Re: Chaining haproxy instances for a migration scenario

2015-09-11 Thread Baptiste
m bind :8443 ssl crt server.pem accept-proxy-v2 You can play with weight on the current site to send a few request to the newhaproxy box and increase this weight once you're confident. Baptiste

Re: Client Affinity in HAProxy with MQTT Broker

2015-09-11 Thread Baptiste
arded to a server, then all subsequent messages are going to be forwarded to this server, regardless of the next topics set over the same connection. To be routed again, a client must send next PUBLISH message over a new TCP connection. Baptiste On Thu, Sep 10, 2015 at 7:58 PM, Baptiste <

Re: Cannot enable a config "disabled" server via socket command

2015-09-17 Thread Baptiste
d" server works correctly with haproxy1.5. Can >>> you confirm whether its a bug in 1.6-dev4? >> >> This is due to the introduction of the SRV_ADMF_CMAINT flag, which is >> set permanently. The "enable/disable" socket command will only modify >> the SRV_ADMF_

Re: Health check and flapping

2015-10-05 Thread Baptiste
Hi, I've not forgotten you, I'm just running out of time. Baptiste On Tue, Sep 29, 2015 at 5:43 PM, <dra...@tinet.fr> wrote: > Le 2015-08-28 16:40, Baptiste a écrit : >> >> Le 28 août 2015 15:45, <dra...@tinet.fr> a écrit : >> > >> > Hello, >

Re: Converting from sticking on src-ip to custom auth header

2015-10-02 Thread Baptiste
horization) table tbl_hdr Baptiste On Thu, Oct 1, 2015 at 10:24 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > What version are you running? From memory up to 1.5.x you can have only > one table per fe/be, not sure about 1.6 I haven't tried it yet. I've seen > peop

Re: url_ip is not properly extracted in HTTP CONNECT method ?

2015-10-02 Thread Baptiste
very fast and even faster with the conf above since you'll perform only 2 lookups instead of 6. Baptiste On Thu, Oct 1, 2015 at 2:40 PM, Pavlo Zhuk <pa...@lotusflare.com> wrote: > Workardound: > I was able to implement same funtionality with -m ip on url matching, which > is probably

Re: Client Affinity in HAProxy with MQTT Broker

2015-09-28 Thread Baptiste
Hi Sourav, Could you confirm whether you were able to make HAProxy work with MQTT?? Baptiste On Fri, Sep 11, 2015 at 2:14 PM, Baptiste <bed...@gmail.com> wrote: > Hi Sourav, > > Thanks a lot for the mail and the screenshot. > That said, usually, when we ask for a capture, w

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Baptiste
Andrew, My appologies about the proxy_find_by_name function, I was not in the right context!!! Tested and approved. Willy, you can apply :) Thanks a lot for your contribution, Andrew. Baptiste On Mon, Oct 5, 2015 at 5:47 PM, Andrew Hayworth <andrew.haywo...@getbraintree.com> wrote: &g

Re: Cannot enable a config "disabled" server via socket command

2015-09-18 Thread Baptiste
behavior, soe everyone should be satisfied. Baptiste On Fri, Sep 18, 2015 at 5:28 AM, Pradeep Jindal <praddyjin...@gmail.com> wrote: > It'd be interesting to know the complete semantics of the feature you are > implementing. I know you understand that our use case is a valid one. And w

Re: Keeping conns alive on server side irrespective of client side conns

2015-09-23 Thread Baptiste
/haproxy-dconv/snapshot/configuration-1.6.html#http-reuse That said, what you want might be a real connection pool, which doesn't exist yet in HAProxy. Baptiste

Re: Sharing ACL between frontend

2015-09-22 Thread Baptiste
*** > > Hi Adrian, You might achieve the same purpose with a few lines of configuration, using maps, to assossiate a URL path to a backend, then using the dynamic backend selection. There is an example here using Host header: http://blog.haproxy.com/2015/01/26/web-application-name-to-backend-mapping-in-haproxy/ Let me know if you need help with URL path. Baptiste

Re: [ANNOUNCE] haproxy-1.6-dev5

2015-09-22 Thread Baptiste
On Mon, Sep 21, 2015 at 8:39 PM, Willy Tarreau <w...@1wt.eu> wrote: > On Mon, Sep 21, 2015 at 08:37:36PM +0200, PiBa-NL wrote: >> Op 14-9-2015 om 23:46 schreef Willy Tarreau: >> >On Mon, Sep 14, 2015 at 10:46:00PM +0200, Baptiste wrote: >> >>The issue

Re: Haproxy & Kubernetes, dynamic backend configuration

2015-09-18 Thread Baptiste
I'm totally lost with all you buzz keywords! there is no way currently to achieve this purpose. That said, we're aware of this type of requirements and are thinking about different methods to achieve this goal. That said, could you please list here what HAProxy's parameters you would like to see dynamically changeable at run time? Baptiste

Re: Haproxy & Kubernetes, dynamic backend configuration

2015-09-18 Thread Baptiste
tober, when the load generated by 1.6 release will be lower. Baptiste > > Regards, > Smana > > 2015-09-18 13:31 GMT+02:00 Baptiste <bed...@gmail.com>: >> >> On Fri, Sep 18, 2015 at 10:49 AM, Smain Kahlouch <smain...@gmail.com> >> wrote: >>

Re: Cannot enable a config "disabled" server via socket command

2015-09-18 Thread Baptiste
On Fri, Sep 18, 2015 at 12:40 PM, Willy Tarreau <w...@1wt.eu> wrote: > On Fri, Sep 18, 2015 at 10:51:13AM +0200, Baptiste wrote: >> Please find a patch in attachment which fix the issue so you can run >> temporarly the latest code in production. >> That said, I need to d

Re: Haproxy & Kubernetes, dynamic backend configuration

2015-09-18 Thread Baptiste
s in your conf file and reload it :) Baptiste

Re: Haproxy & Kubernetes, dynamic backend configuration

2015-09-18 Thread Baptiste
On Fri, Sep 18, 2015 at 3:18 PM, Smain Kahlouch <smain...@gmail.com> wrote: >> If I may chime in here: Kubernetes supports service discovery through DNS >> SRV records for most use-cases, so the dynamic DNS support that Baptiste >> is >> currently working on would be

Re: Stickiness on req.payload fails

2015-09-25 Thread Baptiste
ilos > Hi, HAProxy is not aware of packets. Your kernel is. Your kernel aggregates packets and report a buffer with data inside to HAProxy. When HAProxy does not find the information it's looking for, it waits more, until a timeout or inspect delay occurs. Baptiste

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-05 Thread Baptiste
s.ptr != presolvers) continue;" Please write "continue" on a new line. Please repost an updated patch and I'll give it a try before final approval. Baptiste On Sun, Oct 4, 2015 at 11:00 AM, Willy Tarreau <w...@1wt.eu> wrote: > At first glance it seems OK. Baptiste, can

Re: NOSRV error

2015-10-05 Thread Baptiste
> Citrix Brokers > > We used the Windows NLB between Citrix NS Gateway and Citrix Brokers and we > want to replace it with HAproxy. > With the HTTP frontend, we can see "HTTP/XML 479 POST /Scripts/CtxSTA.dll > HTTP/1.1". It doesn't work with HTTPS, the Netscaler gateway seems to close > the connection with FIN,ACK. Why mixing HAProxy between citrix products? As Conrad said, there are servers available for your connection. you should investigate first why the citrix brokers reject the traffic. Baptiste

Re: heartbeat traffic with many instances

2015-12-02 Thread Baptiste
t regards, > Johan Gall Hi Johan, You can use your own health check system and update server status through HAProxy stats socket bound in each process. Baptiste

Re: [SPAM] Visibility on tune.ssl.cachesize

2015-12-03 Thread Baptiste
. Is there a way to know how much of it > I'm using ? > > > Olivier > Hi Olivier, It's a LRU cache, so I guess the size isn't really important. It will be full after some time. What you may want to care is the cache miss value reported by a "show stat" CLI command. Baptiste

Re: Can HAProxy be setup to limit outbound requests to specific external service providers?

2015-12-03 Thread Baptiste
l: jake.pin...@gmail.com Hi, Yes you can. You have to configure your partner as a backend and pick up examples from this blog article: http://blog.haproxy.com/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/ I may write a dedicated article to request throttling soon :) Baptiste

Re: [SPAM] Visibility on tune.ssl.cachesize

2015-12-07 Thread Baptiste
On Mon, Dec 7, 2015 at 11:55 AM, Olivier Doucet <webmas...@ajeux.com> wrote: > > > 2015-12-04 8:19 GMT+01:00 Baptiste <bed...@gmail.com>: >> >> Hi Olivier, >> >> It's a LRU cache, so I guess the size isn't really important. It will >> be

Re: Config file compatibility between 1.5 and 1.6

2016-01-06 Thread Baptiste
By the way, there are no 'appsession' any more :) Baptiste

Re: Config file compatibility between 1.5 and 1.6

2016-01-05 Thread Baptiste
re. More ALERT may also be triggered when the configuration parser doesn't understand a keyword while those keywords used to be silently ignored. (check alertif_too_many_args_idx() ). So by definition, many configuration may be broken. Baptiste

Re: Official haproxy blog uses a stickiness table of size 1 (just 1, no suffix). Is this OK?

2016-01-05 Thread Baptiste
chly - and thanks for making HAProxy! > > Mike Hi Mike, What should be in active/passive in your case? Is that HAProxy itself or the application being load-balanced??? In this article, we speak about the application being load-balanced. Baptiste

Re: HAProxy returning 404

2015-12-21 Thread Baptiste
I'm seeing more a misconfigured web server whose virtualhost is sticked to the IP address and which can't route traffic which contains HAProxy's Virtual IP to the right virtual host ;) Baptiste On Mon, Dec 21, 2015 at 7:20 AM, Gaurav Sharma <gaurav.sharma@ignite.world> wrote: > Hi

RE: http/2 - missing something ...

2015-12-19 Thread Baptiste
> HAproxy doesn't support SNI, NPN or ALPN on the backend currently Since 1.6, HAProxy supports sni on the server side, using a fetch. Baptiste

Re: HAProxy: Max. throughput using HTTPs client authentication

2015-11-30 Thread Baptiste
about your haproxy box, anything which may help us understanding what happens, such as your configuration, sysctls, dmesg output, logs, etc... Baptiste

Re: Haproxy stats page returns 503 error

2015-11-26 Thread Baptiste
t;> error. > > Please share the configuration so we can take a look. > > > > Regards, > > Lukas > > Hi, the same TCP port must be bound fot different purpose: LBing and stats. As Lukas asked, please share your configuration. Baptiste

Re: HA Proxy 10gig solution

2016-01-11 Thread Baptiste
Hope this helps: http://haproxy.com/doc/hapee/1.5/introduction.html#hardware-requirements 10G, depends how big is the response on average, but should be doable with low effort. Baptiste On Mon, Jan 11, 2016 at 3:02 PM, Jeff Palmer <j...@palmerit.net> wrote: > The immediate link t

Re: [PATCH][RFC] CLEANUP: dns: use struct dns_header for parsing

2016-06-25 Thread Baptiste
Hi Conrad, Thx for your patch, I'll review it later. Willy, please dont apply it for now since I have pending patches which touch this part of the code. Baptiste Le 25 juin 2016 19:11, "Conrad Hoffmann" <con...@soundcloud.com> a écrit : > Hi, > > while poking around in

Re: Offset in server definition not usable in 1.6.3

2016-02-07 Thread Baptiste
r is not the same with those 2 configurations: 1: listen example1 bind :18161 option httpchk HEAD / server zd-activemq-s21 10.50.241.93:+1 check server zd-activemq-s22 10.50.241.94:+1 check => bind's port is being used for health checks => If multiple bind are present, the first one is used. 2: frontend f_example2 bind :18161 default_backend b_example2 backend b_example2 option httpchk HEAD / server zd-activemq-s21 10.50.241.93:+1 check server zd-activemq-s22 10.50.241.94:+1 check => this configuration is invalid and an ALERT is returned because backend b_example doesn't know to which TCP port it is supposed to get connected to send the health check. Baptiste

Re: http-ignore-probes produces a warning in tcp frontend

2016-02-07 Thread Baptiste
>> and then other defaults sections for TCP mode. And most often you don't even >> have the same timeouts, log settings etc. >> > > > Thanks for the explanation! > > I just realized that there can be multiple defaults sections, so your > arguments look valid. > > Hi Dmitry, and the list, You can have a look here: http://haproxy.com/training/haproxy_introduction_online_training/#9 and an example here: http://haproxy.com/training/haproxy_introduction_online_training/#10 Baptiste

Re: check ssl

2016-02-10 Thread Baptiste
SRP username: None > Start Time: 1455120471 > Timeout : 300 (sec) > Verify return code: 0 (ok) > --- > DONE > > I also forced tlsv1 use without success. > > Did I miss something ? > > Regards > What happens when you use "verify none" ? Baptiste

Re: Protecting against slow HTTP POST queries

2016-02-04 Thread Baptiste
s > timeout server 180s > timeout http-keep-alive 10s > timeout tarpit 30s > > > Best regards, > > Sylvain > Hi, please run the same test against HAProxy 1.6 and enable "option buffer-http-request": http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#4-option%20http-buffer-request Then your timeout http-request will also match the POSTed data. Baptiste

Re: Offset in server definition not usable in 1.6.3

2016-02-09 Thread Baptiste
d service if not defined explicitly. Yes. your configuration examples aren't in such case, they are MAPPED. So simply force the port using the server's "port XXX" option. Conclusion: You have not hit a bug. Re-configure properly your listen sections and it will work accordingly to the doc a

Re: Offset in server definition not usable in 1.6.3

2016-02-09 Thread Baptiste
> Baptiste, thanks a lot for your patience and your detailed answer. You're welcome! > Et pour toi en francais: je suis désolé si tu es maintenant faché. Fur disch in Deutsch: kein problem. Ich will ein Bier! >> listen activemq-works >> bind :8162 >> bind :8192 >

Re: haproxy as a login portal

2016-02-05 Thread Baptiste
portal in LUA > and write to a data structure? > > This is just a quick idea, I didn't look deeply into this yet, and was wondering > if anyone had done it before or has some ideas. :) > > Best regards, > > craig > Hi, This is doable without any Lua. Baptiste

Re: HAProxy 1.6.1 RPM for CentOS

2016-02-10 Thread Baptiste
way to run the HAProxy as service, as against the standalone > invocation. > > > > --regards > > Hemanth Well, if I were about to create a service based on HAProxy, I would consider building the package myself! At least, you would know what your service relies on Baptiste

Re: Offset in server definition not usable in 1.6.3

2016-02-10 Thread Baptiste
ilable in this listen section to pick up the first one it can get a port information from. The "if (do_check)" statement in src/server.c. Baptiste

Re: Load balancing and session affinity

2016-02-10 Thread Baptiste
fo here: http://haproxy.com/doc/aloha/7.5/deployment_guides/tls_layouts.html#ssl-tls-bridging-or-re-encryption Baptiste

Re: Stats page refresh increases backend session count

2016-02-10 Thread Baptiste
> > Many thanks, > > Pedro. > > > Can't you dedicate an IP:port and a frontend for the stats? Baptiste

Re: use part of url - as backend name?

2016-01-29 Thread Baptiste
You may want to try the following: use_backend %[url,lower,word(1,/)] Baptiste

Re: agent-send in 1.6.3

2016-01-23 Thread Baptiste
Hi, I'm also strongly against backporting features because it also gives less interest for people to switch to the next version... Furthermore, it does not make much sense to backport features since we also aim releasing haproxy community more often than what we used to do. Baptiste Le 21 janv

Re: DROP/DENY before forwarding behind connections

2016-01-19 Thread Baptiste
/whitelist.lst } What type of content do you have in your whitelist file? Do you run HAProxy in multiprocess mode? note: the whitelist applies to NEW connections, not to already established ones. Baptiste

Re: Start tunnel with HTTP request only

2016-01-19 Thread Baptiste
> So any ideas on how to get haproxy to handle this scenario? Use mode tcp :) > Commercial support is an option for us, but I didn't see custom development > as an > offered service. That's because we don't do custom devs... We develop for our lovely Community! Baptiste

Re: Set State to DRAIN vs set weight 0

2016-01-19 Thread Baptiste
he load balancer forcefully vs gracefully > (allowing the existing sessions to finish). What method to use is really up > to you and your user case. > I think you misunderstand "drain" and "disable". Disable forces everybody to get routed to an other server for their next request. Baptiste

Re: bug in state-from-file with resolvers?

2016-01-19 Thread Baptiste
On Sat, Jan 16, 2016 at 7:52 PM, Nenad Merdanovic <ni...@nimzo.info> wrote: > Forgot to add the ML :/ > > On 01/16/2016 07:43 PM, Nenad Merdanovic wrote: >> Hello Robert, >> >> + Baptiste >> >>> >>> Connect() failed for backend bk: no free

Re: Set State to DRAIN vs set weight 0

2016-01-24 Thread Baptiste
ch a server > cannot be enabled anymore. In fact, the problem with server-state is that > if we save too many information we prevent the configuration changes > from being considered, and if we save too little, we lose states. So > we have to compose between what is found in the state file

Re: Set State to DRAIN vs set weight 0

2016-01-24 Thread Baptiste
On Sun, Jan 24, 2016 at 9:01 PM, Baptiste <bed...@gmail.com> wrote: > On Fri, Jan 22, 2016 at 10:46 AM, Willy Tarreau <w...@1wt.eu> wrote: >> Hi Alex, >> >> On Fri, Jan 22, 2016 at 11:32:14AM +0200, Alex wrote: >>> Hi, >>> >>> Thank y

Re: Set State to DRAIN vs set weight 0

2016-01-24 Thread Baptiste
On Mon, Jan 25, 2016 at 12:35 AM, Willy Tarreau <w...@1wt.eu> wrote: > Hi Baptiste, > > On Sun, Jan 24, 2016 at 09:01:27PM +0100, Baptiste wrote: >> I commented this case in the code: >> >> /* apply drain mode if server is currently enabled */ >

Re: [PATCH 3/4] MEDIUM: resolvers, cfgparse, do not allow 'timeout retry' to be misspelled

2016-02-15 Thread Baptiste
Hi Willy, Thanks Pieter. Patch validated on my side. I updated the patch with backport information. Baptiste From 83f908683a137b3e947e7d12b7e90f1b4a22db58 Mon Sep 17 00:00:00 2001 From: Pieter Baauw <piba.nl@gmail.com> Date: Sat, 13 Feb 2016 15:51:58 +0100 Subject: [PATCH 3/4] MEDIU

Re: Feature Request for log stdout ...

2016-02-18 Thread Baptiste
7 haproxy[4303]: Proxy stats started. <129>Feb 18 11:28:17 haproxy[4303]: Server b/s is DOWN, reason: Layer4 connection problem, info: "Connection refused", check duration: 0ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. <128>Feb 18 11:28:17 haproxy[4303]: backend b has no server available! Baptiste

Re: HAProxy Configuration Best Practices

2016-03-18 Thread Baptiste
't forget the following points: - setup proper timeouts (enable slow post protection) - configure an accurate health check - enable the stats page Baptiste

Re: [PossibleSpam] Re: SNI Support for Health Check on Backend Server

2016-03-14 Thread Baptiste
Hi, As far as I know, SNI for the health check is not yet supported. Baptiste

Re: There is kind of a spam issue on this ML no?

2016-03-14 Thread Baptiste
ount of spam on a mailling list purposely widely opened to everyone? While some solutions exists to fight spams? As others have mentionned it, I use gmail, it's quite efficient for this type of usage. Baptiste

Re: Help! HAProxy randomly failing health checks!

2016-03-15 Thread Baptiste
Has ELB changed its IP address??? Maybe you're checking a third party VM :) Baptiste

Re: Add servers without disruption

2016-03-30 Thread Baptiste
n many other third party features relying on this info.. Baptiste

Re: Add servers without disruption

2016-03-30 Thread Baptiste
parsed by dconv to produce the HTML output. Baptiste

Re: Multiple front ends listening to the same address/port -- want a config error

2016-04-12 Thread Baptiste
>poll : pref=200, test result OK > select : pref=150, test result OK > Total: 3 (3 usable), will use epoll. > > Thanks, > Shawn > Hi Shawn, This is not an error, this type of configuration is valid. You should write a script which check this on your own. Baptiste

Re: A HAProxy statistics collection program

2016-03-19 Thread Baptiste
pe it will be useful for other people as well. > > Cheers, > Pavlos > Hi Pavlos!!!! Excellent contribution :) Looking forward to test it :) Baptiste

Re: Question about Keep-Alive behaviour

2016-03-22 Thread Baptiste
f that helps. So Imagine a client which did a first request which has been routed to server 1 where the connection is now established, a second request comes from this same client and your lua script sets a cookie to point it to server 2, then HAProxy will close the first connection and establish a new one on the new server. Baptiste

Re: Back pressure strategy for decentralized HAProxy setup

2016-03-22 Thread Baptiste
mon running on your app server. This daemon can return some keyword or percentage to teach HAProxy how healthy it is from a processing capacity point of view. A nice example of the agent-check from percona to lower the weight of mysql slaves server based on the replication lag: https://www.percona.com/blog/2014/12/18/making-haproxy-1-5-replication-lag-aware-in-mysql/ Baptiste

Re: tune.ssl.cachesize monitoring

2016-03-22 Thread Baptiste
l or the >> hit/miss rate? Thanks >> >> -gary > > Hi Gary, Issue a "show info" on HAProxy's stats socket. Baptiste

Re: http-request capture id frontend/backend not working?

2016-03-22 Thread Baptiste
Hi Daniel, Good catch I propose to return an alert only if the proxy being tested is frontend or a listen. There is no way from the backend to know which frontends points to it, so we can't check if memory will be allocated or not. Baptiste On Fri, Mar 18, 2016 at 2:28 PM, Daniel

Re: Exchange 2013 / NTLM Connections

2016-03-24 Thread Baptiste
beginning of the connection, then regular traffic passing through. Baptiste

Re: "Bus error" in dns_build_query on SPARC/Solaris 10

2016-03-26 Thread Baptiste
ovide more information? I have no access to sparc machines, so it will be complicated to reproduce the problem. Could it be related to an endianess mismatch ? Baptiste

Re: Back pressure strategy for decentralized HAProxy setup

2016-03-22 Thread Baptiste
Hi Sergii, You can reject requests as soon as you reach a certain amount in the queue. Check the queue() fetch. Baptiste On Wed, Mar 23, 2016 at 1:23 AM, Sergii Mikhtoniuk <mikhton...@gmail.com> wrote: > Thanks for the pointer Baptiste, communicating backend load ou

Re: KA-BOOM! Hit MaxConn despite higher setting in config file

2016-04-03 Thread Baptiste
gotchas I need to take care of? >>> >>> I notice that ulimit-n and maxsock both show 4495 despite "ulimit -n" for the user showing 65536 (which is probably half of what I really want since each "session" is going to consume two sockets) >>> >>> I'm using haproxy 1.5.12 >>> >> > So add a maxconn in your global section. Your process is limited by default to 2000 connections forwarded. Baptiste

Re: Question about Keep-Alive behaviour

2016-04-04 Thread Baptiste
Hi Craig, This is partially handled by the "http-reuse" featureof HAProxy 1.6. A real connection pool is on its way, it's a requirement for HTTP/2. That said, no idea when we'll have it. Baptiste On Thu, Mar 31, 2016 at 5:11 PM, Craig McLure <cr...@mclure.eu> wrote: > Hi B

Re: IDEA: initial-state up/down option for servers

2016-03-30 Thread Baptiste
erver option) - the default behaviour > remains unchanged: > https://github.com/beamly/haproxy-1.6/commit/9e7ad68a0c6582a38591eb27626fdb31bb5f8c18 > > I’m wondering if this is something that could be considered for a future > haproxy release? > > Many thanks, > Chris Excellent work Chris!! We dreamed this feature for some time and you did it :) Baptiste

Re: Q: about HTTP/2

2016-04-01 Thread Baptiste
> Thank you very much. > > Best regards > Aleks > Do you guys, on the ML, really need HTTP/2? If so what's your deadline?? Baptiste

Re: KA-BOOM! Hit MaxConn despite higher setting in config file

2016-04-04 Thread Baptiste
One is process-wide, one is per frontend and both counts for a maximum accepted incoming connections. Baptiste On Mon, Apr 4, 2016 at 9:07 PM, CJ Ess <zxcvbn4...@gmail.com> wrote: > Funny you should mention that, I pushed out the revised config and > immediately got warning about s

Re: "Bus error" in dns_build_query on SPARC/Solaris 10

2016-03-29 Thread Baptiste
ostname contains an >> odd number of symbols! > > So, it should be easy to fix. Baptiste, do you want a patch or are my > explanations enough? > -- > Make sure special cases are truly special. > - The Elements of Programming Style (Kernighan & Plauger) Hi Vincent,

Re: Add servers without disruption

2016-03-29 Thread Baptiste
ial-state" patch proposed by Chris, and some of them would to allow "dynamic" addition of server in the farm at run time using the stats socket. This may be possible, but may not be compatible with all type of load-balancing algorithm and features. Stay tuned :) Baptiste

Re: "show servers state" shows nothing?

2016-04-24 Thread Baptiste
, but not if I run it "bare" (which the > manual suggests should print out states for all backends). > > Any thoughts? > > -- > James Brown > Engineer Hi, Could you share the relevent part of the configuration? Baptiste

Re: Regarding client side keep-alive

2016-04-22 Thread Baptiste
he frontend and the backend. > Also, has anybody had any issues with http-server-close in high traffic > environments? Like lingering connections, connections not closed properly > etc. This feature has been available for many years and it is very stable for many years too :) You can use without any issue. Baptiste

Re: Way to reject connections when http request greater than a value

2016-04-27 Thread Baptiste
rver's maxconn is compatible with keep-alive mode. Baptiste

Re: Synchronization state backend servers, between two nodes HAProxy.

2016-04-24 Thread Baptiste
t stdio > How to make that P2 synchronized state servers? > > Many thanks. > > > Hi Aleksey, Well, if I were you I would make the stats socket listening on a private IP address and run the command over the network to both HAProxy servers. Baptiste

Re: TTL-based DNS resolution ?

2016-04-16 Thread Baptiste
> if you have any other questions or concerns and we will be happy to assist > you. > " > > Regards, > > -- > Ben Hi Ben, Could you share your configuration? I have the feeling here you're mixing too issues: DNS resolution at run time and the ability to expand backend with more servers. Baptiste

Re: Help

2016-08-03 Thread Baptiste
Hi, It supports it, just need the right version: http://blog.haproxy.com/haproxy/proxy-protocol/ Baptiste On Tue, Aug 2, 2016 at 11:59 PM, Jeff Palmer <j...@palmerit.net> wrote: > OK, then you'll need to enable the PROXY protocol in exim assuming it > supports the protocol. &g

[PATCHES] 2 new functions for standard.c

2016-08-11 Thread Baptiste
Hi the list, Willy, Please find in attachment a couple of patches to add a couple of IP related functions: - ipcmp to compare 2 ipcmp, à la strcmp - ipcpy to copy an IP address, à la strcpy Baptiste From 85868161bd3ee2b60a8964645dde48b891315e73 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann

[PATCH] MAJOR: HAProxy 1.7 obsoletes a 'service port"-less server in a listen section

2016-08-11 Thread Baptiste
decided to obsolete this feature, cause it's useless now and because it prevented a simple and reliable way to change the server port (patches on their way). It's a MAJOR change which might break some configurations. Baptiste From 4ac38c5f2e22ff1294efbaabe9b632474924412d Mon Sep 17 00:00:00 2001

Re: question related to setting up tcp relay

2016-08-11 Thread Baptiste
Hi, A few interesting pages for you: http://haproxy.com/doc/hapee/1.5/traffic_management/tls.html http://haproxy.com/doc/hapee/1.5/deployment_guides/tls_layouts.html Please note that 404 sounds more a server issue :) Baptiste On Thu, Aug 11, 2016 at 9:03 AM, Rajiv <rgandh...@gmail.

Re: Build fail on alpine linux

2016-08-08 Thread Baptiste
On Mon, Aug 8, 2016 at 1:50 PM, Willy Tarreau <w...@1wt.eu> wrote: > On Mon, Aug 08, 2016 at 01:28:07PM +0200, Baptiste wrote: > > Here you go: > > # fgrep -r tcp_info /usr/include/* > > /usr/include/linux/tcp.h:struct tcp_info { > > /usr/include/netin

Build fail on alpine linux

2016-08-08 Thread Baptiste
y help would be much appreciated since I don't know where to dig anymore and I don't want to use ubuntu in my containers.. Baptiste

Re: Build fail on alpine linux

2016-08-08 Thread Baptiste
On Mon, Aug 8, 2016 at 12:30 PM, Willy Tarreau <w...@1wt.eu> wrote: > Hi Baptiste, > > On Mon, Aug 08, 2016 at 12:21:54PM +0200, Baptiste wrote: > > Hi All, > > > > I test my HAProxy code in docker containers over alpine Linux and I can't > > build the ha

Re: Build fail on alpine linux

2016-08-08 Thread Baptiste
On Mon, Aug 8, 2016 at 2:09 PM, Willy Tarreau <w...@1wt.eu> wrote: > On Mon, Aug 08, 2016 at 02:05:58PM +0200, Baptiste wrote: > > It won't, I'm sending you a patch soon to define _GNU_SOURCE in > proto_tcp.c > > :) > > (which seems to "fix" the problem

Re: Re: [PATCH] MINOR: dns: support advertising UDP message size.

2016-07-03 Thread Baptiste
> It's very nice having support for EDNS0, but IMHO it shouldn't be > enabled by default if it doesn't fallback. Hi Remi, My intention was to not enable this feature by default. Baptiste

Re: [PATCH] Allow setting server port via admin socket.

2016-07-03 Thread Baptiste
of this patch allows changing the port through the socket like you did. Baptiste On Wed, Jun 29, 2016 at 1:08 AM, Conrad Hoffmann <con...@soundcloud.com> wrote: > Hi, > > Attached patch allows setting a server's port in addition to the address > via the admin socket, e.g.

Re: haproxy's resolver send queries with "response" flag

2016-07-03 Thread Baptiste
M: dns: > unbreak DNS resolver after header fix". > http://www.haproxy.org/git?p=haproxy-1.6.git;a=commit;h=5f60de08667c3472d95cc20b87753e9fd8520057 > > Willy, maybe we should release 1.6.6 before the end of june, after some > pending issues are fixed. > > > -- > Cyril Bonté > Hi, This patch generated a lot of noise on the ML :/ Baptiste

Re: [PATCH] BUG/MAJOR: dns: create one client UDP socket per process

2017-02-02 Thread Baptiste
(). Baptiste From 2252a644c8a82846f9cf9e26e460491c0df930f5 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann <bed...@gmail.com> Date: Thu, 2 Feb 2017 22:44:15 +0100 Subject: [PATCH 1/2] MINOR: dns: give ability to dns_init_resolvers() to close a socket when requested The function dns_init_res

Re: [PATCH] BUG/MAJOR: dns: create one client UDP socket per process

2017-01-31 Thread Baptiste
On Tue, Jan 31, 2017 at 2:14 AM, Willy Tarreau <w...@1wt.eu> wrote: > Hi Baptiste, > > On Mon, Jan 30, 2017 at 11:07:53PM +0100, Baptiste wrote: > > Hi all, > > > > Please find attached a patch to fix the issue reported by Joshua on the > ML > &

[PATCH] BUG/MAJOR: dns: create one client UDP socket per process

2017-01-30 Thread Baptiste
Hi all, Please find attached a patch to fix the issue reported by Joshua on the ML and sjiveson on discourse. I moved the initialisation of the dns_resolvers() after the fork. I can confirm now than each process has its own UDP socket to send DNS requests. Baptiste From

Re: Possible bug with haproxy 1.6.9/1.7.0: multiproc + resolvers cause DNS timeouts

2017-01-27 Thread Baptiste
Hi All, Sorry I missed it I'll see what I can do to fix it asap. Thanks for reporting. Baptiste On Thu, Jan 26, 2017 at 6:40 PM, Lukas Tribus <lu...@gmx.net> wrote: > Hello, > > > > Am 29.11.2016 um 09:53 schrieb Willy Tarreau: > >> Hi Joshua, >> >

Re: Need help to reolsve haproxy issue

2017-01-16 Thread Baptiste
Might be a systemd dependency issue, where the socket is not created before the process is started. Baptiste On Mon, Jan 16, 2017 at 4:46 PM, Aaron West <aa...@loadbalancer.org> wrote: > Hi Praveen, > > Am I right in assuming it's a socket for the stats page? Also what use

Re: Backend: Multiple A records

2016-08-31 Thread Baptiste
On Wed, Aug 31, 2016 at 3:37 PM, Tim Düsterhus <t...@bastelstu.be> wrote: > Hi > > On 30.08.2016 22:10, Baptiste wrote: > > Worst case, set X to 10 and you're good ;) > > > > That would not help if slots are not freed and IP addresses change > randomly. But

[PATCH] Allow setting a server's port via the CLI

2016-09-04 Thread Baptiste
the configuration file, but now we need to find it when preparing the health check, at run time. Baptiste From 6bb6d7ae5045c4ff76cf9d87ee25e600b52c4e27 Mon Sep 17 00:00:00 2001 From: Baptiste Assmann <bed...@gmail.com> Date: Mon, 13 Jun 2016 14:15:41 +0200 Subject: [PATCH 2/5] MAJOR: check: fi

<    7   8   9   10   11   12   13   14   15   >