Title: Re: AWS ELB as a backend
Hi DHAVAL JAISWAL,
DHAVAL JAISWAL wrote on 21.07.2017:
I have used ELB (public) as a front of Haproxy and ELB (internal) as a backend for the apps server.
so structure is like as follows. Currently using Haproxy 1.7. However, request is not going to the bac
Hi DHAVAL JAISWAL,
DHAVAL JAISWAL wrote on 21.07.2017:
> I have used ELB (public) as a front of Haproxy and ELB (internal) as a
> backend for the apps server.
>
> so structure is like as follows. Currently using Haproxy 1.7.
> However, request is not going to the backend server.
>
> ELB ->> HAP
Hi Patrick Hemmer,
Patrick Hemmer wrote on 22.07.2017:
> On 2017/7/22 11:11, Claus Strommer wrote:
>
> Hi all, I'm seeing some odd behaviour with our
> haproxy balancer and am looking for some insights.
>
>The setup:
>
>
that haproxy produce the concated header.
Best regards
Aleks
> And yes, my snippet is missing the header capture on the http
> frontend, thanks for spotting that.
>
> On Jul 23, 2017 03:50, "Aleksandar Lazic" wrote:
> Hi Patrick Hemmer,
> Patrick Hemmer wrote on
Hi Willy Tarreau,
Willy Tarreau wrote on 24.07.2017:
> Hi Aleks,
> On Sun, Jul 23, 2017 at 09:50:41AM +0200, Aleksandar Lazic wrote:
>> > Personally I use 2 rules similar to the following to append to
>> > X-Forwarded-For:
>> >
>> >
Hi Nenad Merdanovic,
Nenad Merdanovic wrote on 24.07.2017:
> The get_addr() method of the Lua Server class incorrectly used
> INET_ADDRSTRLEN for IPv6 addresses resulting in failing to convert
> longer IPv6 addresses to strings.
> This fix should be backported to 1.7.
> ---
> src/hlua_fcn.c | 2
Hi Nenad.
Nenad wrote on 24.07.2017:
> Aleksandar,
> On 7/24/2017 5:07 PM, Aleksandar Lazic wrote:
>> Hi Nenad Merdanovic,
>>
>> Nenad Merdanovic wrote on 24.07.2017:
>>
>>> The get_addr() method of the Lua Server class incorrectly used
>>>
Hi Liam,
Liam Middlebrook wrote on 24.07.2017:
> Hi,
> I'm currently running HAProxy within an Openshift Origin cluster. Until
> a recent update of Openshift I did not experience issues with connection
> timeouts, the connections would last up until the specified timeout as
> defined by the appl
Hi Liam,
Liam Middlebrook wrote on 25.07.2017:
> Hi Aleksandar,
> Responses inline.
> On 07/24/2017 11:57 PM, Aleksandar Lazic wrote:
>> Hi Liam,
>>
>> Liam Middlebrook wrote on 24.07.2017:
>>
>>> Hi,
>>
>>> I'm currently r
Hi Trenton,
Trenton Dyck wrote on 25.07.2017:
> Hi,
>
> Is it possible to balance, via X-Forwarded-For header? We have come
> across an issue with sticky-sessions and server weight that I can’t
> seem to find the answer to online (Unbalanced traffic). I think
> stick-tables with this acl opti
Hi Andy,
Franks Andy (IT Technical Architecture Manager) wrote on 26.07.2017:
> Hi all,
>
> HAProxy 1.7.6
>
> I have a hopefully easy question to answer – I’m trying to do
> server checks against 2x IIS nodes which require sending of the
> destination host name (virtual hosts) before deliveri
Hi Andy.
Franks Andy (IT Technical Architecture Manager) wrote on 26.07.2017:
> -Original Message-
> From: Franks Andy (IT Technical Architecture Manager)
> Sent: 26 July 2017 13:52
> To: 'Aleksandar Lazic'
> Subject: RE: https status codes
> Thanks A
Hi Mark,
Mark Staudinger wrote on 08.08.2017:
> Hi Folks,
>
> I have a multi-tenant HAProxy set-up loosely as follows
>
> frontend main
>bind ip:port
>various options
>ACLs to match domains (client1, client2, etc)
>use_backend client1 if client1
>use_backend client2 if client2
Hi,
Today I have tried to recreate the WAF.
I received this error at build time.
###
+ cd /usr/src
+ git clone http://git.haproxy.org/git/haproxy.git/
Cloning into 'haproxy'...
+ make -C /usr/src/haproxy TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1
USE_LINUX_SPLICE=1 USE_TFO=1 USE_PCRE_
Hi Emmanuel
Emmanuel Hocdet wrote on 09.08.2017:
>
> Hi Aleksandar,
>
>> Le 9 août 2017 à 13:39, Aleksandar Lazic a écrit :
>>
>> Hi,
>>
>> Today I have tried to recreate the WAF.
>>
>> I received this error at build time.
>>
>>
Hi Emmanuel.
Aleksandar Lazic wrote on 09.08.2017:
> Hi Emmanuel
> Emmanuel Hocdet wrote on 09.08.2017:
>>
>> Hi Aleksandar,
>>
>>> Le 9 août 2017 à 13:39, Aleksandar Lazic a écrit :
[snipp]
>> can you test with this patch?:
> Wow that was fas
Hi Baptiste,
Baptiste Assmann wrote on 11.08.2017:
> Hi All
> So, I enabled latest (brilliant) contribution from Olivier into my
> Kubernetes cluster and I discovered it did not work as expected.
> After digging into the issues, I found 3 bugs directly related to the
> way SRV records must be re
Hi Brian.
Gibson, Brian (IMS) wrote on 15.08.2017:
> I’ve been fighting with this a bit and I keep scratching my head. I
> am trying to setup the VMware Horizon View UAG behind haproxy. It
> requires session persistence, which I could do with a stick table, but
> I’d rather use a cookie in case
Hi Willy,
Willy Tarreau wrote on 18.08.2017:
> ...well, I think everything is in the subject :-)
> Hi, by the way!
> I'm able to gateway http/2 traffic to www.haproxy.org and am getting logs
> to prove it :
That's great ;-)
><134>Aug 18 15:56:51 haproxy[6566]: 127.0.0.1:43740
> [18/Aug/20
Hi,
Have anyone seen KTLS also?
https://lwn.net/Articles/666509/
https://netdevconf.org/1.2/papers/ktls.pdf
looks pretty interesting.
--
Best Regards
Aleks
Hi Aleksandar Lazic,
Aleksandar Lazic wrote on 04.09.2017:
> Hi,
> Have anyone seen KTLS also?
> https://lwn.net/Articles/666509/
> https://netdevconf.org/1.2/papers/ktls.pdf
> looks pretty interesting.
In the slides is haproxy mentioned ;-)
https://github.com/ktls/af_ktls
Hi Willy,
Willy Tarreau wrote on 05.09.2017:
> Hi Aleks,
> On Mon, Sep 04, 2017 at 09:34:07AM +0200, Aleksandar Lazic wrote:
>> Hi,
>>
>> Have anyone seen KTLS also?
>>
>> https://lwn.net/Articles/666509/
>>
>> https://netdevconf.org/1.2/papers
Hi Rajesh.
Rajesh Kolli wrote on 07.09.2017:
> Hello,
>
> I am using HAProxy community version from a month, i need to
> understand logs of HAProxy for the i need your help.
>
> Here is a sample of my logs:
> Sep 6 17:03:31 localhost haproxy[19389]: Health check for server
> Netrovert-sites/DS-
ng -Wdeclaration-after-statement -fwrapv
> OPTIONS =
> Default settings :
> maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
> Thanks & Regards
> Rajesh Kolli
> -Original Message-
> From: Aleksandar Lazic [mailto:al-hapr...@none.at]
&
Hi.
Willy Tarreau wrote on 15.09.2017:
> On Fri, Sep 15, 2017 at 06:36:20PM +0500, ??? wrote:
>> I'd say, it's chicken and egg situation. Whichever comes first, tests or CI.
>> if we start a CI with "just build", it will evolve, people will start
>> writing tests (I beleive so)
> I tend
Hi Olivie.
Olivier Doucet wrote on 15.09.2017:
> Hi,
>
> I wanted to open a new thread, as "cppcheck finding" was hijacked with this
> CICD / testing ;)
+1
> I think the best is the enemy of the good : why not start with a few
> easy tests ? For example just a mix of tiny / big config files to
Hi Mark.
Mark Holmes wrote on 28.09.2017:
> This is a simple question which I’m sure has a simple answer
>
> If I want to redirect
>
> http://nuget.biuk.bi.corp/nuget
>
> to
>
> http://nuget.biuk.bi.corp/nuget/BIW.Nexus
>
> What is the simplest way? I read up on reqrep but have a feelin
Hi Willy,
Willy Tarreau wrote on 16.10.2017:
> Hi Pavlos!
> On Mon, Oct 16, 2017 at 10:46:44AM +0200, Pavlos Parissis wrote:
>> > Now after several failed attempts and with a lot of design sessions
>> > with my coworkers, I've made a good progress on a totally different
>> > approach which will
Hi all,
Aleksandar Lazic wrote on 16.10.2017:
[snipp]
> I have also started to create a image based on the h2 branch
> https://gitlab.com/aleks001/haproxy18-centos
> It's not finished yet but when it's finished you can use the docker
> image then from docker hub.
>
Hi Ciprian.
Ciprian Dorin Craciun wrote on 20.10.2017:
> After fiddling with some ideas revolving around HAProxy as a
> transparent proxy, I wondered if HAProxy supports the SOCKS4 protocol
> as an alternative to its own PROXY protocol. Looking at the 1.7
> documentation and source code it seems
Am 26-10-2017 17:40, schrieb Ciprian Dorin Craciun:
On Sun, Oct 22, 2017 at 11:11 PM, Aleksandar Lazic
wrote:
Currently the socks protocol is not implemented in haproxy.
I was hoping someone had a patch "hidden". :)
Well then it's still hidden ;-)
What flow do you hav
Hi.
-- Originalnachricht --
Von: "kushal bhattacharya"
An: haproxy@formilux.org
Gesendet: 26.10.2017 11:20:05
Betreff: Tcp logging in haproxy
I have included tcp logging in the configuration of haproxy.But I want
to know how it will be loggged in and where the log will be done.My
main
Hi
-- Originalnachricht --
Von: karthikeyan.rajam...@thomsonreuters.com
An: haproxy@formilux.org
Gesendet: 27.10.2017 00:13:50
Betreff: HAProxy1.7.9-http-reuse
Hi,
We are testing a setup which has a local haproxy which connects to a
remote haproxy which in turn calls an apache server
Hi
-- Originalnachricht --
Von: "kushal bhattacharya"
An: haproxy@formilux.org
Gesendet: 27.10.2017 12:47:37
Betreff: Re: Tcp logging in haproxy
Sorry if it is generated as a new topic i am attaching my
configuration until now below
On UDP 127.0.0.1:514 must the syslog server listen a
Hi.
-- Originalnachricht --
Von: "Willy Tarreau"
An: "Cyril Bonté"
Cc: haproxy@formilux.org
Gesendet: 01.11.2017 07:44:23
Betreff: Re: [ANNOUNCE] haproxy-1.8-rc1 : the last mile
Hi Cyril,
On Wed, Nov 01, 2017 at 01:03:42AM +0100, Cyril Bonté wrote:
This announcement was exciting enou
-- Originalnachricht --
Von: "Bryan Talbot"
An: "Aleksandar Lazic"
Cc: "HAproxy Mailing Lists"
Gesendet: 01.11.2017 21:25:34
Betreff: Re: [ANNOUNCE] haproxy-1.8-rc1 : the last mile
On Nov 1, 2017, at Nov 1, 3:28 AM, Aleksandar Lazic
wrote:
There i
Hi.
-- Originalnachricht --
Von: "aogooc xu"
An: haproxy@formilux.org
Gesendet: 02.11.2017 08:57:17
Betreff: How to debug haproxy + lua?
In the high concurrent environment, there is a blocking function, how
fast positioning ?
I am very confused, but it's too much trouble to make a lo
The new version is on docker hub
https://hub.docker.com/r/me2digital/haproxy18/
###
HA-Proxy version 1.8-rc2-a8d8d6e 2017/11/03
Copyright 2000-2017 Willy Tarreau
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement
Great ;-)
Updated on docker hub.
https://hub.docker.com/r/me2digital/haproxy18/
###
HA-Proxy version 1.8-rc3-34650d5 2017/11/11
Copyright 2000-2017 Willy Tarreau
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statemen
Hi Omer.
Please can you also post the config of nginx and the version.
nginx -V
Are the setups equal?
I mean do you stop on the same machine the haproxy and start the nginx
or are the setups different?
Regards
Aleks
-- Originalnachricht --
Von: "omer kirkagaclioglu"
An: haproxy@for
Hi Tim.
-- Originalnachricht --
Von: "Tim Düsterhus"
An: haproxy@formilux.org
Cc: wlallem...@haproxy.com; "Tim Düsterhus"
Gesendet: 18.11.2017 20:02:23
Betreff: [PATCH] MEDIUM: mworker: Add systemd `Type=notify` support
This patch adds support for `Type=notify` to the systemd unit.
S
Hi.
-- Originalnachricht --
Von: "Tim Düsterhus"
An: haproxy@formilux.org
Cc: "Tim Duesterhus" ; wlallem...@haproxy.com;
a...@none.at
Gesendet: 19.11.2017 03:10:21
Betreff: [PATCH v2 1/1] MEDIUM: mworker: Add systemd `Type=notify`
support
From: Tim Duesterhus
This patch adds supp
Ho JWD
-- Originalnachricht --
Von: "JWD"
An: "haproxy"
Gesendet: 19.11.2017 04:51:05
Betreff: Is it possible to transfer client ip (src) from ssl:443 to
https:8443?
client access ssl:443.
https:8443 as backend of ssl:443.
Is it possible to transfer client ip (src) from ssl:443 to
Hi.
-- Originalnachricht --
Von: "Willy Tarreau"
An: haproxy@formilux.org
Gesendet: 19.11.2017 10:21:36
Betreff: [ANNOUNCE] haproxy-1.8-rc4
Hi everyone!
So it's getting better. When fixing the scheduler issues in the last
RC, I messed up with the tree traversal, leading to some tasks
Hi.
-- Originalnachricht --
Von: "guy shilo"
An: "haproxy@formilux.org"
Gesendet: 23.11.2017 08:59:47
Betreff: Is version 1.7 ptiduction ready ?
Hello
I need to install HAproxy so I visited the project web site and
downloaded the latest stable version (1.7 according to the table in
ing each and every
report
so that the developers could stay focused on their tasks. And for this
reason,
among the 466 persons who participated to discussions over the last
year and
those animating the Discourse forums, I'd like to address special
thanks to
the following ones who together res
Hi Willy.
-- Originalnachricht --
Von: "Willy Tarreau"
An: "Aleksandar Lazic"
Cc: haproxy@formilux.org
Gesendet: 27.11.2017 23:54:31
Betreff: Re: [ANNOUNCE] haproxy-1.8.0
Hi Aleks,
On Mon, Nov 27, 2017 at 09:18:35PM +0000, Aleksandar Lazic wrote:
> I
Hi all.
I have build today the openshift router with the brand new haproxy 1.8.0
and 'alpn h2,http/1.1'
https://gitlab.com/aleks001/openshift-ocp-router-hap18/blob/master/containerfiles/var/lib/haproxy/conf/haproxy-config.template#L223
https://gitlab.com/aleks001/openshift-ocp-router-hap18/bl
Hi all.
I have the following log line and want to parse it with the halog tool.
'2017-12-01T12:12:35+01:00 localhost haproxy[14]: 1.2.3.4:55866
[01/Dec/2017:12:12:02.628] public be_01/server_01 0/0/2/32379/32381 500
969 - - 9/9/2/3/0 0/0 "POST /PATH/Service HTTP/1.1"' |./halog -H
I alwa
-- Originalnachricht --
Von: "Aleksandar Lazic"
An: "haproxy"
Gesendet: 01.12.2017 12:59:34
Betreff: Question to halog
Hi all.
I have the following log line and want to parse it with the halog tool.
'2017-12-01T12:12:35+01:00 localhost haproxy[14]: 1.2.3.4:
Hi.
-- Originalnachricht --
Von: "Joao Morais"
An: "HAproxy Mailing Lists"
Gesendet: 02.12.2017 00:53:33
Betreff: Client cert verification on some paths
Hi, I have some apps that need to mimic an Apache httpd behavior on
client certificate verification: require certificate only on s
Hi.
-- Originalnachricht --
Von: "CJ"
An: haproxy@formilux.org
Gesendet: 01.12.2017 14:38:07
Betreff: MQTT client id in Haproxy
Hi All,
Is it possible to get client id in haproxy in tcp mode just like http
mode.
I'm trying to get mqtt client id in haproxy tcp mode
Similar case in
-- Originalnachricht --
Von: "Willy Tarreau"
An: haproxy@formilux.org
Gesendet: 03.12.2017 22:43:00
Betreff: [ANNOUNCE] haproxy-1.8.1
Subject: [ANNOUNCE] haproxy-1.8.1
To: haproxy@formilux.org
Hi,
HAProxy 1.8.1 was released on 2017/12/03. It added 39 new commits
after version 1.8.0.
Hi.
Attached a small patch for halog against 1.8 repo witch also works
against 1.9 repo.
regards
Aleks
0001-Add-help-text-for-s-switch.patch
Description: Binary data
-- Originalnachricht --
Von: "Haim Ari"
An: "haproxy@formilux.org"
Gesendet: 05.12.2017 10:31:36
Betreff: Failed checks issue
Hello,
After upgrading to 1.8.1 i'm now facing this issue... (screenshot
attached)
[snipp]
After restarting a tomcat backend the check remains at DOWN
Hi.
-- Originalnachricht --
Von: "slene"
An: haproxy@formilux.org
Gesendet: 05.12.2017 11:36:27
Betreff: server DOWN and can not auto restore to MAINT state when use
DNS SRV resolvers
I'm a new fisher of haproxy. I have some question when I use consul and
registrator for service disc
Am 19.12.2018 um 21:04 schrieb UPPALAPATI, PRAVEEN:
> Ok then do I need to add the haproxy server?
I suggest to use a `curl -v
/nexus/v1/repository/rawcentral/com.att.swm.attpublic/healthcheck.txt`
and see how curl make the request.
I assume that nexus have a general URL and not srv1,srv2, ...
Fo
Hi.
Am 19.12.2018 um 19:33 schrieb Willy Tarreau:
> Hi,
>
> HAProxy 1.9.0 was released on 2018/12/19. It added 45 new commits
> after version 1.9-dev11.
>
> We still had a number of small issues causing the various artefacts that
> have been visible on haproxy.org since this week-end, but now ev
Am 20.12.2018 um 06:48 schrieb Willy Tarreau:
> On Wed, Dec 19, 2018 at 11:31:33PM +0100, Aleksandar Lazic wrote:
>>> Well, I know that so quick a summary doesn't do justice to the developers
>>> having done all this amazing work, but I've seen that some of my cowo
version, as it's
normally not a big deal to setup a vhost.
Regards
Aleks
PS: What's this urldefense.proofpoint.com crap 8-O
> Please advice.
>
> Thanks,
> Praveen.
>
>
>
> -Original Message-
> From: Aleksandar Lazic [mailto:al-hapr...@none.at]
> Sent: Wednesday, Dece
Hi Lance.
Am 20-12-2018 18:20, schrieb Lance Melancon:
We are testing the load balancer and it's working but I can't see how
to direct the server to a specific website such as server.net/site. Is
this possible? Syntax? Thanks!
Well yes. I think it is a good starting point to read and underst
Hi Willy.
Am 20-12-2018 10:29, schrieb Willy Tarreau:
On Thu, Dec 20, 2018 at 09:17:00AM +0100, Aleksandar Lazic wrote:
Runtime API Improvements: It would be nice when you add a block that
hanging or
dead processes can also be debugged with this API now. Maybe I have
overseen it.
It is
help you.
haproxy -vv
anonymized config
Regards
Aleks
-Original Message-----
From: Aleksandar Lazic
Sent: Thursday, December 20, 2018 2:00 PM
To: Lance Melancon
Cc: haproxy@formilux.org
Subject: Re: HA Proxy Load Balancer
CAUTION: This email originated from outside Cypress-Fairban
oxy.com/blog/the-four-essential-sections-of-an-haproxy-configuration/
https://www.haproxy.com/blog/introduction-to-haproxy-acls/
In any case please post some logs, configs or anything directly in the mail body
so that the persons which reads this list via a console are able to follow it
without to ope
Hi Patrick.
Am 26-12-2018 22:26, schrieb Overbey, Patrick (Sioux Falls):
Hello,
First off, I want to say thank you for your hard work on haproxy. It is
a very fine piece of software.
I recently ran into a bug compiling haproxy 1.9+ on AIX 7.1
7100-00-03-1115 using gmake 4.2 and gcc 8.1.0. I
prüngliche Nachricht
Von: "UPPALAPATI, PRAVEEN"
Gesendet: 27. Dezember 2018 06:24:43 MEZ
An: Aleksandar Lazic , haproxy
Betreff: RE: Http HealthCheck Issue
Hi Alex,
If I have one vhost representing all the nexus host's how can haproxy identify
which server is down ?
I
Hi.
I just have seen this tweet, maybe it's also interesting for you.
Subodh Iyengar (@__subodh) twitterte um 10:18 nachm. on Mi., Dez. 26, 2018:
Slides for my presentation at ACM conext on Facebook's implementation and
deployment of QUIC are now live
https://conferences2.sigcomm.org/co-next/2
Hi.
Have anyone take a look into the Maglev algorithm ?
This paper looks very interesting
https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/44824.pdf
Regards
Aleks
Well as far as I understood the pdf one of the biggest difference is that
Maglev is a distributed system where the consistent hash is for local system.
What I think is if consistent hash uses the peers table for balancing it could
be similar to Maglev, but I'm not a algo expert, just an Idea.
I
Am 29.12.2018 um 07:41 schrieb Willy Tarreau:
> On Fri, Dec 28, 2018 at 07:55:11PM +0100, Aleksandar Lazic wrote:
>> Well as far as I understood the pdf one of the biggest difference is that
>> Maglev is a distributed system where the consistent hash is for local system.
>
>
Am 29.12.2018 um 19:25 schrieb Valentin Vidic:
> On Sat, Dec 29, 2018 at 06:03:51PM +0100, Aleksandar Lazic wrote:
>> I thought I have misunderstood the Idea behind maglev, thanks for
>> clarification.
>
> Found another mention of Maglev [Eis16] for high-level lo
Am 09.01.2019 um 15:22 schrieb Willy Tarreau:
> Hi Tim,
>
> On Wed, Jan 09, 2019 at 12:58:30PM +0100, Tim Düsterhus wrote:
>> Am 09.01.19 um 05:31 schrieb Willy Tarreau:
>>> Except that the "naturally" part here is manually performed by someone,
>>> and an issue tracker is nothing more than an org
Hi.
Am 13.01.2019 um 12:17 schrieb Vũ Xuân Học:
> Hi,
>
> Please help me to solve this problem.
>
> I use HAProxy version 1.5.18, SSL transparent mode and I can not get client IP
> in my .net mvc website. With mode http, I can use option forwardfor to catch
> client ip but with tcp mode, my web
the client ip as the setup works in the http config.
Best regards
Aleks
Ursprüngliche Nachricht
Von: "Vũ Xuân Học"
Gesendet: 14. Jänner 2019 02:17:23 MEZ
An: 'PiBa-NL' , 'Aleksandar Lazic' ,
haproxy@formilux.org
Betreff: RE: Get client IP
Thanks
conf/haproxy-config.template#L180
https://github.com/openshift/router/blob/master/images/router/haproxy/conf/haproxy-config.template#L198
Regards
Aleks
> *From:* Aleksandar Lazic
> *Sent:* Monday, January 14, 2019 8:45 AM
> *To:* haproxy@formilux.org; Vũ Xuân Học ; 'PiBa-NL'
>
gt; From: Vũ Xuân Học
> Sent: Wednesday, January 16, 2019 10:37 AM
> To: 'Aleksandar Lazic' ; 'haproxy@formilux.org'
> ; 'PiBa-NL'
> Subject: RE: Get client IP
>
> Hi,
>
> I have other problem. I want to only allow some ip access my website.
Hi.
Am 16.01.2019 um 16:35 schrieb mirko stefanelli:
> Hi to all,
>
> we are trying to move from Apache reverse proxy to Haproxy, you can see below
> a
> part of del file Apache httpd.conf:
>
>
> ServerName dipendenti.xxx.xxx.it
> ErrorLog logs/intranet_ssl_error_log
> TransferLog l
Hi.
Am 16.01.2019 um 19:02 schrieb Willy Tarreau:
> Hi,
>
> HAProxy 1.9.2 was released on 2019/01/16. It added 58 new commits
> after version 1.9.1.
>
> It addresses a number of lower importance pending issues that were not
> yet merged into 1.9.1, one bug in the cache and fixes some long-standi
Hi Willy.
Am 17.01.2019 um 04:25 schrieb Willy Tarreau:
> Hi Aleks,
>
> On Wed, Jan 16, 2019 at 11:52:12PM +0100, Aleksandar Lazic wrote:
>> For service routing are the standard haproxy content routing options possible
>> (path, header, ...) , right?
>
> Yes absolutel
Hi Willy,
Am 17-01-2019 15:41, schrieb Willy Tarreau:
Hi Aleks,
On Thu, Jan 17, 2019 at 01:02:56PM +0100, Aleksandar Lazic wrote:
> Very likely, yes. If you want to inspect the body you simply have to
> enable "option http-buffer-request" so that haproxy waits for the body
&g
Hi.
As there are now the github templates in the repo can / should we start to
create issues & features on github?
Regards
Aleks
Ursprüngliche Nachricht
Von: Willy Tarreau
Gesendet: 14. Jänner 2019 04:11:17 MEZ
An: "Tim Düsterhus"
CC: Lukas Tribus , haproxy
Betreff: Re: h
Cool, thanks :-)
Ursprüngliche Nachricht
Von: Lukas Tribus
Gesendet: 18. Jänner 2019 14:14:06 MEZ
An: Aleksandar Lazic
CC: haproxy , Willy Tarreau , "Tim
Düsterhus"
Betreff: Re: haproxy issue tracker discussion
Hello Aleksandar,
On Fri, 18 Jan 2019 at 12:54,
Hi.
As far as I understood the keyupdate
https://tools.ietf.org/html/rfc8446 4.6.3
which you refer proper isn't it also a option to use
https://wiki.openssl.org/index.php/TLS1.3#Renegotiation
which refers to https://www.openssl.org/docs/manmaster/man3/SSL_key_update.html
instead of the sugge
Thank you for clarification.
Regard
Aleks
Ursprüngliche Nachricht
Von: Adam Langley
Gesendet: 21. Jänner 2019 00:12:59 MEZ
An: Aleksandar Lazic
CC: haproxy@formilux.org, Willy Tarreau , eb...@haproxy.com
Betreff: Re: HAProxy with OpenSSL 1.1.1 breaks when TLS 1.3 KeyUpdate
Hi Luke.
Am 21.01.2019 um 10:30 schrieb Luke Seelenbinder:
> Hi all,
>
> One more bug (or configuration hole) from our transition to 1.9.x using
> end-to-end h2 connections.
>
> After enabling h2 backends (technically `server … alpn h2,http/1.1`), we
> began seeing a high number of backend /se
Am 21.01.2019 um 23:40 schrieb Joao Guimaraes:
> Hi Haproxy team!
>
> I've been trying to figure out how to perform automatic redirects based on
> source URL transformations.
>
> *Basically I need the following redirect: *
>
> mysite.*abc* redirected to *abc*.mysite.com .
Maybe you can reu
Hi.
I have now build haproxy with boringssl and it looks quite good.
Is it the recommended way to simply make a git clone without any branch or tag?
Does anyone know how the KeyUpdate can be tested?
###
HA-Proxy version 1.9.2 2019/01/16 - https://haproxy.org/
Build options :
TARGET = linux262
Cool, thanks.
Do have boringssl a similar tool like s_client?
I don't like to build openssl just for s_client call :-)
Regards
Aleks
Ursprüngliche Nachricht
Von: Janusz Dziemidowicz
Gesendet: 22. Jänner 2019 19:49:15 MEZ
An: Aleksandar Lazic
CC: HAProxy
Betref
Am 22.01.2019 um 19:54 schrieb Aleksandar Lazic:
> Cool, thanks.
>
> Do have boringssl a similar tool like s_client?
>
> I don't like to build openssl just for s_client call :-)
Answer my own question.
bssl is the boringssl tool command.
The open question is why the test
Am 22.01.2019 um 20:04 schrieb Adam Langley:
> On Tue, Jan 22, 2019 at 10:54 AM Aleksandar Lazic wrote:
>> Do have boringssl a similar tool like s_client?
>
> BoringSSL builds tool/bssl (in the build directory), which is similar.
> However it doesn't have any magic in
Am 22.01.2019 um 20:30 schrieb Adam Langley:
> On Tue, Jan 22, 2019 at 11:16 AM Aleksandar Lazic wrote:
>> Agree that I get a 400 with this command.
>>
>> `echo 'K' | ./tool/bssl s_client -connect mail.google.com:443`
>
> (Note that "K" on its
Tim.
Am 22.01.2019 um 20:26 schrieb Tim Düsterhus:
> Aleks,
>
> Am 22.01.19 um 19:38 schrieb Aleksandar Lazic:
>> ## test results in:
>> "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.76167f9e"
>> s10.0 EXPECT req.http.test3maskff (2001:db8:
Am 22.01.2019 um 20:54 schrieb Adam Langley:
> On Tue, Jan 22, 2019 at 11:45 AM Aleksandar Lazic wrote:
>> Can it be reused to test a specific server like?
>>
>> ssl/test/runner/runner -test "KeyUpdate-ToServer" 127.0.0.1:8443
>
> Not easily: it drives the i
Tim.
Am 22.01.2019 um 20:57 schrieb Tim Düsterhus:
> Aleks,
>
> Am 22.01.19 um 20:50 schrieb Aleksandar Lazic:
>> This means that the function in haproxy works but the check should be
>> adopted to
>> match both cases, right?
>
> At least one should investiga
Am 22.01.2019 um 21:45 schrieb Adam Langley:
> On Tue, Jan 22, 2019 at 12:13 PM Aleksandar Lazic wrote:
>> Sorry for my dump question, I just want to be save not to break something.
>>
>> It would be nice to have the option '-key-update' in client.cc and server.cc
Hi Lukas.
Am 23.01.2019 um 10:24 schrieb Luke Seelenbinder:
> Hi Willy,
>
> Thanks for continuing to look into this.
>
>>
>
>> I've place an nginx instance after my local haproxy dev config, and
>> found something which might explain what you're observing : the process
>> apparently leaks FDs
n/2019:17:50:50.727] public_tcp public_tcp/ -1/-1/-1/-1/0 0 0 - -
PR-- 1/1/0/0/0 0/0 ""
<30>1 2019-01-23T17:50:50+00:00 doh-001 haproxy 1 - - 127.0.0.1:54178
[23/Jan/2019:17:50:50.715] public_tcp be_generic_tcp/google-mail 0/0/13/-1/13
502 208 - - SH-- 1/1/0/0/0 0/0 "GET / HTTP/1.1"
Hi Willy.
Am 23.01.2019 um 19:50 schrieb Willy Tarreau:
> Hi Aleks,
>
> On Wed, Jan 23, 2019 at 06:58:25PM +0100, Aleksandar Lazic wrote:
>> backend be_generic_tcp
>> mode http
>> balance source
>> timeout check 5s
>> option tcp-check
>>
&g
Am 23.01.2019 um 21:27 schrieb Willy Tarreau:
> On Wed, Jan 23, 2019 at 09:08:00PM +0100, Aleksandar Lazic wrote:
>> Should it be possible to have fe with h1 and be server h2(alpn h2), as I
>> expect this or similar return value when I go thru haproxy?
>
> Yes absolutely.
Am 24.01.2019 um 03:49 schrieb Willy Tarreau:
> On Wed, Jan 23, 2019 at 09:37:46PM +0100, Aleksandar Lazic wrote:
>>
>> Am 23.01.2019 um 21:27 schrieb Willy Tarreau:
>>> On Wed, Jan 23, 2019 at 09:08:00PM +0100, Aleksandar Lazic wrote:
>>>> Should it be possible
401 - 500 of 1095 matches
Mail list logo
