ses the bind list available in this listen section to
pick up the first one it can get a port information from.
The "if (do_check)" statement in src/server.c.
Baptiste
> Baptiste, thanks a lot for your patience and your detailed answer.
You're welcome!
> Et pour toi en francais: je suis désolé si tu es maintenant faché.
Fur disch in Deutsch: kein problem. Ich will ein Bier!
>> listen activemq-works
>> bind :8162
>> bind :819
ld be the port
> for the backend service if not defined explicitly.
Yes.
your configuration examples aren't in such case, they are MAPPED.
So simply force the port using the server's "port XXX" option.
Conclusion:
You have not hit a bug. Re-configure properly your listen secti
then other defaults sections for TCP mode. And most often you don't even
>> have the same timeouts, log settings etc.
>>
>
>
> Thanks for the explanation!
>
> I just realized that there can be multiple defaults sections, so your
> arguments look valid.
>
>
Hi Dmitry, and the list,
You can have a look here:
http://haproxy.com/training/haproxy_introduction_online_training/#9
and an example here:
http://haproxy.com/training/haproxy_introduction_online_training/#10
Baptiste
e 2 configurations:
1:
listen example1
bind :18161
option httpchk HEAD /
server zd-activemq-s21 10.50.241.93:+1 check
server zd-activemq-s22 10.50.241.94:+1 check
=> bind's port is being used for health checks
=> If multiple bind are present, the first one is used.
2:
frontend f_example2
bind :18161
default_backend b_example2
backend b_example2
option httpchk HEAD /
server zd-activemq-s21 10.50.241.93:+1 check
server zd-activemq-s22 10.50.241.94:+1 check
=> this configuration is invalid and an ALERT is returned because
backend b_example doesn't know to which TCP port
it is supposed to get connected to send the health check.
Baptiste
n LUA
> and write to a data structure?
>
> This is just a quick idea, I didn't look deeply into this yet, and was
wondering
> if anyone had done it before or has some ideas. :)
>
> Best regards,
>
> craig
>
Hi,
This is doable without any Lua.
Baptiste
meout server 180s
> timeout http-keep-alive 10s
> timeout tarpit 30s
>
>
> Best regards,
>
> Sylvain
>
Hi,
please run the same test against HAProxy 1.6 and enable "option
buffer-http-request":
http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#4-option%20http-buffer-request
Then your timeout http-request will also match the POSTed data.
Baptiste
You may want to try the following:
use_backend %[url,lower,word(1,/)]
Baptiste
On Mon, Jan 25, 2016 at 12:35 AM, Willy Tarreau wrote:
> Hi Baptiste,
>
> On Sun, Jan 24, 2016 at 09:01:27PM +0100, Baptiste wrote:
>> I commented this case in the code:
>>
>> /* apply drain mode if server is currently enabled */
>> if (!(srv->admin &a
On Sun, Jan 24, 2016 at 9:01 PM, Baptiste wrote:
> On Fri, Jan 22, 2016 at 10:46 AM, Willy Tarreau wrote:
>> Hi Alex,
>>
>> On Fri, Jan 22, 2016 at 11:32:14AM +0200, Alex wrote:
>>> Hi,
>>>
>>> Thank you for the answer, this is very helpful.
>
> cannot be enabled anymore. In fact, the problem with server-state is that
> if we save too many information we prevent the configuration changes
> from being considered, and if we save too little, we lose states. So
> we have to compose between what is found in the state file and what
Hi,
I'm also strongly against backporting features because it also gives less
interest for people to switch to the next version...
Furthermore, it does not make much sense to backport features since we also
aim releasing haproxy community more often than what we used to do.
Baptiste
Le 21
sting sessions to finish). What method to use is really up
> to you and your user case.
>
I think you misunderstand "drain" and "disable". Disable forces
everybody to get routed to an other server for their next request.
Baptiste
> So any ideas on how to get haproxy to handle this scenario?
Use mode tcp :)
> Commercial support is an option for us, but I didn't see custom development
> as an
> offered service.
That's because we don't do custom devs... We develop for our lovely Community!
Baptiste
On Sat, Jan 16, 2016 at 7:52 PM, Nenad Merdanovic wrote:
> Forgot to add the ML :/
>
> On 01/16/2016 07:43 PM, Nenad Merdanovic wrote:
>> Hello Robert,
>>
>> + Baptiste
>>
>>>
>>> Connect() failed for backend bk: no free ports.
>>>
&
st }
What type of content do you have in your whitelist file?
Do you run HAProxy in multiprocess mode?
note: the whitelist applies to NEW connections, not to already established ones.
Baptiste
nd rewrite your HTTP header into the cookie
used for persistence.
Some kind of:
backend bk_srv
http-request set-header Cookie MyCookie=%[req.hdr(X-Want-Backend)]
cookie MyCookie insert indirect
server s1 1.0.0.1:8082 cookie s1
server s2 1.0.0.2:8082 cookie s2
Baptiste
To return the 429 response code, use the "errorfile 403" directive and
replace the 403 code in the file by 429.
Baptiste
On Wed, Jan 20, 2016 at 12:30 AM, Chad Lavoie wrote:
> Greetings,
>
> I'd use the following four lines in a backend:
> stick-table ty
.html
It applies to our appliance, but also to our Community edition (or
Enterprise one).
Baptiste
rovide more
> information.
>
> - Chad
To complete Chad's answer, you may also have a look at this page:
http://haproxy.com/doc/aloha/7.5/haproxy/healthchecks.html
It applies to our appliance, but also to our Community edition (or
Enterprise one).
Baptiste
rthermore, this type of configuration will be "broken" on 1.6.
Baptiste
Hope this helps:
http://haproxy.com/doc/hapee/1.5/introduction.html#hardware-requirements
10G, depends how big is the response on average, but should be doable
with low effort.
Baptiste
On Mon, Jan 11, 2016 at 3:02 PM, Jeff Palmer wrote:
> The immediate link that comes to mind for
By the way, there are no 'appsession' any more :)
Baptiste
t; Thanks muchly - and thanks for making HAProxy!
>
> Mike
Hi Mike,
What should be in active/passive in your case?
Is that HAProxy itself or the application being load-balanced???
In this article, we speak about the application being load-balanced.
Baptiste
e.
More ALERT may also be triggered when the configuration parser doesn't
understand a keyword while those keywords used to be silently ignored.
(check alertif_too_many_args_idx() ).
So by definition, many configuration may be broken.
Baptiste
I'm seeing more a misconfigured web server whose virtualhost is
sticked to the IP address and which can't route traffic which contains
HAProxy's Virtual IP to the right virtual host ;)
Baptiste
On Mon, Dec 21, 2015 at 7:20 AM, Gaurav Sharma
wrote:
> Hi Baptiste / Willy ,
>
> HAproxy doesn't support SNI, NPN or ALPN on the backend currently
Since 1.6, HAProxy supports sni on the server side, using a fetch.
Baptiste
adCaptureWebService"; -k
>
> {http://hostname.com}AgencyLeadCaptureWebService
> Hi there, this is a Web service!
>
> --
> Regards,
> Gaurav Sharma,
> Devops Engineer,
> Phone No. : 09582232217
> Ignite World
Hi,
HAProxy can't return a 404. Your web server may be improperly configured.
Baptiste
On Mon, Dec 7, 2015 at 11:55 AM, Olivier Doucet wrote:
>
>
> 2015-12-04 8:19 GMT+01:00 Baptiste :
>>
>> Hi Olivier,
>>
>> It's a LRU cache, so I guess the size isn't really important. It will
>> be full after some time.
>> What you may w
current Lua implementation already allows asynchronous network sockets.
Now, what you need to do is to code a basic LDAP auth request in Lua
and be able to parse the response.
Baptiste
On Thu, Dec 3, 2015 at 11:58 PM, Grant Haywood wrote:
> Thats exactly what I am wanting to code, I just n
tions, can these requirements be
> implemented using Lua-based extentions for HAProxy? If these requirements
> can easily be done with Lua-based extensions, how do you recommend that we
> implement it?
>
> Thanks for any help!
> John Pingel
> Email: jake.pin...@gmail.com
Hi,
Yes you can.
You have to configure your partner as a backend and pick up examples
from this blog article:
http://blog.haproxy.com/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/
I may write a dedicated article to request throttling soon :)
Baptiste
ow how much of it
> I'm using ?
>
>
> Olivier
>
Hi Olivier,
It's a LRU cache, so I guess the size isn't really important. It will
be full after some time.
What you may want to care is the cache miss value reported by a "show
stat" CLI command.
Baptiste
an,
You can use your own health check system and update server status
through HAProxy stats socket bound in each process.
Baptiste
box, anything which
may help us understanding what happens, such as your configuration,
sysctls, dmesg output, logs, etc...
Baptiste
;
> Please share the configuration so we can take a look.
>
>
>
> Regards,
>
> Lukas
>
>
Hi,
the same TCP port must be bound fot different purpose: LBing and stats.
As Lukas asked, please share your configuration.
Baptiste
limitations
due to linking container together.
Baptiste
e the data in CSV format via HTTP,
> or reuse the aggregated value throught sample fetches.
>
> Thierry
>
Great, amazing
Baptiste
o map many host header to the same backend.
If you want a single host header per backend, then, simply use
use_backend %[req.hdr(host),lower
Then each backend must use the host header as the backend name and
you're done, dynamic routing with a single use_backend rule, whatever
the number of backends you have.
Baptiste
On Sat, Nov 14, 2015 at 2:18 PM, Baptiste wrote:
>
> Le 14 nov. 2015 14:01, "Paul Menzel" a
> écrit :
>>
>> Dear HAProxy folks,
>>
>>
>> I am using a Docker setup to serve Web application using a database.
>>
>> HAProxy, the Web ap
gine/userguide/networking/default_network/dockerlinks/
Hi Paul,
What about using dns resolution available in haproxy 1.6?
That's how I do.
Baptiste
help.
Furthermore, you don't share anything about your hardware environment
neither the tuning you did on each box.
So it's impossible to help you.
At least, I can say that Lua seems to perform very well :)
Baptiste
ly, your timeouts are also very important as well.
I would also enable "option prefer-last-server", furthermore if you
have many servers in the farm.
Now, to test the reuse, simply try opening a session using telnet, and
fake a keepalive session.
then do a few wget and confirm all the traffic uses the session
previously established.
Baptiste
're making!
Don't hesitate to tweet it (Cc @haproxy_tech) and share links here, so
we can spread the word.
Baptiste
Hi,
This is an english mailing list!
Baptiste
Le 7 nov. 2015 18:26, "adoume" a écrit :
> Gros enculé que tu es, tu vas me retirer de ta putain de liste
> Tu vends ou tu donnnes mon mail a personne
> tu me fais plus chier avec tes pubs de merde
> et vas te faire enc
ind it
> for 1.6.3 otherwise it is ok.
>
> Please cc ttr...@deviceatlas.com for any response.
>
> Thanks in advance.
> Kindest regards.
David,
You forgot the attachment :)
Baptiste
On Thu, Nov 5, 2015 at 3:45 PM, Sylvain Faivre
wrote:
> On 11/05/2015 03:30 PM, Baptiste wrote:
>>
>> On Thu, Nov 5, 2015 at 2:48 PM, Sylvain Faivre
>> wrote:
>>>
>>> Hi,
>>>
>>> Is there a way to use several gpc's ?
>>>
>
you using?
With 1.6, there are some converters that may be used to get rid of
using gpc while counting errors.
It means you would store abuser client IP in a dedicated table and
simply check if the IP is there:
http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#in_table
I have on my TODO to write such type of article on the blog. Some kind
of DDOS protection with HAProxy 1.6.
Baptiste
alid-http-request" to meet your requirement.
http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#4.2-option%20accept-invalid-http-request
Or create a new option "option accept-broken-http-version-from-client" :)
Baptiste
t;Connection: close\r\n"
response = response .. "\r\n"
response = response .. buffer
txn.res:send(response)
txn:done()
end)
content of haproxy's configuration:
global
log 127.0.0.1 local0
lua-load echo.lua
frontend echo
bind *:10004
mode http
http-request lua.echo
Don't forget to setup timeouts, etc...
Baptiste
On Fri, Oct 30, 2015 at 3:22 PM, Pavlos Parissis
wrote:
> Hi,
>
> Following resolver section passes configuration check
> resolvers mydns1
> nameserver ns1 8.8.8.8:53
> nameserver ns1 8.8.4.4:53
> resolve_retries 3
> timeout retry 1s
> hold val
an csv_enc() in
src/standard.c.
Baptiste
On Mon, Nov 2, 2015 at 8:44 AM, Melvil JA wrote:
> CSV to json conversion,there are lots of options.
> Is it possible to get direct restful output from haproxy.
> Suppoes i have hundreds of servers..is it good to parse hundreds of csv o/p
> to js
ailserver anyhow).
>
> rgds
>
> Matt Bryant
> --
> m...@the-bryants.net
Hi Matt,
Yes, you have the server side 'sni' keyword:
http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#sni
(HAProxy 1.6 only)
Baptiste
Yes, using jq:
http://infiniteundo.com/post/99336704013/convert-csv-to-json-with-jq
Baptiste
On Mon, Nov 2, 2015 at 6:36 AM, Melvil JA wrote:
> Is it possible to get haproxy host information via api/json other than via
> ui and csv ?
>
> --
> Thanks
hich has not happened yet.
>
> Lukas
True :)
I'm cutting edge: "HAProxy version 1.7-dev0-e4c4b7-18".
Baptiste
f hours ago to confirm
the problem is fixed.
I sent patches to Willy, and they have been integrated a few minutes ago.
You can git pull ; make clean ; make [...]
Baptiste
e type string len 70 size 5M expire 1m store
gpc0_rate(60s),conn_cnt,conn_cur,conn_rate(60s),sess_cnt,sess_rate(60s),http_req_rate(60s)
stick on url_param(uid)
stick on req.hdr(UID)
We use this type of configuration to maintain persistence on
JSESSIONID cookie which may be found either in a Cookie or in a url
parameter.
Baptiste
On Wed, Oct 28, 2015 at 9:23 PM, Susheel Jalali
wrote:
> Dear Baptiste, Ben and Jesse,
>
> We have been facing the same issue that HAProxy backend is not able to
> pull the right Web servers using our local DNS. We applied Baptiste’s
> updated patches to server.c and dns.c and re
On Wed, Oct 28, 2015 at 7:04 PM, Jesse Hathaway wrote:
> On Wed, Oct 28, 2015 at 12:00 PM, Baptiste wrote:
>> Good catch, forget about patch 1, It was 2AM in the morning when I
>> wrote it :'(...
>> I wanted to apply the same code as DNS_UPD_NO_IP_FOUND, and in
On Wed, Oct 28, 2015 at 6:39 PM, Ben Tisdall wrote:
> On Wed, Oct 28, 2015 at 6:28 PM, Ben Tisdall wrote:
>> On Wed, Oct 28, 2015 at 6:00 PM, Baptiste wrote:
>>>
>>> Ben, could you apply the patch below instead of 0001:
>>>
>>> [snip]
>
> Tha
Jesse
On Wed, Oct 28, 2015 at 5:25 PM, Jesse Hathaway wrote:
> On Tue, Oct 27, 2015 at 8:18 PM, Baptiste wrote:
>> #2 an error in the way we parse CNAME responses, leading to return an
>> error when validating a CNAME (this triggers bug #1).
>
> How does your patch for
Great, thanks for confirming!
Baptiste
On Wed, Oct 28, 2015 at 4:13 PM, Ben Tisdall wrote:
> On Wed, Oct 28, 2015 at 3:04 PM, Baptiste wrote:
>> Now, you can simply use whatever tool (ab, httperf, wrk, etc...)
>> hosted on a third party VM to inject traffic on ELB IP directly.
'update' counter to be
incremented to 1.
Of course, traffic load-balanced by HAProxy should followup as well.
Baptiste
On Wed, Oct 28, 2015 at 2:05 PM, Ben Tisdall wrote:
> On Wed, Oct 28, 2015 at 1:55 PM, Baptiste wrote:
>
>>
>> Have you forced resolution to ipv4 only?
&g
On Wed, Oct 28, 2015 at 11:36 AM, Ben Tisdall wrote:
> On Wed, Oct 28, 2015 at 10:15 AM, Ben Tisdall
> wrote:
>>
>> Thanks Baptiste, will get on this today.
>>
>
> Ok this in the test environment now and the "other" counter now
> increments in step
ug #1).
Please find in attachment a couple of patches you could give a try and
report whether you still have an issue or not.
Baptiste
From 67687363df5e2b5c82f12ecf2c560d22f9da795c Mon Sep 17 00:00:00 2001
From: Baptiste Assmann
Date: Wed, 28 Oct 2015 02:03:32 +0100
Subject: [PATCH 1/2] BUG/MAJOR
Hi Javier,
Are you aware of HAProxy logs and its termination states?
It says on which side (client / server) a problem occurred, as well as
what type of problem.
Maybe analyzing the logs will prevent you from performing the
harassing job of analyzing a packet capture.
Baptiste
On Tue, Oct 27
On Wed, Oct 28, 2015 at 12:13 AM, Baptiste wrote:
> On Tue, Oct 27, 2015 at 11:44 AM, Ben Tisdall
> wrote:
>> Hi and thanks for a great load balancer. We're developing a much more
>> complex proxy ruleset and being able to switch back to haproxy now
>> that it suppo
esolvers aws
nameserver aws1 172.31.0.2:53
defaults HTTP
mode http
timeout client 10s
timeout connect 4s
timeout server 10s
frontend f
bind :8080
default_backend b
backend b
server s ${LBNAME}:80 check resolvers aws resolve-prefer ipv4
frontend s
bind :80
stats enable
stats uri /stats
stats show-legends
http-request redirect location /stats if { path / }
Please take a real pcap file using tcpdump and send it to me privately.
You also seem to use a CNAME which points to your ELB amazon name.
Could you let me know how you setup this, so I can try to reproduce
the issue in my lab?
Maybe the CNAME parsing is broken.
Baptiste
abetically%20sorted%20keywords%20reference%29
more about source port exhaustion (applied to mysql):
http://blog.haproxy.com/2012/12/12/haproxy-high-mysql-request-rate-and-tcp-source-port-exhaustion/
Don't forget to set sysctl net.ipv4.ip_local_port_range
Baptiste
On Thu, Oct 22, 2015
8001
http-request capture req.body id 0
default_backend b
backend b
server s 127.0.0.1:8000
Log generated when a body is sent:
localhost haproxy[25012]: body: foo:bar
and when no body are sent:
localhost haproxy[25012]: body: -
Baptiste
On Thu, Oct 22, 2015 at 10:30 AM, Alberto Zaccagni
wrot
mes Brown
> Engineer
> EasyPost
Hi James,
This is interesting.
That said, I'm suggesting an improvement: use the log format varialble.
So your configuration would become:
backend foo
default-server agent-send "%b/%s\n"
server web1 10.1.2.1:8001 agent-check agent-port 3334
server web2 10.1.2.2:8001 agent-check agent-port 3334
Baptiste
Hi,
Either download the right RPM for your operating system version or
install it from source.
Baptiste
On Thu, Oct 22, 2015 at 10:00 AM, Wilence Yao wrote:
> Hi,
> I am a software developer from China. HAProxy is widely used in our company
> and it help build our system stable and
ple and log the capture.req.hdr in your
log-format and your done.
Baptiste
On Thu, Oct 22, 2015 at 9:09 AM, Alberto Zaccagni
wrote:
> Hello Baptiste,
>
> I've read both the 1.6 announcement and the docs about this feature, but u
> could not get it to work, I know I'm doing some
time and log it.
If it still doesn't work, post your configuration.
Baptiste
On Wed, Oct 21, 2015 at 5:31 PM, Alberto Zaccagni
wrote:
> Did anyone succeeded in logging req.body?
> If so I would likely appreciate an example / some hints / a pointer into the
> docs, even though I&
erly). But the end
>> result is that you can pretty much say that when you get NXDOMAIN, there
>> really is nothing there for you so you can just stop looking (at least
>> at that the current server).
>
> Thanks for clarifying, I didn't know about this. Good thing we did
y
=> A only (stop on NX)
If both 'resolve-prefer ipv[46]' and 'v[46]only' are set, whatever
combination, then, v[46]only applies, but configuration parsing may
return a warning.
So we don't break compatibility with current code and way of working!
Brilliant guys :)
Baptiste
Hi Andrew,
I've updated your patch quickly so Willy can integrate it.
I've also updated the commit message to follow Lukas recommendations.
Baptiste
On Tue, Oct 20, 2015 at 2:26 PM, Baptiste wrote:
> Hi Andrew,
>
> There is a bug repeated twice in your code.
> In bot
olvers section to instruct HAPoxy to not
forgive on NX and failover to next family:
option on-nx-try-next-family
The magic should happen in snr_resolution_error_cb().
Baptiste
n the server one.
Please move the line "resolution->resolver_family_priority =
s->resolver_family_priority;" before using the value stored in it.
Appart this, it looks good.
Baptiste
On Tue, Oct 20, 2015 at 12:39 AM, Andrew Hayworth
wrote:
> The ANY query type is weird, and s
Hi all,
Thanks a lot for your feedbacks. Really valuable.
I'll discuss with Willy the best approach for the change.
Baptiste
On Mon, Oct 19, 2015 at 11:50 PM, Andrew Hayworth
wrote:
> Hi all -
>
> Just to chime in, we just got bit by this in production. Our dns
> resolver (
Have you 'tunned' your sysctls?
Baptiste
Le 16 oct. 2015 14:56, "wbmtfrdlxm" a écrit :
> what linux distribution are you using?
>
> light traffic is simulating 100 users browsing a website, simple http
> requests. we have 2 backend nodes and after a while, b
Is your problem fixed?
We may emit a warning for such configuration.
Baptiste
Le 15 oct. 2015 07:34, "Krishna Kumar (Engineering)" <
krishna...@flipkart.com> a écrit :
> Hi Baptiste,
>
> Thank you for the advise and solution, I didn't realize retries had to be
fetch may not be
reliably used here because it needs 'HTTP request headers' which is not
available here.", where should I be using it?
> Does that mean that we cannot log req.body at all or that I have to
enable another option before trying to use it?
>
> Any hint or help is much appreciated.
> Thank you.
>
> Cheers
Have you turned on 'mode http'?
Baptiste
...@icitizen.com
> Twitter: @markbetz
Hi,
Weird. Configuration parsing is failing, which means it's a libc/system
problem.
Is your resolv.conf properly set up and the server responsive?
Can you run a tcpdump at haproxy's start up and over your raw container (no
dnsutils installed).
Baptiste
n other option, would to make HAProxy to failover to next query type
in case of NX response.
This would also cover the case where a server returns a NX because no
records exists.
Any comments are welcome.
Baptiste
conv/snapshot/configuration-1.6.html#5.3.2
I'll see what happens with your DNS server and how we could workaround
it in HAProxy.
Baptiste
>
> Is there any way to tune this kind of behaviour in the resolvers section of
> HAProxy now?
>
> Best regards
>
> Øyvind Johnsen
gt; the 1.6.0-devX builds.
Hi Oyvind,
Please repost your SSL question in a new thread with an appropriate subject.
Next time avoid mixing 2 very different topics in the same thread.
Have you enabled stats socket in your global section?
If not, please enable it.
Then run a "show stat resolvers" and report here the output of the command.
A packet capture of a few DNS packets would be much appreciated.
Baptiste
ly can't engage our
SLAs on this version.
Baptiste
On Thu, Oct 15, 2015 at 1:18 AM, Jonathan Winer wrote:
> Hi - we currently run a licensed (Business) version of HAPEE, but are
> interested in some of the new capabilities of 1.6. What options do we have
> to 'upgra
d to be applied at 'retries - 1'...
So basically, what may be happening:
- because of logasap, HAProxy does not wait until the end of the
session to generate the log line
- this log is in error because a connection was attempted (and failed)
on a server
You should not setup any ulimit and let HAProxy do the job for you.
Baptiste
Hi Daren,
What type of errors are reported?
Baptiste
On Wed, Oct 14, 2015 at 8:19 AM, Daren Sefcik wrote:
> I followed Willy's advice from this post
>
> http://www.mail-archive.com/haproxy@formilux.org/msg05171.html
>
> but seem to get a lot of health check errors and (fal
Hey,
I summarized what's new in HAProxy 1.6 with some configuration
examples in a blog post to help quick adoption of new features:
http://blog.haproxy.com/2015/10/14/whats-new-in-haproxy-1-6/
Baptiste
Great, amazing!
Looking forward to 1.7!
Baptiste
Hi Stephen,
you have to wait for either the client or the server to close the connection.
As you said, the "sessions don't end", so your problem is by design on
your application.
Baptiste
On Mon, Oct 12, 2015 at 5:59 PM, Walsh, Stephen
wrote:
> Hi all,
>
>
>
>
a.b.c.e check port 80
Baptiste
On Mon, Oct 12, 2015 at 4:40 PM, Daren Sefcik wrote:
> humm...not sure I know how to answer that...we have servers that require SSL
> for some requests and not for others. I am not needing to do anything other
> than pass the traffic along, not doing any i
Hi Daren,
Do you want/need to decipher the traffic when using SSL?
Baptiste
On Mon, Oct 12, 2015 at 4:24 PM, Daren Sefcik wrote:
> I am probably totally overlooking something but how do I configure a
> frontend/backend to pass to the same server for both SSL and Non SSL
> requests?
ep in mind that not everybody reads all
> e-mails, so when you want to have a patch integrated, clearly mark
> it in the subject and don't leave it pending at the trail of a
> thread like this.
>
> Thanks,
> Willy
>
Hi all,
I confirm attached patch fix the issue: natively on my computer
(Willy, I was wrong this morning, I still had the bug) and when
HAProxy runs in docker too.
Baptiste
type of replay may make sense in a A/B testing mode, but slightly
revisited.
IE use farm A until one fail occurs, then replay to farm B where we
have a more verbose (hence much slower) version of the app or a
"fixed" version under testing, etc...
In such case, I would agree it may make sense.
Baptiste
cool :)
Ok, we need configuration and log lines relative to this POST.
Baptiste
On Fri, Oct 9, 2015 at 3:43 PM, Bosco Mutunga wrote:
> Those are not the actual credentials, any idea what might be wrong?
>
>> On 9 Oct 2015, at 16:40, Baptiste wrote:
>>
>> Wonderfull,
&
Wonderfull,
Please tell afbbank to change their password !
Baptiste
On Fri, Oct 9, 2015 at 3:26 PM, Bosco Mutunga wrote:
> Hi,
>
> I’m experiencing a strange issue whereby Haproxy completely hangs when it
> receives a certain request, i have confirmed that the request
(either increase minconn and or
decrease fullconn) and combined to a server which might be quite slow
to answer leading HAProxy to use queues.
Or you met a bug :)
We need the full configuration and log lines around the sQ event
(right before and right after), so we may help.
Baptiste
On Wed
Andrew,
My appologies about the proxy_find_by_name function, I was not in the
right context!!!
Tested and approved.
Willy, you can apply :)
Thanks a lot for your contribution, Andrew.
Baptiste
On Mon, Oct 5, 2015 at 5:47 PM, Andrew Hayworth
wrote:
> On Mon, Oct 5, 2015 at 7:24 AM, Bapti
301 - 400 of 1624 matches
Mail list logo
