stats are cut off

2009-06-22 Thread Angelo Höngens
. Don't see anything interesting in the logs.. Any ideas anyone? -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239

stats are cut off

2009-06-22 Thread Angelo Höngens
. Don't see anything interesting in the logs.. Any ideas anyone? -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239

Re: stats are cut off

2009-06-23 Thread Angelo Höngens
of the port. Any idea when the 'net/haproxy' port wil be upgraded to 1.3.x? -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions

RE: HAProxy not writing to logs.

2009-07-20 Thread Angelo Höngens
Fri05PM 0:01.72 /usr/sbin/syslogd -a 127.0.0.1:* in my haproxy.conf is: global log 127.0.0.1 local0 notice -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA

Re: round robin

2009-08-18 Thread Angelo Höngens
? -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg +31 (0)13 5811088 +31 (0)13 5821239 a.hong

Re: round robin

2009-08-18 Thread Angelo Höngens
the sessions in a central db, and identifying users by cookies or something like that, like all big players do). -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch

RE: dynamic weights based on actual server load

2009-10-17 Thread Angelo Höngens
control over the backend application) Just my 2 cents. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239

Re: Perfect sysctl

2009-12-30 Thread Angelo Höngens
net.inet.ip.portrange.last=65535 net.inet.ip.portrange.hifirst=49152 net.inet.ip.portrange.hilast=65535 @Willy or someone else, feel free to comment on these settings if you see something strange. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS

Re: FreeBSD Ports: bumping haproxy from v1.2.18 - v1.4.x

2010-02-26 Thread Angelo Höngens
with that, as long as the errors are clear ;) -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA

Re: haproxy 1.4.1 port crashes

2010-03-17 Thread Angelo Höngens
. I'm running FreeBSD 7.2-RELEASE amd64 with a custom kernel (carp compiled in). Installed 1.3.22 from haproxy-devel, that works fine.. No time to dig deeper now, but if you need any help let me know, perhaps I can do some tests this week if needed. -- With kind regards, Angelo Höngens systems

acls and httpclose

2010-04-21 Thread Angelo Höngens
regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg +31 (0)13 5811088 +31 (0)13 5821239 a.hong...@netmatch.nl

Re: question about transparancy

2010-04-23 Thread Angelo Höngens
people wrote http balancers :) -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg +31 (0)13

Re: question about transparancy

2010-04-23 Thread Angelo Höngens
On 23-4-2010 11:19, Michiel van Es wrote: Angelo Höngens wrote: On 22-4-2010 20:28, Michiel van Es wrote: Yes That is the default smtp failover setup but I want to balance the load via a load balancer setup Mx records can not balance load If you have 2 mx records with the same priority

Re: acls and httpclose

2010-04-23 Thread Angelo Höngens
have little to do with eachother. Still, you say http-server-close is about twice as fast as httpclose. Am I not interpreting things right? -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist

Re: Sharing machine or separate machine?

2010-07-06 Thread Angelo Höngens
, and the 'public' interface only has port 80 open. SSH and other services only listen on the inside interface. In this case you don't really need a firewall to close ports. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business

Re: Sharing machine or separate machine?

2010-07-06 Thread Angelo Höngens
run a combination of haproxy, varnish, squid, apache, whatever fits my requirements. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software

Re: Varnish vs HAProxy vs Nginx vs Squid vs Other

2010-07-06 Thread Angelo Höngens
in my opinion it's best at balancing. We use squid for balancing and ssl offloading, and varnish for high-volume caching. see diagram for inspiration: http://files.hongens.nl/2010/05/21/2010_balancers_diagram.pdf -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003

Re: Varnish vs HAProxy vs Nginx vs Squid vs Other

2010-07-06 Thread Angelo Höngens
On 6-7-2010 20:28, Angelo Höngens wrote: We use haproxy for balancing, because in my opinion it's best at balancing. We use squid for balancing and ssl offloading, and varnish for high-volume caching. reply-to-self: I meant squid/varnish for *caching* -- With kind regards, Angelo

iptables performance impact

2010-07-13 Thread Angelo Höngens
it as well. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://www.netmatch.nl --

RE: List of sites using haproxy ?

2010-07-28 Thread Angelo Höngens
We use it for www.zoover.nl, www.weeronline.nl, www.snp.nl, etc. (in combination with either squid or varnish caches though). -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan

RE: HAProxy Stunnel end-to-end SSL

2010-10-20 Thread Angelo Höngens
. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://www.netmatch.nl

rpms for rhel5?

2010-10-24 Thread Angelo Höngens
the right init script for my distro, etc. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong

Re: rpms for rhel5?

2010-10-25 Thread Angelo Höngens
On 24-10-2010 21:44, Willy Tarreau wrote: On Sun, Oct 24, 2010 at 02:05:38PM +, Angelo Höngens wrote: Hey, does anyone know a place I can find rhel5 rpm's for the latest 1.4 releases? The popular repositories all seem to have only 1.3.. I'm not aware of any, and since the original

RE: VM benchmarks

2010-10-28 Thread Angelo Höngens
I'm wondering what the difference would be between the standard slow e1000 virtual network card and the fast paravirtualized vmxnet3 virtual network card. In theory, the latter one should be much, much faster.. -- With kind regards, Angelo Höngens Systems Administrator

RE: rpms for rhel5?

2010-11-01 Thread Angelo Höngens
Great, I'd really like to see 1.4.9 in the rhel5 epel repo :) -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239

RE: Ipaddr Problems

2010-11-03 Thread Angelo Höngens
://blog.hongens.nl/guides/setting-up-a-pacemaker-cluster-on-centosrhel/ -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13

RE: haproxy server ipv6 support

2010-11-05 Thread Angelo Höngens
there (and keeping ipv4 around makes things more complex). (for the interested, here are some more of my thoughts on ipv6 and where we are now: http://ipv6.netmatch.nl) I don't need a reaction, just think about it ;) -- With kind regards, Angelo Höngens Systems Administrator

RE: Get real source IP

2010-11-15 Thread Angelo Höngens
Or you could remove the client's xff header, and always use your own. Then you are sure you can trust your own xff header, and the client can't bypass. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software

RE: Get real source IP

2010-11-16 Thread Angelo Höngens
Read Willy's response from earlier today, he showed the command.. (I use another product in front of haproxy that removes the header in my case). -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software

RE: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

2011-01-06 Thread Angelo Höngens
load. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://www.netmatch.nl

RE: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

2011-01-06 Thread Angelo Höngens
, but in the end we almost always get a perfect 25-25-25-25 balancing. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13

Re: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

2011-01-06 Thread Angelo Höngens
see a request graph of one of my clusters: http://files.hongens.nl/2011/01/06/varnishrequests.png As you see the distribution is not perfect, but for me it's enough. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business

talking http to a https port

2018-08-15 Thread Angelo Höngens
Hey guys, I'm building a solution where I am ssl-offloading some old plain http applications. The http ports are listening on 8001, 8002, 8003, etc. I'm using haproxy 1.8.12 to listen on ports 18001, 18002, 18003, etc. using ssl. Everything works fine, as expected. I am trying to make stuff a