Re: IP binding and standby health-checks

? FWIW, we're using haproxy 1.5.4 and kernel 4.0.4 on CentOS 7. Some features require root privileges, that said, from a documentation point of view, It doesn't seem the 'source' keyword like I asked you to set it up is one of them. Can you start it up with strace ?? Baptiste Regards, Nathan W

Re: Server IP resolution using DNS in HAProxy

On Sun, Jul 12, 2015 at 11:38 PM, Baptiste bed...@gmail.com wrote: hi all, As you may have noticed already, HAProxy 1.6-dev2 version has integrated a new feature: server IP address resolution using DNS. Main purpose of this dev is to make HAProxy aware of a server IP change when using

Re: IP binding and standby health-checks

Nathan, The question is: why do you want to use the VIP to get connected on your backend server? Please give a try to the following source line, instead of your current one: source 0.0.0.0 usesrc 10.240.36.13 Baptiste On Tue, Jul 14, 2015 at 9:06 PM, Nathan Williams nath.e.w...@gmail.com

FIX: wrong time unit for some default DNS timers

Hi, Madison May reported that the timeout applied by the default configuration is inproperly set up. This patch fix this: - hold valid default to 10s - timeout retry default to 1s Baptiste From d84e08b599c30fb1d0d35a3715d76c331ee4c1c4 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann bed

Re: Mailer does not work

on port 10025 and confirm HAProxy tries to get connected to the SMTP server? Baptiste

Re: FW: SSL offloading in HAProxy

Hi, SSL offloading in front of IMAPs (port 993) is supported. If you try to do STARTTLS over IMAP, it is not supported. Baptiste On Wed, Jul 15, 2015 at 10:38 AM, Cohen Galit galit.co...@comverse.com wrote: Hello HAProxy team, I see that the SSL offloading for http protocol is already

Re: ocsp

Hi Marc-Antoine, no idea, sorry. Maybe some of our SSL experts may help :) Baptiste On Wed, Jul 15, 2015 at 11:06 AM, Marc-Antoine marc-antoine.b...@ovh.net wrote: Hi, nobody knows plz ? On Thu, 9 Jul 2015 13:06:59 +0200, Marc-Antoine marc-antoine.b...@ovh.net wrote : Hi all, I have

Re: Load Balancing the Load Balancer

the simplest solution able to solve my issues. I mean your choice to take in sync haproxy.cfg file between 2 or more haproxy LB (rsync, custom script, etc.) rsync or scp... I mean, it's not only a cfg file, but also your SSL certificates, your ACLs, MAPs, etc... Baptiste

Re: Rewrite cookie path cookie domain

=%[capture.req.hdr(0)] # put your if statements as you want / need You can create as many http-response rules as you need to update first the domain, then the path. Baptiste Anyone can help me? Tnx, rr 2015-07-14 21:34 GMT+02:00 Baptiste bed...@gmail.com: Please repost your question. I

Re: Server IP resolution using DNS in HAProxy

On Wed, Jul 15, 2015 at 8:28 AM, Marco Corte ma...@marcocorte.it wrote: Il 14/07/2015 22:11, Baptiste ha scritto: - when parsing the configuration, HAProxy uses libc functions and resolvers provided by the operating system = if the server can't be resolved at this step, then HAProxy can't

Re: Server IP resolution using DNS in HAProxy

, it needs the most accurate information and as fast as possible. You don't want to tune your local bind or powerdns just for HAProxy and prevent any other service to operate as usual. Baptiste

Re: Server IP resolution using DNS in HAProxy

flexible enough for this purpose without being intrusive in the underlying operating system. Baptiste -Robin- Nenad Merdanovic wrote on 7/15/2015 08:56: Hello Robin, On 07/15/2015 08:49 AM, Robin Geuze wrote: Tbh I don't really see the point of configuring the resolvers in haproxy when

Re: How to disable backend servers without health check

/unixsurfer/haproxytool Cheers, Pavlos +1 to Pavlos' tool for this type of task Baptiste

Re: cookie prefix strange behavior

a redirect to a page which cleans up the cookie then redirect the user to the login page. Baptiste On Fri, Jul 17, 2015 at 5:49 PM, mlist ml...@apsystems.it wrote: We found this behavior does not appears if we manually clean cookie in the browser. There is a configuration option to invalidate

Re: IP binding and standby health-checks

Hi Nathan, The 'usesrc' keyword triggers this error. It needs root privileges. (just checked in the source code) Baptiste On Thu, Jul 16, 2015 at 5:13 PM, Nathan Williams nath.e.w...@gmail.com wrote: oh, i think this comment thread explains it: http://comments.gmane.org

DOC: usesrc root privileges

Hi, The documentation is missing the usesrc requirements about root privileges. This patch add this information in the doc. Baptiste From 8537d9b6c136a270c79670ebccf972a11fa86af7 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann bed...@gmail.com Date: Fri, 17 Jul 2015 21:59:42 +0200 Subject

Re: Server IP resolution using DNS in HAProxy

is that you don't need to reload HAProxy to change your X value ;) I would welcome a contribution about SRV record type. That said, before this, I have to rewrite part of the response parser to store the response in a real DNS packet structure instead of keeping data in a buffer. Baptiste

Re: Contribution: change response line

in haproxy. I let the LUA experts answer you on the rest of the mail :) Baptiste

Re: Haproxy 1.5.9 logging

Simply use the same statement to choose the severity level based on ACLs. It works on both http-request and http-response. Baptiste On Sun, Jul 19, 2015 at 10:53 AM, Haim Ari haim@startapp.com wrote: Thank you it works. What would be the best way to separate each log type to different

Re: haproxy/hapee Transparent LB

on a public mailing list) :) Baptiste

Re: HAproxy version 1.5 on centos 6.5

Hi, Either download the right RPM for your operating system version or install it from source. Baptiste On Thu, Oct 22, 2015 at 10:00 AM, Wilence Yao <wilence@gmail.com> wrote: > Hi, > I am a software developer from China. HAProxy is widely used in our company > and it help b

Re: [PATCH] MEDIUM: dns: Don't use the ANY query type

the end >> result is that you can pretty much say that when you get NXDOMAIN, there >> really is nothing there for you so you can just stop looking (at least >> at that the current server). > > Thanks for clarifying, I didn't know about this. Good thing we didn't > implemente

Re: Multiplexing multiple services behind one agent (feature suggestion; patch attached)

James Brown > Engineer > EasyPost Hi James, This is interesting. That said, I'm suggesting an improvement: use the log format varialble. So your configuration would become: backend foo default-server agent-send "%b/%s\n" server web1 10.1.2.1:8001 agent-check agent-port 3334 server web2 10.1.2.2:8001 agent-check agent-port 3334 Baptiste

Re: Looking for help about "req.body" logging

8001 http-request capture req.body id 0 default_backend b backend b server s 127.0.0.1:8000 Log generated when a body is sent: localhost haproxy[25012]: body: foo:bar and when no body are sent: localhost haproxy[25012]: body: - Baptiste On Thu, Oct 22, 2015 at 10:30 AM, Alberto Zaccagni <

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

On Wed, Oct 28, 2015 at 11:36 AM, Ben Tisdall <ben.tisd...@photobox.com> wrote: > On Wed, Oct 28, 2015 at 10:15 AM, Ben Tisdall <ben.tisd...@photobox.com> > wrote: >> >> Thanks Baptiste, will get on this today. >> > > Ok this in the test environment no

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

the 'update' counter to be incremented to 1. Of course, traffic load-balanced by HAProxy should followup as well. Baptiste On Wed, Oct 28, 2015 at 2:05 PM, Ben Tisdall <ben.tisd...@photobox.com> wrote: > On Wed, Oct 28, 2015 at 1:55 PM, Baptiste <bed...@gmail.com> wrote: > >> >&

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

Great, thanks for confirming! Baptiste On Wed, Oct 28, 2015 at 4:13 PM, Ben Tisdall <ben.tisd...@photobox.com> wrote: > On Wed, Oct 28, 2015 at 3:04 PM, Baptiste <bed...@gmail.com> wrote: >> Now, you can simply use whatever tool (ab, httperf, wrk, etc...) >> hosted on

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

On Wed, Oct 28, 2015 at 12:13 AM, Baptiste <bed...@gmail.com> wrote: > On Tue, Oct 27, 2015 at 11:44 AM, Ben Tisdall <ben.tisd...@photobox.com> > wrote: >> Hi and thanks for a great load balancer. We're developing a much more >> complex proxy ruleset and being able

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

80 stats enable stats uri /stats stats show-legends http-request redirect location /stats if { path / } Please take a real pcap file using tcpdump and send it to me privately. You also seem to use a CNAME which points to your ELB amazon name. Could you let me know how you setup this, so I can try to reproduce the issue in my lab? Maybe the CNAME parsing is broken. Baptiste

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

). Please find in attachment a couple of patches you could give a try and report whether you still have an issue or not. Baptiste From 67687363df5e2b5c82f12ecf2c560d22f9da795c Mon Sep 17 00:00:00 2001 From: Baptiste Assmann <bed...@gmail.com> Date: Wed, 28 Oct 2015 02:03:32 +0100 Subject: [P

Re: HA Proxy - packet capture functionality

Hi Javier, Are you aware of HAProxy logs and its termination states? It says on which side (client / server) a problem occurred, as well as what type of problem. Maybe analyzing the logs will prevent you from performing the harassing job of analyzing a packet capture. Baptiste On Tue, Oct 27

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

Jesse On Wed, Oct 28, 2015 at 5:25 PM, Jesse Hathaway <je...@mbuki-mvuki.org> wrote: > On Tue, Oct 27, 2015 at 8:18 PM, Baptiste <bed...@gmail.com> wrote: >> #2 an error in the way we parse CNAME responses, leading to return an >> error when validating a CNAME (this tri

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

On Wed, Oct 28, 2015 at 6:39 PM, Ben Tisdall <ben.tisd...@photobox.com> wrote: > On Wed, Oct 28, 2015 at 6:28 PM, Ben Tisdall <ben.tisd...@photobox.com> wrote: >> On Wed, Oct 28, 2015 at 6:00 PM, Baptiste <bed...@gmail.com> wrote: >>> >>> Ben, co

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

On Wed, Oct 28, 2015 at 7:04 PM, Jesse Hathaway <je...@mbuki-mvuki.org> wrote: > On Wed, Oct 28, 2015 at 12:00 PM, Baptiste <bed...@gmail.com> wrote: >> Good catch, forget about patch 1, It was 2AM in the morning when I >> wrote it :'(... >>

Re: 1.6.1: Backend DNS Resolution Error

On Wed, Oct 28, 2015 at 9:23 PM, Susheel Jalali <susheel.jal...@coscend.com> wrote: > Dear Baptiste, Ben and Jesse, > > We have been facing the same issue that HAProxy backend is not able to > pull the right Web servers using our local DNS. We applied Baptiste’s > update

Re: stick tables and url_param + post headers - counter‏

header stick-table type string len 70 size 5M expire 1m store gpc0_rate(60s),conn_cnt,conn_cur,conn_rate(60s),sess_cnt,sess_rate(60s),http_req_rate(60s) stick on url_param(uid) stick on req.hdr(UID) We use this type of configuration to maintain persistence on JSESSIONID cookie which may be found either in a Cookie or in a url parameter. Baptiste

Re: Looking for help about "req.body" logging

time and log it. If it still doesn't work, post your configuration. Baptiste On Wed, Oct 21, 2015 at 5:31 PM, Alberto Zaccagni <alberto.zacca...@lazywithclass.com> wrote: > Did anyone succeeded in logging req.body? > If so I would likely appreciate an example / some hints

Re: Looking for help about "req.body" logging

le and log the capture.req.hdr in your log-format and your done. Baptiste On Thu, Oct 22, 2015 at 9:09 AM, Alberto Zaccagni <alberto.zacca...@lazywithclass.com> wrote: > Hello Baptiste, > > I've read both the 1.6 announcement and the docs about this feature, but u > could not get it to work

Re: Echo server in Lua

ay help. Furthermore, you don't share anything about your hardware environment neither the tuning you did on each box. So it's impossible to help you. At least, I can say that Lua seems to perform very well :) Baptiste

Re: Our Tribute to HAProxy Developers and Users

On Tue, Nov 10, 2015 at 10:33 AM, Susheel Jalali wrote: > Dear HAProxy Community, > > For the past month, we have been using HAProxy to provide our customers and > partners access to our mainstream products, as well as balance load across > the hosting servers. Here

Re: Experiences with Docker and linking containers for zero downtime deployments

gt; > [1] http://docs.docker.com/engine/userguide/networking/default_network/dockerlinks/ Hi Paul, What about using dns resolution available in haproxy 1.6? That's how I do. Baptiste

Re: [LUA] statistics aggregation

oxy > instances. It permits to redistribute the data in CSV format via HTTP, > or reuse the aggregated value throught sample fetches. > > Thierry > Great, amazing Baptiste

HAProxy and container IP changes in Docker

the limitations due to linking container together. Baptiste

Re: [1.6.1] Utilizing http-reuse

i Krishna, Actually, your timeouts are also very important as well. I would also enable "option prefer-last-server", furthermore if you have many servers in the farm. Now, to test the reuse, simply try opening a session using telnet, and fake a keepalive session. then do a few wget and confirm all the traffic uses the session previously established. Baptiste

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

g! I managed to run it in my lab as well a couple of hours ago to confirm the problem is fixed. I sent patches to Willy, and they have been integrated a few minutes ago. You can git pull ; make clean ; make [...] Baptiste

Re: DNS resolution problem on 1.6.1-1ppa1~trusty

kport > and the git push, which has not happened yet. > > Lukas True :) I'm cutting edge: "HAProxy version 1.7-dev0-e4c4b7-18". Baptiste

Re: Multiple nameservers with the same ID is allowed

On Fri, Oct 30, 2015 at 3:22 PM, Pavlos Parissis wrote: > Hi, > > Following resolver section passes configuration check > resolvers mydns1 > nameserver ns1 8.8.8.8:53 > nameserver ns1 8.8.4.4:53 > resolve_retries 3 > timeout retry

Re: GET HAPROXY HOST INFO VIA Api/JSON

Yes, using jq: http://infiniteundo.com/post/99336704013/convert-csv-to-json-with-jq Baptiste On Mon, Nov 2, 2015 at 6:36 AM, Melvil JA <melvil.adap...@inmobi.com> wrote: > Is it possible to get haproxy host information via api/json other than via > ui and csv ? > > -- >

Re: haproxy + exim + sni

cert has to be on the mailserver anyhow). > > rgds > > Matt Bryant > -- > m...@the-bryants.net Hi Matt, Yes, you have the server side 'sni' keyword: http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#sni (HAProxy 1.6 only) Baptiste

Re: GET HAPROXY HOST INFO VIA Api/JSON

an csv_enc() in src/standard.c. Baptiste On Mon, Nov 2, 2015 at 8:44 AM, Melvil JA <melvil.adap...@inmobi.com> wrote: > CSV to json conversion,there are lots of options. > Is it possible to get direct restful output from haproxy. > Suppoes i have hundreds of servers..is it good to

Re: trailling whitespace after HTTP version

"option accept-invalid-http-request" to meet your requirement. http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#4.2-option%20accept-invalid-http-request Or create a new option "option accept-broken-http-version-from-client" :) Baptiste

Re: use several gpc's ?

on-1.6.html#in_table I have on my TODO to write such type of article on the blog. Some kind of DDOS protection with HAProxy 1.6. Baptiste

Re:

Hi, This is an english mailing list! Baptiste Le 7 nov. 2015 18:26, "adoume" <doume.ala...@free.fr> a écrit : > Gros enculé que tu es, tu vas me retirer de ta putain de liste > Tu vends ou tu donnnes mon mail a personne > tu me fais plus chier avec tes pubs de merde

Re: Echo server in Lua

uot; response = response .. "Connection: close\r\n" response = response .. "\r\n" response = response .. buffer txn.res:send(response) txn:done() end) content of haproxy's configuration: global log 127.0.0.1 local0 lua-load echo.lua frontend echo bind *:10004 mode http http-request lua.echo Don't forget to setup timeouts, etc... Baptiste

Re: use several gpc's ?

On Thu, Nov 5, 2015 at 3:45 PM, Sylvain Faivre <sylvain.fai...@reservit.com> wrote: > On 11/05/2015 03:30 PM, Baptiste wrote: >> >> On Thu, Nov 5, 2015 at 2:48 PM, Sylvain Faivre >> <sylvain.fai...@reservit.com> wrote: >>> >>> Hi, >>> >

Re: MINOR: Makefile deviceatlas

e problem, would be nice to find it > for 1.6.3 otherwise it is ok. > > Please cc ttr...@deviceatlas.com for any response. > > Thanks in advance. > Kindest regards. David, You forgot the attachment :) Baptiste

Re: Unexpected error messages

, redispatch is supposed to be applied at 'retries - 1'... So basically, what may be happening: - because of logasap, HAProxy does not wait until the end of the session to generate the log line - this log is in error because a connection was attempted (and failed) on a server You should not setup any ulimit and let HAProxy do the job for you. Baptiste

Re: DNS resolvers issue with haproxy 1.6

http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#5.3.2 I'll see what happens with your DNS server and how we could workaround it in HAProxy. Baptiste > > Is there any way to tune this kind of behaviour in the resolvers section of > HAProxy now? > > Best regards >

Re: DNS resolvers issue with haproxy 1.6

not observed on neither of > the 1.6.0-devX builds. Hi Oyvind, Please repost your SSL question in a new thread with an appropriate subject. Next time avoid mixing 2 very different topics in the same thread. Have you enabled stats socket in your global section? If not, please enable it. Then run a "show stat resolvers" and report here the output of the command. A packet capture of a few DNS packets would be much appreciated. Baptiste

Re: HAProxy 1.6 and HAProxy EE

SLAs on this version. Baptiste On Thu, Oct 15, 2015 at 1:18 AM, Jonathan Winer <jwi...@mywebgrocer.com> wrote: > Hi - we currently run a licensed (Business) version of HAPEE, but are > interested in some of the new capabilities of 1.6. What options do we have > to 'upgrade' to 1.6 b

[call to comment] HAProxy's DNS resolution default query type

er option, would to make HAProxy to failover to next query type in case of NX response. This would also cover the case where a server returns a NX because no records exists. Any comments are welcome. Baptiste

Re: About maxconn and minconn

(either increase minconn and or decrease fullconn) and combined to a server which might be quite slow to answer leading HAProxy to use queues. Or you met a bug :) We need the full configuration and log lines around the sQ event (right before and right after), so we may help. Baptiste On Wed

Re: Resolvable host names in backend server throw invalid address error

.b...@icitizen.com > Twitter: @markbetz Hi, Weird. Configuration parsing is failing, which means it's a libc/system problem. Is your resolv.conf properly set up and the server responsive? Can you run a tcpdump at haproxy's start up and over your raw container (no dnsutils installed). Baptiste

Re: Unexpected error messages

Is your problem fixed? We may emit a warning for such configuration. Baptiste Le 15 oct. 2015 07:34, "Krishna Kumar (Engineering)" < krishna...@flipkart.com> a écrit : > Hi Baptiste, > > Thank you for the advise and solution, I didn't realize retries had to be >

Re: Looking for help about "req.body" logging

ay not be reliably used here because it needs 'HTTP request headers' which is not available here.", where should I be using it? > Does that mean that we cannot log req.body at all or that I have to enable another option before trying to use it? > > Any hint or help is much appreciated. > Thank you. > > Cheers Have you turned on 'mode http'? Baptiste

Re: haproxy + ipsec -> general socket error

Have you 'tunned' your sysctls? Baptiste Le 16 oct. 2015 14:56, "wbmtfrdlxm" <wbmtfrd...@zoho.com> a écrit : > what linux distribution are you using? > > light traffic is simulating 100 users browsing a website, simple http > requests. we have 2 backend nodes and

Re: [call to comment] HAProxy's DNS resolution default query type

Hi all, Thanks a lot for your feedbacks. Really valuable. I'll discuss with Willy the best approach for the change. Baptiste On Mon, Oct 19, 2015 at 11:50 PM, Andrew Hayworth <andrew.haywo...@getbraintree.com> wrote: > Hi all - > > Just to chime in, we just got bit by this in

Re: [PATCH] MEDIUM: dns: Don't use the ANY query type

n the server one. Please move the line "resolution->resolver_family_priority = s->resolver_family_priority;" before using the value stored in it. Appart this, it looks good. Baptiste On Tue, Oct 20, 2015 at 12:39 AM, Andrew Hayworth <andrew.haywo...@getbraintree.com>

Re: [PATCH] MEDIUM: dns: Don't use the ANY query type

vers section to instruct HAPoxy to not forgive on NX and failover to next family: option on-nx-try-next-family The magic should happen in snr_resolution_error_cb(). Baptiste

Re: [PATCH] MEDIUM: dns: Don't use the ANY query type

v4only => A only (stop on NX) If both 'resolve-prefer ipv[46]' and 'v[46]only' are set, whatever combination, then, v[46]only applies, but configuration parsing may return a warning. So we don't break compatibility with current code and way of working! Brilliant guys :) Baptiste

Re: [PATCH] MEDIUM: dns: Don't use the ANY query type

Hi Andrew, I've updated your patch quickly so Willy can integrate it. I've also updated the commit message to follow Lukas recommendations. Baptiste On Tue, Oct 20, 2015 at 2:26 PM, Baptiste <bed...@gmail.com> wrote: > Hi Andrew, > > There is a bug repeated twice in your

[blog] What's new in HAProxy 1.6

Hey, I summarized what's new in HAProxy 1.6 with some configuration examples in a blog post to help quick adoption of new features: http://blog.haproxy.com/2015/10/14/whats-new-in-haproxy-1-6/ Baptiste

Re: Try request again if response body is empty?

he same result. This type of replay may make sense in a A/B testing mode, but slightly revisited. IE use farm A until one fail occurs, then replay to farm B where we have a more verbose (hence much slower) version of the app or a "fixed" version under testing, etc... In such case, I would agree it may make sense. Baptiste

Re: How to configure frontend/backend for SSL OR Non SSL Backend?

a.b.c.e check port 80 Baptiste On Mon, Oct 12, 2015 at 4:40 PM, Daren Sefcik <dsef...@hightechhigh.org> wrote: > humm...not sure I know how to answer that...we have servers that require SSL > for some requests and not for others. I am not needing to do anything other > than pass th

Re: rebalance sessions when re-restarting server

Hi Stephen, you have to wait for either the client or the server to close the connection. As you said, the "sessions don't end", so your problem is by design on your application. Baptiste On Mon, Oct 12, 2015 at 5:59 PM, Walsh, Stephen <stephen.wa...@aspect.com> wrote: >

Re: Interactive stats socket broken on master

puter (Willy, I was wrong this morning, I still had the bug) and when HAProxy runs in docker too. Baptiste

Re: How to configure frontend/backend for SSL OR Non SSL Backend?

Hi Daren, Do you want/need to decipher the traffic when using SSL? Baptiste On Mon, Oct 12, 2015 at 4:24 PM, Daren Sefcik <dsef...@hightechhigh.org> wrote: > I am probably totally overlooking something but how do I configure a > frontend/backend to pass to the same server for both

Re: [ANNOUNCE] haproxy-1.6.0 now released!

Great, amazing! Looking forward to 1.7! Baptiste

Re: Haproxy dropping request

cool :) Ok, we need configuration and log lines relative to this POST. Baptiste On Fri, Oct 9, 2015 at 3:43 PM, Bosco Mutunga <Bosco.Mutunga@jumo.world> wrote: > Those are not the actual credentials, any idea what might be wrong? > >> On 9 Oct 2015, at 16:40, Baptiste <be

Re: Haproxy dropping request

Wonderfull, Please tell afbbank to change their password ! Baptiste On Fri, Oct 9, 2015 at 3:26 PM, Bosco Mutunga <Bosco.Mutunga@jumo.world> wrote: > Hi, > > I’m experiencing a strange issue whereby Haproxy completely hangs when it > receives a certain request

Re: Experiences with Docker and linking containers for zero downtime deployments

On Sat, Nov 14, 2015 at 2:18 PM, Baptiste <bed...@gmail.com> wrote: > > Le 14 nov. 2015 14:01, "Paul Menzel" <paulepan...@users.sourceforge.net> a > écrit : >> >> Dear HAProxy folks, >> >> >> I am using a Docker setup to serve

Re: Selecting back end from host header

you want to map many host header to the same backend. If you want a single host header per backend, then, simply use use_backend %[req.hdr(host),lower Then each backend must use the host header as the backend name and you're done, dynamic routing with a single use_backend rule, whatever the number of backends you have. Baptiste

Re: HAProxy - How to filter (all) Headers by Regex

an example of a 'weird' character which passed through? Baptiste

Re: Health check and flapping

/3 KO - 2/3 KO - 2/3 OK - 3/3 - Server UP Is there a way to configure the counter to reset itself in case of flapping ? Thanks. Hi there, Thanks for reporting this behavior. I'll have a look and come back to you. Baptiste

Re: getting transparent proxy to work.

servers. You can simply use any of the VIP handling the web traffic. Baptiste On Thu, Aug 27, 2015 at 4:25 AM, Igor Cicimov ig...@encompasscorporation.com wrote: Obviously you need to have a separate VIP for the 10.10.130.30 and 10.10.130.31 and use that as a DGW on the backend servers

Re: haproxy resolvers "nameserver: can't connect socket" (on FreeBSD)

connect() looks wrong for ipv4: > > ERRORS > The connect() system call fails if: > > [EINVAL] The namelen argument is not a valid length for the > address family. > > Ok, excellent. I wonder how this could happen :) Let me check tonight and com back to you. Baptiste

Re: Question about the status of the connection pool

e the lead over it. Baptiste

Re: DNS: defaulting resolve-prefer to ipv6 can lead to unexpected results

resolve-prefer', if fail again, it fails over to the remaining family. The patches also trigger a failover if the server answers a truncated response. I'll send you the patch by tomorrow. I'll patch later to make haproxy send an OPT record to announce the number of bytes it support as UDP payload. Baptiste

Re: Re: haproxy resolvers "nameserver: can't connect socket" (on FreeBSD)

On Mon, Sep 7, 2015 at 12:32 PM, Remi Gacogne <rgaco...@coredump.fr> wrote: > Hi, > > On 09/07/2015 10:47 AM, Baptiste wrote: >>> It fails that way: >>> >>> socket(PF_INET,SOCK_DGRAM,17)= (0x4) >>> connect(4,{ AF_INET 8.

Re: Question about the status of the connection pool

es can benefit from such an alliance. Baptiste

Re: haproxy resolvers, DNS query not send / result NXDomain not expected

>> Hi, >> >> I wonder why the code send the TCP port in the DNS query... >> I'm currently installing an opnsense and I'll try to reproduce the >> problem. >> >> I've not used FreeBSD since 5.4 version :) >> >> Baptiste > > Hi Baptiste,

Re: haproxy resolvers, DNS query not send / result NXDomain not expected

On Tue, Sep 8, 2015 at 7:58 AM, Baptiste <bed...@gmail.com> wrote: >>> Hi, >>> >>> I wonder why the code send the TCP port in the DNS query... >>> I'm currently installing an opnsense and I'll try to reproduce the >>> problem. >>> >

Re: Fix triggering of runtime DNS resolution?

On Thu, Sep 3, 2015 at 1:11 AM, Baptiste <bed...@gmail.com> wrote: > On Thu, Sep 3, 2015 at 12:56 AM, Conrad Hoffmann <con...@soundcloud.com> > wrote: >> Hello, >> >> it's kind of late and I am not 100% sure I'm getting this right, so would >&

Re: Using getaddrinfo_a on configuration load

is asynchronous and performs multiple resolutions in parallel). To speed up start up, the new server-state feature will apply last resolved IP to server which rely on DNS to resolve their IP addresses. All of this should be available in 1.6. In the mean time, I would recommend using a local DNS cache, such as dnsmasq. Baptiste

Re: Fix triggering of runtime DNS resolution?

g | > HRB 110657B Hi Conrad, I remarked this as well. Please apply the patch in attachment and confirm it fixes this issue. I introduced this bug when trying to fix an other one: DNS resolution was supposed to start with first health check. Unfortunately, it started after hold.valid perio

Re: Fix triggering of runtime DNS resolution?

Hi Conrad, Please use the two patches in attachement. Baptiste From c19188e50313616833f0a6b3d5b1373c8f5bac78 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann <bed...@gmail.com> Date: Thu, 3 Sep 2015 10:59:39 +0200 Subject: [PATCH 02/10] MINOR: BUGFIX: DNS resolution doesn't start

Re: haproxy resolvers, DNS query not send / result NXDomain not expected

Hi Piba, Finally, Willy fixed it in a different (and smarter) way: http://git.haproxy.org/?p=haproxy.git;a=commit;h=07101d5a162a125232d992648a8598bfdeee3f3f Baptiste

Re: haproxy resolvers, DNS query not send / result NXDomain not expected

On Mon, Sep 7, 2015 at 10:12 PM, PiBa-NL <piba.nl@gmail.com> wrote: > Hi Remi and Baptiste / haproxy users, > > Thanks for the quick fix for socket issues. > > Haproxy now starts succesfull and sends some DNS requests successfully. > However the google backend serv

Re: Client Affinity in HAProxy with MQTT Broker

This would be doable only if the information can be retrived from the payload of the first request sent by the client. could you provide more information about how MQTT protocol works? Is there any server banner? A simple TCP dump containing an example of the message you want to route would be appreciated and allow us to deliver you an accurate answer. Baptiste

Re: [ANNOUNCE] haproxy-1.6-dev5

d, so if you don't get a response, simply consider it lost. >> I didn't sent a patch so to speak, Remi did send a 'diff --git' but >> without the comment to put into the haproxy repository, after which >> Baptiste then wrote he would submit it after confirmation that i

<    6   7   8   9   10   11   12   13   14   15   >