpdump tcpdump -i any -nn -A - -s 'host x.x.

Re: tune.bufsize and tune.maxrewrites questions

2015-09-27 Thread Aleksandar Lazic
e 307 ``` On Thu, Sep 17, 2015 at 12:18 AM, Aleksandar Lazic wrote: Hi John. Am 17-09-2015 07:03, schrieb John Skarbek: Good Morning! So recently I went into battle between our CDN provider and our application team due to some HTTP400's coming from somewhere. At first I never suspect

Re: tune.bufsize and tune.maxrewrites questions

2015-09-16 Thread Aleksandar Lazic
Hi John. Am 17-09-2015 07:03, schrieb John Skarbek: Good Morning! So recently I went into battle between our CDN provider and our application team due to some HTTP400's coming from somewhere. At first I never suspected haproxy to be at fault due to the way I was groking our logs. The end resu

Re: Haproxy app cookie is not working

2015-09-15 Thread Aleksandar Lazic
Hi. Am 15-09-2015 11:07, schrieb Jayapal Reddy: Hi All, ssh proxy is send to both machines, it is honouring the session cookie. Below is my harpy config snippet*, complete logs can be found here. https://www.digitalocean.com/community/questions/haproxy-appcookie-is-not-working Please can you

Re: [PATCH] Support statistics in multi-process mode

2015-09-14 Thread Aleksandar Lazic
Hi. Am 14-09-2015 12:17, schrieb Willy Tarreau: Hi Philipp, [snipped] What I'd like to have instead would be a per-proxy shared memory segment for stats in addition to the per-process one, that is updated using atomic operations each time other stats are updated. The max are a bit tricky a

<    5   6   7   8   9   10   11   >